Privacy Policy

Last updated: September 16, 2026 · Chleno is a product of UForester LLC.

Chleno is member-management software used by community organizations to keep records, take registrations, collect fees, and communicate with their members and families. This policy explains what personal information we collect, why, and what we do and do not do with it.

1. Who we are

Chleno is operated by UForester LLC ("UForester", "we", "us"), a limited liability company organized under the laws of New York. Chleno is a product and trading name of UForester LLC. You can reach us at:

Email — privacy, support, and general enquiries: hello@chleno.com
Phone: (315) 600-8399

2. Two different roles we play

Most of the personal information in Chleno does not belong to us. It belongs to the community organization using Chleno — a youth group, cultural association, parish, or club — which decides what to collect and why. In those cases the organization is the controller of that information and UForester LLC is a service provider (a processor) acting on its instructions.

We are the controller only for the information we collect directly for our own purposes: account details for the people who administer Chleno, billing records, support correspondence, and the operational logs described below.

If you are a member or a parent and want your information corrected or deleted, the fastest route is usually your organization, which can act on it immediately. You can also contact us and we will help, and will pass the request on where the organization is the controller.

3. Information we collect

Information you or your organization provide

Identity and contact details — name, email address, mobile phone number, postal address, and date of birth.
Household and relationship information — the family a member belongs to, who their parents or guardians are, which groups they are in, and who is authorized to collect a child.
Emergency and health information — emergency contacts and any medical notes an organization asks families to supply so that children can be looked after safely.
Registration and membership records — which season a person is enrolled in, their membership category, fees charged, and payment status.
Content you create — messages, announcements, photographs, documents, and files uploaded to your organization's account.

Information collected automatically

Account and security data — sign-in times, and a record of any occasion when a Chleno administrator accesses an organization's account for support purposes.
Device and delivery data — whether a push notification, text message, or email was delivered, opened, or failed, and the device registration needed to send push notifications to an installed app.
Technical logs — IP address, browser type, and error information, kept to operate and secure the service.

We do not use advertising cookies, tracking pixels for advertising, or third-party analytics that profile you across other websites.

Payment information

When a family pays a registration fee online, card details are entered directly with our payment processors, Stripe or Square, and are handled by them. Chleno stores the amount, the payment method, the status, and the processor's reference — never full card numbers.

4. How we use information

To provide the service: maintaining member records, processing registrations, and taking payments.
To deliver the communications an organization sends — in-app messages, push notifications, text messages, and email — to the people it has chosen to send them to.
To send service and transactional messages: invitations, password resets, and registration confirmations.
To provide support, investigate problems, and keep the service secure and available.
To comply with legal obligations, and to enforce our Terms of Service.

We do not use your personal information to train machine-learning models, and we do not build advertising profiles.

5. Text messaging (SMS/MMS) and your mobile information

Organizations using Chleno may send text messages to members and their parents or guardians — for example schedule changes, reminders, and announcements. Phone numbers used for this purpose are collected when a family enters one on a registration form, when a member supplies one in their own profile, or when an organization's staff enter one on a member's record.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All other categories of data sharing described in this policy exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Mobile numbers and messaging consent are used only to deliver the messages the organization you belong to has chosen to send you. They are passed to our messaging carrier solely to transmit those messages, and to no one else. We never sell personal information, and we never sell or rent phone numbers.

You can stop receiving text messages at any time by replying STOP to any message. Reply HELP for assistance. Full messaging terms, including message frequency and rates, are in our SMS Terms.

6. When we share information

We share personal information only in these circumstances:

Within your organization — staff and volunteers see the records their assigned permissions allow. A parent can see their own children's records.
With service providers who operate the product on our behalf, each bound to use the information only to provide their service to us:
- Supabase — database, authentication, and file storage.
- Vercel — application hosting.
- Stripe and Square — payment processing.
- Twilio — text message (SMS/MMS) delivery.
- Resend — email delivery.
- OneSignal — push notification delivery.
When the law requires it — in response to a valid legal process, or to protect someone's safety or our legal rights.
In a business transfer — if UForester LLC is involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction, subject to this policy.

We do not sell personal information, and we do not share it with third parties for their own marketing. As stated above, mobile opt-in data and consent are never shared with anyone.

7. How long we keep information

We keep an organization's information for as long as its account is active, and afterwards only as long as needed for legitimate business purposes — resolving disputes, meeting record-keeping obligations, and the like. Organizations can archive or delete member records at any time from within Chleno. When an account closes, we delete or anonymize its data within a reasonable period unless the law requires us to keep it.

Because membership organizations often need continuity across seasons, records are archived rather than immediately destroyed by default, so that a returning member's history is not lost. An organization can request permanent deletion.

8. Security

Access to data is enforced in the database itself, not only in the app, so that each organization can only reach its own records. All traffic is encrypted in transit. Sensitive credentials — payment, messaging, and email provider keys — are stored so that they cannot be read back out by any user, including an organization's own administrators. Administrative access to an organization's account by Chleno staff is recorded in an audit log.

No system is perfectly secure, and we do not claim otherwise. If a breach affects your information we will notify affected organizations and, where required, individuals and regulators.

9. Children's information

Chleno is designed for organizations that serve young people, and it holds information about children — supplied by their parents or guardians, or by the organization the family has joined. Children do not sign up for Chleno themselves. A child's account, where one exists, is created at the request of their organization or guardian.

We collect children's information solely to provide the service to the organization, never for advertising or profiling. A parent or guardian may review, correct, or request deletion of their child's information by contacting their organization or us.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. You have the right not to be discriminated against for exercising these rights.

To exercise any of them, contact your organization or email hello@chleno.com. Where we act as a service provider we will forward your request to the organization responsible and assist them in answering it.

Sale or sharing of personal information: we do not sell personal information, and we do not share it for cross-context behavioural advertising. There is therefore nothing to opt out of.

11. International users

Chleno is operated from the United States and information is stored and processed there. If you use Chleno from elsewhere, you understand that your information will be transferred to and processed in the United States, which may have different data-protection rules than your own country.

12. Changes to this policy

We may update this policy from time to time. We will change the "last updated" date above, and for material changes we will notify organizations through the product or by email before the change takes effect.

13. Contact us

Questions, requests, or complaints about privacy can be sent to hello@chleno.com, or by telephone on (315) 600-8399.