PRIVACY
Badgeplex, an Ontario, Canada sole proprietorship (“Packplexity,” “we,” “us,” or “our”), operates the Packplexity mobile application, website, and related services. This Policy explains how we collect, use, disclose, retain, and protect personal information.
We may collect your display name, email address, internal account identifier, profile colour, profile image, authentication provider, and authentication-related records. When you sign in with Apple or Google, we receive the information that provider makes available according to your choices. We do not receive your Apple or Google password.
Personal lists that are not shared may be stored in the app’s local database on your device. Custom templates and item reminders are also stored locally. Removing the app or clearing its data can remove local-only information before it has been shared or otherwise synchronized.
To provide cloud collaboration we process list names, dates, colours, sections, items, quantities, statuses, completion state, responsibility and assignments, participants, invitations, comments, messages, reactions, reminders represented in shared item data, and activity history. Some of this information is intentionally visible to other people on the same list.
When you request an AI list, we process your description and optional trip dates, activities, participant context, and the generated response. We send the content needed for generation to OpenAI. We do not send your raw Packplexity account ID; we send a one-way hashed safety identifier for abuse prevention. Our API request disables OpenAI response storage. Do not include sensitive information that is unnecessary for your request.
Apple processes iOS payments. We receive product identifiers, transaction identifiers, subscription and entitlement status, renewal or expiration details, and validation information needed to provide purchases and prevent duplicate or fraudulent crediting. We do not receive full payment-card details.
We may process app version, operating system, device platform, push-notification token, notification preferences, security and network information, and service logs. Firebase Analytics records limited app-usage events such as screen routes, notification interactions, and Live Activity feature events, associated with a pseudonymous account identifier where available. Advertising identifier support is disabled.
When you submit a website form, we collect the name, email, category, platform, message, confirmation, and optional user ID you provide. Formspree processes the submission so it can be delivered to us.
We use information to create and authenticate accounts; provide and synchronize lists; manage participants, assignments, messages, and notifications; generate AI content; deliver subscriptions and credits; provide reminders and system integrations; prevent fraud and abuse; diagnose and improve reliability; respond to support and privacy requests; and meet legal obligations.
Other members of a shared list may see your display name, profile image and colour, assignments, completion activity, comments, reactions, and other contributions. A list owner can invite or remove participants. Do not put information in a shared list that you do not want those participants to see.
Location access is optional and used when you create or trigger a location reminder. Reminder coordinates and labels are kept in the app’s local database and scheduled through device services; Packplexity does not upload those reminder coordinates to its backend or use them for advertising. Apple or Google operating-system location and geocoding services may process a location or search request under their own policies.
If you enable biometric quick login, Face ID, Touch ID, or Android biometric matching is performed by your device. Packplexity receives only the authentication result, not your biometric data. A protected sign-in credential is stored in the device’s secure storage.
We disclose information only as needed to operate the Service, at your direction, or where legally required. Significant providers include:
Providers process information under their own terms and privacy commitments and only receive information relevant to their function. We may also disclose information to comply with law, protect users or the Service, investigate abuse, or complete a business reorganization subject to appropriate safeguards.
We do not sell or rent personal information to advertisers or data brokers. Packplexity does not display third-party advertising and does not use personal information for third-party targeted advertising or cross-app tracking.
Optional permissions such as notifications, photos, camera, location, and biometrics can be declined or changed in device settings. You can adjust Packplexity notification categories in the app. Withdrawing a permission may prevent the corresponding feature from working. You may contact us to withdraw consent where applicable, subject to legal or contractual restrictions.
Account and synchronized collaboration information is generally retained while your account or the relevant shared list remains active. AI job requests and results in our generation queue are configured to expire after approximately 24 hours, and short-lived AI rate-limit records after approximately 48 hours. Generated list content becomes ordinary list data after creation. Website form submissions are retained only as long as reasonably necessary to respond, document the request, prevent abuse, or comply with law.
Purchase and limited security, fraud-prevention, accounting, dispute, or legal records may be kept for longer where necessary. Service logs, analytics, and backup copies expire according to operational settings and provider lifecycle schedules. Local-only data remains on your device until removed in the app, cleared, or deleted with the app.
You can delete your account directly in Packplexity Settings or submit the account deletion form. Account deletion removes your Packplexity profile, devices, entitlements, profile image, lists you own, and your membership and participant record from lists owned by others. Because collaborative messages and activity form part of another owner’s shared history, prior contributions may remain without an active account profile where needed to preserve that record.
Deletion also clears Packplexity account data from the app’s local database. Information we must retain for legal, transaction, fraud-prevention, security, or dispute purposes may remain for the necessary period. Deleting your account does not cancel an App Store subscription; manage subscriptions separately through Apple.
You may request access to personal information under our control, correction of inaccurate information, or information about our practices, subject to legal exceptions. Submit a privacy request. We may verify your identity before fulfilling a request.
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, including encrypted connections, managed authentication, access controls, private cloud storage, and device secure storage where appropriate. No electronic system is completely secure, so we cannot guarantee absolute security.
Core collaboration infrastructure is configured in Canada, but some providers—including Apple, Google/Firebase, OpenAI, Formspree, and portions of AWS—may process information in the United States or other jurisdictions. Information may therefore be subject to the laws and lawful-access rules of those locations. We remain responsible for personal information under our control as required by applicable law.
Packplexity is a general-audience organization app and is not directed to children under 13. Adults may create local participant profiles representing family members, including children, without creating an account for them. If you believe a child has created an account or provided personal information without required guardian consent, contact us for review.
We may update this Policy as the Service, providers, or legal requirements change. We will revise the date above and provide additional notice or seek consent when required for a material change.
Privacy questions, complaints, access or correction requests, consent withdrawals, and deletion requests can be submitted through our contact form. Account deletion requests can also use the dedicated form.
Privacy Officer
Badgeplex / Packplexity
Ontario, Canada
We will review and respond in accordance with applicable law. If we cannot resolve a Canadian privacy concern, you may contact the Office of the Privacy Commissioner of Canada.