Privacy first — always
Backpack Brief is built for parents. We keep your family’s data private and secure — no ads, no data brokers, and no selling your information.
How We Protect Your Privacy
We don’t sell your data
We never sell or share your information with advertisers or data brokers. Your data is used only to provide the service.
Data Minimization
Send only what you want organized. We store the minimum needed to generate your weekly summaries and reminders.
You Stay in Control
Close your account at any time and we delete your content from our systems.
How We Keep Your Data Secure
Encryption in Transit & At Rest
We use modern TLS (Transport Layer Security) with encrypted storage for your content.
Least-Privilege Access
Access is limited to the smallest set of people and services needed; sensitive actions are logged and reviewed.
Continuous Monitoring
We routinely review security settings and dependencies, and address issues promptly.
How We Stay Transparent
How your data flows
- You forward school emails or upload PDFs/screenshots to Backpack Brief.
- We extract events, dates, and reminders and store structured items (events, tasks, notes) for your family account.
- You receive a clear weekly digest — plus optional day-before reminders.
How we use AI — and how we don’t
- AI turns your school emails/PDFs into organized events and reminders.
- Providers act as processors on our behalf; we configure them so your data isn’t used to train public models.
- Only minimal data necessary is sent; access is secured and logged.
Our processors
We use reputable providers to run Backpack Brief: Vercel (hosting), Supabase (database & auth), Stripe (payments), SendGrid (email), and OpenAI (content parsing).
This list may evolve as our product improves. We evaluate providers for security and data protection.
Compliance stance
Backpack Brief is parent-facing, not a school vendor. We don’t knowingly collect personal information directly from children under 13. We align our practices with the spirit of COPPA/FERPA/GDPR by minimizing data, limiting use to delivering the service, honoring deletion, and avoiding advertising uses of data.