Privacy policy
Bagsy is a family rota app: it exists so that school runs, clubs and lifts get a name next to them and everyone in the household knows. This page explains, in plain English, what information Bagsy holds and why. The short version: we store what you type in so the app can work, we don't sell it, we don't show ads, and we don't track you across other apps or websites.
Who is responsible for your data
Bagsy is operated by Lewis Toole, trading as Bagsy, based in the United Kingdom. For anything privacy-related, contact hello@bagsyapp.com.
What we store, and why
Your account: your email address and a password (the password is stored in hashed form — we never see it). This is how you sign in.
Your household: the names, initials, chosen colours and roles of the people you add — adults, helpers and children — and, if you choose to add it, a child's date of birth (used only so under-5s are pre-ticked as passengers on a run). Children's details are entered by their parent or guardian; Bagsy is used by adults, and we never collect information from children directly.
The rota itself: activities, venues, dates, times, kit notes, who has claimed which run and when claims were handed back. This is the product.
Push notifications: a device token, so that when someone claims or releases a run, the other adults' phones are told. That is the app's core promise.
What we do not do
No selling or renting of your data. No advertising, and no advertising identifiers. No tracking across other companies' apps or websites. No analytics that identify you personally. Invite links use long random codes precisely so that a link containing your child's schedule cannot be guessed.
Where your data lives
Data is stored with Supabase, our database provider, in a data centre in London, United Kingdom (Amazon Web Services, eu-west-2). Push notifications are delivered through Expo's notification service and Apple/Google's push systems, which handle the message in transit.
Who can see what
Only members of your household can see your household's rota — this is enforced by the database itself, not just by the app. Helpers with a limited role see only the runs they are involved in.
How long we keep it, and how to delete it
Your data stays for as long as your household uses Bagsy. If a subscription lapses, the schedule is never locked away — the account simply drops back to the free tier. You can delete your account at any time from the Squad screen inside the app: if you are the only signed-up adult, the entire household and its history are permanently deleted with it; otherwise your own account and membership are removed. Deletion is immediate and cannot be undone.
Your rights
Under UK data protection law (UK GDPR), you can ask for a copy of your data, ask us to correct it, or ask us to delete it. Email hello@bagsyapp.com and we'll sort it. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).
Changes to this policy
If this policy changes in a way that matters, we'll say so in the app before the change takes effect.