Beta
Privacy Policy
Beta draft for the free private beta, not the final version. Highlighted [[blanks]] are still being filled in.
Contact: averyromain07@gmail.com
Last updated: October 6, 2026
Ourdays ("we", "us") is a family day-out planner at ourdays.ca, made in British Columbia. It's run by Avery Romain, and it's in a free private beta. This policy explains what we collect, why we collect it, where it's stored, and what you can ask us to do with it. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, where it applies, BC's Personal Information Protection Act (PIPA).
Privacy contact: Avery Romain, averyromain07@gmail.com. We aim to reply within 30 days.
1. What we collect
We collect only what Ourdays needs to plan your family's days out.
| What | Examples | Why |
|---|---|---|
| Account details | Email address, password (stored hashed by our auth provider; we never see it), first and last name | To sign you in and greet you |
| Family setup | Family name, number of adults, children and seniors, children's ages | To suggest age-appropriate places and estimate per-person prices |
| Location | Your town, postal code or address, and the map coordinates we work out from it. If you tap "Use my current location", your device's location at that moment | To find real venues inside your driving range and work out real distances. Your exact address is never shown to other users |
| Accessibility needs | E.g. stroller-friendly, wheelchair accessible, sensory-friendly, service animals | To hide venues confirmed not to meet a need and to flag unconfirmed ones. This can be sensitive, so we use it only for matching |
| Preferences | Interests, vibe, indoor/outdoor mix, travel radius, trip length, vehicle type, ferry preference, preferred days and times, "avoid" notes | To rank suggestions |
| Budget | Your weekly activity budget and the costs of things you plan | To keep your running weekly total |
| Plans and calendar | Activities you save, add, accept or schedule; dates, times and notes | To show your shared family calendar |
| Ratings | Ratings and optional notes on activities and days | To improve your future suggestions. Ratings are private to your family |
| Family circle and invites | Names you add for family members (children don't need an account), and the email or phone number of anyone you invite | To share your calendar with people you choose. We use an invitee's details only to send that invitation |
| Referral links | Whether someone signed up through your link | To count referrals |
| Basic usage events | E.g. "viewed activity", "accepted plan" | To understand which features work, linked to your family and not sold or shared |
| Feedback | Whatever you send us through the feedback form or email | To fix bugs and improve the beta |
We do not collect payment details during the beta (nothing is charged), we don't sell your information, we don't use advertising trackers, and we don't build marketing profiles.
2. Where it's stored and who helps us
| Provider | What they do | Where |
|---|---|---|
| Supabase | Database and sign-in (accounts, family data, plans) | Canada (AWS ca-central-1, Montréal) |
| Vercel | Hosts the website and runs the app's server code | United States (Vercel serverless / edge network; confirm the project region in the Vercel dashboard) |
| Photon (Komoot) | Turns the town or address you type into map coordinates | Germany (EU) |
| OSRM routing | Works out driving distances and times from your home area to venues | Public OSRM demo server (fine for a small beta; replace before a wider launch) |
| Google Places | Venue details and photos. We send venue lookups, not your personal details | United States |
| Google Fonts | Loads the website's fonts (your browser's IP address reaches Google) | United States |
| Supabase Auth email | Sends sign-up confirmation and password-reset emails | United States via Supabase Auth email (moving to Resend custom SMTP for the beta) |
| Tally (feedback form) | Collects beta feedback you choose to send | Location per Tally's data-processing terms (confirm when the feedback form is live) |
Some of these providers process data outside Canada, where local laws may allow authorities to access it. We pick providers that protect data under contract, and we send each one only what it needs.
3. Who can see your information
- You and the people you invite into your family circle can see your family's calendar and plans. Private calendar events are visible only to the person who created them and the family owner.
- Other families can't see your data. The database enforces this with row-level security.
- We (the Ourdays team) can access data only to run, support or fix the service.
- We'll disclose information only if the law requires it.
4. How long we keep it
- We keep your account and family data while your account is open.
- When you delete your account in the app, your account and family data are deleted right away. If you ask us by email instead, we delete your personal information within 30 days, except where the law requires us to keep it.
- At the end of the private beta, we'll tell testers what happens to beta accounts before anything changes.
5. Your choices and rights
You can:
- See and change most of your information yourself on the Family and Profile pages.
- Ask for a copy of your information.
- Delete your account yourself: open the account menu, choose Delete account, and confirm. That removes your sign-in and your family's data straight away.
- Ask us to correct or delete your information, or ask for help deleting your account, by emailing averyromain07@gmail.com from your account email.
- Withdraw consent (for example, remove your location or accessibility needs). Some features won't work without the information they need.
- Complain to us first, and then if you need to, to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or the Office of the Information and Privacy Commissioner for BC (oipc.bc.ca).
6. Children
Ourdays is for parents and guardians. Children don't get accounts. A parent may enter a child's first name and age so we can suggest suitable places. That information is visible only to the parent's family circle. Please don't add more about your children than the app asks for.
7. Security
We use encrypted connections (HTTPS), hashed passwords, and database rules that keep each family's data separate. No system is perfect. If a breach puts you at real risk of significant harm, we'll tell you and the Privacy Commissioner as PIPEDA requires.
8. Changes
We'll update this page, change the "Last updated" date, and email beta testers about any significant change.