Privacy Policy

1. Introduction

Bippity Boo ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our family logistics service, which helps parents track school events, sports schedules, and activity deadlines by scanning connected email accounts.

2. Information We Collect

2.1 Information You Provide

• Name, email address, and profile information when you create an account
• Household information and children's names you configure in the app
• Preferences and settings you configure in the app

2.2 Email Account Access

When you choose to connect an email account, we request the minimum access necessary to provide the service:

• Gmail (Read-only): We access your Gmail messages in read-only mode solely to identify family logistics emails (school events, sports schedules, activity deadlines, permission slips, etc.) and extract actionable calendar items.
• Google Calendar: We create and update calendar events on your behalf when family logistics items are detected from your emails.
• Microsoft Outlook / Exchange: We access Outlook messages in read-only mode for the same purpose as Gmail above.
• Yahoo Mail: We access Yahoo messages in read-only mode for the same purpose as Gmail above.

Connecting an email account is optional. You can use core features of the app without connecting any email account.

3. How We Use Your Information

We use the information we collect solely to:

• Identify family logistics emails and extract actionable events and tasks
• Populate your family calendar and task list with detected items
• Deliver your daily brief summarising upcoming events and deadlines
• Send service-related notifications (e.g. new events detected)
• Improve the accuracy of our event-detection models

We do not use your data for advertising, profiling, or any purpose unrelated to providing the family logistics service described above.

4. AI-Assisted Processing

To extract events, tasks, and deadlines from your emails, we send relevant email content to Anthropic's Claude API for natural-language processing. This means portions of your email content (subject lines and body text of emails our system identifies as potentially relevant) are transmitted to Anthropic, Inc. for processing.

Anthropic's use of this data is governed by their Privacy Policy. We do not permit Anthropic to use your data to train their models under our API agreement.

5. Data Classification

We classify all data we handle into the following protection levels:

6. Data Storage and Security

• Your data is stored in a PostgreSQL database with encryption at rest
• OAuth tokens are stored securely and refreshed automatically
• We store extracted event metadata (titles, dates, descriptions) — we do not store the full raw content of your emails beyond what is needed for extraction
• All data is transmitted over TLS/HTTPS
• We implement industry-standard security measures and conduct periodic security reviews

7. Data Sharing

We do not sell, trade, or rent your personal information. We share information only in the following limited circumstances:

• Anthropic, Inc. — for AI-assisted email extraction as described in Section 4
• Infrastructure providers — cloud hosting, database, and storage services necessary to operate the app (e.g. Vercel, Supabase Storage)
• Legal requirements — if required by law or to protect our rights, users, or the public

All third-party providers are contractually required to handle your data securely and only for the purposes we specify.

8. Your Rights

You have the right to:

• Access and download your data
• Delete your account and all associated data (within 30 days of request)
• Revoke Gmail access at any time via your Google Account permissions
• Disconnect any connected email account from within the app settings
• Opt out of non-essential communications

9. Data Retention

We retain your data only as long as necessary to provide our services. When you delete your account, we will permanently delete your personal data and revoke all OAuth tokens within 30 days.

10. Google API Services — Limited Use Disclosure

Bippity Boo's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Google user data to provide and improve the family logistics features described in this Privacy Policy
• We do not use Google user data to develop, improve, or train generalised AI or machine-learning models
• We do not allow humans to read your Google user data unless you have given explicit permission, it is necessary for security purposes, or we are required to do so by law
• We do not use or transfer Google user data for advertising purposes
• We do not sell Google user data to third parties

11. Children's Privacy

Our service is intended for use by parents and guardians. We do not knowingly collect personal information directly from children under 13. Children's names and activity information you enter into the app are used solely to personalise your family's calendar and task list.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. Continued use of the service after changes are posted constitutes your acceptance of the revised policy.

13. Contact Us

If you have questions about this Privacy Policy or want to request deletion of your data, please contact us at: support@bippity.boo