Privacy

What we store

• Your account: email address, display name, and an optional profile photo.
• Your friends: friend links or requests, and the private groups you build as selection shortcuts.
• Your plans: playdates you organize or join, RSVPs, places you save or label, and chat messages on a playdate.
• Notifications: your push/email preferences, browser or device push registrations, and in-app Activity.
• Safety: reports you file, blocks you set, and the review outcome recorded by the operator.

We do not create child profiles, ages, or attendance counts, we do not import contacts, and there are no public profiles, public events, or stranger discovery.

Park Playdates is meant for adults planning playdates and is not directed to children; we do not knowingly collect information from children. There is no advertising, and we do not track you across other apps or websites. The one measurement we do run is a page-view count for our own site; see Usage analytics.

Who can see it

Full plans are available to the organizer and invited participants, including people who are not already friends, subject to account and blocking restrictions. Anyone holding an active invitation link can see a preview before signing in: the inviter's name and photo, plan title, address, time, note, and organizer name when shown. Names and approved photos also appear to eligible participants on shared plans, not only accepted friends. Playdate links permit one acceptance; they are not public discovery. Blocking restricts signed-in access to each other's plans, identities, messages, and Activity; it cannot identify a signed-out link holder.

Location

There is no live or background location tracking. When you open the Map view, the app asks your device for your current location once so it can show nearby parks; that coordinate is used in the moment to ask Google for nearby places and is not stored in our database or shared with other people. Manual place search always works if you decline.

Service providers

• Vercel hosts the website, serves its pages and requests, and counts page views.
• Supabase hosts the database, sign-in, and photo storage.
• Google Calendar or Outlook receives a plan's details when you choose to add it to one of those calendars. Apple Calendar is handled on your device and sends nothing to us.
• Google Maps and Google Places provide map display and place search.
• Web Push and Apple Push Notification service deliver notifications to browsers and the iOS app; only the registration identifiers needed for delivery are stored.
• Brevo sends sign-in codes and notification emails, including account-deletion confirmation.

Usage analytics

We count page views with Vercel Web Analytics so we can see which screens people actually use and which ones break. It does not use cookies, it does not identify you, and it is not used to track you across other apps or websites. A page view records the page address you opened, the page that referred you, your browser, your operating system, your device type, and the country or region your connection comes from. Vercel keeps these records aggregated, does not tie them to your IP address, and discards the short-lived hash it uses for visitor counting within about a day.

Safety and review

You can report a person and block them. Reporting and blocking are separate: a report never blocks anyone, and blocking is immediate. Display names, plan titles/notes, and chat messages are checked against our written text rules, and every new profile photo is reviewed by a person before it appears. Safety reports and photo review are handled within three business days.

Retention and deletion

• Your plan, chat, and friend data stays while your account is active.
• You can request deletion from your profile. The account stays usable while the request is pending, push and fallback email stop immediately, and deletion is completed within 30 days. You can cancel until processing starts.
• Terminal safety and deletion records are kept for 90 days, then removed: resolved reports, finished photo reviews, and completed or cancelled deletion requests. During that window we hold only identifiers, fixed outcome codes, and timestamps. Report notes are cleared when a report is resolved, and a cancelled deletion request's email address is cleared when it is cancelled.
• The 90-day removal runs as a routine maintenance purge that compares each stored deadline with the current time. Photo files left behind by a failed cleanup are retried, and a record whose cleanup still fails is kept for a later attempt rather than dropped.
• Completing a deletion sends the confirmation email first, then clears the retained email address and starts the 90-day window.