Privacy Policy

Last updated: June 2026

Who we are

SproutBank is a product of OceanBeacon AI, Inc., a Delaware C-corporation. OceanBeacon AI, Inc. is the data controller for all personal data collected through SproutBank, and the Operator as defined under the Children's Online Privacy Protection Act (COPPA) with respect to any personal information collected from or about children.

SproutBank is a family financial literacy tool built to help parents teach kids about saving, giving, and spending. We are not a bank, financial institution, or investment product.

Questions about this policy? Email us at hello@mysproutbank.com.

What we collect

We collect only what's needed to make the app work:

• Account information: Your email address and a password (stored as a secure hash — we never see your actual password).
• Family information: Your family name and the names you give your children's accounts within the app.
• Transaction data: Deposits, withdrawals, give/save/spend allocations, growth history, and any notes you add. This is the core of what SproutBank tracks.
• App usage data: Basic technical information (browser type, device type) to help us fix bugs and improve the app. We do not track detailed behavioral analytics.

We do not collect payment information, Social Security numbers, government IDs, or any financial account numbers. SproutBank does not hold or move real money.

How we store it

Your data is stored in Supabase, a secure cloud database platform. All data is encrypted at rest and in transit. We use row-level security (RLS) to ensure that your family's data is strictly isolated — no other family using SproutBank can ever see your account, balances, or transaction history.

What we never do

• We never sell your data to anyone, for any reason.
• We never share your data with third-party advertisers or data brokers.
• We never use your children's names or information for any purpose outside running your family's account.
• We never show you ads.

Who else sees your data

Access to your data is limited to:

• You — your family's data is only visible to accounts in your family.
• Supabase — our database host. They store the data but do not process or access it for their own purposes. See Supabase's privacy policy.
• Us (SproutBank) — we may access data to diagnose technical issues if you request support. We do not browse user data routinely.

Children's privacy (COPPA)

SproutBank is designed for use by parents on behalf of their children. OceanBeacon AI, Inc. operates SproutBank as the COPPA "Operator" for any personal information collected from or relating to children under 13.

How child accounts work: Parents (or guardians) create and control all child profiles within the family account. Children do not register independently. The parent account is the account of record.

What we collect about children:

• The name or nickname you assign to a child's profile (e.g., "Emma" or "Kid 1")
• Transaction data you or the child logs — deposits, spend/give/save allocations, goal amounts
• Any avatar or display preferences set within the child's profile

We do not collect a child's full legal name, date of birth, email address, phone number, location, or any government identifier.

How it's used: Children's data is used solely to display and track their account within your family. It is never used for advertising, profiling, or any purpose outside running the app.

No third-party sharing: Children's data is never sold, shared with advertisers, or disclosed to third parties, except to Supabase (our database host) as required to store the data securely.

Parental rights: As the parent or guardian, you may review, correct, or delete any information in your child's profile at any time — either within the app or by emailing hello@mysproutbank.com. We will respond within 14 days.

Note for legal review: Full COPPA compliance procedures — including verifiable parental consent mechanisms — to be confirmed with counsel before public launch.

Your rights

You can request access to, correction of, or deletion of your family's data at any time by emailing hello@mysproutbank.com. We'll respond within 14 days. Account deletion removes all associated data from our systems.

Cookies

SproutBank uses session cookies to keep you logged in. We do not use tracking cookies or third-party cookies for advertising purposes.

Changes to this policy

If we make meaningful changes to this policy, we'll notify you by email and update the date at the top of this page. We won't sneak things in.