Privacy Policy

Last updated: April 16, 2026

1. What we collect

When you create an account we store your name, email address, and (if you sign in with Google or Facebook) your profile photo. When you use GroupDex we store the family directory data you enter: people, households, addresses, phone numbers, birthdays, relationships, and messages you send through the platform.

2. How we use it

Your data is used solely to provide the GroupDex service: organizing your family directory, sending messages and reminders you request, and generating printed directories. We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. Third-party services

We use the following services to operate GroupDex:

  • Supabase — authentication and database hosting
  • Vercel — application hosting
  • Resend — transactional email delivery
  • Twilio — SMS delivery (only to people with explicit consent)
  • Stripe — payment processing (when billing is active)
  • Google / Facebook — optional social sign-in (we receive your name, email, and profile photo only)

Each service processes data under its own privacy policy. We transmit only the minimum data required for each service to function.

4. SMS consent

We only send SMS messages to people who have given express written consent through our TCPA-compliant intake flow. You can revoke consent at any time from the person detail page or by replying STOP to any message.

5. Data retention

Your data is retained for as long as your account is active. If you delete your account, we remove your personal data within 30 days. Audit logs required for legal compliance may be retained longer.

6. Your rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us at the email below. If you signed in with Facebook, you can also request deletion through your Facebook app settings.

7. Data deletion

To delete your GroupDex account and all associated data, visit Settings in the app or contact us directly. We will process deletion requests within 30 days.

8. Cookies

We use essential cookies for authentication (session tokens). We do not use tracking cookies or analytics cookies.

9. Children

GroupDex is designed for families and may contain information about minors entered by their parents or guardians. We do not knowingly collect data directly from children under 13. All minor data is entered and managed by adult family members.

10. Contact

For privacy questions or data requests, email privacy@groupdex.app.