Effective date: October 29, 2026
Privacy Policy
Playdate is a private way for the grown-ups in one elementary school class to find each other and plan playdates, without a group text or swapping phone numbers. This policy says what we collect, why, who can see it, and how to delete it.
Playdate is operated by Tyson Biegler. Questions and deletion requests go to tysonbiegler3@gmail.com.
Who Playdate is for
Playdate is for parents, grandparents, guardians, and the room parent who runs a class. Children do not sign in and do not use the app. An adult chooses what to enter about a child. We do not knowingly let a child create an account. If you believe a child has an account, email us and we will delete it.
Information you provide
We collect only what the app stores so a class can plan playdates:
- Email address, used to sign you in. Other parents never see it.
- Your name, the display name you type during setup.
- How you know the child, if you add it, such as “Mom” or “Grandpa”.
- Optional messaging links you choose to share: WhatsApp, Telegram, or Signal. These are not your phone number. You can leave them blank.
- Your child’s first name, an avatar color, and an optional photo you pick.
- Class information: the teacher’s name, the grade, and the school name and location chosen from search.
- Playdates you post: place name, an optional public-place detail, day, time, a short note, who was invited, and RSVPs.
- Reports you send to the class admin, and the reason you picked.
There is no public profile and no search. A family sees a class only with that class’s code, or because they started it.
Information from Google sign-in
If you choose “Continue with Google,” Google shares the basic profile used to sign you in: your name, your email address, and a profile photo URL. Supabase Auth, which runs sign-in for Playdate, receives and stores that basic profile so it can create your session.
Playdate uses the Google email to sign you in and to recognize an account you already created with that same email and an email code. We do not display your Google profile photo. Your picture in the app is an initial, or a photo you choose yourself. We do not ask Google for your contacts, calendar, Drive, or anything beyond that basic profile. We do not use Google user data for advertising.
Google API Services User Data Policy
Playdate’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Limited Use, in plain words: Google user data is used only to sign you in and to match that Google account to an existing Playdate account with the same verified email. We do not sell Google user data. We do not share it with third parties except with the service providers below, and only so they can provide sign-in. We do not use it to serve ads, and we do not allow humans to read it except when you ask us for help, when we have to for security or legal reasons, or when the data is aggregated and not identifiable.
How we use information
- To sign you in and keep you signed in on your devices.
- To show your family and your class the name, child, and playdates you chose to share.
- To send the 6-digit sign-in code when you use email instead of Google.
- To let a class admin see reports from that class.
- To delete playdates after they happen, and to delete your account when you ask.
We do not sell personal information. We do not use it for advertising.
Who else can see it
Other adults in your class can see your display name, the relation you added, messaging links you added, your child’s first name, and a photo if you added one. They can see playdates and RSVPs that the class is allowed to see. A private invite is visible only to the host family and the invited families. Reports go to the class admins, not to the whole class.
They cannot see your email address.
Service providers
These companies process data for us. They are not allowed to use it for their own marketing.
- Supabase stores the database, the sign-in accounts, and optional photos. The project is in Supabase’s hosted Postgres and Auth.
- Resend sends the sign-in email that contains your 6-digit code, from a getplaydate.app address.
- Cloudflare hosts the website (Cloudflare Pages). If remembered devices are turned on, a Cloudflare Worker at auth.getplaydate.app holds the long-lived sign-in cookie for that browser. We do not put your IP address in the product.
- Google only when you choose Google sign-in, to authenticate you.
- Photon (a public OpenStreetMap search service) receives the place text you type when you look up a park, library, or school. It does not receive your email.
How information is stored
Account and class data live in a Supabase Postgres database protected by row-level security. Photos live in a private Supabase storage bucket, readable by families that share a class. Email addresses live in Supabase Auth, not on the class board. On the website, the long-lived refresh token is meant to stay in an HttpOnly cookie on auth.getplaydate.app once that helper is on; until then the session is kept in the browser’s own storage. The iPhone and Android apps keep the session in the app’s private storage.
How long we keep it
- A sign-in code expires after one hour.
- Playdates, invites, and RSVPs are deleted about a day after the event.
- A remembered sign-in ends after 60 days without use, or 90 days even if you keep using it. You can sign out sooner.
- The rest of your account stays until you delete it, you leave a class, or the class itself is closed and removed.
Deleting your account
In the app, open Settings and choose Delete my account. That deletes your sign-in, including your email. If you are the only adult in your family, it also deletes your children’s names and photos and removes the family from its classes. If other adults are in the family, they keep the children and the classes.
You can also email tysonbiegler3@gmail.com from the address on the account and ask us to delete it. We will delete the account and confirm when it is done.
Changes
If this policy changes in a meaningful way, we will update the effective date on this page. The current version is always at https://getplaydate.app/privacy.
Contact
Tyson Biegler · tysonbiegler3@gmail.com