BellBoard

PRIVACY AT BELLBOARD

Privacy Policy

BellBoard brings family schedules and school information together. This policy explains what we collect, why we need it, and the choices families have.

1. Scope

This Privacy Policy applies to the BellBoard website, iPhone and Android applications, Alexa skill, Telegram features, email forwarding, and related services (collectively, the “Service”). “BellBoard,” “we,” “us,” and “our” refer to the operator of the Service.

By using BellBoard, you acknowledge the practices described here. If you use BellBoard for a family, you are responsible for making sure you are authorized to provide information about that family and its children.

2. Information we collect

Account and family information

We receive account identifiers, name, and email address from our authentication provider. We store family names, timezone, member roles, briefing preferences, and school-day settings.

When you invite another parent, a grandparent, or a caregiver, we store their email address and the access you chose, and we send them an invitation email. Everyone who accepts sees the same family calendar, children, school email, and reminders; view-only members cannot change them. The family owner can change access or remove someone at any time.

Child and school-planning information

Adults may add a child’s name, initials, grade, school, display color, assignments, tests, activities, schedules, reminders, completion status, and related notes. BellBoard may also store school and district names, approved email domains, teacher names, course subjects, source links, and excerpts needed to explain an imported calendar item.

Connected sources and school email

If you connect Planbook, Google Docs, a school calendar link (such as a Canvas, Schoology, PowerSchool, Blackboard, Brightspace, Moodle, Google Calendar, or Outlook iCal feed), we collect the connection details and content needed to provide that feature.

Each family has a private BellBoard forwarding address. When you forward email to it, we may store the original sender, sending domain, provider message and thread identifiers, subject, snippet, message text, received time, links, and summaries to create notifications and reminders. We only receive messages you or your mail rules send to that address, and you can replace the address at any time.

When you create an account, we send you a welcome email. When you email support@bellboard.net, we keep your message and our replies so we can help you and follow up on the conversation.

Telegram and Alexa

Telegram pairing can provide a chat identifier, display name, username, chat type, delivery status, and Telegram message identifiers. Alexa account linking provides authorization details and family-scoped access. BellBoard stores Alexa authorization codes and access tokens only as one-way hashes.

Billing and technical information

When paid plans are available, Stripe processes payment-card details. BellBoard may receive billing email, Stripe customer and subscription identifiers, plan, trial, payment status, and limited transaction metadata, but not your complete card number. Our infrastructure may also process IP address, browser and device information, request timestamps, error records, and security logs. We use essential cookies and browser storage for authentication, preferences, and core functionality.

If you allow phone notifications, BellBoard stores an app-specific push token, the phone platform, an optional device name, and delivery status. The token identifies an installation for notification delivery; it is not used for advertising or cross-app tracking.

3. How we use information

  • Provide and secure the family calendar and connected sources.
  • Import, organize, summarize, and display school information.
  • Generate reminders, mobile and website notifications, and family briefings.
  • Deliver requested Telegram and Alexa experiences.
  • Operate trials, subscriptions, billing, and customer support.
  • Detect abuse, troubleshoot errors, and improve reliability.
  • Comply with law and enforce our Terms of Service.

We do not sell personal information, and we do not use family or child information for targeted advertising.

4. School email protections

BellBoard does not request access to your mailbox and does not store a mailbox OAuth token or app password. It receives only messages sent to your family's private forwarding address. You control which messages are forwarded, whether manually or through rules in your mail service.

School and district domains from Family setup classify the original sender and route extracted reminders to the matching school schedule. Messages with no matching domain use the fallback schedule you choose. Replacing the private address stops the old address from accepting new mail; stored messages remain subject to the retention terms below.

5. Optional AI processing

When a family enables AI features, relevant accepted source text may be sent to the Ollama endpoint configured for BellBoard to identify dates, assignments, tests, and actions. BellBoard uses evidence checks before accepting extracted calendar items. When AI is disabled or unavailable, deterministic parsers continue to operate.

Do not add sensitive information that is unnecessary for school planning. AI-generated and imported information can be incomplete or incorrect and should be checked against the original school source.

6. When we share information

We share information only as needed to provide the Service, at your direction, or as required by law. Family information is shared with the people you invite to your family, as described above. Depending on the features you use, service providers can include:

  • Google and Apple, only if you choose to sign in with them.
  • Apple (App Store) and Google (Google Play), when you subscribe through the iPhone or Android app. They process the payment and tell us whether your subscription is active; we never see your card details.
  • Cloudflare for hosting, networking, security, and request logs.
  • Cloudflare D1 for managed database hosting.
  • Upstash QStash for scheduled background requests.
  • Apple Push Notification service and Google Firebase Cloud Messaging for phone notifications you enable.
  • Telegram for messages sent to paired recipients.
  • Amazon Alexa for linked voice requests and responses.
  • Stripe for trials, subscriptions, and payment processing.
  • The configured Ollama service when optional AI is enabled.

We may disclose information to protect users, investigate misuse, comply with a valid legal request, or complete a merger, financing, acquisition, or sale with appropriate safeguards.

7. Children’s information

BellBoard is designed for parents, guardians, and other authorized adults managing family school schedules. It is not directed to children under 13, and children should not create their own accounts. Adults choose what child information to enter and which family members and recipients may receive it.

If you believe a child provided information directly without appropriate adult authorization, contact us so we can investigate and delete it when required.

8. Retention, access, and deletion

We retain information while the account or relevant integration is active and as reasonably needed to provide the Service, resolve disputes, prevent abuse, meet legal obligations, and maintain limited backups. Retention can vary by data type and provider.

A family owner can permanently delete the family workspace in Settings under Family. This self-service action stops any active BellBoard subscription and deletes the family's children, schools, sources, imported email and calendar data, reminders, registered phone notification tokens, Telegram recipients, Alexa links, and membership records. Transaction records held separately by Stripe are not deleted by this family-wide action and may be retained as needed for security, tax, payment, and legal obligations.

Anyone can delete their own account, in the app (Account, then Delete account) or on the website (Settings, then Family, then Delete my account), and the steps are also at bellboard.net/delete-account. This deletes your sign-in identity as well. If you own the family, it deletes the whole family as described above; if you were invited, you leave the family and only your own account is deleted. A subscription bought through the App Store or Google Play is not cancelled by deleting an account and must be cancelled in your Apple Account settings or in the Play Store under Subscriptions.

To request access, correction, export, deletion of a separate sign-in identity, or help with deletion, email support@bellboard.netfrom the account address. We may verify identity and authority over the family before completing a request. BellBoard's authorized God Mode administrator can also complete an audited family-data deletion request.

9. Security

We use safeguards designed to protect information, including encrypted transport, access controls, tenant-scoped database queries, private forwarding addresses, hashed Alexa tokens, signed Alexa requests, one-time Telegram pairing codes, and authenticated scheduler and webhook endpoints. No system can guarantee absolute security.

Keep private calendar-feed URLs, your family's forwarding address, login credentials, Telegram invitations, and linked devices secure. Contact us promptly if you suspect unauthorized access.

10. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of personal information, or to object to or restrict certain processing. You may also withdraw consent for an optional integration by disconnecting it. We will not discriminate against you for exercising applicable privacy rights.

11. Changes and contact

We may update this policy as BellBoard changes. We will update the date above and provide additional notice when required. Questions or privacy requests can be sent to support@bellboard.net.