Privacy Policy

Chickadee Bandit is a private space for your household. Your household's content belongs to your household: we encrypt it at rest, we don't sell it, we don't use it for advertising, and we don't use it to train AI models. We collect only what we need to run the service, and you can export or delete everything at any time.

Account information. Your name, email address, and password (stored as a salted hash — we never see your password). Optionally, two-factor and passkey credentials you enroll.

Household content. Whatever your household puts into its apps — lists, notes, events, photos, documents, messages. Some apps let you record sensitive information (for example health details, medications, or a child's growth) — that content gets the same encrypted-at-rest treatment as everything else, and it is only visible to the household members its sharing rules allow.

Location. Only when a member explicitly chooses to share their current location. The mobile app requests location access while it is in use and does not collect location in the background.

Billing. Payments are processed by Lemon Squeezy as merchant of record; we receive subscription status but never your full card details.

Technical data. Basic logs (IP address, browser type) for security and debugging, and aggregate performance analytics via Cloudflare Browser Insights. We do not use third-party advertising or cross-site tracking cookies.

Household app data is encrypted at rest with a per-household key, in addition to the provider's disk-level encryption, and all traffic uses TLS. Access within a household is governed by the sharing rules of each app — for example, a private journal entry is readable only by its author, even by us operating the database only through the same policy layer.

Your content is visible to the household members, space participants, and guests that your household's admins invite, according to each app's sharing rules. If you create a share link, anyone with that link can see what the link exposes, subject to the password, expiry, and usage limits you set.

Children's accounts are created and managed by a parent or guardian in the household. Admins control what children can access.

We use a small number of providers to run the service, each only for what's listed:

• Cloudflare — hosting, storage, and content delivery;
• Lemon Squeezy — payment processing and tax handling (merchant of record);
• Resend — transactional email (invites, receipts, reminders);
• Expo — push notification delivery to mobile devices.

We do not sell or rent personal data to anyone.

Some features can email people outside the service (for example event invitations to external contacts). External contacts must confirm before receiving ongoing email (double opt-in) and every message includes an unsubscribe link.

Your content is kept as long as your household keeps it. Households can set automatic retention windows for many apps, and admins can enable a write-audit trail with its own retention setting. If your subscription lapses, data is retained for a grace period so you can renew or export before deletion.

You can export your household's complete data from settings at any time. You can also delete your account: deletion has a 7-day grace period (with a cancel link) and then permanently removes your data, including files, from our systems.

Depending on where you live (including under GDPR and CCPA), you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. The export and deletion tools in settings cover most of these directly; for anything else, email us and we'll help. We don't discriminate against you for exercising your rights.

If we make material changes to this policy we'll notify you by email or an in-app notice before they take effect.

Privacy questions or requests: support@chickadeebandit.com.