Privacy Policy

1. Who we are

Canopy ("we", "us", "our") is a family organisation application operated from the United Kingdom. Our service is accessible at canopy-app.app.

For questions about this policy, contact us at hello@canopy-app.app.

2. What data we collect

We collect information you provide directly, including:

• Account information: name, email address, password (stored hashed)
• Family information: children's names, dates of birth, and parenting schedule
• Content you create: calendar events, notice board posts, info bank entries, uploaded documents
• Communications: emails forwarded to your Canopy family address for AI processing
• Payment information: processed by Stripe — we do not store card details

3. How we use your data

• To provide the Canopy service and keep your family's information in sync
• To process emails and extract calendar events using AI
• To send push notifications and (where enabled) SMS alerts
• To process subscription payments via Stripe
• To generate exports you request (e.g. court-ready records)

We do not sell your data to third parties. We do not use your family's information for advertising.

4. Data storage and security

Your data is stored in a Supabase-hosted PostgreSQL database. Data at rest is encrypted. Documents in the vault are stored in encrypted cloud storage. Access is controlled by row-level security — family members can only access their own family's data.

AI email processing is performed by a large language model. Email content is sent to the AI provider for event extraction and is not retained by the AI provider beyond the processing window.

5. Data sharing

We share data with the following third parties only as necessary to operate the service:

• Supabase — database and authentication hosting
• Resend — transactional email delivery
• Stripe — payment processing
• AI provider — email event extraction (email content only, not stored)

6. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your account and associated data
• Export your data in a machine-readable format
• Withdraw consent at any time (which may affect your ability to use the service)

To exercise any of these rights, email hello@canopy-app.app.

7. Children's data

Canopy stores information about children (names, dates of birth, medical and school details) as entered by a parent or guardian. This data is controlled by the family account holder. Canopy does not permit children to create accounts directly. All children's data is accessible only to verified members of the family.

8. Cookies

The Canopy app uses session cookies for authentication only. The marketing website (this site) uses no third-party tracking or advertising cookies.

9. Changes to this policy

We will notify active subscribers of any material changes to this policy by email before the changes take effect.

10. Contact

Questions? Email us at hello@canopy-app.app.