Data Privacy Notice

1. Who we are

SEN2gether ("we", "us", "our") is the controller of the personal data described in this notice. We operate the SEN2gether mobile app and this website.

If you have any questions about this notice, want to exercise your rights, or wish to make a complaint, you can contact our data protection team at support@sen2gether.com.

2. The personal data we collect

We collect only what we need to run the service. Depending on how you use SEN2gether, this may include:

• Account & identity data — first name, surname, display name, email address, country and region, and a securely hashed password.
• Profile & community data — your relationship to the child (parent, carer, grandparent, professional), the child's age group, diagnosis status, and the support areas and support types you're interested in.
• Content you create — SENchat posts, comments, reactions, direct messages, feedback and ratings, and any images you upload.
• Usage & engagement data — what content you view, like or watch (newsfeed, podcasts, topics, Q&As, wellness), and an activity audit record (section, action, timestamp).
• Device & technical data — device identifier and push-notification token, IP address, browser/app version, operating system, and server log data.
• Booking & subscription data — events you book, and subscription status where you pay for a plan (your card details never reach our servers — see "Who we share data with").
• Approximate location — your general location (e.g. city/region) to help connect you with local families and services, where you allow it.

3. Special category data

Information about a child's health, disability or diagnosis is "special category data" under UK GDPR and receives extra protection. When you choose to share details such as a diagnosis status or support needs, we process this:

• with your explicit consent, and/or where processing is necessary for reasons of substantial public interest (supporting SEND families);
• only to provide and improve the community and support features you use;
• never to make automated decisions about you, and never for advertising.

You can remove this information at any time by editing your profile or deleting your account.

4. How and why we use your data, and our lawful bases

Under UK GDPR we must have a lawful basis for each use of your data. The main activities are:

• Running your account — creating and securing your account and signing you in. Basis: performance of a contract.
• Community features (SENchat, comments, messaging) — letting you post, reply and message other members. Basis: performance of a contract and our legitimate interest in running a safe community.
• Push notifications — sending alerts you've opted in to. Basis: consent (via your in-app permission), which you can withdraw in your device settings.
• Federated sign-in (Google / Apple) — letting you sign in with an existing account. Basis: consent at the provider and contract for your SEN2gether account.
• Improving content & analytics — understanding what's useful so we can improve the app. Basis: legitimate interests; reported in aggregate.
• Events, bookings and subscriptions — managing bookings and paid plans. Basis: performance of a contract and legal obligations (e.g. financial records).
• Safeguarding — investigating concerns about the welfare of a child or adult. Basis: legal obligation, vital interests and legitimate interests in safeguarding.
• Security & operations — server logs and audit records to keep the service secure and working. Basis: legitimate interests.

5. Who we share your data with

We do not sell your personal data. We share it only with the trusted service providers that help us run SEN2gether, and only as needed:

• Our hosting provider — secure hosting of the application, database and files.
• Google Firebase Cloud Messaging — delivering push notifications (device token only; message contents are not stored with Google).
• Google Sign-In and Apple Sign In — if you choose to sign in with them (email, name and a provider ID received at sign-in).
• Our email provider — transactional emails such as registration and password resets.
• Our payment processor — subscription billing. Card details are handled and tokenised by the processor and never reach SEN2gether; we store only your subscription status.
• Apple App Store and Google Play — app distribution and crash reporting, subject to their platform terms.

We may also disclose data to regulators or law enforcement where the law requires it, to professional advisers, and to a new owner in the event of a business transfer.

6. International transfers

Some of our providers (for example, federated sign-in and push notification services) may process data outside the UK and EEA. Where they do, we rely on an appropriate safeguard — such as a UK International Data Transfer Agreement, EU Standard Contractual Clauses, or an adequacy decision — so your data stays protected. You can ask us for details of these safeguards.

7. How long we keep your data

• We keep your account and content for as long as your account is active.
• When you delete your account, your data is removed from our live systems immediately, and backups are purged within 30 days. See our account & data deletion page for the full process.
• Some records are kept longer where the law requires it — for example, financial and accounting records for up to 6 years under UK law, and safeguarding records where we are obliged to retain them.

8. Cookies and similar technologies

We do not use advertising or cross-site tracking cookies. We use only essential cookies needed to keep you signed in and the service working. Some third-party libraries we load (for example, web fonts) may receive your IP address as a normal part of delivering content. See our Privacy Policy for more on cookies.

9. Children's data

SEN2gether is designed for parents, carers and professionals — you must be 13 or over to hold an account. We do not knowingly collect personal data directly from children under 13. Information about a child is provided by their parent or carer, and is treated as special category data (see section 3). If you believe a child has provided us with information directly, please contact us and we will delete it.

10. Your rights

Under UK GDPR you have the right to:

• be informed about how we use your data (this notice);
• access a copy of your data;
• rectify inaccurate or incomplete data;
• erase your data ("right to be forgotten");
• restrict or object to our processing;
• data portability — receive your data in a portable format;
• withdraw consent at any time, where we rely on consent.

To exercise any of these, email support@sen2gether.com. We aim to respond within one month. You can also delete your account at any time in the app. Exercising your rights is free, and we will only charge or refuse where a request is clearly unfounded or excessive.

If you're unhappy with how we've handled your data, you can complain to the UK's Information Commissioner's Office (ICO) at ico.org.uk — though we'd appreciate the chance to put things right first.

11. Changes to this notice

We may update this notice from time to time. We'll post any changes on this page and, where changes are significant, let you know in the app.

Last updated: 30 May 2026