Privacy Policy

Our Commitment to Privacy

FunFangle is built for communities, camps, recreation facilities, resorts, schools, venues, and programs that look after people — often children. We treat the information they entrust to us, including health details, as a responsibility, not a product. We collect only the personal information the service needs, protect it with strong safeguards, stay transparent about the tools we use, and give you clear ways to see or remove your information. When an organization uses FunFangle, its data belongs to that organization — we act on their behalf, not our own.

Who We Are and Our Role

JP Greze Co Ltd operates FunFangle, a platform for on-site operations at community organizations. How we handle information depends on the relationship:

• Information we collect as a website operator. When you visit our website, request a demo, or contact us, JP Greze Co Ltd is responsible for the information you provide and the analytics we collect.
• Information organizations enter into FunFangle (“Customer Data”). When an organization uses FunFangle, its staff and members enter records — such as participant, attendance, health, and transaction information. That data belongs to the organization. We process it on the organization’s behalf as a service provider, under our agreement with that organization. If you are a parent or participant, the organization decides what is collected and how long it is kept; contact that organization first about your information, or contact us and we will route your request.

You may also create your own FunFangle account — either as a member or parent signing up with an organization that uses FunFangle, or as the person setting up a new organization. When you set up a new organization, that organization becomes our customer, and the information entered about its participants is Customer Data we process on the organization’s behalf.

Information We Collect

We aim to collect only the personal information the service needs. Depending on how you use FunFangle, this may include:

• Information you provide — such as your name, email address, phone number, and details you submit through demo requests, contact forms, or account registration.
• Customer Data — information an organization’s authorized users enter about their participants and operations, which may include health-related information (for example medications, allergies, and dietary restrictions — see our HIPAA Safeguards page) and photos or images of participants, who may be minors.
• Payment information — when you make a payment, transaction details are collected to process it. Card payments are handled by PCI-compliant third-party payment processors (such as Square, Stripe, or Lightspeed). The processor used may vary by organization and may change over time. We do not store full payment card numbers.
• Location — our point-of-sale app may collect precise device location because our payment processor requires it to process card payments, and our attendance app may collect device location to support supervision and safety (for example, to help confirm that staff are with their assigned groups).
• Camera, photos, and Bluetooth — our apps use the camera and photo library to scan codes and wristbands and to capture and upload participant pictures, and Bluetooth to connect to scanners and printers.
• Usage and diagnostic data — automatically collected technical information such as IP address, device and browser details, pages visited, and error or log data.

Data Security

Protecting your information is a priority. We maintain robust administrative, technical, and physical safeguards — including encryption of data in transit and at rest, role-based access controls, audit logging, and ongoing monitoring — and we continually review and strengthen these measures as technology and threats evolve. For health-related data, additional safeguards are described on our HIPAA Safeguards page. No method of transmitting or storing information can be guaranteed completely secure, so while we work diligently to protect your information, we cannot guarantee its absolute security.

How We Use Information

We use information to provide, operate, and improve our services and to process transactions; for internal reporting, analytics, and customization; to communicate with you and the organizations we serve; to maintain and assess the security of our services; and to meet our legal obligations.

How Long We Keep Information

We keep information for as long as it is needed for the purposes described in this policy, and longer where our agreements or the law require it. We do not commit to fixed deletion dates; instead, we review and remove data we no longer need in the ordinary course of business.

• Website and marketing data. Analytics and cookie data, and information you submit through demo or contact forms, are kept for as long as they remain useful for the purposes for which they were collected, and are then aggregated, anonymized, or deleted in the ordinary course. You may ask us to delete information you submitted at any time.
• Organization (“Customer”) data. We keep Customer Data while the organization’s account is active. After an account or agreement ends, we make the organization’s data available for export and then remove it from active systems in the ordinary course, except where we are required to keep it. The organization decides how long its data should be retained, consistent with the laws that apply to it.
• Records subject to legal retention requirements. Organizations that serve minors — camps, communities, schools, resorts, venues, and recreation programs — are often required by state law to keep certain records (for example, medication and health logs, attendance, and incident reports) for extended periods. These periods can last for years and, for records about a minor, may continue until the individual reaches the age of majority or beyond. Where an organization is subject to such requirements, we retain the relevant records as directed by that organization and applicable law, even after an individual stops participating.
• Archiving. To keep active systems lean, we may move older data that we are not required to keep readily available into secure, encrypted long-term archival storage, and we purge data from those archives once it is no longer needed or required to be kept.
• Backups. Residual copies of deleted data may remain in encrypted backups until they are overwritten on our regular backup cycle.
• Service improvement. We may retain information for a further period — one that we determine and that is not a fixed term — to maintain, analyze, and improve our services and security. Such information is eventually purged or archived in the ordinary course, and may be kept in aggregated or de-identified form.

If you are an individual and want data about you removed, contact the organization that uses FunFangle to manage your information, or contact us at contact@funfangle.com and we will route your request appropriately.

How We Share Information

We are careful about who receives information. We share it with service providers and contractors who help us operate — for example, hosting, payment processing, communications, and software development — who are permitted to use the information only to perform services for us and are obligated not to use or disclose it for their own or other purposes. We also share information with the organization on whose behalf we process Customer Data, with a successor in a business transfer, and with authorities where required by law.

Analytics and Advertising

We work with Google and Meta for analytics and advertising on our public website and on the sign-in pages of the FunFangle portal and console (not within the authenticated portal or console). We use Google Analytics 4 to understand how these pages are used, and Google Ads and the Meta Pixel to measure our marketing and to show relevant ads on Google and Meta platforms (including Facebook and Instagram) and their partner sites. This includes ads shown to people who have previously visited these pages (remarketing). To do this, these partners may set cookies and receive online identifiers and information about your activity on these pages.

To learn how these partners handle data, see Google’s Privacy Policy and Meta’s Privacy Policy.

You can control or opt out through your browser’s cookie controls, Google Ads Settings, the Google Analytics opt-out browser add-on, and your Meta ad preferences. You can also opt out of many participating advertisers through the Digital Advertising Alliance and the Network Advertising Initiative.

Aggregated and De-Identified Data

We may create aggregated or de-identified data from the information we collect — for example, statistics, trends, and benchmarks that do not identify any individual. Because it does not identify anyone, this data is not personal information, and we may use and disclose it for any business purpose, including to operate, analyze, improve, and promote our services. We keep such data in a de-identified form and do not attempt to re-identify it.

Your Privacy Rights

You have choices about your personal information. Depending on where you live, you may have the right to request access to the personal information we hold about you, to ask us to delete or correct it, to opt out of the sale or sharing of your personal information, and not to be treated differently for exercising these rights. To make a request, email contact@funfangle.com. Where the law gives you these rights, we will respond within the time required by applicable law.

For information an organization submitted about a participant, we act as a service provider and will route your request to, or handle it together with, that organization.

How to Delete Your Account or Data

If you created your own FunFangle account, you can ask us to delete it. If your information is managed by an organization (for example, a camp, community, resort, school, venue, or program that enrolled you or your child), deletion requests are handled through that organization, for whom we act as a service provider. If you administer an organization, deleting your personal account does not by itself delete the organization’s records — organization data is handled under your organization’s agreement and the retention practices described above. In every case, we honor requests except for records we are required to keep, such as records subject to legal retention requirements and financial or tax records. See our Account & Data Deletion page for details, or email contact@funfangle.com. We remove data we are no longer required to keep in the ordinary course of business; we do not commit to a fixed deletion date.

Children’s Privacy

Protecting children’s information matters to us. FunFangle’s website is not directed to children and does not knowingly collect personal information from children under 13, consistent with COPPA. Information about minors that organizations enter into FunFangle is provided and controlled by those organizations for their programs.

App Privacy

Our mobile apps (FunFangle POS, FunFangle Attendance, and FunFangle Checkpoint) collect the information needed to provide the service and diagnostic or log data to keep the apps reliable. They use third-party services including Google Play Services, Amazon Web Services, and Apple. The retention practices above apply to app data as well.

Changes to This Policy

We may update this policy from time to time. We will post the updated policy on this page and revise the “Last revised” date above.

Contact

JP Greze Co Ltd
Email: contact@funfangle.com