Privacy | Home Ed Helper

Last updated: September 2026

1. Who We Are

1.1 This Privacy Policy explains how Home Ed Helper ("we", "us", "our") collects, uses, stores, and protects personal data in connection with the Home Ed Helper website and web application (the "Service").

1.2 For the purposes of the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018, we are the data controller of the personal data described in this Policy.

1.3 This Policy applies to all users of the Service and, where relevant, to information you provide about children in your household. It does not apply to third-party websites or services that we do not control, even where linked from the Service.

1.4 Contact for all data protection matters: hello@homeedhelper.co.uk.

2. Personal Data We Collect

We collect the following categories of personal data:

2.1 Account data. Your email address, password (stored as a salted hash), and, if you choose to set them, a display name and avatar image.

2.2 Household data. The first name and age of each child in your household, as entered by you.

2.3 Log content. The entries you create, including dates, descriptions of activities, subjects, duration, setting, and any goals or plans you record for a child.

2.4 Invitee data. Where you invite another person into your household, the email address you provide for them, and, once they accept, their own account data as described in 2.1.

2.5 Technical data. A single session cookie used to keep you signed in. We do not use analytics cookies, advertising cookies, or any third-party tracking technology.

2.6 Communications. Any correspondence you send us, for example by email, including its content and any personal data you choose to include in it.

2.7 We do not knowingly collect any personal data beyond what is described above. We do not collect special category data about you as an adult user, save that information you voluntarily include within free-text log entries is not reviewed or filtered by us and remains your responsibility, except where described in Section 5.4 (custom subject names).

3. Children's Personal Data

3.1 Children do not hold their own account, do not log in to the Service, and cannot access the Service directly. All information relating to a child is entered, controlled, and managed exclusively by the parent(s) or guardian(s) in that child's household.

3.2 We process a child's first name, age, and log content as necessary to enable the parent or guardian to maintain a record of that child's education, at the direction and under the control of the account-holding parent or guardian.

3.3 By entering a child's information into the Service, you confirm that you are that child's parent or legal guardian, or otherwise hold parental responsibility or lawful authority to record that information, in accordance with our Terms of Service.

3.4 A child's data is visible only to the guardians within that child's household. It is not visible to other users of the Service, and is not used by us for any purpose other than to provide the Service to that household.

3.5 If a child is removed from a household, any log entries that relate solely to that child are deleted.

4. How and Why We Use Personal Data

We use personal data only for the following purposes, and on the lawful bases' under Article 6 UK GDPR.

4.1 We do not use personal data for advertising, do not build profiles of users for marketing purposes, and do not sell, rent, or otherwise disclose personal data to third parties for their own commercial purposes.

4.2 We do not carry out any processing based on automated decision-making or profiling that produces legal or similarly significant effects on you.

5. Who Can See Your Data

5.1 Within your household, your data and the data of any children in that household is visible only to the guardians you have added.

5.2 Outside your household, your data is not visible to other users of the Service.

5.3 We (as the operator of the Service) may access your data only where strictly necessary — for example, to investigate and fix a bug you have reported, to respond to a support request, or where required by law. Access by our personnel is limited to those who need it for these purposes.

5.4 If you create a custom subject name (rather than using one of the built-in subjects), that name is visible to other guardians in your household, and may also be seen by Home Ed Helper administrators — for example, to review custom subjects before making them available to other users. As with all free-text content you enter into the Service, you remain responsible for what you choose to include in a custom subject name.

5.5 Referrals. If you sign up using a friend's referral link, we record that your account was referred and by which account, and whether the resulting discounts have been applied. We use this only to apply the discount to both subscriptions and to prevent misuse. The person who referred you can see how many friends have joined and paid using their link, but not who they are; you cannot see who referred you beyond what your friend told you themselves. This record is deleted when your account is deleted. Our lawful basis is performance of our contract with you.

6. Data Processors and Where Data Is Stored

6.1 We use the following third-party processors to provide the Service:

(a) Supabase, as our hosted database and backend provider, for storage of account, household, and log data. Data is encrypted both in transit and at rest.

(b) [Payment processor — e.g. Stripe], to process subscription payments. We do not store your full card details ourselves.

6.2 Where a processor stores or processes personal data outside the UK, we ensure that appropriate safeguards are in place in accordance with Chapter V of the UK GDPR, such as the UK's International Data Transfer Addendum to the EU Standard Contractual Clauses, or an applicable adequacy decision, before any such transfer takes place.

6.3 We do not permit our processors to use your data for any purpose other than providing services to us, and we require them to apply security measures consistent with this Policy.

7. Cookies

7.1 We use a single, strictly necessary session cookie to keep you signed in to your account. This cookie does not track you across other websites and does not require consent under the Privacy and Electronic Communications Regulations (PECR), as it is necessary for the Service to function.

7.2 We do not use analytics cookies, advertising cookies, or any third-party tracking scripts.

8. Data Retention

8.1 We retain your personal data for as long as your account remains active.

8.2 If you remove a child from your household, log entries relating solely to that child are deleted at that time.

8.3 If you ask us to delete your account, we will delete your account and the associated personal data within a reasonable period, save where we are required or permitted by law to retain certain records (for example, billing records for tax purposes) for a longer period, in which case such data is retained only for as long as necessary for that purpose and is not used for any other purpose.

8.4 If your account becomes inactive for an extended period, we may contact you to check whether you wish to retain it before considering deletion.

9. Your Rights

9.1 Under the UK GDPR, you have the right to:

(a) be informed about how your personal data is used (as set out in this Policy); (b) request access to the personal data we hold about you ("subject access request"); (c) request that inaccurate personal data be corrected, or incomplete data completed; (d) request that your personal data be deleted, in certain circumstances; (e) request that we restrict the processing of your personal data, in certain circumstances; (f) receive a copy of your personal data in a structured, commonly used, machine-readable format, and to have it transmitted to another controller, where technically feasible ("data portability") — this is also available directly via the export feature within the Service; (g) object to processing carried out on the basis of legitimate interests, in certain circumstances; (h) withdraw consent at any time, where processing is based on consent (though note that we do not currently rely on consent as a lawful basis for any processing described in this Policy).

9.2 As the account holder, you are able to exercise most of these rights yourself directly within the Service (for example, editing entries, removing a child, or exporting your data). For anything else, or in relation to a right you cannot exercise directly, email us at hello@homeedhelper.co.uk and we will respond within one calendar month, as required by law.

9.3 We may ask you to verify your identity before acting on a request, to protect your data from unauthorised access.

9.4 If you are not satisfied with how we have handled your personal data or a request under this Section, you have the right to complain to the UK's supervisory authority:

Information Commissioner's Office Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF ico.org.uk | 0303 123 1113

We would, however, welcome the opportunity to address your concerns directly before you approach the ICO, please contact us first if you are able to.

10. Security

10.1 We take appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, and against accidental loss, destruction, or damage, including encryption of data in transit and at rest, and access controls limiting who can view your data.

10.2 No method of transmission or storage is completely secure. While we take reasonable steps to protect your data, we cannot guarantee its absolute security.

10.3 If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO without undue delay and, where required, notify affected users, in accordance with our obligations under the UK GDPR.

11. Changes to this Policy

11.1 We may update this Policy from time to time, including to reflect changes in the Service, applicable law, or our data practices.

11.2 Where a change is material, we will notify you by email in advance of, or promptly following, the change taking effect, rather than making the change without notice. The "last updated" date at the top of this Policy will always reflect the most recent version.

12. Contact Us

For any question about this Policy or how we handle your personal data, contact us at:

hello@homeedhelper.co.uk

This document is a template prepared for general informational purposes and does not constitute legal advice. We recommend it is reviewed by a qualified solicitor or data protection professional before publication, particularly to confirm your legal entity details in Section 1.1, your actual sub-processors and their data storage locations in Section 6, and that it fully and accurately reflects your real data practices.