Privacy Policy

SEND Anchor ("we", "us", or "our") is a private journaling app designed to help parents and carers of neurodivergent children track daily patterns and behaviour. We take privacy extremely seriously — especially because the information you log relates to children and may include sensitive health data.

Some of the information you record in this app — such as a child's diagnoses, medications, and behavioural health data — constitutes special category data under the UK GDPR and EU GDPR (Article 9). We process this data solely on the basis of explicit consent, which you provide when creating your account and using the app. You may withdraw consent at any time by deleting your account.

We process this data only to provide the journaling and tracking features you have requested, and for no other purpose.

• Account information: Your email address and name, used to authenticate your account.
• Child profile data: Name, age, diagnoses, medications, and goals you enter for each child.
• Journal data: Daily logs including sleep, mood, meals, school attendance, behaviour events, sensory observations, and medication records.
• Emergency contacts: Healthcare provider details you choose to store within the app.
• Carer wellbeing: Optional daily mood and notes you record about yourself.
• Device permissions: The app may request access to your camera (photo attachments) and microphone (voice notes). These are only accessed when you actively use those features.
• Usage data: Anonymous, aggregated analytics to help us improve the app. No personal or child data is included.

• To provide and maintain the app's core journaling and tracking features.
• To store your entries securely so you can access them across devices.
• To generate AI-powered insights and support (see AI Features section below).
• We do not sell your data to any third party.
• We do not use your child's data for advertising or profiling.

• Contract: Processing your account information is necessary to provide the service.
• Explicit consent: Processing special category data (health and behavioural information about children) is based on your explicit consent at sign-up.
• Legitimate interests: Anonymous usage analytics to maintain and improve the app, where these do not override your privacy rights.

SEND Anchor includes AI-powered features (Insights Chat and Intervention Coach) that help you understand patterns and receive behavioural support suggestions. When you use these features, relevant portions of your log and behaviour data are transmitted to a third-party AI provider (currently OpenAI) to generate responses.

• Data sent includes: child logs, behaviour events, and relevant context you share in the conversation.
• This data is used only to generate your response and is not used to train AI models (subject to the AI provider's data processing agreement).
• You can choose not to use these features if you do not wish your data to be processed this way.
• All transmission to the AI provider is encrypted in transit (HTTPS).

• Your data is stored on secure cloud servers provided by Base44, our infrastructure platform.
• All data is encrypted in transit (HTTPS/TLS) and at rest.
• Access to your data is strictly scoped to your account — no other user or administrator can view your personal journal entries.
• Row-level security controls are applied at the database level to enforce this isolation.

• Camera: Used only when you choose to attach a photo to a log entry. Never accessed otherwise.
• Microphone: Used only if you record a voice note. Never accessed in the background.
• Storage/Photos: Used only to let you pick an existing photo from your library to attach to a log.

You can revoke any permission at any time in your device's Settings app. Revoking a permission will only prevent that specific feature from working — the rest of the app remains fully functional.

Your data is retained for as long as your account is active. You can request deletion of your account and all associated data by contacting us at support@theartoflivingwell.co.uk. Upon deletion, all your personal data and journal entries are permanently removed from our servers within 30 days.

SEND Anchor is designed for parents and carers to log information about their children — it is not a service directed at children and is not intended to be used directly by children under 13 (or the equivalent age in your jurisdiction). We do not knowingly collect personal information directly from children, and the app does not require children to create accounts or submit data themselves.

Under the U.S. Children's Online Privacy Protection Act (COPPA), because the app is operated by a parent or carer on behalf of their child, the child-related data you enter is treated as personal information provided by a parent. We obtain verifiable parental consent through the account registration process — only an adult account holder can create a profile and enter child data. You have the right to review, correct, or delete any child-related information at any time by contacting us at support@theartoflivingwell.co.uk.

All child-related information you enter is treated as sensitive health and behavioural data, protected under UK/EU GDPR Article 9 special category provisions and handled in accordance with COPPA's data minimization, security, and parental control requirements. This data is never shared, sold, or used for advertising or profiling, and is only accessible within your own private account.

The behavioural and health information you log (including diagnoses, dysregulation episodes, sensory triggers, sleep patterns, medication records, and emotional observations) is treated with the highest level of protection under both UK/EU GDPR and COPPA:

• Data minimisation: We only collect behavioural data that is necessary to provide the journaling and pattern-tracking features you have requested. No data is collected passively from the child.
• Purpose limitation: Behavioural data is used solely to display your own logs, generate AI insights when you request them, and produce exportable reports. It is never used for advertising, profiling, or research.
• Strict access controls: Row-level security ensures only you (the account holder) can access your child's data. No administrator, other user, or third party can view your personal journal entries.
• Encryption: All data is encrypted in transit (HTTPS/TLS) and at rest, meeting GDPR security requirements (Article 32) and COPPA's requirement for reasonable security measures.
• Parental control: As the account holder, you have full control to edit, export, or permanently delete all behavioural data at any time. Deletion removes all associated records within 30 days.
• AI processing transparency: When you use AI features, only the relevant log data is sent to generate your response. This processing is carried out under explicit consent and the data is not used to train AI models.

Under UK/EU GDPR, you have the right to:

• Access the personal data we hold about you.
• Correct any inaccurate data.
• Delete your data ("right to be forgotten").
• Restrict or object to processing.
• Data portability — receive your data in a machine-readable format.
• Withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at support@theartoflivingwell.co.uk. We will respond within 30 days.

If you have any questions about this Privacy Policy, please email us at support@theartoflivingwell.co.uk.

If you are based in the UK and believe we have not handled your data correctly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.