Privacy Policy

1. Information We Collect

A. Personal Information

We collect personal information that you voluntarily provide, such as:

• Name
• Email address
• Club name
• Avatar or profile picture
• Location (city, state, region, or other information you provide)
• Information about the members of your family that you enter — names, dates of birth, contact details and photos
• Medical and health information you provide on a club’s medical consent form. This is the most sensitive information on the platform and is covered separately in Section 5.

This information is used to create your account, personalize your experience, and enable proper functionality of the app and related services.

B. Non-Personal Information

We also collect technical and behavioral information automatically, including:

• Cookies and similar tracking technologies
• Analytics data (pages viewed, features used, button taps, time spent in the app)
• Device information (device type, OS version, app version)
• Log data (IP address, timestamps, crash logs)

This helps us improve performance, monitor usage, and maintain a stable and secure environment.

2. How We Use Your Information

We use the information we collect to:

• Provide and operate the app
• Maintain and improve app features
• Personalize your experience
• Communicate with you
• Ensure platform safety and prevent abuse
• Analyze usage to improve overall performance
• Comply with legal obligations

We do not sell your personal information.

3. How We Share Information

We may share information only in the following situations:

• Service Providers: Analytics, hosting, authentication, or customer support services
• Legal Compliance: If required by law or to protect our rights
• With Your Consent: If you explicitly agree

We do not sell, rent, or trade your personal information.

Medical and health information is never shared with another club, another family, or any third party for any purpose other than the hosting and support providers that operate the platform on our behalf. See Section 5.

4. Data Storage & Security

We take reasonable measures to protect your data, including encryption, secure access controls, and industry-standard practices. However, no method of storage is 100% secure.

Your data may be stored in systems located in the United States or other countries where our service providers operate.

5. Medical & Health Information

Clubs ask families to complete a medical consent form so that club leaders can act appropriately if a member is hurt or becomes ill at a club activity. We treat this as the most sensitive information on the platform, and it carries the strictest access rules in the app.

What the consent form holds

• Physician name and phone number
• Insurance carrier, health card number and group number
• Allergies, current medications, and who is permitted to administer them
• Medical conditions, activity restrictions, accessibility needs and 504 plans
• Date of last tetanus shot and related health history

Who can see a member’s medical information

Exactly two groups of people, and no one else:

• The parents or guardians who manage that family. A family account can only ever reach its own members. Parents can view, correct or clear their family’s medical information at any time.
• The director of the club the member belongs to — the person responsible for that member’s safety during club activities, and the person who has to hand a consent form to a paramedic or an emergency room.

That is the complete list. In particular, the following cannot see a member’s medical information:

• Instructors, counsellors and other club staff who are not directors. Being a leader in the club does not grant access.
• Other families in the same club, including other parents and other members.
• Any other club on the platform. Each club’s data is isolated, and no request can reach across that boundary — a director of one club has no access to another club’s families, even for the same child in a different club. This is deliberate: a member who takes part in two clubs has a separate record in each, completed separately for each club, and neither club can see the other’s. Consent given to one club is never silently reused by another.
• Anyone without an account, and anyone who is not signed in.

These rules are enforced on our servers for every page, every printed or downloaded consent form and every API request — not by hiding buttons in the interface. A request for a record that belongs to another family or another club is refused before any data is read.

The rest of a family’s information

The same boundary applies to everything else we hold about a family: contact details, addresses, dates of birth, photos, curriculum progress and attendance. A family sees its own members; a club director sees the members of their own club; nobody else sees either.

Our own staff

A small number of Bleext administrators can reach production data when it is necessary to operate the platform — restoring a backup, diagnosing a fault, or answering a support request. We do not browse medical information, and we never sell it, share it with other organizations, use it for advertising, or use it to train AI models.

How it is used

Medical information is used only to show the record to the people listed above, to produce the printable consent form a director carries to an activity, and to give directors the allergy summary they need when planning meals and activities for their own club. It is not used for anything else.

Session recording is switched off entirely on medical consent forms, and the health, disability and accessibility questions in the enrollment form are blanked out of recordings. See Section 6.

Retention and deletion

Medical information is kept for as long as the member is registered with the club. After a year cycle ends we retain records for two months so that returning families do not have to re-enter everything; families who do not register again have their data deleted at the end of that period. Deleting a family or an account deletes its medical records with it, and a parent or director may request deletion at any time by writing to contact@bleext.com.

6. Session Recording

To understand how the platform is used and to diagnose problems that are otherwise difficult to reproduce, we record how you interact with the app. A recording captures the pages you visit, your clicks, scrolling, and navigation — enough to replay your visit as though we were watching over your shoulder.

What we do not record

• Passwords. Password fields are never captured.
• Anything you type. The contents of every form field are masked before the recording leaves your browser, so we can see that you typed something, but not what you typed.
• Payment details. Card information is handled entirely by Stripe and never reaches our recordings.
• Medical and health information. Recording stops entirely on medical consent forms, and the health, disability and accessibility questions in the enrollment form are blanked out of the recording. See Section 5.

Because a recording shows pages as they appeared to you, it may include information about club members displayed on screen, including minors in your household or club. That information is protected the same way as the rest of your data, and the protections described in Section 8 apply to it.

Who can see recordings, and for how long

Recordings are stored privately and can be viewed only by our platform administrators — never by other clubs, other families, or your own club’s leaders. They are automatically and permanently deleted after 180 days (about six months), and are deleted immediately if your account is deleted.

You may opt out of session recording at any time by contacting contact@bleext.com. Opting out does not affect your ability to use the platform.

7. Your Rights & Choices

Depending on your location, you may have the right to:

• Access your personal information
• Update or correct inaccurate information
• Request deletion of your account and associated data
• Opt out of optional data collection, including session recording
• Withdraw consent at any time

You may exercise these rights by contacting contact@bleext.com.

8. Children’s Privacy

Our app is not directed to children under age 13. If we discover that a child’s personal data was collected without parental consent, we will delete it promptly.

9. Third-Party Services

Our app may use third-party services such as analytics, crash reporting, hosting, or authentication providers. These providers have their own privacy policies.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the Effective Date and may notify users via email or in-app messaging. Continued use of the app means you accept the updated policy.

11. Contact Us

Bleext LLC
contact@bleext.com