← Back to PAR

Privacy Policy

Last updated: April 19, 2026

1. Who we are

PAR ("we," "us," or "our") is a personal productivity and family coordination application. To contact us about privacy matters, email us at hello@get-on-par.app.

By using PAR, you agree to the collection and use of information as described in this policy. If you do not agree, please discontinue use of the service.

2. Information we collect

Account information. When you sign up, we collect your email address and any profile information you choose to provide (name, avatar).

Calendar data. If you connect Google Calendar, Apple Calendar (iCloud), or Microsoft 365 / Outlook, we access your calendar events to display them in the app, create new events on your behalf, and keep your calendars in sync. We store event data in our database to power the unified calendar view.

Email data. With your explicit permission, we scan your Gmail inbox (and any additional Google accounts you connect) for event-like messages — meeting invitations, travel confirmations, and similar content. We do not store raw email content. We extract structured event details (title, date, time, location, description) and store only that derived data.

Child profile data. If you create child profiles, you may enter sensitive information including medical history, allergies, medications, insurance details, emergency contacts, and documents. This data is stored securely and is never shared with third parties except as needed to operate the service (e.g., backup to our database provider).

Contact and people data. You may add contacts, import from Google Contacts, or create entries manually. This data is stored in your account and used to populate event invitees and CRM features.

Billing and payment data. If you subscribe to a paid plan, payment processing is handled entirely by Stripe. We do not store your credit card number, bank details, or other full payment credentials. We store only the Stripe customer ID and subscription metadata (plan tier, subscription status, trial end date) needed to manage your access to paid features.

Usage data. We collect limited usage information such as which features you use, error logs, and performance metrics. This data is used to improve the product and is not sold or shared.

OAuth tokens. When you connect third-party services (Google, Apple, Microsoft, Zoom, Slack), we store the access and refresh tokens needed to maintain the connection. Tokens are stored encrypted and are used only to perform the sync actions you have authorized.

3. How we use your information

  • To provide and operate the PAR service, including syncing your calendars and scanning your email for events.
  • To process payments, manage your subscription, and enforce access to paid features.
  • To send you transactional emails such as event invitations, RSVP notifications, task delegation alerts, and billing receipts.
  • To improve the product through aggregated, anonymized usage analytics.
  • To respond to your support requests and communicate about the service.
  • To enforce our Terms of Service and comply with legal obligations.

We do not sell your personal data. We do not use your data to train AI models. We do not display advertising.

Google API data. PAR's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: data received from Google APIs is used only to provide and improve the features described in this policy; it is not used for serving advertisements, not shared with third parties except as necessary to operate the service, and not used for any purpose that the user has not consented to.

4. Third-party services and data sharing

We use the following third-party services to operate PAR. By using the app, you acknowledge that data may be processed by these providers under their respective privacy policies:

  • Supabase — database and authentication (supabase.com/privacy)
  • Vercel — application hosting and edge functions (vercel.com/legal/privacy-policy)
  • Stripe — payment processing and subscription management (stripe.com/privacy)
  • Resend — transactional email delivery (resend.com/legal/privacy-policy)
  • Google — Calendar sync, Gmail scanning, and Contacts import (policies.google.com/privacy)
  • Microsoft — Outlook Calendar sync via Microsoft Graph API (privacy.microsoft.com)
  • Apple — iCloud CalDAV calendar sync (apple.com/legal/privacy)
  • Zoom — meeting creation and import (zoom.us/privacy)
  • Slack — event notifications and message scanning (slack.com/privacy-policy)

We do not share your personal data with any other third parties except when required by law or as part of a business transfer (e.g., merger or acquisition), in which case we will notify you in advance.

5. Caregiver share links and RSVP links

PAR allows you to generate time-limited share links for child profiles and event RSVPs. These links grant temporary, read-only access to specific data without requiring the recipient to create an account. You control which data is shared and can revoke links at any time from the app.

We are not responsible for how recipients of share links handle the information you choose to share with them.

6. Data retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

OAuth tokens for disconnected integrations are deleted immediately upon disconnection.

Calendar events and contacts imported from third-party services are deleted from our database when you disconnect that integration or delete your account.

7. Security

We use industry-standard security measures including encrypted connections (TLS), encrypted storage for sensitive tokens, and row-level security on all database tables to ensure users can only access their own data.

Despite these measures, no system is perfectly secure. We cannot guarantee absolute security and encourage you to use a strong, unique password and to revoke third-party connections you no longer use.

8. Your rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Request deletion of your data ("right to be forgotten").
  • Object to or restrict certain processing.
  • Export your data in a portable format.

To exercise any of these rights, email us at hello@get-on-par.app. We will respond within 30 days.

9. Children's privacy and COPPA compliance

Who this applies to. PAR supports child accounts for users aged 10–17. These accounts are created and managed exclusively by a parent or legal guardian — children cannot self-register. This section explains how we handle children's data in compliance with the Children's Online Privacy Protection Act (COPPA) and applicable law.

Parental consent. Before creating a child account, the parent or guardian must provide verifiable parental consent by completing a consent acknowledgment within the app. By creating a child account, you represent that you are that child's parent or legal guardian and that you consent to PAR collecting and using the child's data as described in this policy. We do not create child accounts based on self-reported age by the child.

What we collect for child accounts. For child accounts we collect: the child's display name, date of birth, a hashed device PIN (we cannot reverse or recover the original PIN), and the same calendar and task data collected for adult accounts to the extent the parent enables those features. We also store the parent's user ID as the account manager. We do not collect email addresses from children (child accounts use a system-generated internal address that is never visible to the child).

How we use children's data. Children's data is used solely to provide the PAR service as directed by the parent. We do not display advertising to child accounts. We do not build behavioral profiles of children for any commercial purpose. We do not share children's personal data with third parties except as strictly necessary to operate the service (e.g., our database and hosting providers) and never for marketing or advertising purposes.

Parental rights and controls. As the parent or guardian, you have the right at any time to: review the personal information collected about your child by contacting us at hello@get-on-par.app; direct us to delete the child's personal information; and refuse to permit further collection of the child's information by removing the child account from your family group (which de-activates the account). You can remove a child account at any time from the Family section of your account settings. Upon removal, the child's personal data is deleted from our systems within 30 days.

Age limits. Child accounts are available for children aged 10–17. We do not knowingly collect personal data from children under 10. If we learn that we have inadvertently collected data from a child under 10, we will delete it immediately. When a child turns 18, their account does not automatically change — the parent remains in control until an explicit account migration is requested.

Contact for children's privacy. For questions or requests related to children's data, including requests to review or delete a child's information, contact us at hello@get-on-par.app. We will respond within 30 days.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, for material changes, notify you via email or an in-app notice. Continued use of the service after changes are posted constitutes acceptance of the updated policy.

11. Contact

For privacy questions, data requests, or concerns, contact us at hello@get-on-par.app.

Terms of Service · Privacy Policy · PAR