Privacy & data

The short version

We collect only what the app needs to work. We don't sell your data, and the app is currently ad-free. You can delete your account and all your data at any time from Settings.

What we collect

We store the following when you create an account:

• Your name and email address
• A name for your timeline (optional — can be a nickname or anything you like)
• Due date or birth date (sensitive personal data under UK GDPR — stored to calculate your timeline)
• Which UK nation you're in (to show the right appointments)
• Appointment states, notes, and custom reminders you create
• Partner link (if you choose to connect with a partner)
• Push notification token (so we can send you reminders — stored per device)

We also collect crash reports via Sentry (see "Third-party services" below). We don't collect location data or browsing history.

Where your data is stored

Your data is stored in a PostgreSQL database hosted by Supabase. Data is encrypted in transit and at rest.

Partner sharing

If you connect with a partner, they can see your shared timeline: appointment names, dates, and states. They cannot see your email address or account details. You can unlink a partner at any time from Settings.

Third-party services

We use the following services to run the app. Each acts as a data processor under UK GDPR:

• Supabase — database, authentication, and real-time sync. Hosts all account and timeline data.
• Sentry — crash and error reporting. Receives crash logs linked to your user ID so we can diagnose issues. No personal details (name, email) are sent to Sentry.
• Expo (EAS) — push notification delivery. Receives your device push token to send reminders.
• Apple / Google — app distribution and payment processing. We do not receive or store your payment details.

We do not share your data with any other third parties, data brokers, or advertisers.

Legal basis for processing

We process your data on the basis of contract (the app cannot function without your account data) and legitimate interest (crash reporting to maintain app stability). Sensitive personal data (due date / birth date) is processed on the basis of your explicit consent, given when you enter it during onboarding.

Your data, your control

We don't sell your data to third parties or use your information for marketing purposes. The app is currently ad-free, and we'd like to keep it that way.

Your rights

Under UK GDPR, you have the right to:

• Access all data we hold about you
• Correct any inaccurate data
• Delete your account and all associated data
• Export your data in a portable format
• Withdraw consent at any time

To delete your account, go to Settings and tap "Delete account". This permanently removes all your data from our servers. There is no recovery once confirmed.

Contact us

ParentPA is the data controller for the information described above. If you have questions about your data or want to exercise your rights, email us at hello@parentpa.uk.

ICO registration: ZC108228