Privacy Policy

VanDuffie Media, LLC, doing business as Bend Family Loop (“BFL,” “we,” “us,” or “our”) operates the website bendfamilyloop.com, including the Bend Family Loop app (the “App”) and any associated features or services (collectively, the “Service”).

This Privacy Policy explains what information we collect, how we use it, who we share it with, and what choices you have. By using the Service, you agree to the practices described here.

If you have questions, contact us at megan@bendfamilyloop.com.

1.1 Account Information

When you create an account, we collect:

• Email address —required for all accounts.
• Name —collected via Google if you sign in with Google; otherwise not required.
• Authentication credentials —if you use email/password sign-in, your password is hashed and stored by Supabase (our authentication provider); we never see or store it in plaintext.

We do not require a phone number, home address, or government ID to create an account.

1.2 Household and Family Information

Once logged in, you may optionally add:

• Kids' profiles —display name, birth date (used to calculate age for filtering), and interest tags you select from a fixed list.
• Nap times —start and end times for up to two daily nap windows, stored as part of your household settings.
• Household member —if you invite a partner or co-parent, we store their email address during the invite process and link their account to your household once they accept.

Kids' profiles are created by you, the parent or guardian, on behalf of your children. Children do not create accounts or interact with the Service directly. We do not knowingly collect personal information directly from children under 13.

1.3 Subscription and Payment Information

When you start a paid subscription:

• Payment details —are processed directly by Stripe, our payment processor. We do not see or store your credit card number, expiration date, or CVV.
• Billing identifiers —we store your Stripe customer ID and subscription ID in our database to manage your account status.
• Plan details —we store your subscription plan (monthly or annual), status, and renewal date.

1.4 App Usage Data

We store:

• Saved events —events you bookmark are stored in our database, linked to your household.
• Newsletter opt-in preference —whether you opted in to the Bend Family Loop newsletter at sign-up or via the household invite flow.

1.5 Calendar Sync

If you use the iCal calendar sync feature, your household is assigned a unique private URL (containing a secret token) that you can add to Google Calendar, Apple Calendar, or another calendar app. Anyone with that URL can access your saved events in calendar format. You can find and manage this URL in your Profile. We do not store or have access to your external calendar.

1.6 Technical and Analytics Data

When you use the Service, we and our third-party analytics partners automatically collect:

• Page views and navigation —which pages you visit and in what order.
• In-app actions —events saved, filters applied, and CTAs clicked — tracked as named events to help us understand how the App is used.
• Device and browser information —browser type, operating system, screen size, and similar technical metadata.
• IP address —used by analytics providers to infer approximate location (city/region level); we do not store IP addresses ourselves.
• Cookies and similar tracking —used for session management, analytics, and (on the /subscribe page only) ad conversion tracking.

1.7 Information You Submit

If you submit an event listing through our public event submission form, we collect the business name, event details, your contact email, and any promotional information you provide. This information may be published on the Service.

We use the information we collect to:

• Operate the App —authenticate you, manage your subscription, display events filtered to your household's ages and interests, and maintain your saved events calendar.
• Personalize your experience —use your kids' ages and interest tags to power the For You feed and the “Avoid nap times” filter.
• Send transactional emails —welcome emails, trial start and expiration notices, subscription confirmation, payment failure alerts, and household invite emails.
• Send the newsletter —if you opt in, we add your email to the Bend Family Loop newsletter on beehiiv.
• Process payments —communicate with Stripe to initiate, manage, and cancel subscriptions.
• Improve the Service —analyze aggregate usage patterns to understand what's working and what isn't.
• Communicate about your account —billing issues, policy changes, or important service updates.

We do not use your information to serve third-party ads inside the App, and we do not sell your personal information.

We share your information with the following service providers to operate the Service. Each is a data processor acting on our behalf, bound by its own data protection obligations.

We do not share your information with any other third parties except as required by law.

The Bend Family Loop App is designed for parents and guardians. It is not directed at children. You may create profiles for your children within your household account — those profiles include a display name, birth date, and selected interests. This information is used only to personalize your experience in the App (age filtering, interest matching) and is not shared with third parties or used for advertising.

We do not knowingly collect personal information directly from children under 13. If you believe we have inadvertently collected such information, please contact us at megan@bendfamilyloop.com and we will delete it promptly.

Your data is stored in a Supabase-managed PostgreSQL database hosted on AWS infrastructure. Supabase uses row-level security (RLS) policies to ensure users can only access their own household's data.

We implement reasonable technical and organizational safeguards to protect your information, including:

• Encrypted data transmission —HTTPS/TLS for all traffic.
• Password hashing —handled by Supabase Auth; we never store plaintext passwords.
• Server-side secrets —service role keys are used only in server-side code and are never exposed to the browser.
• Credential management —all API keys and credentials are stored as environment variables; no hardcoded secrets in source code.

No method of transmission or storage is 100% secure. If you have concerns about account security, contact us immediately.

We retain your personal information for as long as your account is active or as needed to provide the Service.

• Cancelled subscriptions —we retain your account data and saved events so you can reactivate without losing your history.
• Account deletion —upon request, we will delete your personal information within 30 days, except where we are legally required to retain it (for example, billing records for tax purposes).
• Analytics data —retained per the respective provider's default retention settings.

• Access and correction —you can view and update your household settings, kids' profiles, and nap times at any time in the App under Profile.
• Newsletter —you can unsubscribe from the Bend Family Loop newsletter at any time using the unsubscribe link in any newsletter email.
• Analytics —you can opt out of PostHog tracking via their opt-out mechanism. Google Analytics supports opt-out via the Google Analytics Opt-out Browser Add-on. We honor Do Not Track signals where technically feasible.
• Account deletion —to request deletion of your account and associated data, email megan@bendfamilyloop.com. We will process your request within 30 days.
• California residents (CCPA) —you have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information. To exercise any CCPA rights, contact megan@bendfamilyloop.com.

We use cookies and similar tracking technologies for:

• Session management —keeping you logged in.
• Analytics —PostHog and Google Analytics use cookies to track page views and usage patterns.
• Ad conversion —on the /subscribe page only, Meta Pixel uses a cookie to track newsletter signups attributed to Meta ads.

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the App.

The Service may contain links to third-party websites, event registration pages, and business websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top and notify active subscribers by email. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.