Privacy Policy

• Account information. Your name, email address, and password (stored hashed, never in plain text). If you sign in with Google, we receive your name, email, and profile image.
• Group content. Bundles you create or join, collections, sign-ups, RSVPs, messages, posts, expense entries, and the amounts and notes you record.
• People you manage. If you sign up on behalf of someone else (a child, partner, parent, or friend), we store the display name and any notes you add.
• Usage data. Anonymous page views, referrers, and interaction events used to understand which parts of Bundle are confusing.

Bundle does not process, hold, route, or touch money. When a group collects funds, the organizer shares their own payment handle (Venmo, Zelle, Cash App, PayPal, or written instructions) and members pay the organizer directly through that service.

We never receive card numbers, bank account details, or payment credentials. What we store is a bookkeeping record: an amount, a method name, an optional note, and who marked it recorded — nothing that can move money.

• To run the features you asked for: showing your bundles, tracking who has responded, and keeping the organizer's ledger straight.
• To send transactional email — invitations, sign-in links, and notifications you have enabled.
• To improve Bundle by looking at aggregate usage patterns.

We do not sell your information, and we do not run advertising on Bundle.

• Group members see the bundle's shared content: open requests, sign-up slots, RSVPs, and posts.
• Contribution amounts on a collection are visible to the organizer. Other members see anonymous totals ("18 of 22 recorded"), not individual amounts.
• Email addresses are visible to the bundle's organizers, not to other members.
• Direct messages are visible only to the sender and the recipient.

Bundle runs on managed cloud infrastructure for hosting, database storage, authentication, and email delivery. These providers process data on our behalf under their own security commitments and are not permitted to use it for their own purposes.

We keep your account and group content while your account is active. You can ask us to delete your account and associated personal data at any time by emailing the address below. Content you posted into a shared bundle may remain visible to that group in anonymized form so the organizer's records stay coherent.

• Update your name and profile details from your profile page.
• Turn notification emails on or off in your notification preferences.
• Request a copy of your data, or its deletion, by email.

Bundle accounts are for adults. Organizers often manage sign-ups on behalf of children, but children do not create accounts, and we ask that you only add the minimum detail needed (usually a first name).

Questions about this policy or a data request: hello@bundlecommunity.com.