Privacy Policy

Bob Van LLC owns and operates GroupDex. This Privacy Policy explains how we collect, use, store, and protect information when you use GroupDex websites, apps, and services.

When you create an account, GroupDex stores account information such as your name, email address, authentication identifier, and optional profile photo. When you use the service, we store the family directory information you or your group members enter, including people, households, addresses, phone numbers, email addresses, birthdays, anniversaries, relationship details, photos, lists, tasks, messages, import records, and print settings.

If you enable browser or mobile notifications, we store the push subscription or device token needed to deliver those notifications. If you use imports, the imported data is staged before it is committed to the directory.

• To provide private family directories, household organization, lists, reminders, messages, and print/export tools.
• To authenticate users, maintain sessions, and protect group access.
• To send transactional emails, notifications, reminders, and messages requested by group admins or members.
• To operate billing, support, abuse prevention, auditing, and security controls.
• To understand aggregate product usage and improve the reliability and usability of GroupDex.

We do not sell, rent, or share personal information for third-party advertising.

We use service providers to operate GroupDex:

• Supabase for authentication, database hosting, storage, and related backend services.
• Vercel for application hosting and delivery.
• Resend for transactional email delivery.
• Twilio only for SMS features where explicit consent is present.
• Stripe for billing and payment processing when billing is active.
• Google Analytics for aggregate product and website usage measurement.
• Google and Facebook for optional social sign-in, when enabled by the user.
• Expo and web push services for push notifications when enabled by the user.

Each provider processes data under its own terms and privacy policy. We send only the information needed for the requested service.

GroupDex uses essential authentication/session storage so users can remain signed in and access their private groups. This includes Supabase browser session storage and a server-readable authentication cookie used by GroupDex API routes. These are required for the service to work.

GroupDex also uses Google Analytics cookies for aggregate product and website usage measurement. We do not use advertising cookies, retargeting pixels, or sell/share personal information for third-party advertising. See the Cookie Policy.

GroupDex can send messages, reminders, and activity notifications through in-app notifications, email, push notifications, and SMS where configured. Browser and mobile push notifications require device-level permission. SMS messages require explicit consent before GroupDex sends outbound SMS.

GroupDex keeps account and directory data while your account or group remains active, unless deletion is requested or required. Some audit, billing, security, and legal records may be retained longer when needed for compliance, dispute resolution, abuse prevention, or service integrity.

To request deletion, contact privacy@groupdex.app.

You can update much of your directory information in the app. You may request access, correction, export, or deletion of personal information by contacting us. Depending on where you live, you may have additional privacy rights, including rights to know, delete, correct, or opt out of certain uses of personal information.

GroupDex is designed for adult family members and trusted group admins to manage family contact information, which may include information about minors. We do not knowingly collect information directly from children under 13. Minor information should be entered and managed by a parent, guardian, or authorized family administrator.

GroupDex uses technical and administrative safeguards to protect family data. See the Security page for a summary of current protections and vulnerability reporting.

For privacy questions or data requests, email privacy@groupdex.app.