Privacy policy

1. Who is responsible

Pluto is operated under the name Plutoweb in the United Kingdom. “We”, “us” and “our” refer to the operator responsible for deciding how personal information is used. Contact plutoplayfeedback@gmail.com for privacy enquiries, complaints or data-rights requests.

The operator has not provided a postal address for publication. Its full legal identity and address for formal notices remain to be confirmed.

2. Scope of this policy

Pluto is an adult-facing service providing age-related play ideas for young children. It supports accounts, child profiles, activity instructions, child-specific activity collections, profile settings and in-app notifications.

The current service does not record completed activities, maintain milestone histories, provide clinical assessments, offer public family profiles or process payments. This policy covers the website and application, not independently operated external websites.

3. Information we process

• Account: email address, authentication credentials handled by Supabase, account identifier and timestamps. Registration and sign-in use email and password, not Google.
• Profile: first name, last name, display name, notification preference and account role, where present.
• Child profiles: name or nickname, date of birth, associated adult account and creation date.
• Activity collections: activity, child and account identifiers, and the date each selection was added.
• Notifications: title, message, type, creation date and read status.
• Technical records: request and authentication information processed by service infrastructure, which may include IP address, browser details, timestamps and security or error logs.
• Correspondence: information you include when contacting support.

You provide account and child information; technical records arise through use of the service. We do not request health records, diagnoses, photographs, precise location or payment-card details. Avoid unnecessary sensitive information in names and support messages.

Email and password are required to register. A child name or nickname and date of birth are required to create a child profile and use child-specific features. A full legal name is not necessary. These are service requirements, not statutory obligations.

4. Purposes and lawful bases

The following UK GDPR bases are proposed for the current service and require the operator’s documented validation before this policy is finalised.

• Adult account and service requests: necessity for performing our agreement with you or taking steps you request before entering it.
• Child-specific play ideas and collections: legitimate interests in providing a useful age-related service to caregivers. This requires a documented assessment giving particular weight to children’s rights and best interests. A child is not treated as a party to the adult’s contract.
• Security and troubleshooting: legitimate interests in protecting accounts, preventing abuse and resolving faults, subject to necessity and proportionality.
• Support: performing our agreement for service requests, or legitimate interests in responding to other enquiries.
• Legal requirements: compliance with a specific applicable legal obligation where processing is required by law.

Acknowledging this policy is not consent to unrelated processing. If a future feature requires consent, we must request it separately and provide a way to withdraw it without affecting the lawfulness of earlier processing.

5. Children and personalisation

Account holders must be 18 or over. Children do not register independently. Only provide a child’s information if you are their parent, guardian or otherwise appropriately authorised.

The birth date is used to calculate age and match activity age ranges. Suggestions are general guidance, not measurements of ability or predictions of development. Pluto does not make automated decisions with legal or similarly significant effects.

Children have rights in their own information. An appropriate parent or guardian may make requests on their behalf; we may verify authority and consider the child’s interests. Contact support if information was provided without authority.

6. Providers, access and transfers

Supabase provides authentication and database services. Hosting and email services process information needed to deliver the website, authentication emails and correspondence. Authorised administrators have elevated access to account and child records for service administration; ordinary account holders are not given access to other families’ records.

The application does not sell family profiles or provide them to advertising networks. Information may be disclosed where legally required or where necessary and lawful to address security incidents, fraud or legal claims.

Verification outstanding: production hosting and email providers, processing locations, subprocessors and international transfer arrangements have not been confirmed. We cannot represent UK-only storage or verified transfer safeguards in this draft. Before finalisation, the operator must specify overseas processing and applicable adequacy decisions or contractual safeguards, with copies available through the contact above.

7. Retention and deletion

Account records, child profiles, activity selections and notifications remain in the application database until removed using available controls or account deletion. No automatic inactivity-deletion period is currently implemented.

Removing a child profile also removes its linked activity selections. Account deletion in Profile settings is designed to remove the authentication account and linked profile, children, activity selections and notifications from the active database. Clearing browser data or uninstalling does not delete these server-held records.

Active-database deletion does not establish when provider backups or logs are erased. Backup, log and correspondence retention periods still require confirmation. The final schedule must reflect recovery needs, security investigations and legal obligations, without retaining information longer than necessary. This draft does not promise a fixed backup-erasure deadline.

8. Security

The application uses authenticated requests and database access rules intended to restrict ordinary users to their own records. Supabase handles authentication. No online service can guarantee complete security.

Use a unique password, protect your email account and sign out on shared devices. Contact support promptly if you suspect unauthorised access. Never send passwords or verification codes by email.

9. Your rights and complaints

Subject to applicable conditions, you may request access, correction, erasure, restriction and a portable copy of information you supplied where portability applies. We will explain any lawful limitation.

Your right to object

You may object on grounds relating to your circumstances to processing based on legitimate interests, including processing of your child’s information. We must consider whether overriding lawful grounds justify continuing. Objection to direct marketing is unconditional; the current application does not implement a marketing subscription.

Send requests to plutoplayfeedback@gmail.com. We may seek proportionate identity or authority verification. Requests are ordinarily free and normally answered within one month, subject to applicable legal rules. If a permitted extension is necessary for complexity or multiple requests, we will explain it within the initial period.

You may complain directly to the UK Information Commissioner’s Office, or another competent supervisory authority where applicable. Contacting us first is not a prerequisite.

10. Storage and policy changes

The Cookie policy explains authentication cookies and local preferences. The current application does not load analytics or advertising scripts.

We will revise this policy when data handling changes and draw material changes to your attention through an appropriate service notice. An update does not itself provide consent or a lawful basis for a new use.