What we do with what you write

The short answer

What you type is stored so that you can come back to it: on our server, in one place, for at most 30 days from the day you start a case. After that it is deleted whether you ask or not — that is enforced by the code, not by a policy, and a case past its date is gone even if the tidying job never runs.

You can delete sooner, and you do not have to write to anybody: there is a delete this case link on every screen, and a delete my account link that removes the account, every case under it, and the record that you ever asked us for a sign-in link. It deletes; it does not hide.

What it is

An account of a child's special educational needs, and often their health, is special category data under Article 9 of the UK GDPR. That is the most protected kind there is, and it is the reason the system holds as little of it as it can and for as short a time as it can.

What we do not do

• We do not send it to the council, or to anyone. You send your own letter.
• We do not put it in an error log. Diagnostics record that something failed, never what you wrote.
• We do not sell it, and there is no advertising on this site.
• We do not train a model on it.

The one place it leaves this server

To pull the dates and the sequence of events out of your account, the text may be sent to Anthropic's Claude API, which returns structure only — never prose that reaches your letter. If that call fails or is switched off, the system reads your account itself and simply asks you more questions. You can use it that way deliberately.

The one thing that survives a deletion

A dated line in our audit record saying that a case was created, or that an account was erased, and how many cases went with it. It holds no name, no address and nothing you wrote. We check that rather than promise it: every build plants a real case through the real screens, erases it, and then searches every column of every table for anything left behind. If a single trace survives, the build fails.

Your rights

You can ask for a copy of what we hold, ask us to correct it, or ask us to delete it. Deletion is immediate and total: the link removes the record, not a flag on it.

A full privacy notice, and the record of processing behind it, is part of the work before we take a payment from anybody.