Privacy Policy

Two groups, with different relationships to us. A barn — the business that signs up — decides what to put into BarnTack and is responsible for what it enters about other people. Its riders, parents and staff appear in that record because the barn put them there or invited them in.

If you are a rider or a parent and want your details changed or removed, your barn can do it directly, which is usually the fastest route. You can also write to us and we will act on it.

• People. Names, email addresses, phone numbers, and the relationships between them — which parent or guardian to contact about which rider. For riders, a date of birth where the barn records one, which is what tells us whether a rider is a minor.
• Lessons and horses. Schedules, instructors, lesson types and statuses, horses, and the notes a barn records against them.
• Lesson credits and payments. Packages, credit balances, and payment records. Where a barn asks us to set it up, we parse payment-notification emails forwarded from Venmo or Zelle to match a payment to a rider. We never hold card numbers or bank credentials, and BarnTack does not process payments.
• Files. Rider photos and documents, barn and program logos, and signed release forms.
• Account and technical data. Sign-in credentials (passwords are stored hashed, never in readable form), and ordinary server logs and error reports. We also record the IP address and browser of anyone who opens an invitation link, and of every administrator who signs in as another user — both kept as a record of what happened, not only in logs.

Riders are often minors. Their details are entered by the barn or their parent or guardian, not by the child, and are used only to run the lesson program. We do not knowingly give a rider under 13 a login of their own: where a birthday shows a child that young, their barn manages them or a parent or guardian holds the login. BarnTack is not directed to children, and we do not ask a child to create an account.

Calendar sync is optional and off until an instructor connects it. When they do, we ask Google for permission to manage calendar events, and we use it for one purpose: writing that instructor’s lessons onto the Google calendar they choose, which may be a barn calendar shared with them, and updating or removing those events when the lesson changes.

• We create, update and delete only the events BarnTack itself created. Each one carries the lesson’s details: the riders’ first names, the horse’s name, the instructor’s name, and the lesson type and status.
• We read the names of the calendars you can write to, to show you the list to pick from and to remember the one you chose. We do not read the events in any calendar.
• We do not read, store, or analyse the other contents of anyone’s calendar, and we never use calendar data for advertising or to train models.
• Access tokens are stored encrypted. An instructor can disconnect at any time from Settings → Calendar, or revoke our access from their Google account permissions; either has the same effect on our side.
• Disconnecting deletes the access tokens we hold and stops all sync. Events BarnTack already wrote stay on your calendar and are yours to keep or delete.

BarnTack’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

A barn that turns texting on can send lesson reminders, schedule changes, account updates such as lesson credit balances, and occasional program announcements by text to people who signed up for them on the barn’s sign-up form or on a signed release. Message frequency varies with the lesson schedule. Message and data rates may apply.

Reply STOP to any text to stop receiving them, or HELP for help. Mobile numbers and the fact that someone agreed to receive texts are never shared with or sold to third parties or affiliates for their own marketing or promotional purposes; they go only to the text-message delivery provider named below, and only to carry the barn’s messages.

We do not sell personal information, and we do not share it for advertising. We use a small number of service providers to run the product. They process data only on our instructions and only for the job named here:

• Hosting and the database, in the United States.
• File storage and backups — uploaded files and nightly database backups.
• Email delivery — invitations, password resets and reminders, and receiving the payment notifications a barn forwards.
• Text message delivery — only for barns that turn texting on. The provider receives the phone number and the content of each text it carries.
• Error monitoring — reports of failures, so we can find and fix them.
• Google — only for barns whose instructors connect calendar sync, as described above.

We may also disclose information where the law requires it, or to protect someone’s safety. If BarnTack is ever sold or merged, we will tell affected barns before their data moves.

We keep a barn’s record for as long as its account is active. A backup of the database is taken nightly, so data can persist in a backup after it is removed from the live record.

BarnTack is in beta and deletion is not automated. There is no button that closes an account and erases its data, and nothing expires on its own. Write to us and we will delete a barn’s record, or one person’s details within it, by hand. We do not promise a turnaround we cannot yet meet, and we may keep what a legal obligation requires us to keep.

Google Calendar tokens are the exception: they are deleted the moment an instructor disconnects, and with the account when it closes.

Traffic is encrypted in transit. Google Calendar access tokens are encrypted at rest; no other field is separately encrypted. No system is perfectly secure, and we will not pretend otherwise — if a breach affects your data, we will tell you.

• Ask for a copy of the personal information we hold about you — we put it together by hand.
• Ask us to correct anything inaccurate.
• Ask us to delete it, subject to the barn’s own record-keeping obligations.
• Turn off calendar sync, or revoke it from your Google account, at any time.
• Ask us to stop sending you lesson reminder emails. There is no setting screen for this yet, so write to us and we will turn them off.
• Reply STOP to any text from a barn to stop receiving texts from it.

Depending on where you live you may have further rights over your personal information. Write to us and we will honour them.

If we change this policy materially, we will update the date above and tell account owners by email. Questions, requests, or anything that looks wrong: support@barntack.com.

See also our Terms of Service.

Place and timezone lookups use data from GeoNames, licensed CC BY 4.0, adapted by BarnTack.