Privacy Policy

Last updated: April 5, 2026

Playdate (“we,” “us,” or “our”) operates the Playdate web application (the “Service”). This Privacy Policy explains how we collect, use, store, and protect personal information when you use our Service.

We are committed to complying with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

1. Information We Collect

1.1 Parent/Guardian Account Information

When you create an account, we collect:

Full name
Email address
Password (stored as a bcrypt hash — we never store plaintext passwords)
Phone number (optional)
Default address (optional)
Timezone preference

1.2 Children's Information

When you add a child's profile, we collect:

Child's first name
Age or date of birth (optional)
Allergies (e.g., peanuts, dairy, tree nuts)
Medical notes (e.g., carries epipen, asthma inhaler)
Dietary restrictions (e.g., halal, vegetarian, gluten-free)
General notes (e.g., interests, favorite activities)

Important: We collect children's health and safety information solely to ensure safe playdates between families. This information is shared only with parents you are directly connected with through the Service, and only in the context of confirmed or pending playdate arrangements.

1.3 Playdate & Booking Information

Availability slots (dates, times, locations, activity types)
Booking requests and confirmations
Notes exchanged between parents during booking

1.4 Payment Information

If you subscribe to our Pro plan, payment is processed by Stripe, Inc. We do not store your credit card number. We store your Stripe customer ID, subscription status, and billing period.

1.5 Automatically Collected Information

Browser type and device information
Pages visited and features used
IP address (for security purposes)

2. How We Use Your Information

We use the information we collect to:

Provide and operate the Service (scheduling playdates, managing profiles)
Connect parents within invite-only networks
Share relevant safety information (allergies, medical notes) with connected parents for confirmed playdates
Sync confirmed playdates to your Google Calendar (only if you opt in)
Send email notifications about booking requests, confirmations, and cancellations
Process subscription payments
Improve and maintain the Service

We do not:

Sell, rent, or trade any personal information to third parties
Use children's information for advertising or marketing purposes
Create profiles of children for any purpose beyond playdate coordination
Use personal information for automated decision-making or profiling

3. Children's Privacy

We take children's privacy seriously. Our Service is designed for parents and guardians — children do not create accounts or directly interact with the Service.

Parental control: All children's information is entered, managed, and controlled exclusively by their parent or guardian. Only the parent or guardian who created the child's profile (and any designated co-parents) can view, edit, or delete the child's information.

Minimal collection: We collect only the children's information necessary to facilitate safe playdates — specifically, first name, age, and health/safety information that hosting parents need to know.

Limited sharing: A child's allergy and medical information is shared only with parents you have explicitly connected with through our invite-only network, and only in the context of a playdate booking.

No third-party sharing: We never share children's information with advertisers, data brokers, or any third party beyond what is necessary to operate the Service.

4. How We Share Information

4.1 With Connected Parents

When you connect with another parent, they can see your name, email, your children's names, ages, allergy/medical/dietary information, availability slots, and booking details.

4.2 With Co-Parents

If you invite a co-parent, they gain access to the child's profile and can manage playdates on their behalf.

4.3 With Service Providers

We use: Neon (database), Stripe (payments), Resend (email), Google Calendar API (opt-in sync), and DigitalOcean (hosting). Each processes data only as necessary to provide their service.

4.4 As Required by Law

We may disclose information if required by law, legal process, or government request, or to protect the safety of any person.

5. Data Storage and Security

All data encrypted at rest (PostgreSQL on Neon) and in transit (TLS/HTTPS)
Passwords hashed with bcrypt (12 rounds)
JWT-based authentication
No credit card numbers stored (handled by Stripe)

6. Data Retention

Account data: Retained while active, deleted on request
Children's profiles: Deleted when parent removes profile or requests account deletion
Booking history: Retained 12 months, then anonymized
Payment records: Retained per tax/financial regulations

7. Your Rights Under PIPEDA

You have the right to:

Access your personal information
Correct inaccurate information via Settings
Withdraw consent and request deletion at any time
File a complaint with the Office of the Privacy Commissioner of Canada

8. Consent

By creating an account, you consent to the collection and use of your information as described here. By adding a child's profile, you confirm you are the child's parent or legal guardian. You may withdraw consent at any time by deleting your account.

9. Changes to This Policy

We will notify you by email of material changes before they take effect.

10. Contact Us

Email: privacy@playdate.app

Office of the Privacy Commissioner of Canada
30 Victoria Street, Gatineau, Quebec K1A 1H3
Toll-free: 1-800-282-1376 · www.priv.gc.ca