Privacy Policy

Effective date: February 28, 2026

1. Who we are

This Privacy Policy describes how MyBlueLodge (“we,” “us,” “our”) collects, uses, and shares information when you use our website and mobile application (collectively, the “Service”).

2. Information we collect

We may collect the following categories of information:

• Phone number (to send an SMS one-time passcode for login).
• Account and profile information you choose to provide (e.g., name, email, lodge/district details, if applicable).
• Login and security data such as timestamps of OTP requests, verification attempts, and device/session identifiers.
• Usage data (basic analytics about how the Service is used, such as pages/screens visited and interactions).
• Technical data such as IP address, browser type, device type, operating system, and logs for troubleshooting and security.

3. How we use information

We use information to:

• Provide and operate the Service, including creating sessions and authenticating logins.
• Send transactional SMS messages containing one-time passcodes (OTP) that you request during login.
• Prevent fraud, abuse, and unauthorized access (e.g., rate limiting, security monitoring).
• Maintain, troubleshoot, and improve the Service.
• Comply with legal obligations.

4. SMS / Text messaging

If you enter your phone number and request a login code, we will send you an SMS message with a one-time passcode to complete sign-in. Message frequency varies based on how often you attempt to log in.

We use a third-party provider (such as Twilio) to deliver SMS messages. Your phone number and message delivery metadata may be processed by that provider to deliver the OTP.

We do not send marketing or promotional text messages.

5. How we share information

We may share information:

• With service providers who help us operate the Service (e.g., SMS delivery providers, hosting providers). They may process data only for our instructions and to provide services to us.
• For security and legal reasons (e.g., to respond to lawful requests, protect rights and safety, investigate abuse, or enforce terms).
• In a business transfer (e.g., merger, acquisition, or asset sale), where information may be transferred as part of that transaction.

6. Data retention

We retain information only as long as necessary to provide the Service and for legitimate business purposes. OTP codes expire quickly and are intended to be short-lived; we may retain related security logs (such as OTP request/attempt counts) for fraud prevention and auditing.

7. Security

We use reasonable administrative, technical, and physical safeguards designed to protect your information. No method of transmission or storage is 100% secure, but we work to protect your data.

8. Your choices

• Account information: You may be able to update or delete certain information within the Service.
• SMS: You can stop receiving OTP messages by not requesting login codes. (OTP messages are sent only when you attempt to log in.)

9. Children’s privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

10. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date above and may provide additional notice within the Service.

11. Contact us

If you have questions about this Privacy Policy, contact us at:
Email: support@mybluelodge.app

© MyBlueLodge