Operator and contact
BayitBridge is operated by Abraham Katz. For privacy, support, access, correction, export or deletion requests, contact Katz.Abraham.J@gmail.com. Adults can also initiate account deletion in Privacy & security > Delete account and personal data, or at bayitbridge.com/account-deletion.
Information collected and purposes
We store name and email, sign-in and terms-acceptance records, family membership, information adults enter about children, calendars, decisions, expenses and support-payment records, private notes, messages and edits, selected files, voice notes, consented call recordings and transcripts, notification/device identifiers, optional foreground check-in location and operational/security reports. We use these to operate and secure the service, deliver requested notifications, support users and comply with law. We do not sell personal data, run advertising or track users across other apps.
Family access and children
The service is intended for adult parents, guardians and invited adult helpers, not children’s accounts. Adults should enter only information they are authorized to share and need for coordination. Active parents can access shared family records; private journals stay with their creator. Helpers and emergency access are limited by approval, scope and expiry. Deleting an account does not delete another parent’s unrelated content or account.
Permissions
Location is requested only for a foreground check-in; there is no background tracking. Opening calendar import reads local entries for selection; only selected entries are uploaded. Calendar subscription feeds are read-only and revocable. Microphone and camera are used for deliberately initiated voice notes or calls; photo/file access is for selected uploads. Contacts are not requested.
Service providers and transcription
Our privately hosted API, PostgreSQL database, LiveKit calling service and Whisper transcription service process family records, call media and voice notes. The public website is hosted through OpenAI Sites and its hosting infrastructure. Resend handles sign-in and transactional email, receiving the destination address and necessary email content. Apple Push Notification service and, when configured, Google Firebase Cloud Messaging deliver device notifications and receive device tokens and notification payloads. Optional flight-status requests go to the configured flight-information provider for itinerary flight details. Resend states that email and delivery-log data expires after 30 days on its standard plans; such delivery records can remain until that provider retention ends after we erase the live account. Providers’ processing must follow their applicable agreements. Tone suggestions run as rules on the device; generative AI is separately disabled until its provider and data flow are disclosed.
Retention and deletion
Account content is kept while the account is active until removed under the service’s controls or a valid deletion request. Ordinary edits preserve prior message versions. Confirmed account deletion is processed automatically, normally within minutes and no later than 30 days unless a specific documented legal preservation obligation applies. It removes the account, authentication/device access, private content, uploaded files and associated shared content, including messages and revisions; joint call recordings containing the departing participant are removed. A family with no remaining parent is removed. Other parents’ unrelated records and shared child profiles in their continuing family are preserved. Sharing alone is not a retention exception. Any legally required hold must specify authority, scope and expiry and will be explained to the requester where legally permitted.
Recordings, security logs and backups
Call recordings and their stored transcripts normally expire after 30 days; voice-note audio and transcripts follow the associated message/account retention. Account-linked security records and terms-acceptance receipts are retained while the account is active and removed with ordinary account deletion unless a documented legal hold applies. Routine encrypted database snapshots are removed by daily cleanup after more than 14 full days. Earlier snapshots may still contain deleted rows until expiry; a separate minimal deletion ledger prevents them from being restored into the live service. That ledger contains account/request identifiers and processing timestamps, not family content, and is retained while restoration could resurrect an erased account. Copies downloaded by other participants are outside our control.
Security and your choices
Connections are encrypted in transit; database backups are encrypted. Access is scoped to family roles and current membership. Recording storage is not currently encrypted at rest; do not assume end-to-end encryption. No system is perfectly secure. You may control non-essential notifications, revoke calendar feeds and helper access, and contact us to exercise applicable privacy rights. Essential account/security messages may still be sent. Additional rights depend on where you live; mandatory rights are not waived by these Terms.