Privacy Policy

1. What this policy covers

This policy describes how Bay Tech Ltd. (“we”) collects, uses, and shares personal information through the CommunATI Android application (“CommunATI”), the website at communati.ca, and the application at app.communati.ca.

2. Information we collect

• Account information: email address (required to sign in via magic-link).
• Family profile information (optional): first names and age band of registered children. No surnames, school names, or dates of birth are required.
• Region (optional): a coarse region (e.g. “Winnipeg”, “Brandon”) you supply to filter nearby programs. We do not request or use precise device location.
• Project Showcase uploads (optional): photos or short clips you submit for the public showcase. All uploads are reviewed before public display.
• Operational logs: request timestamps, IP address, and error traces for security and troubleshooting. Retained no longer than 30 days.

3. What we do NOT collect

• Precise location.
• Contacts, SMS, microphone audio, calendar, or health data.
• Advertising identifiers. CommunATI does not show ads in v1.
• Financial or payment information. v1 has no in-app purchases.

4. How we use information

• To authenticate sign-in (magic-link).
• To show program listings, the community map, and your family feed.
• To accept and moderate Project Showcase uploads.
• To send service notifications (e.g. upcoming session reminders) via push, only after you opt in.

5. How we share information

We do not sell personal information. We share data only with:

• Supabase (Auth, Postgres, Storage, Realtime), our infrastructure provider — region ca-central-1. See supabase.com/privacy.
• Member organizations — when you register a child for a program, the organization running that program receives the registration record (child first name, age band, parent contact email).
• Law enforcement — only when required by valid legal process.

6. Your choices

• Access / correction: email hello@communati.ca.
• Account deletion: available in-app at Profile → Settings → Delete Account, or at communati.ca/account/delete. Account, family profile, registrations, follows, and uploads deleted within 30 days.
• Notification opt-out: Profile → Notification preferences, or system Settings.

7. Children’s privacy

CommunATI is intended for parents and guardians. Children may be present in a household account but do not hold their own account. Child information stored in a family profile is limited to first name and age band. We do not knowingly collect any other information from children under 13.

8. Security

Data in transit is encrypted with TLS. Data at rest is encrypted by our infrastructure provider. Access to production data is restricted to authorized Bay Tech personnel via Supabase IAM.

9. Changes to this policy

We will post material changes at this URL and update the effective date. Continued use after a change constitutes acceptance.

10. Contact

Privacy questions: hello@communati.ca.