Privacy Policy

Who we are

Packtivity ("we," "us," "our") is operated by Hashalias LLC. We operate the website at packtivity.app and provide a platform that makes themed, printable activity packs including coloring pages, word searches, mazes, and crosswords.

What we collect

Account information

When you sign in with Google, we receive your name, email address, and profile photo from Google's OAuth service. We store this to identify your account, display your name in the app, and communicate with you about your subscription. We do not receive or store your Google password.

Pack prompts and generated content

When you make a pack, we process the theme you type, the occasion you select, and the age range you choose. This data is sent to Google's Gemini API to produce your activities. Prompt text is retained for the duration of your pack session (up to 24 hours) and then automatically deleted from our session storage. If you save a pack to your account, the prompt and generated content are retained in our database and file storage for up to 30 days, or until you delete your account.

Payment information

Payments are processed by Stripe. We do not see or store your full credit card number. Stripe provides us with a customer ID, the last four digits of your card, and transaction metadata (amount, date, subscription status). See Stripe's privacy policy for how they handle your payment data.

Automatically collected data

We collect your IP address (hashed, not stored in raw form) for rate limiting and abuse prevention. We use Cloudflare for bot detection, which may collect device and browser characteristics. We set the following essential cookies:

• Authentication cookie: Keeps you signed in. Encrypted, secure, and expires after a period of inactivity.
• Security cookie: Protects against cross-site request forgery. Expires after 24 hours.
• Age confirmation cookie: Records that you have confirmed you meet the minimum age requirement. Expires after 1 year.

What we do not collect

We do not use Google Analytics, Facebook Pixel, or any third-party tracking scripts. We do not sell, rent, or share your personal information with advertisers. We do not build advertising profiles. We do not track you across other websites.

How we use your data

• To make and deliver your activity packs.
• To process payments and manage your subscription.
• To enforce rate limits and prevent abuse.
• To screen content for safety (all prompts and generated content pass through a safety pipeline before delivery).
• To respond to your support requests or content reports.
• To improve the product (we may analyze aggregate, anonymized usage patterns such as which activity types are most popular).

Third-party services

We use the following third-party services to operate Packtivity:

• Cloudflare: Hosts the application, stores data, and provides bot protection. Data is processed on Cloudflare's global network. See Cloudflare's privacy policy.
• Google: We use Google's AI services to produce activity content and images. We use the paid tier, which does not use customer data for model training by default. See Google's privacy policy.
• Stripe: Processes payments. See Stripe's privacy policy.
• Fonts: We self-host the Nunito typeface. No third-party font services are used. Font files are served from our own infrastructure with no external requests.

Children's privacy (COPPA compliance)

Packtivity is designed for adults (parents, teachers, caregivers) to create content for children. It is not intended for use by children under 13.

• We require age confirmation (13 or older) before any content is generated, even without an account.
• We do not knowingly collect personal information from children under 13.
• Children's names or ages that appear in prompts (e.g., "dinosaur party for Emma, age 5") are used solely for content generation. They are not stored in user profiles, analytics databases, or marketing systems. Prompt data is automatically purged within 24 hours of session end.
• If you believe a child under 13 has provided us with personal information, please contact us at the email below and we will delete it promptly.

Data retention and deletion

• Pack sessions: Automatically deleted shortly after your session ends.
• Saved packs: Retained for up to 30 days from creation, then automatically expired.
• Account data: Retained as long as your account is active. You can delete your account at any time from the Account settings page. Deletion removes all your data from our database and file storage, cancels any active subscription, and is irreversible.
• Payment records: Retained by Stripe according to their data retention policy and applicable financial regulations. We cannot delete Stripe's copy of transaction records.
• Hashed IP addresses: Stored temporarily in rate-limiting counters with automatic expiration. We never store raw IP addresses.

Data security

All data is transmitted over encrypted connections (HTTPS). We use industry-standard measures to protect your data, including secure cookie configuration, cross-site request forgery protection, and cryptographic verification of third-party communications. We do not store passwords (authentication is handled through Google's OAuth service).

Your rights

You may request a copy of your data, correction of inaccurate data, or deletion of your data at any time by contacting us at the email below or by using the delete account feature in your account settings. We will respond to requests within 30 days. If you are in the European Economic Area, you have additional rights under the GDPR including the right to data portability and the right to lodge a complaint with a supervisory authority.

Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you by updating the "Last updated" date at the top of this page. Your continued use of Packtivity after a change constitutes acceptance of the updated policy.

Contact

For privacy questions, data requests, or concerns, email us at privacy@packtivity.app.