Privacy Policy

This policy explains what PA does with your information. It describes the app as it actually works — every statement here was checked against the code that ships, not against a plan.

PA is an app for parents. It is not for children, it is not directed at children, and it holds no profile of any child. See Children below, which is the part most people want first.

1. Who is responsible for your data

The controller of your personal data is Mikalai Tarasevich, a natural person, currently operating PA as an individual developer.

Contact: privacy@parentapp.net for anything about your data · support@parentapp.net for everything else.

We do not publish a postal address, because there is no company yet and the alternative would be a private home address. The GDPR requires us to identify ourselves and to give you a working way to reach us; the addresses above are monitored and are the fastest route to a human.

This will change, and we will say so here. A company is being formed and is expected to take over PA in late 2026. When it does, this page will name the company, its registered address, and the date the change took effect.

EU representative. Once PA is available to people in the European Union, we will appoint a representative in the EU under Article 27 GDPR and name them on this page, with their address, before the app goes live in the EU.

2. What PA does without knowing anything about you

The map, the list, the filters, search, the place cards, and “Meet in the middle” all work without an account. If you never create one, we hold no name and no email address for you.

You are asked to create an account only for two things: saving a place, and asking the AI assistant.

3. Your choices, and where they live

The second screen you see in PA asks three separate questions, all switched off until you turn them on:

• Usage analytics — section 5.5
• Install attribution — section 5.6
• Advertising measurement — section 5.7

Nothing is pre-ticked, “Reject all” is as easy as “Accept all”, and you can change any of it later in Settings → Privacy & consent. Turning something off stops it — it is wired to each provider’s own off switch, not merely to a note on your phone.

Crash reporting (section 5.4) is not one of the three. It runs on our legitimate interest in keeping the app working, and it is described in full below so you can see exactly what it carries.

4. Children

PA collects no information about any individual child. There is no child profile, no name, no date of birth, no exact age, no photograph, no voice recording, and no field anywhere in our systems that could hold one.

During setup we ask two questions about your household so the app can be useful: how many children you have, and which age ranges they fall into — you tap 0–1, 1–3 or 3–4. You cannot type a birthday or an exact age, because the screen has no keyboard on it.

Those answers stay on your phone. They are used to shape what the app shows you, and they leave your device in only two situations:

• If you allow usage analytics, one event recording the answers you gave — the number of children, the age ranges, your city, and your activity and transport preferences — is sent to our analytics provider once, when you finish setup. See section 5.5.
• If you use the AI assistant, the number of children and the age ranges travel with your question so the answer fits your family. See section 5.9.

Nothing about your children is ever sent to Meta or to any advertising system, under any setting.

PA is intended for adults. If you are under 18, please do not use it.

5. What we hold, why, and who else sees it

5.1 Where you are

When you allow it, PA reads your device’s location to sort places by how long it actually takes to get there and to find the nearest changing station.

Your location is never stored on our servers. It is used on your phone and in the query that produces the answer, and then it is gone. There is no location history, and there is no table anywhere in our database that could hold one.

If you refuse location, the app still works: it opens on the city you chose during setup.

Legal basis: performance of the service you asked for (Article 6(1)(b) GDPR).

5.2 “Meet in the middle”

This feature takes two or three starting points — yours and your friends’ — and finds places between them.

We store none of it, and we cannot: the whole calculation runs on your phone. The starting points never reach our servers, so there is nothing for us to keep, hand over, or lose. That includes the address you enter for someone else, which is the reason it works this way.

One thing does leave your phone. If you type a place name or an address instead of dropping a pin, your phone sends what you typed to Google as you type, to turn it into a point on the map and to suggest places while you are still typing — the same Google that draws the map itself. It goes straight from your phone to Google, never through us, and we never see it. If you would rather not involve Google at all, press and hold the map to drop the pin yourself.

5.3 Your account and your saved places

If you save a place, PA asks you to create an account. You can do that with Apple, with Google, or with a sign-in link sent to your email address.

What we hold for an account is short: your email address (or the private relay address Apple gives us if you chose to hide yours), and the list of places you saved. That is all of it. Your setup answers are not part of your account — they stay on your phone.

Your account data is stored in the European Union (Frankfurt), with our hosting provider Supabase.

Legal basis: performance of the service you asked for (Article 6(1)(b) GDPR).

5.4 Crash and error reports

PA sends crash and error reports to Sentry so we can find and fix what breaks.

A report carries the device model, the operating system version, and the technical trace of what went wrong. It carries no name, no account, and nothing you type — we never attach your identity to a report, and the AI question screen is excluded from the diagnostic trail entirely. Sentry infers an IP address from the connection that delivers the report; that is the one piece of personal data in this channel.

Legal basis: our legitimate interest in a working, secure app (Article 6(1)(f) GDPR).

5.5 Usage analytics — only if you allow it

If you allow it, we record which screens you open and which buttons you tap, so we can see which parts of the app work and which do not. These events are stored by our analytics provider, Amplitude, under a random identifier generated on your device — not your name, your email or any identifier issued by your phone. We link that same identifier to your subscription status held by Apphud, so we can tell whether the features people use are the ones they find worth paying for.

One of these events carries your setup answers: when you finish setup, we send the city you chose, how many children you have, their age ranges as bands, and your activity and transport preferences, as a single event. Nothing about your children is attached to any other event, and no exact age, birthday or name exists for us to send.

We never attach your name, your email address, or anything you search for to these events, and no event ever carries your location.

You can withdraw this at any time in Settings → Privacy & consent; we then stop recording and remove the link. If you want the history deleted as well, ask us and we will have both providers erase it.

Legal basis: your consent (Article 6(1)(a) GDPR).

5.6 Install attribution — only if you allow it

If you allow it, Branch records which advertisement or link brought you to PA, so we can tell which of our campaigns worked. This uses identifiers from your device. Until you allow it, Branch is switched off before it can make a single network request.

You can withdraw it at any time in Settings → Privacy & consent.

Legal basis: your consent (Article 6(1)(a) GDPR).

5.7 Advertising measurement — only if you allow it

If you allow it, we share limited events about your use of the app — creating an account, opening the subscription screen, and starting a trial, together with the amount and currency — with Meta Platforms Ireland Limited, so that we can measure whether our advertising reaches parents who need this app.

For the collection and transmission of this event data, we and Meta Platforms Ireland act as joint controllers under Article 26 GDPR, and we have entered into Meta’s Controller Addendum, which determines our respective responsibilities: we are responsible for lawfully collecting and sending the events, and Meta Platforms Ireland is responsible for answering your data-subject rights under Articles 15–20 GDPR for the data it holds after transmission, as described in Meta’s Privacy Policy.

We never send your email address, your name, your searches, your location, or anything about your children.

You can withdraw this permission at any time in Settings → Privacy & consent, and it stops both the app and our subscription provider from sending further events. The app stops immediately; our subscription provider is told within seconds and stops from then on.

To exercise your data rights against Meta, you may contact us and we will forward your request to Meta within seven calendar days, or contact Meta directly.

Legal basis: your consent (Article 6(1)(a) GDPR).

5.8 Subscriptions

We use Apphud to manage subscriptions and to check whether this device already has one. Because anyone may be returning to restore a purchase they made before, a subscription record is created for every installation as soon as you have made your privacy choices, whether or not you ever open the subscription screen. That record holds a random identifier generated on your device and your subscription status — no name, no contact details, and nothing about how you use the app unless you allowed usage analytics.

Payment is handled by Apple. We never see your card details, and we cannot charge you — Apple does, under your App Store account.

Legal basis: performance of the service you asked for (Article 6(1)(b) GDPR).

5.9 The AI assistant

AI questions are answered using Anthropic (USA) as our processor: your query and quiz preferences are sent to generate the reply, are not used to train AI models, and are automatically deleted from Anthropic’s systems within days. We store only the structured interpretation of your query, never its text.

Concretely, what travels with your question is: the number of children, their age ranges as bands, your activity and transport preferences, and — when the assistant works it out from your question — the district you are asking about. Never a street address, never a coordinate, never your email address or any account identifier.

We keep a record of each question you ask for metering and cost control: the date, the structured interpretation, the size of the request, and — if we could not understand it — a one-word label saying why. There is no column in our database that can hold the text of your question. These records are deleted after 12 months.

Before your first question, PA asks you separately for permission and names Anthropic. Answers are labelled as written by AI.

Legal basis: your consent for the transfer to Anthropic; performance of the service you asked for, for the answer itself.

5.10 Maps and directions

The map inside PA is provided by Google Maps. When the map is on screen, your device talks to Google directly, which means Google receives your device’s IP address and the area you are looking at, under Google’s own terms.

When you tap Directions, PA hands the destination to Google Maps or Apple Maps on your phone. From that moment you are in their app, under their privacy policy, not ours.

Photos, and whether a place is still open. When you open a place’s full card, PA asks Google for up to two photos of that place and for whether Google shows it as temporarily or permanently closed — so that nobody drives across the city to a place that has shut. That request goes from your phone to Google and carries your device’s IP address, exactly as the map does. It happens only on the full card, never on the map and never in the list. What comes back is shown and then gone: we do not store Google’s photos or Google’s opening status, and nothing Google says is written into our own record of a place. Where Google supplies a photo credit, we show it next to the photo.

Place information in PA comes from OpenStreetMap plus our own checks. Some venue listings include a telephone number published on OpenStreetMap, which for a small business is sometimes the owner’s personal number. If that number is yours and you want it gone, email privacy@parentapp.net and we will remove it.

5.11 The sign-in email

If you sign in with your email address, the sign-in link is delivered by our email provider, Resend (Plus Five Five, Inc., USA), which processes your email address and the sign-in message on our behalf and for no other purpose. Because Resend operates in the United States, this transfer is protected by the EU Standard Contractual Clauses incorporated into our agreement with Resend. Each link works once and expires shortly after it is sent.

5.12 If you write to us

If you email us a suggestion, a correction to a place, or a question, we keep your message and your address for as long as it takes to deal with it and to keep a record of what we changed and why.

Legal basis: performance of the service, and our legitimate interest in maintaining accurate place information (Article 6(1)(b) and (f) GDPR).

5.13 Speaking instead of typing

In the search field and in the AI question field you can speak instead of typing. PA asks your phone to do the recognition on the device itself, and it offers the microphone only when your phone reports that it can recognise your language without a network. What you say is turned into text on your phone. The recording is not sent to us, and we never receive it.

About the notice Apple shows you. The first time you use the microphone, iOS displays its own permission sheet, and that sheet says speech data will be sent to Apple. That sentence is Apple’s, it is identical in every app that asks for this permission, and no app can change or remove it. It describes what the permission allows in general. What PA asks for is on-device recognition — which is also why the microphone button is simply absent, rather than quietly falling back to a network service, on a phone that cannot do it.

Legal basis: performance of the service you asked for (Article 6(1)(b) GDPR) — for the text your words become, which is the same text you would have typed. The recording itself we never receive, so there is nothing for us to hold a basis for.

6. Who else receives your data

We do not sell your data, and we do not share it with anyone not on this list.

7. Sending data outside Europe

Your account data stays in the European Union. Several of the providers above operate in the United States: Resend, Sentry, Anthropic, Amplitude, Apphud and Branch.

Those transfers are covered by the European Commission’s Standard Contractual Clauses, which form part of our agreements with each of them.

8. How long we keep things

9. Your rights

You have the right to ask us for a copy of your data, to correct it, to delete it, to restrict or object to what we do with it, and to receive it in a portable form. Where we rely on your consent, you can withdraw it at any time, and withdrawing does not make what we did before unlawful.

Here is where each of those actually happens:

• Delete your account — in the app: Settings → Delete my account. It erases your account and your saved places at once, and it cannot be undone. You can carry on using PA without an account.
• Withdraw a permission — in the app: Settings → Privacy & consent. It takes effect when you save.
• Get a copy of your data — email support@parentapp.net. We will send it within one month. It is short: your email address and your list of saved places.
• Anything else, including a correction or an objection — email privacy@parentapp.net.
• A request that concerns Meta — write to us and we will pass it to Meta within seven calendar days, or write to Meta directly.

If you think we have handled your data wrongly, you can complain to the Polish supervisory authority, Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl — or to the authority in the EU country where you live.

10. Decisions made about you

None. The AI assistant suggests places; it decides nothing about you, and nothing in PA makes an automated decision that has a legal or similarly significant effect on you.

11. Is any of this required?

Only what a feature needs. You can use the map, the filters, search and “Meet in the middle” without giving us anything at all. An email address is required to save a place or to use the AI assistant, because both need somewhere to keep the result and a way to count what is free. The three permissions on the consent screen are genuinely optional — refusing all three costs you nothing inside the app.

12. Changes to this policy

This page carries a version number and a date. If we change anything that matters — a new provider, a new purpose, a change of controller — we will update the date, and where the change affects a permission you have already given, we will ask you again inside the app rather than rely on you re-reading this page.

Version 1.1 — 14 August 2026. What changed since 1.0: section 5.2 now names Google as the recipient of what you type (a place name or an address); section 5.10 describes the photos and the opening status a place card asks Google for; section 5.13 is new and covers speaking instead of typing.