Legal
How we collect, use, and protect your information. Written in plain English.
We handle school communications on behalf of parents. That means we take data seriously. This policy explains exactly what we collect, why, and what we do with it — no legal jargon, no surprises. Questions? Email rav@parentplan.ai.
Parent Plan is operated by AJ Strategies Ltd, a company registered in England and Wales.
Contact:
Email: rav@parentplan.ai
ICO Registration Number: C1904430
If you have any questions about how we handle your data, email us at rav@parentplan.ai. We aim to respond within 2 working days.
When you sign up, we collect your name, email address, and WhatsApp phone number. We use this to create your account and deliver your summaries.
We ask for your children's first names, year groups, and school. We use this to personalise your summaries to what's relevant for your family. We do not ask for or store any other information about your children.
When you forward a school email to your Parent Plan address, we receive and process the email and any attachments. We extract the relevant dates, events, and actions from the content. The raw email and attachments are deleted within 24 hours of receipt. We never read your emails manually — all processing is fully automated.
We use Stripe to handle all payments. We do not store your card details. Stripe handles all payment processing and is PCI-DSS compliant. We retain a record of your subscription status and payment history for accounting purposes.
We collect basic technical logs (delivery status, error logs) to keep the service running. We do not use tracking cookies or behavioural analytics.
Under UK GDPR, we must have a lawful basis for processing your personal data. Here is our basis for each category:
Purpose: To provide and deliver the service
Lawful basis: Contract — necessary to perform our agreement with you
Purpose: To personalise summaries to your child
Lawful basis: Contract — necessary to perform our agreement with you
Purpose: To extract relevant information and generate your summary
Lawful basis: Contract — necessary to perform our agreement with you
Purpose: To manage your subscription
Lawful basis: Contract and Legal Obligation
Purpose: To maintain service reliability and debug issues
Lawful basis: Legitimate Interests — keeping the service running securely
We do not use your data for marketing to third parties. We do not sell your data. Ever.
When you forward a school email to your Parent Plan address:
No human reads your emails. All processing is fully automated. Our extraction system uses AI to identify relevant information — it does not store, learn from, or share the content of your emails beyond what is needed to generate your summary.
You are the parent or guardian of the children on your account. By adding your children's details, you confirm you have the right to do so.
We process your children's information on your behalf, under your direction, as part of the service you have signed up for. We extract only information that is relevant to their year group from school communications. We do not build profiles on your children. We do not share their information with any third party except as described in Section 6.
School emails may contain references to other children. We do not extract, store, or process information about children who are not on your account.
We use a small number of trusted third-party services to operate Parent Plan. Each is listed below with their role and where your data is processed.
| Provider | Role | Data location |
|---|---|---|
| Supabase | Database — stores your account, children, and extracted items | EU (Ireland) |
| Railway | Application hosting | EU |
| ImprovMX | Email forwarding — receives your forwarded school emails | EU |
| Anthropic (Claude API) | AI extraction — processes email content to extract relevant information | USA (SCCs in place — see note) |
| Meta (WhatsApp Cloud API) | Delivers your WhatsApp summaries | USA (SCCs in place — see note) |
| Stripe | Payment processing | USA (SCCs in place — see note) |
| Twilio | SMS verification (one-time codes only) | EU |
Note on USA-based processors: Anthropic, Meta, and Stripe are US-based companies. Each has signed Standard Contractual Clauses (SCCs) with us, which is the approved UK GDPR mechanism for international data transfers. Each operates under robust data protection commitments. We have reviewed their data processing agreements and are satisfied they meet UK GDPR requirements.
We do not share your data with any other third parties, including advertisers, data brokers, or analytics companies.
When you delete your account, we begin the deletion process immediately. All personal data is removed within 30 days, except payment records which we are legally required to retain.
Under UK GDPR, you have the following rights:
To exercise any of these rights, email us at rav@parentplan.ai. We will respond within 30 days.
Parent Plan uses only essential session cookies to keep you logged in to your account. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. No cookie consent banner is required because we only use strictly necessary cookies.
If we make significant changes to this policy, we will notify you by email and by WhatsApp message before the changes take effect. The date at the top of this page always shows when it was last updated.
AJ Strategies Ltd
rav@parentplan.ai
ICO Registration Number: C1904430