How it works
Invitation, verification, then a shared record.
- 1
A Super Admin opens the family
They record the family name, an optional description, and whether the family is active. They invite the first Family Admin by email.
- 2
The Family Admin accepts
The invitation is single-use and expires. The recipient sets a password and verifies the same email address. Their membership then becomes active.
- 3
Members are invited, not self-registered
There is no open sign-up. A person who already has an account can be invited into another family. A pending invitation cannot be duplicated for the same email.
- 4
The family fund is recorded
Family Admins can record an entry that is approved immediately. Members submit their own entries, which stay pending and do not affect the balance until an authorised administrator reviews them.
- 5
Privacy follows the role
Members see short IDs such as M014 on the shared ledger. Family Admins see names inside the families assigned to them. Super Admins can see identities across families. Private notes stay with the submitter and the administrators.