Privacy Policy

HiveDays is intended for parents, guardians, and caregivers aged 18 or older. Children do not create accounts or use the Service directly. Any information about a child in HiveDays is entered by an adult household member to organize that child's schedule. The Service is not directed to children under the age of 13, and we do not knowingly collect personal information directly from children. If you believe a child has provided us information directly, contact us and we will delete it.

Information you provide:

• Account information — your name, email address, and password (passwords are stored only as a secure hash by our authentication provider).
• Household and family information — your household name; the first and last names, birth dates (optional), display colors, and any avatar you set for the children you add.
• Schedule content — events, activities, teams, venues, tasks, notes, and any internet calendar (.ics/webcal) links you subscribe to.
• Photos you scan — when you use the photo-import feature, the image you provide is processed to extract schedule details (see "AI features" below).
• Communications — messages you send us (e.g., support requests).

Information collected automatically:

• Device and push information — a push notification token and device platform, used to deliver reminders you enable.
• Usage and diagnostic data — basic logs and technical information used to operate, secure, and troubleshoot the Service.

Information from others:

• Subscription information — when you purchase HiveDays Plus, Apple processes your payment and shares your subscription status with us through our subscriptions provider. We never receive your full payment card details.

We use information to: create and manage your account and household; provide the scheduling, reminder, photo-import, and calendar-sync features; send notifications you have enabled; process and manage subscriptions and entitlements; provide customer support; secure the Service and prevent abuse; and comply with legal obligations.

When you scan a photo of a schedule or flyer, the image is sent to our AI processing provider (Anthropic) to extract event details (dates, times, activities, locations). This is done to provide the import feature you requested. Extracted candidate events are shown to you for review and confirmation. Images and extracted data are retained only as needed to provide and improve the accuracy of this feature and are deleted in the normal course of data retention described below. Automated extraction can make mistakes — always review imported events before relying on them.

We do not sell your personal information. We share information only with:

• Service providers (subprocessors) who operate the Service on our behalf, under contract and only for that purpose:
  • Supabase — database, authentication, file storage, and backend hosting.
  • Anthropic — AI processing of scanned photos to extract events.
  • Apple — App Store distribution and payment processing for subscriptions.
  • RevenueCat — subscription and entitlement management.
  • Resend — sending transactional emails (e.g., password resets).
  • Cloudflare — website hosting and DNS.
• Other members of your household, who can see the household's shared schedule, children, and members by design.
• Legal and safety — where required by law, to enforce our terms, or to protect rights, safety, and security.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

The Service is operated using providers that may process and store data in the United States and other countries. Where we transfer personal data out of the EEA/UK or Canada, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

We keep your information for as long as your account is active and as needed to provide the Service. When you delete your account, we delete your personal information and the households you solely own; residual copies in backups are purged in the normal backup cycle (typically within 30 days). We may retain limited information where required for legal, tax, or security purposes.

You can review and update your profile, children, and household information in the app at any time, and you can delete your account from within the app (Settings → Account → Delete account), which removes your personal data as described above.

Depending on where you live, you may have rights to access, correct, delete, port, or restrict your personal information, to object to certain processing, and to withdraw consent. EU/UK residents have these rights under the GDPR; Canadian residents under PIPEDA; California residents under the CCPA/CPRA (including the right to know and delete, and to not be discriminated against for exercising rights — note again that we do not sell personal information). To exercise any right, email support@hivedays.com. You may also lodge a complaint with your local data protection authority.

We use industry-standard measures including encryption in transit (TLS/HTTPS) and access controls that restrict data to your household. No method of transmission or storage is 100% secure, but we work to protect your information and to address issues promptly.

If you enable reminders, we send push notifications for your events. You can turn these off in the app's settings or in your device settings at any time.

We may update this Policy from time to time. If we make material changes, we will update the effective date above and, where appropriate, notify you in the app. Your continued use of the Service after changes take effect means you accept the updated Policy.