Legal
Privacy Policy
PaterApp.ai Ltd ("PaterApp.ai", "we", "us") operates the PaterApp.ai platform, accessible at paterapp.ai and app.paterapp.ai. This Privacy Policy explains what personal data we collect, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Please read this carefully. By using PaterApp.ai you confirm you have read and understood this policy.
1. Who we are
For any privacy queries or to exercise your rights, email us at hello@paterapp.ai. We aim to respond within 30 days.
2. Data we collect
Account & profile information
- Name and email address (provided at sign-up or waitlist registration)
- Profile photo (optional, uploaded by you)
- Date of birth, location, and stated interests (optional, entered in Settings)
- Tone preferences and work information (optional, used to personalise AI responses)
Children's information
- First names, dates of birth, and interests of your children, which you add to "The Crew" feature
- This information is used solely to personalise your experience (e.g. gift suggestions, birthday reminders). We do not use it for advertising or share it with third parties for marketing.
Calendar & task data
- If you connect Google Calendar, or subscribe to a calendar link (e.g. from a school or club), we read event data on your behalf with your explicit permission
- We store only the data necessary to operate the calendar features you use
Forwarded emails
- If you use your personal forwarding address, we store the sender, subject, date and a short preview of each message — never the full message body
- If a connected Google account is used for email triage instead, the same applies: metadata only, not full message content
Usage and interaction data
- Messages sent to and received from the PaterApp.ai AI agent
- Actions taken in the app (pages visited, features used, agent tool calls)
- Feedback you give (thumbs up / thumbs down on AI responses)
- Memories you explicitly ask the agent to remember or forget
Technical data
- IP address, browser type, and device information (standard server logs)
- Session tokens and authentication credentials (stored securely via Supabase)
Waitlist data
- Name and email address submitted via the waitlist form on our landing page
3. How and why we use your data
We rely on the following legal bases under UK GDPR:
Contract performance (Art. 6(1)(b))
- Providing, operating, and personalising the PaterApp.ai service
- Processing your waitlist application and sending you access when approved
- Managing your subscription and trial period
- Responding to support requests
Legitimate interests (Art. 6(1)(f))
- Improving AI model quality using aggregated, de-identified interaction data
- Detecting and preventing fraud or abuse
- Sending transactional emails (welcome, trial expiry, account notices)
- Maintaining security and operating infrastructure
Consent (Art. 6(1)(a))
- Sending marketing communications (you can withdraw consent at any time)
- Setting optional analytics cookies (where applicable)
4. Third-party services we use
We share data with the following sub-processors to deliver the service. All are bound by data processing agreements and appropriate safeguards.
Supabase — Authentication, database, and file storage. Data stored in the United Kingdom (AWS eu-west-2, London). supabase.com/privacy
Anthropic — Powers the AI agent (Claude models). Messages you send to the agent are processed by Anthropic's API. Anthropic does not use API inputs to train models without opt-in. anthropic.com/privacy
Google — Google Calendar and Gmail integration (OAuth 2.0, only if you connect an account) and Google Cloud infrastructure (Firebase Hosting, Cloud Run). policies.google.com/privacy
Cloudflare — DNS, edge routing, and inbound email forwarding for your personal forwarding address. cloudflare.com/privacypolicy
Resend — Transactional email delivery (welcome emails, trial notices, the weekly insights digest). resend.com/legal/privacy-policy
Tavily — Web search the AI agent uses to answer questions (e.g. local events, gift ideas). Only the search query the agent generates is sent, never your raw message. tavily.com/privacy
We do not sell your personal data to third parties. We do not use your data for targeted advertising.
5. Data retention
- Active accounts: most data (profile, kids, events and tasks you created yourself, conversations, AI memory) is retained for as long as your account is active
- Completed tasks: removed 7 days after you tick them off
- Overdue tasks you never completed: removed 30 days past their date
- Calendar events synced from a connected account: removed 30 days past their date (we can always fetch them again)
- Forwarded emails: sender/subject/preview removed 7 days after we read them; refused (quarantined) mail is kept 30 days so you can see what was held back
- Deleted accounts: personal data is deleted within 30 days of account deletion; aggregated, de-identified analytics data may be retained indefinitely
- Waitlist: Waitlist entries are retained for up to 12 months from submission, or until you request removal
- Server logs: Standard access logs are retained for up to 90 days
6. Your rights
Under UK GDPR you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate or incomplete data
- Erasure — ask us to delete your data ("right to be forgotten")
- Portability — receive your data in a machine-readable format
- Restriction — ask us to limit how we process your data in certain circumstances
- Objection — object to processing based on legitimate interests
- Withdraw consent — at any time, where we rely on consent
To exercise any of these rights, email hello@paterapp.ai. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.
7. Cookies
PaterApp.ai does not use cookies. Your session is a bearer token issued at sign-in and held by your browser, sent with each request to keep you signed in — not a cookie, and never used to track you across other sites. We do not use advertising or analytics cookies.
8. Security
We use industry-standard measures to protect your data: HTTPS everywhere, encrypted credentials storage, row-level security on our database, and least-privilege access controls. No method of transmission over the internet is 100% secure, but we take reasonable precautions to protect your information.
9. Children
PaterApp.ai is intended for adults (18+). We do not knowingly collect personal data from children under 13. The children's information you enter (names, dates of birth) relates to your own children and is used solely to personalise your experience as a parent.
10. International transfers
Your data is stored in the United Kingdom. Where data is transferred outside the UK (e.g. to Anthropic, Google, Resend or Tavily in the United States), we rely on standard contractual clauses or adequacy decisions as appropriate safeguards.
11. Changes to this policy
We may update this policy from time to time. Material changes will be communicated by email or via an in-app notice. The "last updated" date at the top will always reflect the most recent version. Continued use of PaterApp.ai after changes take effect constitutes acceptance of the updated policy.
12. Contact
Questions about this policy? Email hello@paterapp.ai and we'll respond within 30 days.