Privacy Policy

Draft for review. Starter policy pending review by counsel before public launch. Not legal advice.

Last updated: June 24, 2026. This policy explains how JCA Operations LLC handles personal information in Gather Y'all.

What we collect

• Account: email, password (hashed), and login activity.
• Directory profiles: names, photos, contact details, and mailing addresses you or your family add.
• Content: photos, posts, events, and other material you upload.
• Usage: basic logs needed to operate and secure the service.

How we use it

Only to provide the service to your family: authenticating you, showing your family their own content, sending account and notification emails, and keeping the service secure. We do not sell personal information or use your family's content to train external AI models.

Who can see it

Your family's data is private to your family site. Other families cannot access it — isolation is enforced at the database level (row-level security). We share data only with service providers that run the product on our behalf: Supabase (database, authentication, storage), Resend (email), and Railway (hosting). Each processes data only to provide their service.

Children

Profiles for minors are created and managed by a family administrator (a parent or guardian). We do not knowingly let children create their own accounts.

Security, retention & your rights

Data is encrypted in transit and at rest and walled off per family. Administrators can export their family's data and request deletion; on account closure we delete data after a reasonable export window. You may request access to or correction of your information.

Cookies

We use only essential cookies needed to keep you signed in. No advertising or third-party tracking cookies.

Governing law & contact

Governed by the laws of the State of Texas, USA. Privacy questions: hello@gatheryall.com.