What we collect, why,
and what we never do.

The short version

Chickadee and Bumblebee are reading logs used by parents and caregivers to track books they read with their young children. We collect the minimum information needed to make the apps work, we don't sell data, we don't show advertising, and we don't build profiles of children. If you want everything we have on you, or want it deleted, email privacy@chickadee.app and we'll handle it.

Who these apps are for

Accounts are for adults — parents, guardians, and other caregivers. The apps are not directed at children, and children do not create accounts or interact with them directly. Adults log books on behalf of a child profile they create. Because of this design, both apps are intended to comply with the U.S. Children's Online Privacy Protection Act (COPPA) and similar children's privacy laws around the world.

Information we collect from you

We collect only what we need to run the apps:

• Account information: the email address and password you sign up with. If you sign in with Apple or Google, we receive a token and the email associated with that login.
• Reading log content: the book titles, subjects, tags, dates, and notes you choose to add.
• Child profile information: a first name or nickname and an age range that you enter. We do not require a last name, photo, address, or birthdate.
• Caregiver sharing: if you invite another adult to log books for the same child, we store their account ID and the relationship you set.
• Payment information: if you purchase web access, our payment processor (Stripe) collects your billing details. We never see or store your full card number.
• Basic technical data: device type, app version, and crash logs, used to keep the apps working.

How we use it

• To run your account and sync your reading log across devices.
• To generate your charts, calendar view, streaks, and exports.
• To let invited caregivers add books to the same child's library.
• To process purchases and provide customer support.
• To send necessary account emails (receipts, password resets, important changes).
• To detect abuse and keep the service secure.

We do not use your data — or your child's profile data — to show advertising, train advertising models, or build a profile for marketing purposes.

What we never do

• We don't sell your personal information.
• We don't share child profile data with third-party advertisers.
• We don't show third-party ads inside the apps.
• We don't track you across other apps or websites.
• We don't ask children to provide any information directly.

Who we share data with

We share information only with vendors who help us operate Chickadee and Bumblebee, and only the data they need to do their job:

• Hosting & database: our cloud infrastructure provider stores your reading log and account data.
• Payments: Stripe processes web purchases. See Stripe's privacy policy for how they handle payment data.
• Email delivery: a transactional email provider sends receipts and account emails.

We may also disclose information if required by law, to protect someone from harm, or to enforce our terms.

How long we keep things

We keep your account and reading log for as long as your account is active. If you delete your account, we delete your reading log and child profiles within 30 days, except where we are legally required to retain transactional records (such as tax records on payments).

Your choices

• See your data: request a copy of everything we have.
• Correct your data: edit your account details or reading log directly in the app, or ask us.
• Delete your account: delete from inside the app, or email us.
• Export your books: any time, as CSV or PDF.
• Withdraw caregiver access: remove anyone you've invited to a child's library.

Email privacy@chickadee.app for any of these. We respond within 30 days.

Parents & guardians

Because accounts belong to adults, the parent or guardian who created the account is the data controller for any child profile in their account. If another caregiver has been invited, the original account owner can revoke that access at any time. To request access to or deletion of a child profile, email us from the account email address on file.

Security

Data is encrypted in transit and at rest. Passwords are hashed. Only our small team can access production data, and only when needed for support or maintenance. No system is perfect, so if something goes wrong we'll tell affected users promptly and clearly.

International users

Chickadee and Bumblebee are operated from the United States. If you use either app from another country, your information will be processed in the U.S. and other countries where our vendors operate. We apply the same privacy standards regardless of where you are.

Changes to this policy

If we make material changes, we'll notify you in the app or by email before they take effect. The "Last updated" date at the top of this page always reflects the current version.

Contact

Questions, requests, or concerns: privacy@chickadee.app.