Privacy policy (draft)

Who we are

Kitty Board ("we", "us") provides the Kitty Board app on the web, iPhone and Android. We are the data controller for the personal data described here. Contact: [email protected]. [Company name, registered address and ICO registration number to be added.]

What we collect

• Account details: for grown-ups, your email address, display name, colour and cat design. Children's accounts have no email address: just a display name, colour, cat design and a PIN (stored only as a secure hash).
• What you make: boards, lists, cards, tasks, comments, photos you attach, hearts, Kitty Jars, prizes, nudges and approvals.
• Family and friends: who is in your family, who you share boards with, and invitations.
• Billing: your plan and its status. Payments are handled by Apple, Google or our card processor; we never see your full card details.
• Technical: the device notification subscription if you turn reminders on, and basic logs needed to keep the service secure.

How we use it

To run Kitty Board for you and the people you share with, to send the reminders you ask for, to provide support, to keep the service secure, and to manage your subscription. Our lawful bases are performance of our contract with you, and our legitimate interests in keeping the service safe and working. Where we need consent (for example notifications), we ask for it.

Children

• A parent or guardian creates a child's account and stays responsible for it. Children's accounts never need an email address.
• Only a child's own grown-ups can see their Kitty Jar, prizes and approvals. Friends and other families can't.
• Children can only share boards with their own grown-ups, and can't use Help me.
• We design for the Children's Code: high privacy by default, no ads, no profiling, no nudges to spend money.
• A guardian can delete a child's account at any time; children belong to a family and are deleted with it.

Help me and AI

When a grown-up on the Family plan uses Help me, the card or brain dump they ask about (and the names of their boards and lists) is sent to Anthropic, which provides the Claude AI model, to write the answer. Anthropic processes it for us under a data processing agreement and does not use it to train its models. Nothing is sent unless you use Help me.

Where your data lives

Your data is stored with our database provider, Supabase, in its London (UK) region, and backed up there. Some of our providers (for example Anthropic for Help me, Apple and Google for app store payments and notifications) may process data in other countries; where they do, we rely on UK-approved safeguards such as the International Data Transfer Agreement.

Who we share it with

Only the providers we need to run Kitty Board (hosting and database, AI for Help me, payments, notifications), each under contract. We never sell your data, never share it for advertising, and never show ads.

How long we keep it

For as long as your account is open. When you delete your account we delete your data (and your children's accounts) within 30 days, apart from limited billing records we must keep by law.

Your rights

Under UK GDPR you can access, correct, export or delete your data, and object to or restrict some uses. You can export your data and delete your account yourself in Settings. For anything else, email us. You can also complain to the Information Commissioner's Office (ico.org.uk).

Changes

If we change this policy in a way that matters, we'll tell you in the app before it takes effect.

Last updated: draft, October 2026.