01Our position, in one line
We also do not "share" personal information for cross-context behavioural advertising, as that term is used in the California Consumer Privacy Act (CCPA), as amended by the CPRA.
02What this means
Under California law:
- "Sell" means disclosing personal information to another business or third party for money or other valuable consideration.
- "Share" means disclosing personal information for cross-context behavioural advertising — targeting ads based on activity across different sites and services.
We do neither. Specifically, we do not:
- sell, rent, trade, or license your family's data to anyone
- provide data to advertising networks, data brokers, or analytics firms for their own purposes
- display advertising in BrightPoints
- build advertising or marketing profiles from your family's activity
- allow third parties to track your family across other websites or apps
- use your family's data to train machine-learning models, or let anyone else do so
03Sensitive personal information
We do not collect what California law calls sensitive personal information, and we therefore have nothing to limit the use of. BrightPoints holds no government identifiers, no financial account details, no precise location, no racial or ethnic origin, no religious beliefs, no health data, no biometric data, and no contents of your messages.
04Children specifically
We take a stricter position than the law requires. California law prohibits selling or sharing the personal information of consumers under 16 without opt-in consent.
Children in BrightPoints have no email address, no photograph, no date of birth, and no location data. There is very little to sell even if we wanted to — and we do not.
05Service providers are not "sales"
We use a small number of vendors to run the service — hosting, database, authentication, and email delivery. They act only on our documented instructions, under contract, and may not use your data for their own purposes. Under the CCPA these are service providers, and disclosures to them are not sales or shares.
Our vendors are listed in our Privacy Policy.
06Do you need to do anything?
No. Because we do not sell or share personal information, there is no opt-out to submit — there is nothing to opt out of.
If you would still like written confirmation of our position, or wish to exercise any other privacy right — access, deletion, correction, or a portable copy — contact us at hello@brightpoints.app and we will respond. We will not treat you differently for asking.
07A note on scope
BrightPoints is operated by SIA Sneeds, a company established in Latvia. Our principal privacy framework is the EU General Data Protection Regulation, and our Privacy Policy is the primary description of how we handle personal data.
We publish this notice because the question deserves a straight answer wherever you live — not because we are claiming that any particular statute applies to us.
If the CCPA, or a similar privacy law in another US state such as Virginia, Colorado, Connecticut, or Utah, does apply to your relationship with us, nothing in this notice limits the rights you have under it. Our answer would be the same under any of them: we do not sell, and we do not share for targeted advertising.
08Contact
This document was last updated on . We will say so here, and tell parents directly, whenever it materially changes.