This Privacy Notice explains how MyDay ("we", "us") collects, uses, and protects your personal data when you use the MyDay service.
Who we are
MyDay is the controller of your personal data for the purposes of UK GDPR and equivalent laws.
What we collect
- Account data: email address, display name, role (parent / organisation), authentication credentials.
- Profile content: children's first names, the routines, activities, symbols and photos you upload.
- Usage data: basic logs (timestamps, device type, IP address) for security and reliability.
- Support messages: any correspondence you send us.
How we use your data
- To create and operate your MyDay account (contract performance).
- To deliver the routines and picture symbol board features (contract performance).
- To prevent fraud and keep the Service secure (legitimate interests).
- To respond to support requests (legitimate interests).
- To comply with legal obligations (legal obligation).
Who we share data with
- Hosting and infrastructure providers who run the database, storage and authentication systems on our behalf.
- Paddle.com Market Limited, our Merchant of Record, for payment processing, subscription management, tax compliance, and invoicing.
- Professional advisers (legal, accounting) where strictly necessary.
- Authorities where required by law.
International transfers
Some of our service providers are located outside the UK/EEA. Where personal data is transferred internationally we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
Retention
We retain account and profile data for as long as your account is active. When you delete your account from Settings, your profile, children, routines, symbols and uploaded photos are permanently deleted. Limited billing records may be retained by Paddle as required by law.
Your rights
Subject to applicable law you have the right to access, rectify, erase, restrict or object to processing of your personal data, the right to data portability, and the right to withdraw consent. You also have the right to lodge a complaint with your local supervisory authority. We will respond within 1 month of a verified request.
Security
We use industry-standard technical and organisational measures (TLS in transit, encryption at rest, scoped access controls) to protect your data.
Children
MyDay is intended for use by parents, caregivers and support organisations. We do not knowingly collect personal data directly from children. Parents and organisations choose what information to record about a child within their own MyDay account.
Contact
For any privacy question or request, contact us through your in-app Settings page.