Your family's privacy

From the parent or guardian who signs up: name, email address, and (if you verify a phone number for text alerts) that phone number.

About each child profile you create: first name, birthdate or grade level, and an avatar you choose. We use birthdate/grade only to show age-appropriate content and to determine whether a profile is old enough that parental consent isn't legally required for it — never for anything else.

Money data you and your kids enter: allowance amounts, saving goals, jar balances, and transaction notes you write yourselves (e.g. “birthday money”). Monty does not connect to real bank accounts and never sees real account or card numbers.

To run the app: show your family's dashboard, calculate allowance and goal progress, and send the notifications you've asked for.

To keep kids' experience age-appropriate: a child's age or grade decides which lesson content and language they see.

We do not use your family's data for advertising, and we do not sell it.

Canadian privacy guidance treats a minor's personal information as sensitive. We collect the minimum needed to run the app for your kids, and it stays inside your family's account — it's never used for ads or shared with data brokers.

Every child profile is created and controlled by a parent or guardian. Kids don't currently have their own login or the ability to enter their own contact information.

We use a small number of service providers to run Monty. Each one only receives what it needs to do its specific job — never your full family data:

• Supabase— our database. This is where your account and family data live, and it's hosted entirely in Canada, in Montreal (AWS's “Canada (Central)” region, ca-central-1).
• Twilio(United States) — sends SMS text messages when you verify a phone number or opt into payday text alerts. Twilio receives the parent's verified phone number and short message text only.
• Resend(United States) — sends account emails (like a one-time welcome message when you finish setting up your account) and the emails you opt into (reminders, digests). Resend receives the parent's email address and message content. If you opt into marketing/reminder emails, Resend also keeps your contact in lists so we can send relevant updates — a general list, plus one based on whether you're on a free trial or a paid plan (Monty Family or Founding Family). List membership updates automatically as your plan changes.
• Firebase Cloud Messaging / Google LLC (United States) — delivers push notifications to your device if you enable them. Google receives a device push token and a short notification title/body only — never account balances or identifiers.
• Stripe(United States) — processes payment if you subscribe to Monty Family or become a Founding Family. Stripe receives the parent's name, email, and payment details directly — we never see or store your full card number.
• PostHog — product analytics that help us understand how the app is used, so we can improve it.
• Vercel (United States) — hosts the application itself and provides basic site analytics.
• Sanity — hosts the written lesson content shown in the app.
• Google Analytics (United States) — measures traffic and ad-campaign performance on our public marketing pages only. Google Analytics is never loaded inside the signed-in app, so it never receives account, child, or family data.

Some of these providers process data on servers outside Canada. If you're in Quebec, this means personal information may leave the province; we only use providers for the narrow purpose described above, and we review what each one receives to keep it as limited as possible.

We keep your family's data for as long as your account is active. If you delete your account, we delete your family's data within a reasonable period, except where we're required to keep something longer (for example, financial records needed for tax or legal reasons).

As the parent or guardian on the account, you can, at any time:

• See what information we have about you and your kids.
• Correct anything that's wrong.
• Delete your account and your family's data.

Today these are handled by contacting us — see “Questions or requests” below. Self-serve controls in the app are on our roadmap.

By using Monty, you're accepting this privacy policy. This is separate from — and not required for — the optional marketing/reminder emails you can opt into elsewhere in the app under Canada's anti-spam law (CASL); that's its own checkbox, with its own unsubscribe link in every email.

Monty is built for use by a parent or guardian on behalf of their family. If your child is old enough to be considered capable of consenting on their own under applicable Canadian privacy law, we still ask that a parent or guardian set up and oversee the account.

Email us at privacy@getmonty.ca and we'll respond as quickly as we can.