Who we are
SchoolDone is operated by CGS&C Limited, a company registered in England and Wales (company number 17403427), with its registered office at Clipped Hedge Cottage, Dunmow Road, Hatfield Heath, CM22 7EE. If you have any questions about this policy or your data, contact us at info@schooldone.co.uk.
What we collect
- Your account:your email address and password (we never see your password itself - it's stored securely by our authentication provider, Supabase). If you choose "Continue with Google" or "Continue with Microsoft" instead, that company confirms who you are and passes us your name and email address (and, from Google, a profile picture link) - never your password for that account.
- Your family: a family name (used to generate your private forwarding address) and your timezone.
- Your children:whatever you choose to add in Settings - a name, school, year, class, teacher's name, free-text notes, after-school clubs, and an optional boy/girl icon. Only a name is required; everything else is optional and entirely up to you.
- What you send us: school emails you forward, screenshots you upload, or notes you type in yourself.
- What we produce: the calendar events, to-dos, and cancellations our AI pulls out of the messages above.
- Technical data: a device token if you turn on push notifications, and a private link if you choose to subscribe your own calendar app.
Why we collect it
Everything above exists for one reason: to read what your school sends you and turn it into a calendar you can trust, without you having to retype anything. We process this data because it's necessary to provide the service you signed up for, and to bill you for it.
Who we share it with
We never sell your data. We use a small number of specialist providers to actually run the service:
- Anthropic(our AI provider) reads the content of each message you send us - including your children's names, schools, and any notes you've added - so it can correctly attribute the message and extract the right items. This happens every time you forward an email, upload a screenshot, or add a note.
- Supabase hosts our database, handles sign-in, and stores any screenshots/attachments you upload.
- Postmark receives the emails you forward to us, and sends the reminder emails we send you.
- Stripe handles payment - we never see or store your card details ourselves.
- Vercel hosts the app itself.
- Amazononly ever receives a generic search term (e.g. "kids wellies") when we suggest something to buy - never anything that identifies you or your child.
How long we keep it
The original content of a message - its text, or any screenshot or PDF - is kept for one week so you can look back at it, then automatically and permanently deleted, always within 8 days. After that we keep only a short summary of what it said, written without other children's names or anyone's contact details. Location and other hidden data are removed from photos before they are stored at all.
The calendar items themselves - the title, date, and description of what's happening or needs doing - are deleted 90 days after their date has passed, or 90 days after they were added if they never had a date. Your children's profile (names, school and class) is kept for as long as your account exists.
Nobody can join your family from an invite link alone: the person who set up the family has to approve them first.
You can delete your account at any time from Settings. This removes everything permanently and immediately - your children's details, every calendar item, every uploaded file, and cancels your subscription. There is no way for us to get it back afterwards, and no reason to keep it once you've asked us to remove it.
Your rights
- See and correct your data: everything we hold about your family and children is editable directly in Settings.
- Delete it:use "Delete my account" in Settings, or contact us and we'll do it for you.
- Ask questions or object: contact us at info@schooldone.co.uk.
- Complain:if you're in the UK, you can complain to the Information Commissioner's Office at ico.org.uk.
About children's data
SchoolDone accounts are for parents and guardians, not children - your child never signs in or has their own account. You control everything added about them, and can remove or edit it at any time.
A screenshot of a school app or group message can sometimes incidentally include another child's name (for example, a post congratulating a classmate). We don't independently check the content of what you upload - please keep this in mind when sharing screenshots.
Security
Every family's data is isolated at the database level - not just hidden in the app, but genuinely inaccessible to anyone else's account, enforced by our database itself. Connections to SchoolDone are encrypted, uploaded files are private by default, and a subscribed calendar feed uses a private, unguessable link rather than a password.
Cookies
We only use strictly necessary cookies to keep you signed in. We don't currently use any advertising or tracking cookies. If that ever changes, we'll update this page and ask for your consent first.
International transfers
Most of our providers process data within the UK or EEA. Some - including Anthropic (our AI provider) and Vercel (our hosting provider) - may process data in the United States as part of delivering their service. Where that happens, we rely on their standard contractual clauses and equivalent safeguards to protect your data to the same standard as if it stayed here.
Changes to this policy
If we make a meaningful change to how we handle your data, we'll update this page and change the date at the top.