Privacy

Binabasa nito ang email ng paaralan. Hindi nito kailanman nalalaman ang pangalan ng iyong mga anak.

Updated 8 November 2026

The short version

  • The app is for parents and the adults who help them (grandparents, nannies, drivers). Children do not have accounts. We hold some information about your children because you give it to us so the app can plan their school life.
  • We use AI only when your family turns it on. Before any text goes to the AI, children's names, nicknames, student IDs, family ID numbers and adults' names, emails and phone numbers are replaced with codenames. Health, clinic, special-needs, behaviour and safeguarding emails never go to the AI.
  • Photos and scanned pages are read on our own server; pictures never leave it.
  • Voice notes you record on Add are turned into text on our own server; the recording never goes to an AI or to any other company. The text is then read like a note you typed, with names hidden before any AI sees it, and what was heard is shown only to you.
  • If you connect your Gmail, we read school email straight from it with read-only access: we only fetch messages from your school’s own addresses and never read anything else in your mailbox. We read school email from the start of the school year (1 August) onward, so the app can answer questions and fill in your calendar for the whole year; only emails from the last 30 days become to-dos and reminders (an older email still does when a date in it is in the next 14 days). You can disconnect at any time in Settings.
  • If your family turns on Zenda receipts in Settings, the connected Gmail also fetches fee receipts from zenda.com. They are read on our own server like any school PDF. Off by default.
  • Optional "Hey Mum" greetings: a short clip of your child saying what they call you, and their photo. Only the parent who added them hears or sees them; they are stored encrypted on our server, never sent to AI, and deleted at once when removed. If you turn on the voice note option in Settings › Notifications (off by default), the clip is sent to Telegram, to your own chat, with your alerts.
  • Birthdays and parties you add to your family calendar are seen only by your family and never sent to AI.
  • Posters tab: when a school email, PDF or newsletter carries an event poster, we keep a copy of that picture for your family, redrawn without camera or location details and stored encrypted on our server. Its date, time, place and cost are read from it on our own server, never by AI, and it is shown only to the family members who can see Social. Nothing is kept from health, support or wellbeing emails. A poster is deleted 14 days after its day, or 60 days after it arrived when it has no day.
  • Social tab: to summarise school newsletters and school news, we open the public information links in them (at most 5 per email) from our own server, respecting each site’s robots.txt. We never open a link that signs in, pays, books, replies, confirms or unsubscribes, or one that carries personal details. Page text is kept encrypted for at most 7 days; only the summary stays.
  • No ads. No tracking. No analytics or advertising tools. We never sell or rent your data.
  • You can download your data and delete your account in Settings. The family owner can delete the whole family in Settings.

How long we keep it

  • The full text of school emails, attachments, shared messages, PDFs, photos and voice notes (the recording and what was heard) is encrypted and deleted 30 days after it arrives, unless you pin it. Older school email we fetch from your connected Gmail (from earlier in the school year) is deleted 7 days after we fetch it. Subject lines, the few topic words taken from them (they group one topic’s emails into one School row) and attachment names are deleted on the same clock.
  • The plan the app makes from them (what, when, the school’s own short wording) stays until you delete it, your family or your account.
  • Posters (event pictures kept from school mail) are deleted 14 days after their day, or 60 days after they arrived when they have no day, and with your family.
  • If you connect Gmail, the key Google gives us is stored encrypted and never logged. It is deleted, and revoked at Google, when you disconnect, when you leave or delete your family, or when you delete your account. So that an email we already have from the other parent’s mailbox is not fetched twice, we also keep Gmail’s id for it, never the email, and those ids are deleted with the connection.
  • Sign-in codes last minutes. Sessions end after 7 days unused, and at most 30 days after you signed in.

Who else processes your data

  • Hetzner Online runs our server and database in Nuremberg, Germany (EU).
  • Cloudflare Email Routing receives the emails you forward and passes them to our server.
  • Resend sends sign-in codes, links and the weekly digest.
  • Telegram delivers notifications, only if you link it and choose Telegram for your alerts.
  • OpenRouter passes codenamed text, only when your family has turned AI on, to the AI model (Claude Haiku), and only to providers that keep no copy of it (zero data retention).
  • Google, Apple and Microsoft are involved only if you choose them to sign in. Google’s Gmail service is used only if you connect your Gmail, to fetch messages from your school’s addresses (and from zenda.com, if your family turns on Zenda receipts).

Your rights

  • See and download your data, correct it, and delete it, at any time, from Settings.
  • Turn AI off at any time; from then on every email is read by rules on our server only.
  • If we change this promise, we will tell you in the app before a significant change takes effect, and ask first when a change needs your consent.

The full privacy policy, with our company details and a contact address for privacy requests, is published before public launch.