Commonomy Teen is built and operated by Alon Ben Shalom, an independent developer. For anything on this page — questions, or a request to see or delete data — write to support@commonomy.com.

Signing up alone. The app asks for a date of birth first. Under 13 cannot open an account — the server refuses, not only the screen — and 18 and over are pointed at the Commonomy app instead. Then the teenager signs in with WhatsApp (they send a short code from their own number; nothing is sent to them, and no message is sent to anyone else) or, on an iPhone, with Apple. The app never asks for a password.

A parent's code. A parent can still make a six-character code in the Commonomy app for one particular child. It works once and expires after 30 minutes. An account opened this way is kept by the parent, as before; it has no email or phone number of its own.

• The first name and date of birth — typed at sign-up, or entered by a parent in Commonomy. The date of birth decides two things only: that the account may exist (13–17) and when to offer the move to the Commonomy app at 18. Nothing else reads it.
• How they sign in — the WhatsApp number, for an account opened with WhatsApp; the email address Apple provides, for one opened with Apple. Nothing else: no password, no contacts, no messages.
• Their own timetable and events — the lessons, cancelled lessons and one-off events they put in themselves, and their tasks. These belong to the teenager's account. For a teenager who signed up alone, a parent does not see them; the events appear to an adult only after sharing (below). For an account a parent connected with a code, an event the teenager adds is shared with their parents, as an event a parent adds would be, unless the teenager marks it personal.
• Homework and notes on their lessons — what is due, what to bring, a lesson that was cancelled or replaced, and a photo or PDF they attach (up to 10 MB, chosen through the phone's own picker). For an account a parent connected, both parents see these and are notified when the teenager adds one; for a teenager who signed up alone, only the teenager sees them. A file attached to homework is deleted automatically 30 days after the lesson's date, unless it is kept.
• A profile photo, if they choose to add one, shown next to their name in the app. It is kept in private storage, not at a public address: only the teenager and their family can open it, through a link that expires within an hour.
• Who they share with — one row per adult they have let in, with whether it is pending, accepted or taken back, and the short code that made the link (six characters, 30 minutes, used once).
• Ticked tasks — when the teenager marks a task done, that is recorded, and whoever set the task sees it. The same tick adds a star to the count Commonomy Kids shows; Commonomy Teen does not show stars.
• A link between the teenager's row and the account they sign in with.
• Their own money page, if they use it — money in and out (a short description, an amount, a category, a date, and whether it repeats every month) and savings goals (what for, how much is needed, how much is saved). These are private to the teenager: the database lets only their own account read them, and the parents do not see them.
• Their packing list — what goes with them between the two homes, as short items they type themselves. Also readable only by their own account.

That is all. The teenager cannot send messages or contact anyone through the app. Their money page and packing list stay theirs alone.

• their own tasks and their own school timetable, including updates from a class board a parent joined for them;
• family events that include them;
• which home they are at, from the custody schedule;
• the names of the people in the family;
• homework and notes on their own lessons, marked 📖 (homework) and ❗ (something to bring) on the timetable — for an account a parent connected, including what a parent adds or forwards to Commo on WhatsApp and approves — and the files attached to them.

Nothing marked private, no expenses, no other documents, no chats, and nothing from a parent's free-time board or a parent's own weekly schedule.

To let an adult in, the teenager makes a code in the app and gives it to that one person. The adult enters it in Commonomy, and the teenager then sees the request and answers it. Only after a yes does that adult see anything: the teenager's events appear in their Commonomy calendar, and Commo can answer them about the teenager's events and tasks — never anything marked private. The money page, the savings goals and the packing list are never part of it; there is no setting that shares them.

The teenager can take it back at any time from Settings → Who sees my week, and the adult sees nothing from that moment. Each adult is let in separately; letting one parent in does not let the other in.

Evening reminder

When turned on, the app schedules a notification on the phone for the evenings that have something to say — whose home tomorrow, what to bring. It is a local notification: there is no push service and no notification token, and it uses the phone's notification permission only.

Phone calendar

When turned on, the app creates a calendar of its own on the phone and writes the teenager's events and home days into it, replacing them on every refresh. It uses the calendar permission to find and write that one calendar; it does not read the events in any other calendar. Turning it off deletes the calendar and everything in it.

On Android the calendar is kept on the phone only. On an iPhone it is created in the phone's default calendar account, which may be iCloud; Apple then keeps it like any other calendar in that account.

Signing in

So that the teenager stays signed in, the app keeps a sign-in token on the phone. On Android the app is excluded from the device's backup, so a backup cannot carry a sign-in to another phone.

• No advertising, of any kind.
• No analytics, tracking or profiling. No third-party SDKs.
• No purchases inside the app.
• No way to contact anyone through the app.
• No location, microphone or contacts access — these permissions are removed from the app itself.

To stop anyone from guessing codes, failed attempts are counted and blocked after ten in an hour: for a parent's code, per internet address, stored only as a one-way hash, never as-is; for a sharing code, per signed-in account. These records are deleted within a day; a used or expired code is deleted the next time any code is made or entered, and never kept beyond a day after that.

Supabase hosts the database and sign-in; this is where everything in "What is stored on our servers" is kept, in the European Union, encrypted at rest and in transit. Expo delivers updates to the app itself; it receives the app version and the device's internet address, not the teenager's information. No one else is involved.

A teenager who signed up alone deletes their own account from Settings → Delete my account. That removes, immediately and in the same operation, the account, the name and date of birth, the WhatsApp number or email, the timetable, events, tasks, homework, notes and their files, the profile photo, money page, savings goals, packing list, sharing codes and every link to an adult. A file is removed from storage within a week of that. It cannot be undone.

An account a parent connected is the parent's to delete: in Commonomy, Family → the child → Delete, or by deleting their whole Commonomy account. Either one deletes the child's row, their stars, rewards, timetable, the events, homework, notes and files they added, money page, savings goals, packing list and sign-in codes — and the account they sign into Commonomy Teen with. If the other parent is connected to the family, deleting one parent's own account does not delete the teenager: the teenager, and everything above, stays with the other parent. The teenager can also delete the sign-in from Settings; the family record then stays with the parent. You can also ask us at support@commonomy.com and we will do it.

To stop using the app on one phone, open the settings (the gear on Home) and choose Sign out of this device; the evening reminders on that phone are cancelled. A parent can sign the teenager out of every device at once from Commonomy (Family → the child → Disconnect the app).

The teenager and their parents can ask to see, correct or delete this data at any time. Write to support@commonomy.com. You may also complain to your data protection authority.

If what Commonomy Teen does with a teenager's data changes, this page changes first, with a new date at the top.