Privacy Policy

Effective 28 July 2026

Harbour is a co-parenting coordination app operated by MLJ Systems Ltd (company number 08129030, registered at Unit 6 Tawe Business Village, Phoenix Way, Swansea, SA7 9LA), the data controller for the personal information described here. Questions or requests: hello@harbourfamily.co.uk.

The short version: we collect only what the app needs to work, we show it only to you and your co-parent, and we never sell it, share it for advertising, or track you across other apps and websites.

What we collect

• Account details — your name, email address, and how you sign in (email & password, Google, or Apple). Passwords are held by Google Firebase Authentication, never by us.
• Family records you create — your parenting schedule, calendar events, change requests and their comments, handover checklists and notes.
• Information about your children — entered by you or your co-parent: name, date of birth, and optionally school, GP, allergies and medical notes, clothing and shoe sizes, and emergency contacts.
• Technical data — a device token so we can send push notifications you've allowed, short-lived server logs kept for security and reliability, and crash reports (what went wrong in the app and on what kind of device — not linked to your identity) so we can fix problems.
• Usage data — anonymous counts of which steps of the app are used (for example "a schedule was set up"), so we can see where Harbour helps and where it doesn't. Never the content of your family's plans, never your children's information, and never used for advertising or shared with advertisers.
• Calendars you connect (optional) — club feeds read your phone's calendars on this device only; nothing reaches Harbour until you choose to add an event, which then becomes a family record like any other. If you subscribe to a club or school calendar link, we store that link and check it periodically so the events stay current.
• School Inbox forwards (optional, off by default) — if your family switches on the School Inbox, you get a private Harbour email address and choose what to forward to it (typically school and club emails). Each forwarded email is read once, automatically, to suggest calendar entries and notices for you to confirm — nothing is ever added without a parent's say-so. The email's text is deleted as soon as that reading is done; only the sender and subject line are kept, so you can see where a suggestion came from. Turn the feature off at any time and the address stops accepting mail.

What we never do

• No advertising, and no advertising identifiers.
• No tracking across other apps or websites, and no analytics profiles of you or your children.
• No selling or renting of data — ever.

Why we process it (lawful bases)

• Contract — providing the service you signed up for: storing and showing your family's shared records to both parents in the family.
• Legitimate interests — service emails (such as invitations and password resets), and security logging.
• Consent — push notifications, controlled by you at device level and per category inside the app.

Children's information

Harbour is used by adults. Information about children is entered by their parents or guardians — the people with parental responsibility — and is visible only to the members of that family. We never collect information from children directly, and the app does not support children's photos.

Who sees your information

Your co-parent. That is the point of Harbour: family records — the schedule, events, requests, handovers, and children's details — are shared between the members of your family.

Our processors, who handle data on our instructions:

• Google Firebase — sign-in, push notification delivery, live sync signalling (a "something changed" ping between your phones — never the content itself), crash reporting (Crashlytics) and anonymous usage analytics
• Postmark (ActiveCampaign) — transactional email, such as invitations, and receiving School Inbox forwards if you've switched that on
• Anthropic — reads School Inbox forwards once to suggest calendar entries, only if you've switched that on. Processed under API terms that do not retain the content or use it to train AI models
• Microsoft Azure — application hosting and database, in the UK
• Apple App Store / Google Play — subscription billing (we never see your card details)
• RevenueCat — manages the Harbour Plus subscription's status (an account identifier, your email address and billing state — never your family's records)

Some processors (Google, Postmark, Anthropic, RevenueCat) may process data outside the UK; where they do, transfers are protected by UK-approved safeguards such as the UK International Data Transfer Agreement or Addendum.

We disclose information beyond this only if the law requires it.

How long we keep it

For as long as your account is active. If you delete your account (Account → Delete my account), your sign-in and personal details are removed immediately. Shared family records — the schedule, requests and handovers — remain available to your co-parent, because those records belong to the family, with your name replaced by “A parent”. Server logs are kept for no more than 90 days.

Security

Data is encrypted in transit (TLS 1.2+) and at rest, hosted in the UK, and access is limited to what the service needs to run.

Your rights

Under UK GDPR you can ask for access to your data, correction, deletion, a portable copy, or for processing to be restricted or objected to. Deletion and your data are available in the app (Account screen); for anything else, email hello@harbourfamily.co.uk and we'll respond within one month. If you're unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk.

Changes

If this policy changes in a way that matters, we'll tell you in the app before the change takes effect.