Privacy Policy

2. Children's Privacy (COPPA)

Protecting the privacy of young children is especially important. The BYF App is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13 without verifiable parental consent.

If you are a parent or guardian and believe we might hear have any information from or about a child under 13, please contact us immediately at privacy@bchyouth.space so we can remove that information.

3. How We Use Your Data

We use your data for the following specific purposes:

• Service Provision: To create and manage your account, store your setlists, and facilitate team coordination.
• Communication: To send you inevitable service notifications (e.g., password resets, assignment updates, security alerts) and optional updates (via Resend/Firebase).
• Optimization: To understand how the app is used (via Vercel Analytics) and to identify and fix crashes (via Sentry).
• Security: To detect and prevent fraudulent activity or abuse of our services.

4. Third-Party Service Providers

We trust the following third-party providers to power our infrastructure. Each provider is carefully selected for their security standards. By using our app, you acknowledge that your data may be processed by these parties, subject to their own privacy policies.

5. AI & Machine Learning

We utilize Machine Learning technologies to assist with features like chord generation:

• Anonymization: All personal identifiers are removed before data is used for training. The AI analyzes musical patterns (e.g., chord progressions) without linking them to specific users.
• Permanent Learning: Once the AI learns a pattern, that knowledge becomes part of the model. This aggregated learning cannot be isolated or deleted, even if the original source data is removed.
• No Personal Data Training: We strictily do NOT use your messages, emails, or personal profile data to train our generative models.

6. Operational Logging & Recovery

• Dev Email Logs: Outbound operational mail sent from the dev workspace is logged for auditability, troubleshooting, and abuse prevention.
• Setlist Trash: Deleted setlists are moved to a recoverable trash state before permanent deletion to reduce day-of service disruption.
• Restricted Access: Dev-only tools and recovery actions are role-gated and monitored through authenticated access controls.

7. Your Rights & Data Portability

You have full control over your data. You have the right to:

• Access: Request a copy of all data we hold about you.
• Correction: Fix any inaccurate or incomplete data in your profile.
• Deletion: Delete your account at any time. Upon deletion, your direct personal data is removed from our active databases. However, anonymized musical patterns previously used to train our AI models are retained as part of the system's aggregated knowledge. Certain operational records (e.g., abuse/security audit logs) may be retained for a limited period where required for legal, safety, or incident-response purposes.