Privacy Policy

Introduction

Pack (“Pack”, “we”, “us”, “our”) is committed to protecting your privacy and the privacy of your children. This Privacy Policy explains what data we collect, how we use it, who we share it with, and your rights regarding your data.

Pack operates in the United States and is subject to the California Consumer Privacy Act (CCPA) and the Children's Online Privacy Protection Act (COPPA).

1. Information we collect

About you (parents and caregivers):

• Name, email address, and password (or authentication token if using Google sign-in)
• Location (city/zip) to enable local activity search
• Payment method details (processed and stored by Stripe — Pack does not store card numbers)
• Booking history and activity preferences
• Communications with Pack support

About your children:

• First name and date of birth (required to enable age-appropriate matching)
• The following are optional and provided at your discretion: gender, accessibility needs, allergies and dietary requirements, medical notes, activity interests, emergency contact details

About providers:

• Business name, address, and contact details
• EIN or SSN (collected by Stripe for tax reporting — not stored by Pack)
• Insurance and compliance documents
• Bank account details for payouts (held by Stripe — not stored by Pack)

Automatically collected:

• Device type, browser, and IP address
• Pages visited and actions taken on the platform (for analytics and security purposes only)

2. How we use your information

We use your information to:

• Operate the Pack platform and process bookings
• Match children to age-appropriate activities
• Share relevant child profile information with providers when a booking is made (see Section 4)
• Process payments and payouts via Stripe
• Send booking confirmations, session reminders, and service notifications
• Improve the platform and understand how it is used
• Comply with legal obligations, including COPPA, CCPA, and IRS tax reporting requirements

We do not use personally identifiable data or your child's data for advertising. We may use anonymised, aggregated platform data for commercial purposes as described below. We do not sell personal data to third parties. We do not allow third-party advertising trackers on Pack.

Anonymised and aggregated data:

Pack may analyse anonymised, aggregated data about platform usage, activity trends, and booking patterns for commercial purposes, including market research, product development, and — in future — interest-based advertising to broad audience categories. This data cannot be used to identify you, your child, or any individual user. We will never sell personal data, and we will never use your child's personal information or any individually identifiable data for advertising purposes. If Pack introduces interest-based advertising in future, we will update this policy and notify registered users before any such advertising begins. You will have the right to opt out.

3. Children's privacy (COPPA)

Pack takes the privacy of children extremely seriously. We do not knowingly collect personal information directly from children under 13. All child profile information is entered by a parent or guardian.

Child data we collect is used exclusively to:

• Enable age and interest-based activity matching
• Share relevant details with providers to facilitate safe activity delivery
• Comply with our legal obligations

We do not use child data for advertising, profiling, or any purpose beyond service delivery.

Data retention: Child profile data is retained for as long as the parent account is active. Parents may request deletion of a child's profile and all associated data at any time. We will process deletion requests within 30 days.

Parents have the right to:

• Review the personal information we hold about their child
• Request correction of inaccurate information
• Request deletion of their child's data
• Withdraw consent for data collection at any time

To exercise any of these rights, contact us at privacy@packforkids.com.

4. Sharing your information

We share information only in the following circumstances:

With providers, when a booking is made:

We use a “need to know” approach. Each activity declares which child details it actually needs, and we only share those — nothing extra.

• Always shared: your child's first name and age. That's the baseline — a provider needs to know who's showing up.
• Shared only when the activity requires it: allergies, dietary needs, medical notes, and accessibility information. A cooking class that handles food will see allergy info. A soccer camp won't.
• Emergency contact: shared only when a provider explicitly requests it for the activity.
• Never shared with providers: your child's interests, activity preferences, gender, school grade, and other profile details. We use those to suggest activities — providers don't see them.
• You'll see exactly which fields are being shared on the checkout screen before you confirm any booking.

With Stripe, our payments partner:

• Payment card details (processed directly by Stripe — Pack does not see or store card numbers)
• Provider bank account details (held by Stripe for payout processing)
• Transaction data required for payment processing and tax reporting

With legal and regulatory authorities:

• Where required by law, court order, or to protect the safety of children or others

We do not share personal data with advertisers, data brokers, or other third parties.

5. Data security

Pack uses industry-standard security measures to protect your data, including:

• Encryption of data in transit (TLS) and at rest
• Child profile data encrypted at the database level
• Access controls limiting staff access to personal data
• Regular security reviews

Child profile data is never logged in plaintext in application logs or error reporting systems.

Despite these measures, no system is completely secure. If you believe your account has been compromised, contact us immediately at support@packforkids.com.

6. Your rights (CCPA)

As a California resident, you have the right to:

• Know what personal information we collect about you and how it is used
• Request deletion of your personal information
• Opt out of the sale of your personal information (Pack does not sell personal data)
• Non-discrimination for exercising your privacy rights

To exercise your rights, contact us at privacy@packforkids.com or submit a request through your account settings. We will respond within 45 days.

7. Prohibited uses and automated access

You may not use automated tools, bots, scrapers, crawlers, or scripts to extract, copy, or harvest data from Pack, including provider listings, pricing, availability, or any other content, except as expressly permitted by our robots.txt file for the purpose of search engine and AI discovery indexing.

Commercial use of data extracted from Pack without our written permission is prohibited. Pack reserves the right to block access to any user or system that violates this policy and to pursue legal remedies where applicable.

8. Cookies and tracking

Pack uses essential cookies to operate the platform (session management, security). We do not use advertising cookies or allow third-party tracking on Pack.

We use anonymised analytics to understand how the platform is used and improve it. This data cannot be used to identify individual users.

9. Data retention

We retain your data for as long as your account is active. If you close your account:

• Your personal data is deleted within 30 days
• Booking records are retained for 7 years for tax and legal compliance purposes
• Child profile data is deleted within 30 days of account closure or deletion request

10. Third-party services

Pack uses the following third-party services:

• Stripe — payment processing and provider payouts. Stripe's privacy policy: stripe.com/privacy
• Clerk — secure authentication. Clerk's privacy policy: clerk.com/privacy

We are not responsible for the privacy practices of these third parties. We select partners who meet high standards of data protection.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will notify registered users by email of material changes. The “Last updated” date at the top of this page reflects the most recent revision.

12. Contact

For privacy-related questions or to exercise your rights:

Pack
Newport Beach, California
privacy@packforkids.com

For general support: support@packforkids.com