Regulation Tracker Privacy Policy

Who we are

Regulation Tracker is provided by Noa's Place CIO, a registered charity in England and Wales, charity number 1217825 ("Noa's Place", "we", "us"). We are the data controller responsible for your information.

Contact us about privacy: hello@noasplace.org.uk

What information we collect

• Account details: your name, email address, and password (stored securely, never in plain text).
• Child profile details: your child's first name or initials and, if you choose to add it, their age or date of birth.
• Log entries: the information you record about a dysregulation event, including date and time, setting, intensity, triggers, behaviours, strategies used, outcome, and any free-text notes you choose to add.
• Billing details, if you subscribe to Pro. We never see or store your full card number; this is handled securely by our payment provider.
• Basic technical information (such as device or browser type) needed to run the service reliably and securely.

Why we use your information, and our lawful basis

• To provide the logging, dashboard, and report features you sign up for, with your consent, and your explicit consent for your child's health-related information, since this is a special category of data under data protection law.
• To manage your account and your Pro subscription, as necessary to deliver the service you've asked for.
• To keep the service secure and prevent misuse, based on our legitimate interest in protecting the platform and everyone who uses it.

You can withdraw your consent at any time by closing your account. This won't affect anything we did with your information before you withdrew consent.

Who we share your information with

We never sell your information, and we never use it for advertising. We only share it with:

• A small number of Noa's Place staff or volunteers, where needed to give you support you've asked for.
• Trusted service providers who help us run Regulation Tracker, for cloud hosting and secure storage of your data, for processing Pro subscription payments, and for sending account-related emails (such as verification or share-link notifications). Each of these providers only processes your data under contract, on our instructions, and only to the extent needed to provide their specific service.

We don't name our individual service providers in this policy. This is a deliberate security decision to reduce the risk of them being deliberately targeted. It doesn't change your rights, and we're still fully accountable for how they handle your data. We can confirm this information to a data protection regulator, or to you directly on request.

Whoever you choose to send a report share link to. Share links are entirely under your control. We never send your data to a school, therapist, or anyone else unless you generate and share that link yourself.

We may also share information where required by law, for example in response to a valid court order.

How long we keep your information

• Free plan: log entries older than 30 days are no longer shown in your history.
• Pro plan: we keep your full history for as long as your account is active.
• If you close your account, or your Pro subscription lapses, we keep your data for a short period in case you want to come back, and then delete it, unless we're required to keep it for longer for a legal reason.
• Share links expire automatically 14 days after they're created.

Where your information is stored

Your information is stored on servers based in the UK. If any of our service providers ever need to store or access data outside the UK or EEA, we put a legally recognised safeguard in place first, such as the UK's International Data Transfer Agreement.

How we keep your information safe

• Your account is set up so that only you can see your own child's information.
• Your information is encrypted both in transit and when stored.
• Report share links use a long, random address, expire automatically after 14 days, and can be revoked early by you before then.
• We limit staff access to what's needed to support you, and we regularly review our systems for security issues.

What Regulation Tracker is, and isn't

Regulation Tracker is a private logging tool for your own use. It is not monitored in real time by a professional, and it is not a crisis or emergency service. If you or your child are ever in crisis or at risk of harm, please contact emergency services or a helpline directly, rather than through this app, for example NSPCC (0808 800 5000), Childline (0800 1111), or Samaritans (116 123).

Your rights

Under data protection law, you have the right to:

• Ask us what information we hold about you and your child, and get a copy of it.
• Ask us to correct information that's inaccurate or incomplete.
• Ask us to delete your information, in certain circumstances.
• Ask us to restrict or object to how we use your information, in certain circumstances.
• Ask for your information in a portable format, to move it to another service.
• Withdraw your consent at any time, by closing your account.
• Complain to the Information Commissioner's Office (ICO) if you're unhappy with how we've handled your information: ico.org.uk or 0303 123 1113.

To exercise any of these rights, contact us at hello@noasplace.org.uk. We'll respond within one month.

Children's data

Regulation Tracker is designed to be used by parents and carers, not by children directly. We don't knowingly allow children to create their own accounts. All information about a child is entered, controlled, and can be deleted by their parent or carer at any time.

Cookies and analytics

We use essential cookies to keep you securely logged in and to keep the service running properly. These are required for the product to work.

With your permission, we also use Google Analytics cookies to understand how the service is used, in aggregate, in a way that doesn't identify you or your child. Analytics cookies are only set after you choose Accept analytics. You can choose Reject analytics instead, or change your mind later via Cookie settings in the site footer.

Changes to this policy

We may update this policy from time to time, for example as the service develops. We'll update the date at the top of this page, and if we make a significant change, we'll let you know directly rather than relying on you checking back.

Contact us

Email: hello@noasplace.org.uk

Charity number: 1217825