Our App
Our App privacy notice
Pre-release privacy information. Our App is being prepared for release. This page explains the current service design and confirmed provider information. The full app privacy notice and release verification are still being completed before wider availability.
Our App helps adults organise their household and share information with people they invite. Docode Limited operates the service. For privacy enquiries, email support@docode.co.uk.
Luke Currie is the primary owner for privacy requests at Docode Limited. Please keep children's health details, passwords and verification codes out of your initial email.
Information updated: 10 November 2026. The full app privacy notice's effective date will be set at release sign-off.
Information we use
We use your email address and display name to create and manage your account. You can add family names, plans, shopping lists, tasks and reminders. Adults with access can also record optional care information, including medicine history, allergies and illness notes about a child. We also use service logs and records of account and family changes to operate and protect the service.
Why we use it
We use this information to sign you in, deliver account emails, share updates with the people you authorise and support and protect the service.
The purpose-specific lawful bases and separate conditions for children's health information are still being assessed. They will be documented in the full app privacy notice before wider release.
Optional Care information and permissions
Care is optional and permissions are managed separately for each child. The release implementation asks an eligible family administrator to confirm parental responsibility and that the child cannot give informed consent before explicitly opting in. It records who gave consent, the statement version and the time. Other adults need a separate permission to access that child's Care information.
The in-app withdrawal workflow is designed to revoke access and remove the child's Care records from live storage, with other devices updating on their next sync. Verification of this workflow is still in progress. Copies previously exported by family members remain outside the app's control.
Send parental-authority questions, disputed access, requests involving a child able to give informed consent and withdrawal requests made outside the app to Luke Currie at support@docode.co.uk. Keep children's health details out of the initial message.
Luke handles these requests through the support address. The planned process includes identity and authority checks before disclosure or action, and pausing disputed access during review. This process is being finalised alongside the Care release checks.
Who can see it
Family members can see shared household information. Access to a child's care records requires a separate permission for that child.
Supabase hosts account and app data for us. Our primary database is hosted in London.
Resend delivers account emails through our verified sending domain, mail.docode.app, configured to send from Ireland. Resend states that its primary processing and customer-data storage are in the United States, including message content, delivery logs and account records. The sending region does not determine where this data is stored. See Resend's data-processing information.
London database hosting and Ireland email sending do not mean all processing stays in those locations. We are completing the review of the applicable provider agreements, international transfer safeguards and other processing locations before wider release.
Advertising and analytics
The reviewed iPhone app source does not include advertising, analytics or session-replay SDKs.
Exporting and deleting information
In Family, you can export the information available to your account, including local pending changes. Pending changes in an export may not yet have been shared with other family members.
You can also delete your account from the privacy controls. If you are the only administrator of a family, first transfer administration or close the family. Account deletion removes your account; shared family records may remain if the family continues.
The family closure controls are designed to delete live records, memberships, care permissions, invitations and associated operational records. End-to-end export and account-deletion verification is still in progress. Copies other members previously exported remain with them.
Live records and backup copies are separate. Daily database backups are maintained by our hosting provider. Deleting live records does not establish that every backup copy has been erased at the same time.
How long we keep information
Invitation codes expire after seven days. Code expiry does not mean the associated invitation records are deleted at that time.
Our Resend workspace uses the Pro plan. Resend publishes a 30-day retention period for email and log data on active Pro accounts. This provider period does not set the retention period for family records, Docode support correspondence or separate copies. See Resend's retention information.
The final retention schedules for app records and Docode support cases are being verified and will be stated in the full app privacy notice. Backup expiry and the handling of deleted records after a restore are also still under review; we do not promise an immediate or fixed backup-erasure period here.
Your privacy rights
You can ask us about the information we hold and request access, correction or deletion. Other rights may apply depending on how we use your information. You can also complain to the Information Commissioner's Office.