Data Ethics

Minimisation

We do not harvest data. We collect as little as possible and only use it to operate and provide our service, not for any other reason.

Transparency

We explain clearly what data we collect and why. You can see a short summary in the table below, or find more details here.

Security

We protect your organisation’s data and your users’ data. Data is encrypted at rest (AES 256) and in transit (TLS 1.2).

Integrity

We comply with the UK GDPR and meet all requirements of the UK Information Commissioner.

Summary

 
    Category of Data
    Type of Data
    How long we store it for
    Who we share it with
    
    Identity
    Name, date of birth, profile picture
    Until you close your account
    Organisation(s) you join, essential IT providers, statutory regulators
    
    Identity
    Name, date of birth (if you send or receive a message in an organisation)
    For 365 days from the date the message was sent
    Organisation(s you join, essential IT providers, statutory regulators
    
    Identity
    Name, date of birth (if you add or verify a user in an organisation)
    Until the user you added/verified leaves the organisation
    Organisation(s) you join, essential IT providers, statutory regulators
    
    Contact
    Email address
    Until you close your account, or for 30 days after your account is activated, whichever is longer.
    Essential IT providers, statutory regulators
    
    Contact
    Email address of your parent/guardian (if you are under the age of 13)
    Until your parent/guardian accepts/rejects our Privacy and Terms, or for 30 days, whichever is longer.
    Essential IT providers, statutory regulators
    
    Contact
    Mobile telephone number (if you are an administrator for your organisation)
    Until you stop being an administrator for your organisation, or close your account, whichever is shorter.
    Essential IT providers, statutory regulators
    
    Profile
    Password
    Until you close your account
    Essential IT providers, statutory regulators
    
    Device
    Type of mobile device, unique device identifier, mobile operating system, type of mobile browser
    Until you close your account
    Essential IT providers, statutory regulators

Category of Data	Type of Data	How long we store it for	Who we share it with
Identity	Name, date of birth, profile picture	Until you close your account	Organisation(s) you join, essential IT providers, statutory regulators
Identity	Name, date of birth (if you send or receive a message in an organisation)	For 365 days from the date the message was sent	Organisation(s you join, essential IT providers, statutory regulators
Identity	Name, date of birth (if you add or verify a user in an organisation)	Until the user you added/verified leaves the organisation	Organisation(s) you join, essential IT providers, statutory regulators
Contact	Email address	Until you close your account, or for 30 days after your account is activated, whichever is longer.	Essential IT providers, statutory regulators
Contact	Email address of your parent/guardian (if you are under the age of 13)	Until your parent/guardian accepts/rejects our Privacy and Terms, or for 30 days, whichever is longer.	Essential IT providers, statutory regulators
Contact	Mobile telephone number (if you are an administrator for your organisation)	Until you stop being an administrator for your organisation, or close your account, whichever is shorter.	Essential IT providers, statutory regulators
Profile	Password	Until you close your account	Essential IT providers, statutory regulators
Device	Type of mobile device, unique device identifier, mobile operating system, type of mobile browser	Until you close your account	Essential IT providers, statutory regulators