# Privacy Policy
**BAAMF**
Last updated: March 2026
---
## Overview
BAAMF is a private, invite-only book club app. This Privacy Policy explains what information we collect when you use BAAMF, how we use it, and your rights regarding your data. By using BAAMF, you agree to the practices described here.
BAAMF is operated by Ryan Sandvik ("we," "us," or "our"). If you have any questions or concerns about this policy, contact us at ryansandvikprivacy@gmail.com.
---
## Information We Collect
### Information you provide directly
- **Name and email address** — collected when you create your account or are added to a club by an administrator.
- **Profile photo** — optional. If you set a profile picture, the image is stored securely and displayed to other members of your club.
- **Book submissions** — when you submit a book for a reading month, we store the title, author, cover image, and any pitch notes you write.
- **Scores and reviews** — ratings you submit for books your club has read.
- **Event details** — if you are a club host, any event date, location, or notes you enter for a reading month.
### Information generated through your use of the app
- **Voting and veto actions** — your votes in each round and any veto actions (Read It or Hard Pass) you cast. These are visible to other club members as part of the club mechanics.
- **Attendance records** — whether you attended each club meeting, as recorded by a club host or yourself.
- **Host schedule assignments** — which months you are assigned as the club host.
### Information collected automatically
- **Device token** — a Firebase Cloud Messaging (FCM) token is collected and stored so we can deliver push notifications to your device (e.g. reminders about veto deadlines, voting rounds, and replacement book alerts). This token is tied to your account and updated automatically when it changes.
- **User identifier** — a unique ID assigned to your account by Firebase Authentication, used as the primary key for all your data.
- **App preferences** — small pieces of data stored locally on your device (via iOS UserDefaults) to remember your in-app preferences, such as whether you have seen the Veto Guide. This data does not leave your device except as noted above.
---
## How We Use Your Information
We use the information we collect solely to operate BAAMF and provide its features to your club:
- To authenticate you and maintain your account.
- To display your name and profile photo to other members of your club.
- To run the book submission, veto, voting, and scoring phases of each reading month.
- To send you push notifications about club activity (phase changes, deadlines, veto alerts, and replacement book requests). You can disable notifications at any time in your device's Settings.
- To sync club events to your iOS Calendar, if you grant calendar access.
- To allow club administrators to manage membership, host assignments, and month settings.
We do not use your information for advertising, marketing to third parties, or any purpose unrelated to running your book club.
---
## Information Sharing
We do not sell, rent, or share your personal information with third parties for their own purposes.
Your information is shared within your club only — other members of your BAAMF club can see your name, profile photo, book submissions, votes, scores, and attendance. This is necessary for the app to function.
We use the following third-party services to operate BAAMF. Each has its own privacy practices:
- **Firebase (Google LLC)** — provides authentication, database storage (Firestore), file storage, push notifications (Cloud Messaging), and server-side functions. Firebase processes data on our behalf under Google's data processing terms. See [Google's Privacy Policy](https://policies.google.com/privacy).
- **Google Books API** — used to search for book titles and cover images. Search queries (book titles) are sent to Google's servers. No personal account information is included in these requests. See [Google's Privacy Policy](https://policies.google.com/privacy).
- **Apple EventKit** — if you grant calendar access, BAAMF writes club event dates to your iOS Calendar. This data is stored on your device and in your iCloud account, not on our servers.
---
## Data Retention
We retain your account data for as long as you are an active member of a BAAMF club. If you are removed from a club by an administrator, your membership data may be retained in historical records for that club (e.g. past scores and attendance) to preserve the integrity of archived months.
If you would like your data deleted, contact us at ryansandvikprivacy@gmail.com and we will remove your personal information from our systems within 30 days.
---
## Your Rights
Regardless of where you live, you may:
- **Access** the personal information we hold about you.
- **Correct** inaccurate information (e.g. update your name or profile photo directly in the app).
- **Delete** your personal data by contacting us at ryansandvikprivacy@gmail.com.
- **Opt out of push notifications** at any time through your device's Settings → Notifications → BAAMF.
- **Revoke calendar access** at any time through your device's Settings → Privacy & Security → Calendars → BAAMF.
**California residents:** Under the California Consumer Privacy Act (CCPA), you have the right to know what personal information we collect, to request deletion of your data, and to non-discrimination for exercising your rights. We do not sell personal information. To exercise your rights, contact us at ryansandvikprivacy@gmail.com.
---
## Children's Privacy
BAAMF is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at ryansandvikprivacy@gmail.com and we will delete it promptly.
---
## Data Security
We take reasonable measures to protect your information from unauthorized access, loss, or misuse. Your data is stored in Firebase, which encrypts data in transit and at rest. However, no system is completely secure, and we cannot guarantee the absolute security of your information.
---
## Changes to This Policy
We may update this Privacy Policy from time to time. If we make significant changes, we will notify club administrators and update the "Last updated" date at the top of this page. Continued use of BAAMF after changes are posted constitutes your acceptance of the updated policy.
---
## Contact
If you have questions about this Privacy Policy or your personal data, please contact:
**Ryan Sandvik**
ryansandvikprivacy@gmail.com
https://www.ryansandvik.com/BAAMFPrivacy