Privacy
Last updated: May 5, 2026
Backpacked is a school-admin tracker for parents. We're a small team. We collect the minimum we need to make the product work. We don't sell data, we don't run ads, and we don't connect to your inbox.
If you sign in, we store your email address, your kids' first names and grades, and the events you save. If you forward an email or share a photo for AI extraction, that content is sent to our AI provider (OpenAI or Anthropic) for one-shot processing and isn't used to train any model. We use Firebase for sign-in and Crashlytics for crash reports. That's it. Delete your account from the You tab and everything we have on you is gone within minutes.
Account data. When you sign in with Apple, we receive your email address (which Apple may give us as a relay address — that's fine). We use this to identify your account and send you the night-before notification email if you opt in.
Children's data. First names and grade levels you enter. We do not collect last names, dates of birth, photos, or any identifying information about your kids. We do not knowingly collect data from anyone under 13. The parent enters and controls all child information.
Event content. Anything you type into the app or forward to us — event titles, action items, dates, kid tags. This stays on our server until you delete it.
AI extraction inputs. When you forward an email or upload a photo to the Capture flow, that content is sent to our AI provider (OpenAI or Anthropic) so the model can extract the structured event. The AI provider's terms (with us) prohibit training on this content. We delete the original after extraction.
Device data. If you enable push notifications, we store your Apple Push token (FCM token). Used only to send the night-before reminder.
Diagnostics. Anonymous crash reports via Firebase Crashlytics. No personal data is included.
Our database is hosted in Hostinger (EU). Sign-in is handled by Firebase Authentication (Google, US). AI extraction is processed by OpenAI or Anthropic depending on your region. Crashlytics aggregates crash reports anonymously. None of these subprocessors see your kids' names or your event content beyond what's needed for their specific job.
The backpacked.app marketing website (the page you're reading right now, plus the home page) uses Microsoft Clarity for anonymous session replay and heatmap analytics. Clarity records mouse movements, clicks, and scroll behavior on the site so we can see which sections actually help people understand the product. It does not collect personal information you don't enter into a form, and it does not run on the inside of the iOS app — only the website. You can opt out by enabling "Do Not Track" or by using a content blocker. Microsoft's privacy statement covers what they do with the data on their end.
You can delete your account from the You tab inside the app. This permanently removes your account, every kid you added, every event, every uploaded image, and every device token. The deletion completes within minutes. There is no recovery — that's the point.
You can also email hello@backpacked.app with any data request — export, correction, or deletion — and we'll handle it manually within 30 days. EU users have GDPR rights; California users have CCPA rights. We honor both.
Backpacked is for parents. We don't market to children, and we don't knowingly collect data from anyone under 13. The parent enters and controls all child information. The app is rated 4+ in the App Store.
If we materially change this policy, we'll send you an email at the address on file at least 30 days before the change takes effect. Minor cleanups will be reflected here with an updated date at the top.
Questions, requests, complaints — anything — write to hello@backpacked.app. We read every message.