Privacy Policy

1. Who we are (data controller)

Skedz (the "Service") is operated by Kevin Bolley, a sole trader based in the United Kingdom, trading as SKEDZ. Skedz is not operated as a limited company, and no company number applies. Kevin Bolley trading as SKEDZ is the data controller responsible for your personal data when you use Skedz.

Controller: Kevin Bolley, trading as SKEDZ

Contact email: hello@skedz.co.uk

Business address: 10 Cleveland Close, Walton on Thames, KT12 1RB, United Kingdom

You can contact us about this policy or any data protection matter using the email above.

2. The data we collect and process

The information we process depends on how you use Skedz. In particular:

• Account data: Your email address and name (for example the name shown on your account) when you register or sign in, plus your role within a household (such as admin or member).
• Household and member data: The household name and type you set up, the names you give to household members (including parents/guardians and other members), the colours and labels you choose, and the email addresses of members you invite or link to the household.
• Information relating to children: If you choose to, you can add information about children in your household, such as a first name, a colour, and any school links you enter (for example a label and a URL). Children do not create their own accounts; this information is added and controlled by an adult account holder.
• Calendar, events, reminders and activity data: The events, tasks, dates, times, durations, categories, locations, venues, notes, priorities, reminders and other scheduling details you add. This also includes completion status, notes added by members, and any share or assignment information (such as who an item is assigned to or shared with).
• Notes: Any notes you create, including their titles, content, assignees and whether they are pinned.
• Connected calendar and fitness data: If you connect an external calendar (for example Google Calendar) or a fitness/training source, we may receive and store event or training session details (such as titles, dates, times, durations, types and notes) so they can be shown alongside your household schedule.
• Sharing data: When you share an event or invite someone, we process the recipient's name and email address and any personal message you add.
• Notifications and preferences: The reminder and notification settings you choose, and records of notifications sent to you.
• Device, usage and log data: Basic technical information such as how you interact with the Service, device and browser information, and server logs, used to operate, secure and improve Skedz.
• Payment data: When you subscribe, payment is processed by Stripe. Stripe may collect and process your card or other payment details. Skedz does not store your full card or bank details.

You are not required to provide data that is not needed for the features you use. Many fields in Skedz are optional, and you can choose what to enter.

3. How we use your data

We use your data for the following purposes:

• To provide, run and maintain the Skedz Service, including showing your household schedule, events, tasks and notes.
• To create and manage your account and household, and to link members you invite.
• To send reminders and notifications that you have enabled, and other account-related communications.
• To display data you import or sync from connected calendars or fitness sources.
• To process subscription payments through Stripe and manage your subscription.
• To secure, monitor and troubleshoot the Service and prevent misuse.
• To maintain and improve Skedz and its features.
• To comply with our legal obligations.

We do not sell your personal data to third parties, and we do not use your personal data for advertising.

4. Lawful bases for processing (UK GDPR)

We process personal data only where we have a lawful basis. The bases we rely on are:

• Contract: processing needed to provide the Service you have asked for, such as running your account, household and schedule.
• Legitimate interests: processing that is necessary for our legitimate interests, as described in Section 5, where these are not overridden by your rights.
• Consent: where you give consent, for example when you choose to connect an external calendar or fitness source, or enable certain reminders or notifications.
• Legal obligation: where we are required to process data to comply with a legal duty.

Where we rely on consent, you can withdraw it at any time (for example by disconnecting a linked service). Withdrawing consent does not affect processing that has already taken place.

5. Legitimate interests

Where we rely on legitimate interests, these are:

• Operating, securing and improving the Service so that it works reliably for you and your household.
• Monitoring usage and fixing problems, including detecting and preventing misuse, fraud or security incidents.
• Communicating with you about your account, the Service and important changes.
• Keeping our systems and records accurate and up to date.

We have considered whether these interests are overridden by your rights and freedoms, and we only process what is necessary for these purposes.

6. Information relating to children

Skedz is designed for household members who are 18 or older to create and manage an account. Children under 18 do not create their own accounts.

• Any information about a child (such as a first name, colour or school link) is added by an adult account holder, not by the child.
• The account holder is responsible for deciding what information about a child is entered and for ensuring this is done lawfully and with any necessary consent.
• We do not knowingly collect personal data directly from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

7. Data sharing and processors

We do not sell your data. We share or process data with the following categories of recipients only as needed to run the Service:

• Base44: our hosting and infrastructure provider. Base44 processes data on our behalf as a processor to host and operate the app.
• Stripe: our payment provider. Stripe processes payment details and related transaction data for subscriptions.
• Connected services: calendar providers (for example Google Calendar) and fitness or training sources that you choose to connect. These services are controlled by their own providers and governed by their own terms and privacy policies.
• Service and email delivery: providers that help us send transactional messages, reminders or notifications you have enabled.
• Legal and safety: where we are required to by law, or to protect the rights, safety or security of our users or the Service.

We do not make absolute claims that any provider is automatically "GDPR compliant". Our processors are responsible for their own compliance with applicable data protection law, and their processing is governed by their terms and policies.

8. International transfers

Your data is processed on the Base44 platform, and our providers (including Stripe and any connected services) may store or process data outside the United Kingdom. Where your data is transferred outside the UK, we rely on appropriate safeguards to protect it, such as the UK's International Data Transfer Agreement or other transfer mechanisms recognised under UK GDPR, unless an exemption applies.

If you would like more information about the safeguards applied to a specific transfer, please contact us using the details in Section 12.

9. Retention

We keep your data only for as long as we need it for the purposes set out in this policy:

• We keep your account and household data while your account is active.
• When you delete your account or specific data, we remove the associated data from the active Service. Some residual data may be retained in backups or logs for a limited period, after which it is deleted or overwritten.
• We may keep certain data for longer where we are required to by law, or to establish, exercise or defend legal claims.

10. Security

We take reasonable technical and organisational measures to protect your data, including access controls, authentication and secure hosting on the Base44 platform. However, no system can be guaranteed completely secure, and we cannot guarantee the security of data you choose to share with third-party services you connect.

11. Cookies and analytics

The Service uses essential technical measures (such as sign-in session storage) needed to keep you logged in and to make the app work. We do not use advertising or tracking cookies.

We may record limited product analytics events (for example that an event was created or edited) to help us understand how the Service is used and improve it. These are processed as part of running the Service and do not require a cookie-consent banner under current UK rules because we do not place non-essential tracking or advertising cookies on your device.

If we add cookies or analytics that require consent in the future, we will update this policy and provide an appropriate consent mechanism before enabling them.

12. Your rights (UK GDPR)

Subject to applicable law, you have the right to:

• Be informed about how we use your data (this policy).
• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data (also known as the "right to be forgotten"), subject to exceptions.
• Restrict processing of your data in certain circumstances.
• Object to processing based on legitimate interests or for direct marketing.
• Data portability: receive a copy of the personal data you provided to us, in a structured, commonly used format.
• Withdraw consent at any time where we rely on it, without affecting processing already carried out.
• Lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your data properly (see Section 13).

To exercise any of these rights, contact us at hello@skedz.co.uk. We will respond in line with UK GDPR time limits.

13. Right to complain to the ICO

You have the right to complain to the UK Information Commissioner's Office (ICO) if you believe your personal data has been handled in a way that breaches the law. You can contact the ICO at ico.org.uk. You can still contact us first and we will try to resolve your concern.

14. Account and data deletion

• You can delete content you have added at any time through the Service.
• You can request deletion of your account and the personal data associated with it by contacting us.
• On account deletion, we remove your associated data from the active Service, subject to any exceptions in Section 9 (for example backups or legal retention).
• Deleting your account does not automatically remove data that other household members have entered about their own schedules.

15. Changes to this policy

• We may update this Privacy Policy from time to time. The "Last updated" date above shows when it was last changed.
• Where a change is significant, we will tell you through the Service or by email where appropriate.
• Continued use of Skedz after a change takes effect means you accept the updated policy.

16. Contact

If you have any questions about this policy, your data or your rights, please contact:

Controller: Kevin Bolley, trading as SKEDZ

Email: hello@skedz.co.uk

Address: 10 Cleveland Close, Walton on Thames, KT12 1RB, United Kingdom

Skedz

Shared life, organised.