Privacy Notice

The Boardside System is operated by Michelle McHale, trading as Boardside Living. For the personal data described in this notice, Michelle McHale is the data controller — we decide what data is collected and why.

• Account data — your name, email address, and login credentials (stored hashed, or handled by Google if you sign in with Google). Used to create and secure your account. Legal basis: performance of our contract with you.
• Household content — household name, the names of family members you add, calendar entries, ownership assignments, meals, lunch and packing lists, tournament details, worksheets, and notes. Used to provide the Service. Legal basis: performance of our contract with you.
• Support messages — what you send us when you ask for help. Used to answer you. Legal basis: performance of our contract and our legitimate interest in supporting customers.
• Technical and usage data — IP address, device and browser information, and basic usage or error logs. Used for security, fraud prevention, debugging, and improving the product. Legal basis: our legitimate interests.
• Subscription status — your plan, status, and billing period, so we know what to unlock. Legal basis: performance of our contract. Card and payment details are collected and processed by Paddle, not by us.
• Marketing — if you opt in, your email address for product news. Legal basis: consent. You can withdraw it at any time.

Please only add information about children and other family members that is necessary for scheduling — the Service is designed for household logistics, not for sensitive records.

• Service providers and subprocessors — hosting, database, authentication, and email delivery providers who process data on our instructions.
• Merchant of Record — Paddle.com, for the sale of the product, subscription management, payments, tax compliance, and invoicing.
• Other members of your household — anyone you invite to your household account can see the shared content in that account.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where we are required to do so by law.

We do not sell personal data.

Our providers may process data in the United States and other countries. Where data is transferred out of the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

We keep account and household data for as long as your account is active. After you cancel and your access ends, household data is retained for up to 30 days so you can export it, then deleted or anonymised. Records we must keep for tax, accounting, or legal reasons are kept for the period the law requires. Logs are kept for a short rolling period.

Depending on where you live, you have the right to access your data, correct it, delete it, restrict or object to processing, receive a portable copy, and withdraw consent. You can also ask us not to sell or share your data — we do not. To exercise any right, email boardsideliving@gmail.com. We respond within one month. If you are in the UK or EEA you also have the right to complain to your local data protection supervisory authority.

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, encrypted storage, row-level access controls that scope data to your household, and least-privilege access for administrators. No system is perfectly secure, but we review these measures regularly.

We use essential cookies and browser local storage to keep you signed in, remember your plan selection, and remember dismissed prompts and notification preferences. These are required for the Service to work. We do not use advertising cookies. You can clear cookies and local storage in your browser settings, but doing so will sign you out.

We may update this notice. Material changes will be announced in the Service or by email, and the "last updated" date above will change.