Privacy Policy

Ice Cream Fund is built to hold your family’s money data without asking you to hand it to anyone else. This page explains exactly what that means.

The short version

• No ads. No analytics SDKs. No third-party trackers of any kind.
• No Ice Cream Fund user account, no sign-up, no password.
• Your funds, transactions, and any badge photos you add are stored on your device.
• If you turn on multi-device sync or fund sharing, that data moves through your own private iCloud account — never through a server we operate, because we don’t operate one.

What we collect

We — the people who make Ice Cream Fund — do not collect, receive, or have access to your fund names, balances, transaction history, allowance schedules, or any photos you attach to a fund. There is no analytics library in the app reporting usage back to us, and no advertising SDK of any kind.

Problem reports

If something goes wrong, the app may offer Send Report. Sending is optional: nothing is sent unless you send it yourself through the share sheet. The report is a technical log without fund names, notes, amounts or contact details. It contains the app and iOS version, the device model, a shortened random device and fund identifier, and timestamped technical events from at most the last 7 days. It stays on your device until you send it, and we use it only to answer you.

How your data is stored

By default, all of your data is stored locally on your device in an on-device database (SQLite). If you enable iCloud sync, that same data is copied into your private CloudKit database, which is part of your personal iCloud account and governed by Apple’s own privacy practices — not ours. We never see it.

If you sign out of iCloud or switch to a different Apple ID, the previous account’s synced and shared funds are removed from this device; they stay in that account’s iCloud. Funds you keep only on this device stay here, and they are uploaded only while iCloud Sync is on — you turn it on yourself, and accepting a shared fund turns it on too. After a different Apple ID signs in, the app asks “Use iCloud Sync?” before uploading anything.

Sharing a fund with someone else

If you invite another person (a co-parent, for example) to a fund, that fund is shared with them through Apple’s CloudKit sharing, tied to their Apple ID. Invitations show the fund’s name and a small picture of its badge. Everyone in a shared fund sees the others’ iCloud names and who made each entry; as the owner, you also see the email address or phone number you invited. Only people you explicitly invite can see or edit that fund. You can remove a participant or stop sharing entirely at any time from within the app, which revokes their access — their device may take a moment to show it.

Children’s information

Ice Cream Fund is a household tool used by a parent or guardian on a device or iCloud account they control. It has no sign-up flow, no chat or messaging features, and no way for a child to communicate with anyone outside the family members a parent has explicitly invited to a fund. We do not knowingly collect information directly from children.

Your control over your data

You can rename, edit, or delete any fund at any time. Deleting a fund you own removes its history from your device (and from iCloud, if sync is enabled). Deleting a fund that was shared with you only removes your access; the owner’s fund is not affected. There is no “please wait while we delete your account” process, because there is no registration to undo.

Website

This section covers icecreamfund.app itself, not the app described above. The controller responsible for this website is:

Email:

Server logs

The site is self-hosted, so the server records every request: your IP address, your browser’s user agent, the requested URL, and the time of the request. We use these logs only to keep the site secure and to fix faults, on the legal basis of Art. 6(1)(f) GDPR (our legitimate interest in a secure, working website). They are never used to identify you and never shared with third parties.

We keep server logs only as long as necessary for security and troubleshooting, then delete or anonymise them.

Language choice

This site stores one entry in your browser’s local storage: icf-lang-decided. It only records that you have already chosen a language, so the site does not redirect you again on your next visit. It is not a cookie, it contains no identifier, and it is never sent to us. The site sets no cookies.

Visitor statistics

To see where visitors come from, we count page views with Matomo, an open-source analytics tool, at matomo.onwx.org. For each page view it records the page, the page or search engine that sent you here, links you follow out of the site, your browser, operating system and device type as read from your browser’s user agent, and an approximate country derived from your IP address. Your IP address is shortened before it is stored. Matomo sets no cookies, stores nothing in your browser, and cannot recognise you on a later day. We use this data only to understand how people find the site, on the legal basis of Art. 6(1)(f) GDPR (our legitimate interest in knowing which links and searches bring visitors here), and never share or sell it. If your browser sends a Do Not Track signal, nothing is recorded.

Support and privacy requests

Email — for support or with a privacy question. We keep messages only until we have answered them.

Your rights

Under the GDPR you have the rights set out in Art. 15–21: access, rectification, erasure, restriction of processing, data portability and objection. Email to exercise them. You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the Landesbeauftragte für den Datenschutz und für das Recht auf Aktenzugang Brandenburg (LDA Brandenburg).

Changes to this policy

If this policy changes, the “last updated” date above will change with it.

Contact

Questions about privacy? Email support@icecreamfund.app.