Privacy
What the app collects, who can see it, and the things it deliberately never touches.
This is an interim notice for a private beta, not a finished privacy policy. It is written to be accurate about what the software actually does today, and it has not been reviewed by a lawyer. A full policy reviewed by counsel will replace it before the app is available to anyone outside the beta.
If anything here matters to your decision, ask before you sign up rather than after.
Your child has no email address and no password
There is one account per household, and it belongs to a grown-up. Your child never has an email address and never has a password. That is the part that does not change.
Today they have no sign-in at all: they use the app by being handed the phone. We are building a way to pair a child's own device, so that what they do on it is theirs rather than yours. When it arrives it will still involve no email address and no password for them, you will be the one who sets it up, and you will be able to undo it. Until you see it in the app, it is not there — and this notice will say so before it is.
We do not ask for your child's date of birth. The app asks how old they are in years, because a nine-year-old and a seventeen-year-old need different things from it. A year is not a birthday: it does not say when they were born, and we do not ask. That is the whole of what it knows about their age.
What is stored
| About you | About your child |
|---|---|
| Email address and password | A display name you choose |
| Your name, if you give one | An age in years, not a birthday |
| A PIN, stored on the device | The activities and tasks you both add |
| Reminder settings | What they packed, and when |
| A record that you gave permission | How much help they said they needed |
Anything you type — an activity name, a note on a task, a message of encouragement — is stored as you wrote it. If you would rather something were not in a database, do not type it into one.
What the app never collects
- No location. No GPS, ever. If you type "the sports hall" as a place, that is a label you wrote, not a position we tracked.
- No camera, microphone, photos or contacts. The app never asks for them, so it cannot use them.
- No advertising. No ads, no advertising identifiers, no behavioural profiles, and nothing sold to anyone.
- No third-party analytics. No tracking pixels, no Facebook, no Google Analytics.
- No public profiles, no messaging, no other families. There is nobody for a child to be contacted by.
- No open-ended chat. Art cannot be talked to. The AI features answer narrow questions and stop.
Who can see it
Only the adults you have added to your family in the app. Usually that is one household, and it does not have to be — a grandparent or a co-parent who lives elsewhere sees what you have given them access to. Every record belongs to one family, and the database refuses to return one family's rows to another — that is enforced by the database itself, not by the app remembering to ask.
Nobody at I Got It reads your family's activities, tasks or notes as part of running the service. We can reach the data when we have to — fixing a fault, or when the law requires it — and there is no way to build software honestly and claim otherwise.
Something a beta parent should know
Because a child has no account of their own, a child currently has no private space in the app. Anything they enter is visible to the grown-ups in the household. Older teenagers will eventually get a private area; today they do not have one, and we would rather say so than let you assume otherwise.
Artificial intelligence
Some features can suggest things — what you might need for an activity, or how to break a big task into steps. They are off unless you turn them on, and the app works without them.
When they are used, only the minimum needed is sent, and never your child's name. We keep a record that a request happened and whether it worked. We do not keep what was sent or what came back.
That record is deleted after ninety days, automatically. Crash reports go the same way, on the same schedule. Neither is kept because we need it — it is there so you can ask what happened, and ninety days is how long that question stays worth answering.
AI never decides anything that matters developmentally — how much help your child needs, whether to stop reminding them, or whether something is safe. Those are fixed rules, not a model's opinion.
When something breaks
The app reports crashes so they can be fixed. A crash report says which screen failed and on what kind of device. It carries no error message and no stack trace, deliberately, because those are the places a child's data would otherwise leak into a log.
Getting your data, and deleting it
From Settings you can delete all of it. Deletion removes the family's records, not just the ability to see them.
You can also export everything. Not a summary — every record the app holds about your family, including the ones you never see: the check-ins, what was ticked off, what your child has taken over, the answers you gave us, the settings behind the suggestions, when an AI feature was used, what you consented to, and every change to who can see your family's data.
Four things are left out of the file, and none of them is about your family. Internal database numbers, which identify nothing outside our own system. The security digest of a device-pairing code. Our catalogue of responsibilities, which is the same for everybody. And your own login, which belongs to you at our sign-in provider rather than to us. Everything else is in there.
Beta caveat, stated plainly: backups may retain deleted records for a short period before they age out. This is one of the areas a reviewed policy will describe precisely.
Where it lives
Data is stored with Supabase, which hosts on Amazon Web Services. AI requests, when enabled, go to Anthropic. Those are the only two third parties that touch your family's data.
Asking us something
During the beta, contact whoever invited you to it. A published contact route comes with the reviewed policy.