Privacy policy

BeeDay is a private, invite-only photo-sharing tool for kids' birthday parties. The people who use BeeDay are the parents who host an event and the guests they approve. Children do not have accounts and do not use the app.

Because parties for young children are involved, we treat photos and details about children as sensitive and apply children's-privacy protections (such as COPPA in the United States).

• Photos and captions that approved guests upload, which may include images of children.
• A child's first name(the birthday child's name, and any child first names a guest adds), used only to personalise the album.
• Host account details: email address and an 18-or-older confirmation.
• Guest details: the name and contact a guest provides when asking to join an event.
• Quest activity: which photo tasks a guest completes within an event.

We strip location (GPS/EXIF) data from every uploaded photo on our server before it is stored. We do not collect a child's date of birth, home address, school, or precise location. How long an event's album stays available depends on the host's plan — see “How long we keep information” below.

To run the event album: storing and showing approved photos, letting the host moderate uploads, personalising the album, and (only if the host turns it on) automatically checking photos for inappropriate content. We do not use any of this information for advertising, and we do not sell it.

We use a small number of service providers to operate BeeDay:

• Supabase — database and photo storage.
• Vercel — application hosting.
• Resend — sending event emails (join requests, approvals, links).
• Stripe — processing plan payments (no photos are shared).
• OpenAI — optional AI safety scanning of photos and captions, only for events where the host has turned it on. OpenAI does not use data submitted through its API to train its models.

We do not share photos or children's information with anyone else, and never for advertising.

Hosting requires confirming you are 18 or older. Sending photos to the optional AI safety scanner (OpenAI) requires a separate, explicit opt-in that the host makes per event. Our consent process is still being strengthened as we add formal verifiable-parental-consent steps.

You can, at any time:

• Ask what information we hold and request a copy.
• Ask us to correct it.
• Delete it. A host can permanently delete an entire event — including every photo, caption, guest, and the stored image files — from the event's Share tab. You can also email us to request deletion.
• Withdraw consent (for example, turn off AI scanning for an event).

To make any of these requests, email privacy@getbeeday.com. We'll respond to deletion requests as quickly as we can.

We keep an event's photos and details for as long as the album is active, and then delete them. How long an album stays active depends on the host's plan:

• Free plan: about 12 months after the party.
• Paid plans: a longer active period — the higher the plan, the longer the album stays available. Current plan durations are shown on our pricing page before you pay.
• Unlimited plan: the album stays available until the host deletes it.

We keep this information only to run and keep available the private event album the host created. We do not keep it for advertising and we do not sell it.

A host can permanently delete an entire event — including every photo, caption, guest record, and the stored image files — at any time from the event's Share tab, and anyone can email us to request deletion earlier than the periods above. Your plan sets the longest an album stays available; it never prevents earlier deletion on request.

We are building automatic deletion so that albums are removed on the schedule above without anyone having to ask; until that is switched on, albums stay until a host deletes the event or someone requests deletion. We keep a short audit record of deletions (what was deleted, and when) as required for compliance.

We do not sell or share personal information as those terms are defined under California law. There is nothing to opt out of, but you can still contact us with any privacy request.

BeeDay is operated by adults for adults; children do not create accounts or use the app directly. We do not knowingly collect personal information directly from a child. Where we hold information about a child (such as a photo a guest uploaded), a parent can contact us to access or delete it.

Questions or requests: privacy@getbeeday.com. We'll respond to any privacy request as quickly as we can.

If we change this policy we will update the effective date above and, for significant changes, let hosts know by email.