Privacy Policy.

1. Introduction

This Privacy Policy explains how Superparent (“we,” “us,” or “our”) collects, uses, discloses, and protects information in relation to our website, superparent.io, our mobile application, and our related services (collectively, the “Service”).

Our core mission is to help parents and caregivers manage the flood of school-related information by using AI to summarize communications and organize to-dos and events. Your privacy and the security of your family’s data are of the utmost importance to us.

This policy applies to any user of our Service (“you” or “user”). By using our Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect several different types of information for various purposes to provide and improve our Service to you.

A. Information You Provide Directly to Us

• Account Information: When you register for an account, we collect personal information about the parent or guardian, such as your full name, email address, and other profile details.
• Information About Your Child: To provide the Service, we collect information you provide about your child, including their name, date of birth, school name, grade/year, class details, teacher’s name, school website, and schedule.
• Communications and Content: We collect and process the content of messages and documents you choose to share with us. This can happen in several ways:
  • Connected Accounts: If you grant us access to third-party accounts like Gmail or WhatsApp, we process messages from the specific senders, domains, or groups you authorize.
  • Forwarded/Sent Content: We collect information from emails or messages (including voice notes) that you forward or send directly to our designated Superparent email address or WhatsApp number.
• User-Generated Content: We collect any to-dos, events, or notes you manually create within the Service.
• Payment Information: When you subscribe to our Service, payment is processed by a third-party payment processor (e.g., Stripe). We do not collect or store your full credit card details ourselves, though we may receive transaction confirmations and billing information.

B. Information We Collect Automatically

• Usage Data & Cookies: When you access the Service, we automatically collect certain information using cookies and similar tracking technologies (like Hotjar). This includes your IP address, browser type, device information (operating system, device type), pages visited, features used, and the dates and times of your interactions.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To Provide and Maintain our Service: Our primary use of your data is to deliver the core features of the Service, such as connecting to your authorized accounts, processing communications, generating AI-powered summaries, and creating to-dos and events for your family.
• To Manage Your Account: To handle your registration, process subscriptions, and manage your account settings.
• To Communicate With You: To send you essential service-related announcements, security alerts, support responses, and transaction confirmations.
• To Share With Your Authorization: To share summaries, to-dos, and events with other individuals, such as grandparents or caregivers, whom you explicitly authorize within the Service.
• For Improvement, Analytics, and Personalization: To understand how you use our Service, to analyze usage patterns, to fix bugs, to improve our features, and to personalize your experience.
• For Marketing and Promotions: To inform you about new features of our Service and to encourage you to share Superparent with friends. You will be able to opt out of these promotional communications at any time.

4. How We Share Your Information

We do not sell your personal information. We only share your information in the limited circumstances described below:

With People You Authorize: We share your content with any person (e.g., a grandparent or other caregiver) you explicitly authorize to receive such information through the Service.

With Third-Party Service Providers: We share information with vendors who perform services on our behalf. These providers are contractually obligated to protect your data and are restricted from using it for any other purpose. This includes, but is not limited to:

• Cloud Hosting: Google Cloud or other hosting provider (for data storage and infrastructure).
• Payment Processors: Stripe or Peach Payments (for handling payments).
• Analytics Providers: Hotjar or PostHog (for understanding user behavior).
• Communication Platforms: Brevo or SendGrid (for sending emails).

For Legal Reasons and to Protect Our Rights: We may disclose your information if required by law, subpoena, or other legal process, or if we have a good faith belief that disclosure is necessary to protect the safety of our users, to protect our rights and property, or to investigate fraud.

In Case of a Business Transfer: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide you with advance notice and the opportunity to delete your account before your personal information becomes subject to a different privacy policy.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected.

During Active Use

• Original email and WhatsApp messages processed by our AI are retained for 180 days.
• AI-generated summaries, to-dos, events, and other user-inputted data are retained for 2 years, or as long as your account is active.

Upon Account Deletion

• When you delete your account, original email and WhatsApp messages are deleted immediately.
• Your AI-generated summaries, to-dos, events, and other user data will be retained for a grace period of 30 days to allow for account recovery, after which it will be permanently deleted.

6. Security of Your Information

We take the security of your data very seriously and use appropriate technical and organizational measures to protect it. These measures include:

• Encryption: We encrypt your data both in transit (using TLS/SSL) and at rest.
• Access Controls: We implement strict access controls to ensure that only authorized personnel with a legitimate business need can access your personal information.
• Secure Development: We follow security best practices throughout our software development lifecycle.
• Incident Response: We have procedures in place to identify and respond to security incidents and will notify you in accordance with applicable laws if a breach occurs that affects your data.

7. International Data Transfers

Our Service is global, and your information may be stored and processed outside of your country of residence, in countries that may not have the same data protection laws.

• Our data is currently stored on Google Cloud servers located in the United States.
• Our remote team members and service providers may access your information from other countries, including South Africa, Kenya, and elsewhere.

When we have to transfer personal information from jurisdictions like the European Union, the UK, or South Africa, we rely on legally-provided mechanisms to lawfully transfer data across borders, such as Standard Contractual Clauses (SCCs) and Adequacy Decisions.

8. Your Privacy Rights

You have rights concerning your personal information, subject to local law. These rights include:

• The Right to Access: You have the right to request a copy of the personal information we hold about you.
• The Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or incomplete.
• The Right to Erasure (Deletion): You have the right to request that we delete your personal information, under certain conditions.
• The Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

You can exercise your right to rectify your information or delete your account directly within the application’s settings. To exercise your right to access or for data portability, please contact us at help@superparent.io.

Region-Specific Information

• For Users in the EU and UK (GDPR): Our legal basis for processing your data is typically the performance of our contract with you (to provide the Service). Where we ask for consent or rely on it for processing (e.g., for certain marketing), you can withdraw that consent at any time. You also have the right to lodge a complaint with your local data protection authority.
• For Users in South Africa (POPIA): This policy is designed to comply with POPIA. You have the right to lodge a complaint with the Information Regulator of South Africa.
• For Users in Australia and Israel: You have rights consistent with the principles outlined in this policy, and you may contact us to exercise them.
• For Users in the USA: This policy is designed to comply with U.S. federal and state laws. Residents of certain states, like California (CCPA/CPRA), have specific rights which are covered by the general rights described above.

9. Children’s Privacy

Our Service is intended for use by parents and legal guardians on behalf of their children. We do not knowingly collect personal information directly from children under the age of 16 without verifiable parental consent. If you believe we have inadvertently collected such information, please contact us immediately at help@superparent.io so we can take steps to delete it.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and, for material changes, we will provide a more prominent notice (such as an email notification).

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please do not hesitate to contact us at: help@superparent.io.