Privacy Policy

PlayBook Kids LLC ("PlayBook," "we," "us") runs theplaybookapp.com: a free map of children's activities, and the booking and registration tools (PlayBook Pro) that activity providers use to take bookings and payments. This policy explains what information we collect, why, who we share it with, how long we keep it, and what you can do about it — starting with information about children, because that is the part that matters most.

Who PlayBook is for

PlayBook is for parents, guardians and other adults (18 or older), and for the businesses that run children's activities. Children do not use PlayBook and cannot have an account. When you book an activity, you tell us about your child; your child never logs in or gives us information themselves.

Children's privacy

We collect information about a child only from that child's parent or guardian, and only so the child can take part in an activity the parent has chosen. We do not knowingly collect personal information directly from a child under 13. If we learn that we have, we will delete it — tell us at the address at the end of this policy.

Although children do not use PlayBook, we apply the protections of the Children's Online Privacy Protection Act (COPPA) to the information you give us about your children:

• What we collect about a child: first and last name, date of birth (so a provider can check the class suits their age), any allergies you choose to tell us about, answers you give to the provider's questions for a class (for example, swimming ability or T-shirt size), emergency contacts and authorised pick-ups if you add them, and the record of which classes they are booked into and attended.
• Why: only to book your child into the activity, let the provider run it safely, and show you your bookings. Nothing else.
• Who sees it: the business you book with. When you book through PlayBook Pro you are registering with that business, and what you tell us is collected for them — PlayBook is the registration software they use, the way other businesses use Sawyer or Active Network. The business and its staff see your family's information and everything you have booked and paid with them, and keep it as their customer records — after your classes finish too — until you ask that business to remove your family (from Bookings → Businesses you've booked with) or delete your PlayBook account. Each business sees only its own customers: never anything you have done with another business, and nothing at all about families who have not booked with them.
• Who never sees it: advertisers, data brokers, other providers, or analytics services. We do not sell information about children, use it for advertising or profiling, or use it to train artificial intelligence.
• How long we keep it: see the retention schedule below. We do not keep children's information indefinitely.
• Your control: you can review, correct or delete your child's information at any time from Bookings → your children, or delete your whole account. You can also ask us for a copy. You can ask any business you have booked with to remove your family; it then keeps only an anonymous record of what was paid. Deleting a child, or your account, does the same for every business.

Information we collect about you

• Your account. Your email address and password, or — if you sign in with Google — your name, email address and basic Google profile. We never receive your Google password. When you first book a class we also ask for your mobile number, so the businesses you book with can reach you; you can change it in Bookings.
• Bookings and payments. What you book, what you paid, refunds you ask for, and the reason you give. Card payments are processed by Stripe: your card number goes to Stripe, not to us, and we receive only a record that the payment succeeded.
• Waivers you sign. If a provider asks for a waiver, we keep the name you type, the date, and the exact wording you agreed to — the record of what you signed.
• Preferences and saved places. Your town or search area, and providers and places you save.
• How you use the site. Pages viewed, searches on the map, and which providers' links you follow, so we can improve PlayBook and give providers anonymous totals. Basic technical data such as your browser type and IP address is processed by our hosting provider to run the site.
• Approximate location. The map area you are looking at, to show nearby results. We do not ask for your device's precise location.

If you run a business on PlayBook, we also collect your business details, your listing, the names and email addresses of staff you add, and your classes, prices and policies. Stripe collects your bank details and identity documents directly to pay you; we do not see them.

How we use information

• To run the map, your account, bookings, payments, refunds and waivers.
• To send the emails a booking needs — confirmations, changes, cancellations, refund updates — and messages a provider sends about a class you booked.
• To keep accounts and payments secure and prevent fraud.
• To understand, in aggregate, what is useful, and to improve PlayBook.
• To meet legal, tax and accounting obligations.

We send occasional product updates only if you have not opted out, and never about or to a child.

Who we share information with

We do not sell personal information, and we do not share it for advertising. We share it only as follows:

• Businesses you book with. A booking made through PlayBook Pro is made with the business, which uses PlayBook to run its registrations. What you give when booking — your contact details (name, email and the mobile number we ask for at your first booking) and those of other adults in your family on PlayBook, your children's details described above, your signed waiver, and what you book and pay — is that business's record of its customers, and PlayBook stores and processes it for them. Providers are independent businesses, they agree in our Provider Agreement to use this information only to run their activities, and they may have their own privacy practices.
• Service providers who run PlayBook for us, under contracts that let them use the data only to provide their service: Supabase (database and sign-in), Vercel (hosting and privacy-preserving site analytics), Stripe (payments and provider payouts), Resend (email delivery), MapTiler (maps) and Google (Google sign-in). These are part of operating the service; we do not share children's information with any other third party.
• Legal and safety reasons — when the law requires it, or to protect the safety of a child or anyone else, or the security of PlayBook.
• A business transfer — if PlayBook is sold or merged, this policy continues to apply to information collected under it, and we will tell you before it changes.

Cookies and analytics

We use only the cookies needed to keep you signed in and make the site work. We do not use advertising cookies or trackers. Our site analytics (Vercel Web Analytics) sets no cookies, and page addresses are stripped of anything identifying in your browser before they are sent. Our own usage statistics are anonymous: they are not linked to your account.

How long we keep information

• Your account and your children's profiles: until you delete them. If nobody in your household has signed in for 3 years and a child has had no booking for 3 years, we delete that child's profile automatically.
• Answers to a provider's questions: deleted 3 years after the class's term ends.
• Emails we have sent you: our copy is deleted after 12 months. Messages a provider sent through PlayBook: 24 months.
• Payment and refund records: kept for as long as tax and accounting law requires (generally 7 years). When a child or account is deleted, these records no longer identify the child.
• Signed waivers: kept as the legal record of what was agreed, for as long as the provider's account exists. Once a child is deleted, the waiver no longer identifies the child.
• Anonymous usage statistics: search text is removed after 90 days and the rest is deleted after about 13 months.

Your rights and choices

• See and correct your account, your children's details and your bookings at any time in your account.
• Delete a child from Bookings → your children, or your whole account from your account page. A child booked into a class that has not happened yet must be withdrawn from it first, so a provider is never left expecting a child who no longer exists in their records.
• Get a copy of the information we hold about you and your children, or withdraw your consent to us holding it, by emailing us. We will confirm it is you, and respond within 30 days.
• Stop marketing emails with the unsubscribe link in any of them. Booking emails continue while you have bookings.

Depending on where you live, you may have further rights under state law. We honour those requests in the same way and will not treat you differently for making one.

How we protect information

We keep a written information security program, reviewed at least once a year, with a named person responsible for it. Information is encrypted in transit; our database denies access by default and only lets each person see what their role allows — a business sees only its own customers, and a parent sees only their own family. Card details never touch our systems. No system is perfectly secure; if a breach affects your information we will tell you, and the authorities, as the law requires.

Where information is stored

PlayBook is run from the United States, and our service providers store and process information in the United States.

Changes to this policy

If we change this policy we will update the date above. If a change affects how we collect, use or share information about children, we will email the parents it affects before it takes effect.

Contact us

Questions, requests about your data, or a concern about a child's information: admin@theplaybookapp.com, or PlayBook Kids LLC, 211 East 43rd Street, 6th Floor, PMB 70417, New York, NY 10017.