Privacy Policy

Clarico App Ltd · Last updated: [insert date] · Version 1.0 (Draft)

This Privacy Policy explains how Clarico App Ltd ("Clarico", "we", "us", "our") collects, uses, stores and protects personal data when you use the Clarico mobile application. Clarico helps parents and carers of children with complex disabilities and special educational needs organise appointment notes, professional contacts, and EHCP information — because of the nature of this information, we take data protection especially seriously.

1. Who we are

Clarico App Ltd is a private limited company registered in England and Wales (company number [insert]), with its registered office at [insert registered address]. We are the data controller for personal data processed through the App.

Contact: privacy@claricoapp.co.uk

2. What data we collect

2.1 Account information

Your name and email address
Password (stored securely, encrypted, never in plain text)
Subscription and billing status (managed via Apple App Store, Google Play, and RevenueCat)

2.2 Child profile information

Your child's name
Any information you choose to add about your child's care, education, professionals, or EHCP status

This may include special category data relating to your child's health, as defined under UK GDPR. You control what you enter into the App, and you are responsible for the accuracy of information you add.

2.3 Notes and content you create

Care and medical notes you write or dictate
Education and EHCP notes you write or dictate
Professional directory entries you add
Photos or documents you capture, where you have connected your own Google Drive or Dropbox account

2.4 Technical and usage data

Device type and operating system version
App usage and crash diagnostics, used only to improve reliability
Calendar data is read directly from your device with your permission and is not stored on our servers

3. How we use your data

We use your data only to provide and improve the Clarico service — to create and manage your account, store and organise your notes, enable search, sync your data across your devices, and provide support. We do not use your data for advertising, and we do not sell your data to any third party, under any circumstances.

4. Legal basis for processing

Contract — processing necessary to provide the App and your subscription
Consent — where you connect third-party services, or enter special category data about your child
Legitimate interests — basic technical diagnostics needed to keep the App secure and functioning

Where we rely on your consent, you may withdraw it at any time through the App's settings.

5. Special category data

Notes you enter about your child's care and medical needs may constitute special category data (health data) under UK GDPR. We process this only because you have chosen to enter it, with technical safeguards including encryption at rest and in transit.

6. Where and how your data is stored

Your data is stored using Supabase, hosted in the European Union / United Kingdom region, to minimise international data transfers. Data is encrypted at rest and in transit. Notes are also cached locally on your device to allow the App to work offline, syncing once you reconnect.

7. Third parties we work with

Supabase — secure database hosting and authentication (EU/UK region)
Apple App Store / Google Play — subscription purchases and billing
RevenueCat — subscription management
Google Drive / Dropbox — only if you choose to connect your own account

We do not share your data with any advertising or marketing third parties.

8. Data retention

We retain your account data for as long as your account remains active. If you delete your account, we will delete your personal data within [insert timeframe], except where required for legal or accounting purposes.

9. Your rights

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your data
Request a copy of your data in a portable format
Object to or restrict certain processing
Withdraw consent at any time, where processing is based on consent

To exercise these rights, contact us at privacy@claricoapp.co.uk. You may also complain to the Information Commissioner's Office (ICO).

10. Children's privacy

Clarico is designed for use by parents, carers and guardians aged 18 and over. It is not intended for direct use by children. Information about a child is entered and controlled by the parent or carer who holds the account.

11. International transfers

We host data within the EU/UK to minimise international transfers. Where any limited processing occurs elsewhere, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses.

12. Security

We take appropriate technical and organisational measures to protect your data, including encryption, access controls, and secure hosting. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes within the App or by email before they take effect.

14. Contact us

Clarico App Ltd
[Insert registered address]
privacy@claricoapp.co.uk

This document is a working draft prepared to structure a future review with a qualified data protection solicitor, and does not itself constitute legal advice.