Privacy Policy

• Account information: name, email address and authentication details managed by Lovable Cloud (Supabase Auth).
• Child profiles: nickname or first name, date of birth, school and local authority (only if you choose to enter them).
• Evidence: text notes, voice recordings, transcripts, uploaded screenshots, documents, AI-generated summaries and any tags you add.
• Generated reports: PDF reports you create and download from the app.
• Billing information: subscription status and email used for payment, provided by our payment processor Systeme.io.

All structured data is stored in Lovable Cloud (Supabase) in the EU (Frankfurt, eu-central-1). Uploaded files are stored in Supabase Storage buckets:

• evidence-audio — voice recordings
• evidence-files — documents and screenshots
• reports — generated PDF exports

Your evidence and documents are not stored locally in your browser. They are held securely in the cloud and are available when you sign in on any device.

SENTracker uses the following services to operate securely:

• Lovable Cloud / Supabase — authentication, database, storage and email delivery.
• Lovable AI Gateway — voice-note summarisation and document analysis. Your content is sent for inference only; it is not used to train AI models.
• Systeme.io — subscription payments and billing emails.
• Analytics: SENTracker does not use third-party analytics, advertising or tracking cookies. We record a small number of anonymous product-usage events in our own database (for example, that a demo was started or a screen was viewed) using a random browser identifier. These events contain no name, email or evidence content and are used only to understand how the service is used.

• Row-level security (RLS) means each user can only access their own rows in the database.
• Uploaded files are stored in private Supabase Storage buckets and accessed via signed URLs.
• We encourage the use of first names or nicknames for child profiles. You are in control of how much identifying information you enter.

SENTracker uses AI to transcribe and summarise voice notes and to analyse uploaded documents. The text or file is sent to the Lovable AI Gateway for processing, and the result is stored with your evidence. Your content is not used to train or improve AI models and is not shared with other users. Request and response logs may be retained by the AI gateway for up to 90 days for debugging and abuse prevention.

You can request deletion of your account from Settings. Deletion runs as a 30-day soft delete:

• Your account is marked for deletion and you can cancel at any point during the 30-day window by signing back in.
• After 30 days a scheduled nightly job permanently deletes your login identity, profile, child records, evidence, documents, screenshots, voice recordings, generated PDF reports, subscription record and email history for your address.
• Data may persist in rolling daily database backups for up to a further 14 days before those backups roll off. After that, no copy remains in SENTracker systems.

While your account is active we do not auto-delete your evidence — SEND matters can run for years, so your records stay until you remove them.

If you are in the UK or EEA, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate information.
• Request deletion of your data (right to erasure).
• Export your data in a usable format.
• Object to or restrict certain processing.

To exercise any of these rights, contact us using the details below. We will respond as quickly as we can, and within one month in most cases.

If you have questions about this Privacy Policy or how your data is handled, please use the Help & support page in the app.