Privacy Policy

1. Who we are

ChildApart is operated by Chase Morgan Solicitors Ltd, a company registered in England and Wales (company number 17342760), with its registered office at 179A Dudley Road, Wolverhampton, WV2 3DR, United Kingdom, which is the data controller for the personal data described in this policy. You can reach us at help@childapart.com. ChildApart is an app for parents. Its coordination tools — a shared calendar, messaging, expenses, legal documents and family files, and more — are built primarily for separated and separating parents managing shared care, and its guidance library covers the everyday realities of parenting for any family. This page explains what personal data we handle and why. It applies alongside our Terms of Service.

2. Data we collect

Personal data means any information that relates to you, your child, or your co-parent and could identify them — for example a name, an email address, or a photo. Here is what we hold:

• Account details: your name, email address, a role label (for example, “Parent” or “Carer”, so the app knows how to display you to others in your family space), a profile photo if you add one, and authentication data (your hashed password, and — if you enable it — your two-factor authentication enrolment status and a recovery contact; we never store your actual authentication codes).
• The children and co-parents you add, the carers you invite, and the links between them.
• Messages with your co-parent, which form a permanent record, including the cleaned wording and any moderation flags applied before sending.
• Calendar entries, handover details, tags, reminders, and change requests.
• Expense records, receipts, and the responses each parent gives to them.
• Documents you upload to Legal documents or Family files, or attach to messages. Each file is either “Private — only I can see this” or “Shared — my linked co-parent can see this”; you choose before upload and can change it later.
• Private journal entries, which are visible only to the person who wrote them and are never shared with your co-parent.
• Photos and videos you add to the shared family album, and any captions.
• Call metadata for in-app calling: who called whom, whether the call was answered, when it started and ended, and how long it lasted. In-app calls connect directly between devices and are never recorded — we hold no audio or video from a call, only this factual call log.
• Export verification records: the reference ID and content fingerprint used to confirm that an export has not been altered since it was generated.
• Billing information: payments are handled by Stripe. We store your subscription status and Stripe customer and price IDs, but never your full card number.
• Technical information: device, browser, IP address, and basic usage logs.

3. Children’s data

ChildApart is designed for use by parents and carers, not directly by children. Information about your child — such as their name, school, or health details you choose to record in the calendar, Legal documents or Family files — is provided by you as part of coordinating their care, and you remain responsible for its accuracy. Some of this information (for example, a health condition) is special category data under Article 9 of the UK GDPR. Our lawful basis under Article 6 for processing it is the performance of our contract with you (Article 6(1)(b)), and our Article 9 condition is your explicit consent (Article 9(2)(a)), which you give by choosing to enter health or similar sensitive details into an optional field after being told what the field is for. You can withdraw that consent at any time by deleting the information from the app or asking us to remove it, which will not affect processing already carried out. Where a specific record is needed to protect the vital interests of a child who cannot give consent — for example a life-threatening allergy that must be passed to a carer — we may also rely on Article 9(2)(c). Special category data is subject to the same access controls as your other family data: visible only to the co-parent(s) and carers you link.

4. Child Profiles and Daily Logs

Where a parent chooses to use Child Profiles and Daily Logs, ChildApart processes information about a child's routines, wellbeing, allergies, medication and healthcare contacts, and may process a child's photograph. This may include special-category health data. We process this information only where the account holder has given explicit consent and to provide the record-keeping and reminder features they request. Parents control whether an invited carer may view health information or view and add Daily Log entries. Carers cannot access parents' messages, expenses, documents, journals or safety notes. Access can be withdrawn at any time. ChildApart does not provide medical advice or connect directly to NHS or GP systems.

5. Why we use it

• To run the app and let you and your co-parent coordinate.
• To process subscriptions, apply promo codes, and issue invoices via Stripe.
• To suggest calmer wording for a message you are drafting, which you can use, edit or ignore — we never send a message on your behalf — and to refuse a small number of messages containing abusive or threatening language.
• To secure the service, prevent abuse, and comply with legal obligations.

6. Who sees your data

Only you and the co-parent(s) you link can see the messages, diary, calendar, and documents you share with them. Access is enforced with row-level security in our backend. We do not sell your data. We use trusted processors — including our cloud database/auth provider, Stripe (billing), and an AI provider used only to rephrase outgoing messages into calmer wording.

7. Message content and AI

When you compose a message, your draft may be sent to our AI provider for the sole purpose of suggesting a calmer version. We do not use your messages to train AI models. Sent messages are permanent so they can serve as a reliable record between co-parents.

8. Retention

We keep account, messaging, calendar, and document data for as long as your account has an active plan. If your plan or trial ends unpaid, your account stays read-only for 3 months so you can view and export your records; we warn you 30 days and 7 days before the end. After those 3 months your account and the personal data that belongs only to you are permanently deleted, with no further archive period. Shared family records (such as calendar entries, expenses and messages) stay available to the other parent while they have an active plan, because they are that parent’s record too. If you delete your account, we remove personal data within a reasonable period, except where we must keep records for legal, tax, or safety reasons. Where we reasonably believe information may be needed for legal proceedings, to respond to a court order, or to investigate a safety concern, we may retain it for longer than our standard retention period.

9. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your data, and to object to certain processing. Email help@childapart.com or use the support link in your account to exercise these rights. Please note that jointly-created shared records — calendar entries, expenses and messages — remain part of your family's shared record after you export or delete your own account, unless both parents agree to their removal, so that the record stays accurate and complete for the other parent. If you are not satisfied with how we have handled your data, you also have the right to complain to the Information Commissioner’s Office (ico.org.uk), the UK’s data protection regulator.

10. International transfers

Some of our processors may store or process data outside the UK. Where this happens, we put in place appropriate safeguards, such as the UK’s International Data Transfer Addendum or an adequacy decision, to protect your data to UK standards.

11. Compelled disclosure

We may disclose account information, messages, or other data where required to do so by a valid court order, subpoena, or other lawful legal process. Where we are legally permitted to do so, we will make reasonable efforts to notify the account holder before disclosure.

12. Security

Data is transmitted over HTTPS and stored in access-controlled databases and storage buckets. No system is perfectly secure, but we work to protect your data with reasonable technical and organisational measures.

13. Cookies

We use essential cookies and local storage to keep you signed in and to remember drafts and preferences. We do not use advertising cookies.

14. Changes

We may update this policy. Material changes will be notified in the app or by email.