Welcome to Taylee ("we", "our", "us"). We are committed to protecting your privacy and handling your personal data responsibly.
This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the Taylee mobile application ("the App").
We are registered in the United Kingdom and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
When you create an account, we collect:
To personalise activity recommendations, we collect:
Precise GPS location: If you choose to use the "Current Location" feature, we temporarily access your device's GPS coordinates to find activities near your current position. This is only collected when you explicitly activate this feature and is not stored on our servers or retained after your session.
With your explicit consent, you may choose to provide:
This sensitive information is:
We automatically collect:
If you choose to add activities to your calendar:
| Purpose | Legal Basis |
|---|---|
| Provide personalised activity recommendations | Contract performance |
| Send activity reminders and notifications | Legitimate interest / Consent |
| Improve our recommendation algorithm | Legitimate interest |
| Understand how the app is used, to improve it (pseudonymous analytics, see Section 8.3) | Legitimate interests (pseudonymised, see Section 8.3) |
| Send school holiday alerts | Legitimate interest |
| Process subscription payments (from full launch) | Contract performance |
| Respond to support requests | Contract performance |
| Send marketing communications | Consent (opt-in only) |
| Comply with legal obligations | Legal obligation |
Activity recommendations (Anthropic)
To generate activity recommendations and power the chat assistant, we send information to Anthropic's Claude AI service. Before sending:
Anthropic does not use your data to train their AI models.
Voice transcription (OpenAI)
If you use the voice input feature, your recording is sent to OpenAI's Whisper service to be turned into text. Only the audio is sent: no account details, no children's information, no location. Because we cannot know in advance what a recording contains, anything you say forms part of what is sent. OpenAI does not use your recording to train their AI models, and retains API data for up to 30 days for abuse monitoring before deleting it. The recording is removed from your device as soon as it has been transcribed.
We use Firebase for:
Account and family data is stored in Google's UK/EU data centres. Analytics data is described in Sections 6.3 and 8.3.
We send your general location (postcode area) to weather services to provide weather-aware recommendations.
We use Google Places API to find venue details. Only your general location is shared, not personal information.
When paid plans launch, subscriptions will be processed by Apple (App Store) or Google (Play Store). We do not receive or store your payment card details.
Taylee helps parents plan activities for their children. We take children's privacy seriously:
| Data Type | Storage Location |
|---|---|
| Account & family data | Firebase (UK/EU) |
| Preferences | Your device (local) |
| Saved activities | Firebase (UK/EU) |
| App analytics | BigQuery (London, UK); Google Analytics (Google data centres, see Section 6.3) |
Some of our third-party service providers process data outside the United Kingdom:
| Service | Purpose | Location | Safeguard |
|---|---|---|---|
| Anthropic (Claude AI) | Activity recommendations & chat | United States | Standard Contractual Clauses with UK Addendum |
| OpenAI (Whisper) | Voice transcription only | United States | Standard Contractual Clauses with UK Addendum |
| Firebase (Google Cloud) | Data storage & authentication | UK/EU data centres | UK Adequacy Regulations |
| Google Analytics and BigQuery | App analytics | BigQuery export: London, UK. Google Analytics processing: Google data centres, which may include the US | Google's data processing terms: Standard Contractual Clauses, and Google's certification under the Data Privacy Framework for transfers to its US entities |
Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR, including Standard Contractual Clauses approved by the Information Commissioner's Office.
| Data Type | Retention Period |
|---|---|
| Account data | Until you delete your account |
| Activity history | 12 months |
| Pseudonymous analytics | 14 months |
| Server request logs (pseudonymous) | 30 days |
| Voice recordings (held by OpenAI) | Up to 30 days for abuse monitoring, then deleted |
Under UK GDPR, you have the right to:
Request a copy of all personal data we hold about you.
Update inaccurate or incomplete information via the app or by contacting us.
Request deletion of your account and all associated data. You can do this in Settings > Delete Account, or by contacting us.
Request your data in a portable format.
Withdraw consent for optional data processing (dietary, SEN, marketing) at any time in Settings.
Object to processing based on legitimate interests. To object to usage analytics, email us at privacy@taylee.app and we will turn off analytics collection for your account.
Taylee uses AI to generate personalised activity recommendations based on your children's ages, interests, location, and weather conditions. This constitutes profiling under UK GDPR Article 22.
However:
You have the right to complain to the Information Commissioner's Office (ICO):
The Taylee app does not use cookies. We use minimal local storage on your device to:
Our website (taylee.app) uses Plausible Analytics, a privacy-friendly analytics service. Plausible:
No consent banner is required as Plausible is compliant with UK GDPR and the Privacy and Electronic Communications Regulations (PECR) without collecting personal data.
If you join our waitlist at taylee.app, we collect your name, email address and postcode through a form provided by Tally (Tally BV, Belgium), who process this data on our behalf. We use it solely to contact you about Taylee's launch and to understand where demand is coming from. We do not use it for any other marketing unless you separately opt in. You can ask us to delete your waitlist details at any time by emailing privacy@taylee.app.
We use Google Analytics for Firebase to understand how the Taylee app is used, so we can improve it: which screens are viewed, which features are used (searches, plans created, activities saved, directions tapped), whether a search returned results, how long a request took, session length, onboarding progress, and app events such as errors.
This data is pseudonymous, not anonymous. Each event is linked to an identifier derived from your account id by one-way hashing (Google Analytics calls this the User-ID feature). It lets us see that the same account did several things over time; it does not let us read your name, email or postcode from the analytics data, and we do not send them to it. We do not use Google Analytics advertising features or Google Signals, and analytics data is not shared with Google for advertising or ad personalisation.
We have deliberately built our analytics so that it cannot see your family's personal information. The following are never sent to analytics: your children's names, their interests, additional support needs, or dietary information; their exact age (we record only a broad age band); the content of your messages or searches; your location, postcode, or address; and any identifier linking analytics data to a specific child. This is enforced in our app by a filter that removes such data before anything is sent.
Google Analytics keeps this data for 14 months. A daily copy is exported to Google BigQuery, held in the London region, so we can run our own analysis. Google processes this data on our behalf under its Firebase, Google Analytics and Google Cloud data processing terms.
Our servers also keep a technical log of each request for 30 days, carrying the same hashed identifier, the type of request, timings and the cost of answering it. These logs never contain your message text, your postcode, your location or your children's names.
Deleting your account (Section 7.3) removes the link between you and these identifiers. Analytics records already exported are kept in pseudonymous form until the retention periods above expire.
We use Firebase Crashlytics to detect and diagnose technical problems. When the app encounters an error, we record the type of error and where in the code it occurred. We do not send the content of your messages, your searches, or your children's details in crash reports.
Taylee may display links to venue websites or booking pages. We are not responsible for the privacy practices of these external sites.
We may update this Privacy Policy from time to time. We will notify you of significant changes by:
The "Last Updated" date at the top indicates when changes were made.
For privacy-related enquiries or to exercise your rights:
We aim to respond to all requests within 30 days.
Taylee is developed in Scotland. While UK GDPR applies throughout the United Kingdom, Scottish users may have additional rights under Scots law. If you have questions about your rights, please contact us.
This Privacy Policy is governed by the laws of Scotland and the United Kingdom.