Privacy Policy

Last updated: February 17, 2026

1. Introduction

Greenbar (“we,” “our,” or “us”) provides a conference tracking and troop management platform for Boy Scout unit leaders. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at greenbar.ai and our iOS mobile application (collectively, the “Service”).

The Service is designed for use by adult scout leaders (age 18 and older). Minors do not create accounts or interact directly with the Service.

2. Information We Collect

Account Information

When you create an account, we collect your email address and display name.

Scout Data

Unit leaders enter information about the scouts in their troop, including names, patrol assignments, rank, BSA Member IDs, conference notes, advancement history, and leadership positions. This data is entered and managed solely by authorized adult leaders within each organization.

Meeting and Activity Data

We store records of PLC meetings, committee meetings, troop meetings, and campouts, including attendance records and action items.

Payment Information

Subscription payments are processed by Stripe (web) and Apple (iOS). We store subscription status and transaction identifiers but never store credit card numbers or payment credentials directly.

Usage Data

We collect anonymized analytics through Vercel Analytics to understand how the Service is used. This does not include personally identifiable information.

3. How We Use Your Information

  • To provide and maintain the Service
  • To manage your account and organization membership
  • To generate AI-powered insights about troop health and scout advancement (AiSM features)
  • To process subscription payments
  • To send transactional emails (payment receipts, trial notifications, account alerts)
  • To monitor errors and improve service reliability (via Sentry)
  • To improve the Service based on anonymized usage patterns

4. Information About Minors (Scouts)

Greenbar is designed for use by adult Scout leaders (ages 18+) to manage their scouting units. The Service is not directed at children and does not allow minors to create accounts or directly interact with the platform. All scout data is entered and controlled exclusively by authorized adult leaders within their organization.

How We Handle Scout Data

We treat all personal information about scouts as sensitive data and apply enhanced protections:

  • Encryption in transit (TLS 1.2+) and at rest (AES-256)
  • Access restricted to authenticated members of the scout’s organization through role-based access controls
  • Data minimization: we collect only the information necessary to support scouting program management
  • We do not sell, rent, or share scout personal information with third parties for advertising or marketing purposes
  • We do not use scout data for targeted advertising
  • We do not create public profiles for scouts

Organizational Responsibility

Adult leaders who enter scout data into the Service are responsible for ensuring they have appropriate authorization from their scouting organization and, where applicable, from parents or guardians to enter and manage scout data, maintaining the accuracy of scout information, and responding to parent or guardian inquiries about their child’s data.

Parental Rights

Parents or guardians of scouts whose data is stored in the Service have the right to request access to their child’s personal information, request correction of inaccurate information, request deletion of their child’s personal information, and withdraw authorization for their child’s data to be stored in the Service. To make such a request, contact your unit’s adult leaders or email us at privacy@greenbar.ai. We will respond to verified parental requests within 30 days.

COPPA Compliance

While our Service is not directed at children under 13 and does not collect personal information directly from children, we recognize that the Service stores personal information about minors entered by authorized adult leaders. We have implemented protections consistent with the Children’s Online Privacy Protection Act (COPPA) and applicable state children’s privacy laws to safeguard this data.

If you believe that a minor has directly provided us with personal information without parental consent, please contact us at privacy@greenbar.ai and we will promptly delete such information.

5. AI Features (AiSM)

Our AI Scoutmaster (AiSM) features use artificial intelligence provided by Anthropic to generate insights about scout advancement, patrol health, and program planning. When AI features are used:

  • Scout data is transmitted to our AI provider via encrypted connections
  • Our AI provider does not use your data to train their models (governed by a Data Processing Agreement)
  • AI-generated insights are stored within your organization’s account and subject to the same access controls as other data
  • All AI-generated suggestions are clearly labeled in the interface
  • You can use the Service without AI features

6. Data Sharing and Third-Party Service Providers

We do not sell your personal information or the personal information of scouts. We do not share personal information for targeted advertising or cross-context behavioral advertising. We share data only with the following service providers, each bound by data processing agreements:

  • Supabase, Inc. — Database hosting and authentication
  • Anthropic, PBC — AI-powered insight generation (scout data is sent to the Anthropic API for processing)
  • Stripe, Inc. — Payment processing (web subscriptions; does not receive scout data)
  • Apple, Inc. — Payment processing (iOS subscriptions; does not receive scout data)
  • Vercel, Inc. — Application hosting
  • Sentry — Error monitoring (PII is scrubbed before transmission)
  • Resend — Transactional email delivery (leader notifications only; scout email addresses are not collected)

7. Data Security

We implement appropriate technical and organizational security measures including encryption in transit (TLS 1.2+), encryption at rest (AES-256), secure authentication via Supabase Auth, row-level access controls ensuring organizations can only access their own data, Content Security Policy enforcement, and regular security reviews.

8. Data Retention and Deletion

We retain your data for as long as your account is active. You may request deletion of your account at any time through the app settings. Upon account deletion request, we initiate a 7-day grace period during which you can cancel the deletion. After the grace period, we permanently delete your account and all associated data, including scout records, conference notes, meeting histories, and AI insights. We also delete your authentication credentials from our identity provider.

Organization data is retained as long as at least one active member remains. If all members are removed, the organization and its data are deleted.

Scout data is retained for as long as the scout’s record remains active within an organization. Organization administrators may export and delete scout data at any time.

9. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate personal data
  • Request deletion of your account and data
  • Export your data
  • Withdraw consent for optional features (like push notifications)

To exercise these rights, contact us at privacy@greenbar.ai.

10. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

Because our Service processes personal information about minors (scouts), we treat this data as sensitive personal information under California law. Specifically:

  • We do not sell personal information about minors
  • We do not share personal information about minors for cross-context behavioral advertising
  • We limit our use of sensitive personal information to what is necessary to provide the Service

California residents may exercise the following rights:

  • Right to Know: Request what personal information we collect, use, and disclose
  • Right to Delete: Request deletion of personal information
  • Right to Correct: Request correction of inaccurate information
  • Right to Opt-Out of Sale: We do not sell personal information
  • Right to Non-Discrimination: We will not discriminate against you for exercising your rights

To exercise these rights, contact us at privacy@greenbar.ai.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the “Last updated” date. Continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: privacy@greenbar.ai