Privacy Policy
How we collect, use, and protect your data
Last updated: October 4, 2026
AttendPad ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our digital attendance sheet service at attendpad.com.
1. Information We Collect
When you create an account, we collect:
- Name and email address
- Profile information you choose to provide
- Payment information (processed by Polar)
When you create attendance sheets, we collect:
- Sheet and room names, descriptions, and settings
- Attendee and member information submitted during check-in (such as name, email, phone, organization, custom fields, and notes)
- Check-in and check-out timestamps and metadata
- Digital signatures, and verification photos where the organizer enables photo verification
We automatically collect:
- IP addresses and device information
- Browser type and version
- Pages visited and features used
- Error logs and performance data
2. How We Use Your Information
We use the collected information to:
3. Data Retention
Attendance sheets and their attendee data are retained for 1 year from creation date. After this period, they are automatically and permanently deleted. Daily rooms and their check-in history (including signatures and verification photos) are kept until the room, the check-in, or the account is deleted.
Account information is retained as long as you maintain an active account. Upon account deletion, your data will be removed within 30 days.
You can export or delete your data at any time through your dashboard.
4. Data Security
We implement industry-standard security measures:
Encryption in transit
All data transmitted over TLS/HTTPS
Encryption at rest
Attendee details encrypted field by field using AES-256-GCM; stored files encrypted at rest by Cloudflare
Infrastructure
Hosted on Cloudflare's global network
Access controls
Strict access controls and audit logging
5. Data Sharing
We do not sell, rent, or trade your personal information. We may share data with:
Polar (payments), Cloudflare (hosting, storage, and bot protection), Resend (email delivery), Google (sign-in with Google, and analytics only if you accept analytics cookies) — only as necessary to provide our service.
When required by law or to protect our rights.
6. Your Rights
Depending on your location, you may have the right to:
To exercise these rights, contact us through our contact form.
7. International Data Transfers
Our service is hosted on Cloudflare's global network. Your data may be processed in various locations worldwide. We ensure appropriate safeguards are in place for international transfers.
8. Children's Privacy
Account holders: AttendPad accounts may only be created and managed by individuals aged 16 or older. We do not knowingly allow children under 16 to create accounts.
Attendees under 16: Organizations such as schools, youth groups, sports clubs, and similar bodies may use AttendPad to record attendance for individuals under 16, provided that:
- The account is created and managed by an authorized adult (aged 16 or older)
- The organization has obtained appropriate parental or guardian consent for attendance record-keeping
- Only the minimum personal data necessary for attendance purposes is collected
We recommend that organizations collecting attendance data for minors disable unnecessary fields (such as email, phone, and signature) and only collect what is required. Sheet creators can configure which fields are collected in the sheet settings.
If you become aware that a child under 16 has created an AttendPad account without authorization, please tell us through our contact form.
9. Cookies and Tracking
We use essential cookies for:
With your consent, we also use Google Analytics cookies to understand how the site is used. They are off until you click Accept in the cookie banner. We do not use advertising cookies.
10. Third-Party Services
Our service integrates with:
Polar
Payment processing — Privacy Policy
Cloudflare
Hosting and CDN — Privacy Policy
Resend
Email delivery, including check-in notifications — Privacy Policy
Sign in with Google, and Google Analytics with your consent — Privacy Policy
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.
12. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us through our contact form: