Privacy Policy

ParentMail (dev.daybuddi.com) (“ParentMail”, “we”, “us”) helps parents stay on top of school email: it reads messages you connect, files them to the right child, and hands you a short daily list of what needs attention. This policy explains what information we collect, how we use it, and the choices you have. It applies to our website at dev.daybuddi.com, the ParentMail application, our early-access waitlist, and our text messaging (SMS) program.

The short version: we collect only what the product needs, we never sell your personal information, and we never share your mobile number with anyone for marketing.

• Account information — your name, email address, and password or Google sign-in identifier when you create an account.
• Mobile phone number — collected during onboarding if you choose to receive text messages. Providing it is optional and not required to use ParentMail.
• Family labels — the names or nicknames you enter for your children so emails can be filed to the right kid, and the school domains you approve.
• Google user data — email and calendar content you explicitly authorize us to access (detailed in Section 4).
• Messages you exchange with us — texts you send to our number and chats with the in-app assistant, kept so the conversation has context.
• Waitlist information — the email address you submit to join the early-access waitlist.
• Payment information — if and when you purchase a paid plan, payments are processed by Stripe. We receive transaction status and a payment reference; full card numbers never touch our servers.
• Technical and usage data — log data such as IP address, browser type, and pages visited, used for security and to keep the service running.

• Operate the service: sort connected email by child and category, extract deadlines onto your calendar view, and build your daily digest.
• Generate AI summaries: email content is processed by AI models solely to produce the summaries, action items, and calendar events you see in the product. We do not use your content for advertising, and we do not sell it.
• Send communications you asked for: daily digests, urgent school alerts, replies to your messages, and transactional email like waitlist confirmations.
• Keep the service safe: detect abuse, debug problems, and comply with legal obligations.

If you connect a Google account, we request the following scopes: read your Gmail messages (gmail.readonly), send email on your behalf when you reply or forward from inside ParentMail (gmail.send), organize messages with labels (gmail.modify), and read your calendar (calendar.readonly). We use this access only to provide the features described above — sorting school email, summarizing it, and surfacing deadlines.

ParentMail’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular: we do not use Google user data for advertising; we do not sell it; humans do not read it except with your explicit permission, where required for security or legal reasons, or where the data has been aggregated and anonymized. You can revoke our access at any time from your Google Account permissions page.

If you opt in by providing your mobile number, ParentMail sends the following kinds of text messages: your morning digest (if you enable it), replies to messages you send our number, and occasional urgent school alerts such as closures or schedule changes.

Opt-in happens only inside the ParentMail app during onboarding: you enter your number, actively check an unchecked consent box, and confirm a one-time passcode we text you to verify the number is yours. Consent to receive texts is never a condition of using ParentMail.

We use Twilio to deliver text messages. Twilio processes your number and message content on our behalf solely to transmit messages and is not permitted to use them for its own marketing.

We never sell your personal information, and we never share your mobile number or SMS consent with third parties or affiliates for their marketing. We share information only with service providers who process it on our behalf to run ParentMail:

• Supabase — database, authentication, and storage.
• Google — sign-in and the Gmail/Calendar access you authorize.
• Twilio — SMS delivery.
• Resend — transactional email delivery.
• Stripe — payment processing.
• Vercel — application hosting and the gateway through which AI requests are routed.

Each provider is bound by contract to use your information only to provide their service to us — they are processors, not data buyers. These are subcontractors in support services (for example, Twilio for SMS delivery); outside of that support role, text messaging originator opt-in data and consent are never shared with, sold to, rented to, or traded with any third party. Beyond that, we disclose information only if required by law, to protect the safety and rights of our users, or as part of a merger or acquisition (in which case this policy continues to apply to your data).

We keep your information while your account is active. You can disconnect Google access at any time, which stops all new email processing. If you delete your account or email us at hello@dev.daybuddi.com, we delete your personal information — including synced email content, family labels, and your phone number — within 30 days, except where we are legally required to retain records (for example, payment records).

SMS consent records (your phone number, opt-in method and timestamp, and any opt-out timestamp) are retained after you opt out so we can honor your STOP request and maintain the required proof-of-consent audit trail.

All traffic is encrypted in transit with TLS. Sensitive stored fields, including email content, are encrypted at rest with application-level encryption on top of database encryption. Access to production systems is restricted and audited. No system is perfectly secure, but we design for least privilege and defense in depth.

ParentMail is a tool for parents and guardians and is intended for adults 18 and older. We do not knowingly collect personal information from children under 13. The child names or nicknames in your workspace are labels you enter and control; if you believe a child has provided us information directly, contact us at hello@dev.daybuddi.com and we will delete it.

• Opt out of texts at any time by replying STOP.
• Turn the daily digest on or off in your settings.
• Disconnect Google access from ParentMail or from your Google Account permissions page.
• Request a copy or deletion of your personal information by emailing us.
• Depending on where you live, you may have additional rights (such as access, correction, or portability) — email us and we will honor them.

If we make material changes we will update the date at the top of this page and, for significant changes, notify you by email or in the app before they take effect.

Questions about this policy or your data? Email hello@dev.daybuddi.com.