Privacy policy
Last updated: 8 August 2026
SchoolHQ is operated by Mitten Ltd (“we”, “us”), a company registered in England and Wales, company number 12404581. We are the data controller for the personal data described below. This policy explains what we collect, why, and what rights you have under UK GDPR.
Messages are sent and received on WhatsApp under the display name Co-Parent.
What we collect
- School correspondence. Emails you forward to the service, and their contents.
- Carer details. The name, mobile number and email address of each person you add as a carer.
- Child details. Your child's first name, and school details such as start and finish times.
- Extracted information. Events, dates, times, costs and deadlines taken from school emails.
- Message records. WhatsApp messages exchanged with the service, and delivery status.
Why we use it
We use this data solely to provide the service: to read school correspondence, extract the relevant dates and actions, send summaries to the carers you have authorised, and keep a calendar up to date. We do not use it for advertising, we do not sell it, and we do not share it with anyone other than the processors listed below.
Our lawful basis is performance of a contract with you, and our legitimate interest in operating the service you have asked for.
Who processes it
| Processor | Purpose | Location |
|---|---|---|
| Supabase | Database and application hosting | Ireland (EU) |
| Twilio | Sending and receiving WhatsApp messages | EU / US |
| Anthropic | Reading school emails to extract dates and actions | US |
| Receiving forwarded email and syncing your calendar | EU / US |
Where data is transferred outside the UK, it is covered by the transfer mechanisms those providers make available, such as Standard Contractual Clauses. Content sent to Anthropic is used only to return a result to us and is not used to train models.
Message security
Messages are delivered over WhatsApp via Twilio, which acts as our messaging provider. Twilio can technically access message content in the course of delivering it. We keep identifying detail in digests to a minimum for this reason. We recommend carers turn off message previews on their lock screen.
How long we keep it
- Events and calendar entries: until you delete them, or you close your account.
- Carer records: retained while active; removed carers are marked inactive and deleted on request.
- Message logs: retained by our messaging provider under their own retention policy.
When you close your account we delete your data within 30 days.
Children's data
The service holds limited information about a child — typically a first name and their school activities — entered by a parent or guardian. Children do not use the service and we do not knowingly collect data directly from them. A parent or guardian may ask us to delete it at any time.
Your rights
You have the right to access your data, correct it, delete it, restrict or object to how we use it, and to receive a copy in a portable format. To exercise any of these, email hello@schoolhq.co.uk.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk.
Contact
Mitten Ltd, 3rd Floor Suite, 207 Regent Street, London, England, W1B 3HH.
Email: hello@schoolhq.co.uk