Last updated: October 4, 2026
Wheat respects your privacy. This Privacy Policy explains how Wheat handles information when you use the Wheat mobile application or visit getwheat.app.
Wheat is operated by Elan Levy.
1. What Wheat Is
Wheat is a rewards and money-learning app that helps grown-ups teach kids about earning, saving, budgeting, and spending through a fictional currency.
Wheat credits have no cash value and cannot be purchased, sold, exchanged for money, or redeemed from Wheat for real currency. Wheat does not process payments for items recorded in the app.
2. Information Stored on Your Device
Most information created in Wheat stays only on the user's device.
This includes:
kid names and profiles;
avatars;
Wheat balances;
allowances;
incentives;
transaction histories;
Funds and savings goals;
Cart items;
recorded purchases; and
other family or group information entered into Wheat.
Wheat does not transmit or store this family information on Wheat's servers.
Deleting the app or erasing locally stored Wheat information may permanently remove this information unless the device or operating system independently preserves it through a backup.
3. Account Information
Signing in to Wheat is optional.
If you create or use a Wheat account, limited account information is processed to authenticate you and protect your account.
Depending on the sign-in method, this may include:
your email address;
an account or user identifier;
authentication tokens;
session information; and
a salted, one-way hash of your Grown-Up PIN.
Wheat does not store your actual four-digit PIN on its servers.
Wheat's server-side account storage contains only limited authentication and account-security information. Family records such as kids, balances, incentives, Funds, Cart items, and transaction histories remain on the device.
4. Sign-In Providers
Wheat may allow you to sign in using:
Apple
Apple processes information necessary to provide Sign in with Apple and distribute Wheat through the App Store.
Google
Google processes information necessary to provide Google sign-in.
Rork
Rork's platform provides authentication and infrastructure used to operate portions of Wheat.
Cloudflare
Cloudflare provides Wheat's backend infrastructure and server-side account storage. Wheat uses Cloudflare Workers and Durable Object storage for limited account and authentication information.
Resend
Resend delivers account-related emails, including sign-in and PIN-reset codes. Your email address is provided to Resend when necessary to send these messages.
These providers process information according to their own privacy policies and contractual obligations.
5. Kids' Privacy
Wheat is designed to be used by grown-ups together with kids.
Kids do not need to provide an email address or create a separate online Wheat account.
Kid profiles and the information associated with them, including names, balances, incentives, Funds, Cart items, and activity, remain stored on the user's device and are not transmitted to Wheat's servers.
Wheat does not knowingly collect personal information directly from kids.
A grown-up controls the Wheat group and determines which features a kid can access.
If Wheat's handling of children's information changes in the future, this Privacy Policy and any required parental notice or consent procedures will be updated before those changes are introduced.
6. Grown-Up PINs
A grown-up may create a four-digit PIN to protect Grown-Up Mode.
Wheat does not store the actual PIN on its server. Wheat stores a salted, one-way hash used to verify the PIN without revealing the original number.
If a grown-up forgets the PIN, Wheat may send a short-lived reset code to the email address associated with the account. Resend processes the email address for the purpose of delivering that message.
7. Analytics, Advertising, and Tracking
The Wheat mobile app does not contain third-party advertising SDKs or analytics SDKs.
Wheat does not:
display third-party advertisements;
use behavioral advertising;
track users across other companies' apps or websites;
sell personal information;
share personal information for cross-context behavioral advertising; or
use user information to create advertising profiles.
Apple may independently provide crash or diagnostic information through App Store services according to the user's Apple settings and Apple's privacy practices.
8. Website Information and Cookies
getwheat.app is hosted using Squarespace.
Squarespace uses necessary cookies and similar technologies to securely operate and deliver the website. Squarespace may also process technical information such as:
IP address;
browser, network, and device information;
referring webpages;
pages visited;
clicks and interactions;
scrolling;
searches; and
timestamps.
If analytics and performance cookies are enabled, this information may be used to understand website traffic and activity. Squarespace states that these analytics cookies can be disabled and that websites can require visitor consent before nonessential cookies are placed. Squarespace Help
Where available, you can use the cookie controls on getwheat.app to accept, reject, or change your preferences for nonessential cookies.
9. Retailer Links
Wheat may provide links that help users find items at third-party retailers.
Wheat does not complete or process purchases through these links. When you follow a retailer link, you leave Wheat and interact directly with the third-party website or service.
The retailer may collect information according to its own privacy policy. Wheat does not control those third-party privacy practices.
Unless clearly identified as Sponsored or Affiliate, retailer links are not paid placements.
10. How We Use Information
Information processed by Wheat is used only as reasonably necessary to:
create and authenticate accounts;
maintain secure login sessions;
verify Grown-Up PINs;
provide account recovery;
send authentication and account-related emails;
operate and secure Wheat;
respond to support requests;
prevent misuse or unauthorized access; and
comply with applicable legal obligations.
We do not use personal information for advertising.
11. Data Retention
Wheat retains server-side account information only for as long as reasonably necessary to operate the account, provide the service, maintain security, and satisfy applicable legal obligations.
Family and group information stored locally on a device remains there until the user edits or deletes it, erases the group, deletes the app, or the device otherwise removes that information.
When a Wheat account is deleted, Wheat removes the account from its active systems and removes locally stored Wheat information associated with the account as provided by the app's deletion functionality.
Limited information may temporarily remain in provider backups, recovery systems, security records, or logs before being deleted according to the applicable provider's retention practices.
12. Account Deletion and Privacy Choices
Users can delete their Wheat account from within the app.
Users may also contact Wheat to request information about their account, correct account information, or request deletion of personal information Wheat controls.
Requests can be sent to:
We may need to verify your identity before completing certain privacy requests.
13. Your Privacy Rights
Depending on where you live, you may have rights regarding your personal information, including the right to:
request access to personal information;
request correction of inaccurate information;
request deletion;
restrict or object to certain processing;
receive certain information in a portable format;
withdraw consent where processing is based on consent; and
lodge a complaint with an applicable privacy or data-protection authority.
Residents of the European Economic Area, United Kingdom, and other jurisdictions may have additional rights under local privacy law.
Where applicable, Wheat processes personal information as necessary to provide the service, protect the security and integrity of the service, comply with legal obligations, and, where required, based on consent.
14. International Processing
Wheat's service providers may process information in the United States or other countries.
Where applicable law requires safeguards for international transfers of personal information, Wheat and its service providers rely on legally recognized transfer mechanisms or other applicable protections.
15. Security
Wheat uses reasonable technical and organizational measures designed to protect information against unauthorized access, loss, alteration, or disclosure.
Authentication credentials and sensitive account information are handled through authentication providers and server-side infrastructure rather than being stored as readable passwords or PINs by Wheat.
No electronic system can be guaranteed to be completely secure.
16. Service Providers
Wheat currently relies on the following service providers:
Apple — App Store distribution, Sign in with Apple, and Apple-provided diagnostics;
Google — Google authentication;
Rork — application development, authentication infrastructure, and related platform services;
Cloudflare — backend hosting and limited account-data storage;
Resend — transactional email delivery; and
Squarespace — hosting and operation of getwheat.app.
Wheat does not currently use an advertising network or third-party behavioral analytics provider.
17. Changes to This Privacy Policy
We may update this Privacy Policy if Wheat's features, service providers, or data practices change.
When we make changes, we will update the Last updated date at the top of this page. If required by law, we will provide additional notice or obtain consent before materially different data practices take effect.
18. Contact
The data controller and operator of Wheat is:
Elan Levy
4954 35th St.
San Diego, CA 92116
United States
Email: support@getwheat.app
For privacy questions, requests, or concerns, please contact us at the email address above.

