Skip to content
Sign in

Privacy policy

Last updated 12 October 2026

This is a working draft for the private alpha. It will be reviewed before Got It Covered opens to the public.

Got It Covered helps families share the plan for their children's day. To do that, you trust us with information about your family, including your children. This policy explains what we hold, why, who can see it and the choices you have.

The short version: we only use your information to run Got It Covered for you, the people you invite can see your family space, and we never sell it or use it for advertising.

  1. Who we are
  2. What we collect
  3. Children's information
  4. Health information
  5. How we use it, and our legal reasons
  6. Who can see it
  7. International transfers
  8. How long we keep it
  9. Your rights
  10. Cookies
  11. Keeping it safe
  12. Changes to this policy

Who we are

Got It Covered is run by [Your legal name or company name] ("we", "us"). We are the data controller for the information described here.

Contact: [privacy@your-domain], or write to [Postal address for legal notices]. ICO registration number: [ICO registration number].

What we collect

Your account

  • Your email address and name.
  • Your password, which is stored by our sign-in provider in a scrambled (hashed) form we cannot read.
  • Your settings, such as when you want the evening message.

Information you add about your family

  • Children's first names and, if you add them, dates of birth.
  • The schedule: who the children are with each day, school times, clubs, journeys, swaps and changes.
  • Places such as homes and schools, with any addresses and travel times you add.
  • The adults in the family space and the names and colours used for them.
  • Info bank entries, such as clothing sizes, school and GP contacts, routines and notes.
  • Health details you choose to add, such as allergies or medication (see "Health information" below).
  • A history of changes, showing who changed what and when, so everyone can trust the information.

From your devices

  • If you turn on notifications: a notification address for that browser and its type (for example "Safari on iPhone").
  • If you create a calendar link: a private link token.
  • Basic technical logs kept by our hosting providers, such as IP address and request times, used for security and fixing faults.

We do not track your location, read your phone's contacts or use advertising identifiers.

Children's information

Children do not use Got It Covered or have accounts; you must be 18 or over to create one. Information about children is added by the adults caring for them. Please only add what helps with their day.

Health information

Health details, such as allergies, conditions or medication, are a special category of information under UK data protection law. Adding them is optional. We only store them because you choose to add them so that the other adults caring for your children can see them, and we treat that as your explicit consent.

You can withdraw consent at any time by deleting the entry. It is removed from the family space straight away and from our backups when they expire.

How we use it, and our legal reasons

What we doLegal reason
Run your account and family space, work out the day's plan, and show it to the adults you inviteTo provide the service you asked for (contract)
Store health details you choose to addYour explicit consent
Hold information about other adults and children you add, such as the other parentOur legitimate interest, and yours, in coordinating care for the children
Send sign-in, password and invitation emails, and the evening message if you turn it onTo provide the service (contract)
Take payment and keep billing records if you choose a paid planTo provide the service (contract) and legal obligation (tax records)
Keep the service secure, prevent misuse and fix faultsOur legitimate interest in a safe, working service
Count anonymous visits to our public web pages, without cookiesOur legitimate interest in improving the website
Keep records when the law requires itLegal obligation

We do not use your information for advertising, sell it, or use it to build profiles of you. We do not use it to train AI models.

Who can see it

  • People in your family space. Parents can see and change everything in that family. Other adults you invite, such as grandparents or a childminder, can view it but not change it. Anyone you invite can see what is in that family space, so only invite people you trust.
  • Anyone with your calendar link. The link shows the schedule. Keep it private, and reset it from your account page if it is shared by mistake.
  • Our service providers, who process information only on our instructions:
    • Supabase: database, sign-in and sign-in emails. Your data is stored in the UK (London).
    • Vercel: hosting the website and app. Some processing may happen outside the UK.
    • Apple, Google or Mozilla: delivering notifications to your browser. Notification contents are encrypted so these services cannot read them.
    • Stripe: taking payments if you choose a paid plan. Stripe holds your card details; we only see which plan you have and whether it is paid up.
    • Vercel Web Analytics: counting visits to our public pages without cookies or identifying you.
    • Sentry: recording errors and slow pages so we can fix them. Error reports hold technical details, such as which page failed and the error message, and are set not to include your IP address, cookies or account details.
  • Authorities, if the law requires us to, for example under a court order.

We do not share your family's information with the other parent's solicitor, a court or anyone else unless you do so yourself or the law requires it.

International transfers

Our database is in the UK. Where a provider processes information outside the UK, we rely on UK adequacy regulations or the UK International Data Transfer Addendum to protect it.

How long we keep it

  • Your account information: until you delete your account.
  • Family information: while the family space exists. If you delete your account and you are the only parent in a family, that family space and everything in it is deleted too.
  • Backups: up to [7] days, after which deleted information is gone for good.
  • Technical logs: up to [30] days.
  • Payment records: six years after the end of the tax year they relate to, as the law requires.

Your rights

You can ask to see, correct, delete, restrict or take a copy of your information, and you can object to how we use it. Most of this you can do yourself in the app: change details where you see them, and delete your account from Your account.

For anything else, or to complain to us about how we have handled your information, email [privacy@your-domain]. We will acknowledge a complaint within 30 days, keep you updated and reply in full within one month. If you are unhappy with how we handle your information, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Cookies

We only use cookies that are needed to keep you signed in. They are set when you sign in and removed when you sign out. We do not use advertising or tracking cookies, so there is no cookie banner.

We may count visits to our public pages using a cookie-free analytics service that does not identify you.

Keeping it safe

Information is encrypted in transit and at rest. Each family space is walled off, so members of one family cannot see another. Access to production systems is limited to the people who run Got It Covered.

Changes to this policy

If we make important changes, we will tell you in the app or by email before they take effect.

PrivacyTermsAbout Got It Covered

© 2026 Got It Covered