Privacy Policy

1. Who we are

S.E.N Euphoria is a family support app for parents and carers of children with special educational needs, and for the children themselves. For UK data protection law, the app's publisher is the data controller for the small amount of information described below. Questions, requests or concerns: seneuphoriauk@gmail.com.

2. What information we collect

Stored only on your device, and never sent to us:

• Parent details you enter at setup and the profiles you create.
• Your family PIN — kept only as a salted, irreversible hash in your device's secure storage (the Keychain on iPhone). We never see or store the PIN itself.
• Advice questions you have asked and the answers you saved.
• Planner events, reminders and journal entries, including Pattern Map notes.
• SOS cards, drawings, check-ins and Calm Zone activity records.
• Your preferences, including your crisis-help country, and a copy of your own Connect profile.
• Wellbeing check-in notes: if the Get Help Now page opens for a child, the app records when, in which activity, and which option they chose — never the words they typed.
• Share with school documents, which are created on the device and only leave it if you choose to send them.

Sent beyond your device:

• A parent's AI guidance request: the question text, the child's age if set, the support areas selected, and — only if the parent switches it on — anonymous pattern counts such as "noise, 4 times" (section 6).
• Purchase and subscription records (section 8).
• Connect and Community information, only if a parent signs in to use them (section 7A).

We do not collect: your child's name, location, contacts, microphone data, advertising identifiers, or usage analytics. Nothing a child does is ever sent anywhere.

3. Why we collect it

The AI question text exists for one reason only: to generate the answer you asked for. Purchase records exist only to confirm whether Euphoria Plus is active, to let you restore a purchase on a new device, and to keep free and subscriber features working correctly. Connect and Community information exists so you can talk to other parents, and so we can keep those spaces safe — reviewing reports, removing harmful content and stopping people who break the rules from returning. Everything else exists purely on your device so the app can do its job. None of it is used for marketing, profiling or advertising.

Our lawful bases under UK GDPR: performance of our agreement with you (providing the features you choose), our legitimate interest in keeping the community safe (moderation and bans), and your consent for anything optional such as a profile photo or the details you choose to share about your family's needs, which you can withdraw at any time by removing them.

4. Where it is stored

Family information stays on the device itself, in the app's private storage, with no cloud sync. On Android, cloud backup of the app's data is switched off, so a child's journal and check-ins never leave the phone. Deleting the app removes its stored data; on iPhone the PIN hash sits in the Keychain and is cleared by Delete account or the "delete everything and start fresh" option on the PIN screen.

Connect and Community information is stored on our community server, hosted by Cloudflare, and sent over encrypted connections. Data may be processed in data centres outside the UK; where it is, our providers use the safeguards UK law requires, such as the UK International Data Transfer Addendum.

5. Who processes it

Only these services ever process your information, and only for the purposes in section 2:

• Our AI service — passes a parent's typed question over an encrypted connection to an AI provider and returns the answer.
• RevenueCat — on iPhone and Android, records subscription status against a random, anonymous identifier with no name, email, advertising ID or child data attached.
• Apple or Google — process the payment itself, and confirm who you are when you choose Sign in with Apple or Sign in with Google for Connect and Community.
• Rork — runs the sign-in service the app uses to receive your account identifier and email from Apple or Google.
• Cloudflare — hosts our community server, where Connect and Community information is stored.
• Resend — delivers report notifications to our moderator by email. A notification contains the first names involved, the report reason and the reported content.

We do not sell, rent or share personal information with advertisers, data brokers or anyone else.

6. AI guidance and data processing

Only a parent can use the AI guidance; children cannot reach it, and there is no chatbot anywhere in the child experience. When you ask a question, the text you type, your child's age if set and the support areas you selected are sent over an encrypted connection so an AI model can write your structured answer. If you switch on "Use my recorded patterns" in Settings, anonymous counts from your journal and logged moments (for example "noise, 4 times") are included too — never names, notes, journal text or anything your child typed.

The AI is instructed never to diagnose or suggest medication, and every answer is checked on your device before you see it. Please do not include your child's full name, address, school or other identifying details — the app never needs them. Answers are general information, not professional advice, and can be wrong. We do not use your questions to train AI, to advertise or to build profiles of you or your child.

7. Children's data protections

We do not knowingly collect personal information from children, and the app is built so that nothing a child does in S.E.N Euphoria leaves the device. Children only reach the Calm Zone: check-ins, stories, breathing, games, drawing and support tools all run entirely on-device, and a child cannot type anything that is transmitted anywhere. Children cannot reach Connect or Community.

If a child types words suggesting self-harm or that they don't feel safe, an on-device check opens the Get Help Now page; the check does not store or send what was typed. There are no ads, no analytics and no third-party trackers anywhere in the child experience. Parent areas, purchases and account deletion are protected by the family PIN and the parent's store account.

7A. Connect and Community (adults only)

Connect and Community are optional parent-to-parent spaces. To use them, a parent signs in with Apple or Google and confirms they are 18 or over and a parent or carer. If you never open them, nothing in this section applies to you.

What we store on our community server when you join:

• An account identifier from Apple or Google, and the email address they share with us (with Sign in with Apple you can choose a private relay address). Your email is never shown to other parents and is used only to run your account and contact you about safety.
• Your community profile: first name, area, the support areas and short descriptions you choose to share, and the date you confirmed you are 18 or over.
• An optional profile photo. Photos are hidden from everyone else until our moderator approves them. Verification photos stay on your device and are never uploaded.
• Waves, passes and matches, and the messages you send to parents you've matched with.
• Community posts, replies and hearts.
• People you have blocked, and reports you make or that are made about your content.

Who can see it: other signed-in parents see your first name, area, the details you put in your profile, your approved photo, and your posts and replies. Messages are visible only to you and the parent you matched with — and to our moderator if a message is reported. Blocked people can no longer see you or contact you.

Moderation: posts, replies and messages are checked by an automatic kindness filter before they are shared. When something is reported, it is hidden from the person who reported it straight away, and a copy of the reported content is sent to our moderator, who may remove content or remove an account. Please do not share your child's full name, school, address or photos of your child.

8. Subscription and payment information

Purchases go through your Apple App Store or Google Play account and we never see your card or payment details. We receive only a status record — whether Euphoria Plus is active and when it renews — so we can unlock subscriber features and let you restore a purchase. This status is held by RevenueCat against an anonymous identifier (section 5).

To change or cancel your subscription, use your App Store or Google Play subscription settings. Deleting your data does not cancel the subscription; cancelling does not delete your data.

9. Analytics, advertising and tracking

None. The app contains no analytics SDKs, no crash-reporting services, no advertising, no advertising identifiers, no cross-app tracking, and nothing that reports usage back to us. We chose to build without these so the answer to "what do you collect about my child?" is simple: nothing that leaves the device. Community information is never used for advertising or tracking.

10. Cookies and website tracking

The app does not use cookies or similar tracking technologies, and there is nothing to opt out of. This website (not the app) uses HeyCatch, a visitor-statistics service, to count page visits and see which pages are read. It stores a random visitor ID in your browser and receives standard browser details such as page address, browser type and approximate country. We do not use it to identify you, we never link it to the app or to anything a child does, and we run no advertising. You can block it with any content or ad blocker and the site still works.

11. How long we keep information

Family information is kept on your device until you delete it — item by item, or all at once with Delete account (section 12). AI question text is processed only to produce your answer; we do not use it to advertise or build profiles. Subscription status records are kept only as long as needed to confirm your subscription and restore purchases.

Connect and Community information is kept while your community profile exists. When you delete your community profile or your account, your profile, photo, posts, replies, hearts, waves, matches, messages and blocks are erased from our server straight away. Two narrow exceptions: reports stay on record with your identity removed so we can show how we handled them, and if an account was removed for breaking the rules we keep its sign-in identifier and the reason, so the same person can't rejoin.

12. How parents can delete information

Two ways, both immediate.

In the app: Settings › Privacy & safety › Delete account. A parent confirms with the family PIN and one final "Delete everything" button; profiles, the PIN, Advice history, Planner events and reminders, journal entries, Pattern Map notes, SOS cards, drawings and preferences are erased from the device, your community profile, photo, posts, replies, messages and blocks are erased from our server, and the app returns to its welcome screen. If the PIN is forgotten, the same option appears on the PIN screen. To leave only Connect and Community, use Delete my community profile in your Connect profile.

On the web: you can request deletion without the app installed on our Delete your account page.

13. Consent and parental controls

A parent sets S.E.N Euphoria up: entering details, creating the family PIN and accepting the safety terms before the app can be used. Children are handed the phone through the profile picker and reach only the Calm Zone. Buying Euphoria Plus requires the parent's App Store or Google Play authentication; deleting data requires the family PIN; joining Connect or Community requires the parent's Apple or Google sign-in and confirmation that they are 18 or over. Because nothing collected from a child ever leaves the device, no separate consent to collect children's data is needed — nothing is collected. If you have any questions, contact seneuphoriauk@gmail.com.

14. Your rights

Under UK and EU data protection law you have the right to access, correct, delete, restrict and object to the processing of your personal data, the right to data portability, and the right to complain to the Information Commissioner's Office (ico.org.uk). Most family data is on your device, so you can exercise most of these rights yourself at any time: view, edit or delete anything in the app, edit or delete your community profile, posts and replies, or use Delete account for a complete wipe. For a copy of your community data, or anything involving the AI service or purchase records, email seneuphoriauk@gmail.com and we will respond within one month.

15. Changes to this policy

We will update this policy if the app's practices change, and tell you in the app before any change that affects what is collected. This version adds signed-in Connect and Community, which arrive in the late-October 2026 app update; until you install that update and choose to sign in, nothing in section 7A applies to you. The current version is always available in the app under Settings › Privacy & safety, and on this page.