ParentUp app privacy policy

ParentUp is operated by ULIS SOLUTIONS ("we", "us"), the data controller for the personal data described here. Contact: privacy@parentup.co.

ParentUp is a parenting-support app for adults (18+). Children do not use ParentUp. Information about your children exists in the app only because you, their parent or guardian, choose to enter it.

What we collect and why

• Your account. Your email address and a password (stored as a secure hash by our authentication provider). If you choose Sign in with Google instead, we receive your Google account email address and basic profile details from Google via Google OAuth, and we use them solely to sign you in — we never request or receive access to your contacts, Drive, or anything else in your Google account. Used for signing you in, account recovery and account deletion. Legal basis: performance of a contract.
• What you tell us about your family. Child profiles (name, date of birth, gender, temperament answers), your own parenting-profile answers, moments and check-ins you log, journal reflections, and Story entries including photos. Used for the app's core features — personalised courses, insights, coaching and your private family Story. Legal basis: performance of a contract; for anything health-adjacent you choose to enter (such as additional needs), your explicit consent, withdrawable by deleting the data or your account.
• Purchases. If you subscribe to ParentUp Plus, the purchase is processed by Google Play Billing and managed through RevenueCat. They tell us only your subscription state (which plan is active and until when). Card numbers and payment details never reach us. Legal basis: performance of a contract.
• Analytics and stability. Anonymous usage events (PostHog) to understand which features help, and crash reports (Sentry) to fix bugs. Crash reports are scrubbed of emails and identifying details before they leave your device. Legal basis: legitimate interest in improving and maintaining the app.

Most data stays on your device

ParentUp is local-first: your day-to-day data lives on your phone. A subset syncs to our cloud so specific features work — your account and profiles, the Story keepsake (including shared access for a co-parent you invite), and pattern observations. If you never use those features, the related data never leaves your device.

AI-assisted features

When you chat with Coach Ella, or when the app generates insights from a journal entry or check-in, the relevant text (never your photos) is processed on our servers and sent to Anthropic's Claude API to generate the response. Anthropic does not use this data to train its models. We apply daily per-account limits and never send more than the feature needs.

Photos

Story photos are stored in a private bucket accessible only to your account (and a co-parent you explicitly invite). Location metadata (EXIF) is stripped before upload. Access uses short-lived signed links.

Where your data lives

Cloud data is stored with Supabase on servers in the European Union (AWS eu-west-1, Ireland). Traffic is encrypted in transit. Access is enforced per-account at the database level.

Our processors

• Supabase — database, authentication and file storage (EU)
• Google — optional Sign in with Google (email + basic profile, authentication only)
• Anthropic — AI responses via API
• PostHog — product analytics
• Sentry — crash reporting (scrubbed)
• RevenueCat / Google Play Billing — subscription state; no card numbers ever reach us

We never sell your data and never share it with advertisers. Nobody sees your family's data except you, a co-parent you invite, and the processors above acting under our instructions.

Sharing with a co-parent

If you invite a partner with an invite code, you both see and add to the same children and family Story. Either of you can unlink at any time in Settings; unlinking stops all further sharing.

Retention and deletion

Your data is kept while your account exists. In the app, Settings → Account → Delete account permanently erases your cloud data — profiles, children, moments, photos, patterns — and your login, immediately and irreversibly. You can also request deletion without the app: see parentup.co/delete-account. Backup copies expire within 30 days.

Your rights

Under UK GDPR you can ask us for a copy of your data, ask us to correct or delete it, restrict or object to processing, and port your data. Write to privacy@parentup.co. If you are unhappy with how we handle your data you may complain to the UK Information Commissioner's Office (ico.org.uk).

Changes

If we make material changes to this policy we will tell you in the app before they take effect.