What we hold about you and your children, why we hold it, and how to make us delete it. Written to be read, not to be waved at a regulator.
Last updated 3 October 2026.
ParentChill Ltd, a company registered in England and Wales, company number 17497787. Registered office: 66 Paul Street, London, England, EC2A 4NA. We are registered with the Information Commissioner’s Office.
For everything described here we are the data controller. You are our customer, not your school, and your school is not a party to any of it. A school that has never heard of us cannot see your account.
| What | Why |
|---|---|
| Your email address and the name you choose | To have an account and to sign you in |
| Your passphrase, hashed | One-way, using scrypt. We cannot read it or recover it |
| Which school you picked | To show the right calendar and the right apps |
| Each child’s first name and year group, as you type them | To show what applies to your children and label each item |
| School email you forward to your own ParentChill address | To turn it into dated items in your list |
| Saved logins for school systems, encrypted | See below. We cannot read these |
| A record of mail we could not turn into a task, with the reason | So nothing you forward disappears without trace |
| Sign-in sessions | To keep you signed in. The token is stored hashed |
We do not ask for your address, your date of birth, your phone number, or anything about your child beyond a first name and a year group.
Performance of our contract with you. You asked us to gather your school information in one place, and this is what that takes. We do not rely on legitimate interests to do anything you would not expect.
This is the part worth reading twice. When you set up forwarding, school email arrives at an address that is yours alone, and we read it to work out what needs doing and by when.
That mail is whatever your school sent, which may include your child’s name, their class, money you owe, a trip, or a letter about them. It is filed against your account and nobody else’s. We do not read it for any purpose other than building your list, and we never put it in another family’s.
Your forwarding address is a capability: anyone who learns it could post into your list. Keep it to yourself in the same way you would an email address, and tell us if you think it has got out.
We cannot read your saved logins, and that is not a promise, it is the design. They are encrypted with a key derived from your passphrase, which we never store. If you forget your passphrase, your saved logins are gone and we cannot get them back for you.
The code refuses to store a school password in any other way, and there is a test that fails if anyone changes that.
There is a box on our home page for people whose school we do not cover yet. If you used it we hold your email address, and only if you typed them, your child’s school and the first part of your postcode — the district, like CM1, never the full postcode. We record when you ticked the box as well.
Our lawful basis is your consent, which is why that box is never ticked for you. We will send you one email, when we reach your school, and nothing else. Every email carries an unsubscribe link, and you can have us delete you at any time by emailing hello@parentchill.co.uk — we will, the same week, without asking why.
We do not pass it on and we do not build a profile from it. ⚠ If we have not reached your area within two years we will delete it, rather than keep an address we are not using.
On servers in Switzerland. The United Kingdom recognises Switzerland as providing an adequate level of data protection, so your information moves there without needing standard contractual clauses or any other transfer mechanism.
We count how many times parents open each school system from our app, as a daily total per system. That count carries no account, no child, and no IP address, so it cannot be traced to you.
While your account is open. When you close it, everything goes: your account, your children, your saved logins, your items and your forwarded mail, in one operation. Nothing is kept back and there is no soft-delete.
In the app, go to your account and choose to close it. You will be asked for your passphrase again, because deleting a family’s entire record from a phone someone left unlocked would be the worst thing this app could do.
If you would rather we did it, email hello@parentchill.co.uk and we will, within 30 days and normally the same week.
You can ask us for a copy of what we hold, ask us to correct it, ask us to stop, or object to how we are using it. Email hello@parentchill.co.uk.
If something has gone wrong, make a complaint here. We will acknowledge it within 30 days, as the Data Protection Act 2018 requires of us. You can also complain to the Information Commissioner’s Office at ico.org.uk, and we would rather you told us first so we can fix it.
If we change anything that matters we will say so here with a new date, and tell you in the app rather than quietly updating the page.