Gatherby is a private household-organization app, made and operated by STUDIOKJ, LLC.
We collect only what's needed to run it for you and the people you invite, and we do not sell your data.
What we collect
- Account details you provide — your name and email, and those of family members or guests you invite.
- The content you create in the app — calendar entries, tasks, lists, trips, and messages.
- Basic technical data (device and app version) to keep the service working and to help with support.
- Your location, only when you check in somewhere or ask for local weather, to show places near you.
- Billing details for households that subscribe. Payments are handled by Stripe; we never receive your
full card number.
Email
We send only transactional, consent-based email: sign-in links, notifications about your own
activity (a task assigned to you, a booking confirmation), an optional weekly household digest,
and replies to support requests you send us. Every recipient is either an account owner who
signed up or a person they explicitly invited. We never send unsolicited or purchased-list
email, and non-essential messages include a way to opt out. Mobile information and messaging
consent are not shared with third parties for marketing.
How we use it
- To provide the app and keep your household in sync.
- To send the transactional email described above.
- To provide support and keep the service secure.
- To understand, in aggregate, how Gatherby is used so we can improve it: which screens and features
get used, on which device type, and how many households are active. We record this ourselves (no
third-party analytics or ad trackers), look at it only as totals, and keep the detailed records for
90 days. Visits to this public website are counted without cookies, and we don't keep your IP address.
Google user data
If you choose to connect a Google account, Gatherby requests only the access needed for the features
you turn on, and uses it only to provide those features, at your request:
- Google Calendar (
calendar.readonly, read-only) — to show your events
on your household's shared board.
- Google Tasks (
tasks) — to keep your Google Tasks and your Gatherby tasks
in sync in both directions, so a task added or completed in one appears in the other.
- Google Contacts (
contacts.readonly, read-only) — to suggest people's
names and email addresses when you invite guests to an event.
- We do not sell Google user data, and we do not use it for
advertising or for training AI/ML models.
- We do not transfer Google user data to others except as necessary to provide
the feature (e.g. secure hosting), to comply with applicable law, or as part of a merger or
acquisition with equivalent protections.
- You can disconnect a Google account at any time in the app; doing so revokes our access and
deletes the stored authorization for that account.
Gatherby's use and transfer of information received from Google APIs will adhere to the
Google
API Services User Data Policy, including the Limited Use requirements.
How we protect your data
We apply safeguards appropriate to the sensitivity of the data we handle, including calendar and
other Google user data:
- Encryption in transit — all traffic between your devices and Gatherby is
served exclusively over HTTPS/TLS.
- Encryption at rest — data is stored on encrypted cloud infrastructure. In
addition, the most sensitive fields are individually encrypted at the application layer using
AES-256-GCM — including stored access codes and credentials, Wi-Fi and door
codes, and sensitive guest details such as dates of birth, dietary needs, and private notes.
OAuth access credentials (refresh tokens) are held securely server-side and used only to fetch
the data you asked us to display.
- Encrypted backups — the database is continuously replicated to Amazon S3 with
server-side encryption; because the sensitive fields above are encrypted at the application
layer, they remain encrypted in backups as well.
- Access controls — a household's data is visible only to the members that
household explicitly invites. Internal access is least-privilege — limited to the minimum needed
to operate and support the service, and restricted to authorized personnel.
- Secure, reputable infrastructure — Gatherby runs on Amazon Web Services (AWS)
with standard operational and network safeguards.
- Data minimization & retention — we request the narrowest access needed
(for example, read-only access to your calendar), and retain Google user data
only while your connection is active.
Sharing
We don't sell personal information. We use a small number of trusted service providers who process
data only to operate Gatherby on our behalf, under obligations to protect it: hosting (Amazon Web
Services), email delivery, payments (Stripe), place details such as opening hours (Google Maps
Platform), and AI processing that powers features you use, such as looking up a restaurant you add
(Anthropic). These providers may not use your data to train their models or for their own purposes.
Google user data is never used to train AI models.
Your choices & deletion
You can disconnect any connected Google account at any time from within the app. Disconnecting
immediately deletes the stored OAuth tokens for that connection and stops any further access to
that account's data.
You can delete your account at any time in the app, under Settings → Delete account.
If you're the head of household, this permanently deletes the household and all of its data for every
member, including lists, tasks, events, photos and connected accounts, and cancels any subscription.
Otherwise it deletes your own account and personal data. You can also email
support@gatherby.app and we'll do it for you. We keep data only
as long as needed to provide the service.
Contact
Questions? Email support@gatherby.app.