Who is responsible for your information?
ParentInbox is operated by Inception I/O Ltd, a company registered in England and Wales (company number 09336954), whose registered office is at 20-22 Wenlock Road, London, N1 7GU. Inception I/O Ltd is the controller of the personal information described here. Questions or data-rights requests can be sent to support@parentinbox.to.
Who ParentInbox is for
ParentInbox is an organisational service for parents and guardians aged 18 or over. Children do not create accounts or use the service independently. Adults decide what information about their family to add and should only add information they are entitled to use.
Information we use
- Account details: your email address and authentication identifiers.
- Family details: your family name and the names, school stages and other details you choose to add for children.
- Things you send: forwarded emails, pasted messages, photos, PDFs, attachments and their sender, recipient and date information.
- Your plans: events, actions, reminders, recurrence settings, notes, who an item is for and links back to the original message.
- Support information: messages you send us and the details needed to investigate a problem.
- Service and security information: request identifiers, delivery status, error logs and limited device or network information needed to keep the service reliable and secure.
Please avoid sending information that ParentInbox does not need, particularly medical, financial or other highly sensitive information.
How and why we use it
We use information to:
- create and secure your account and family space;
- receive, store and organise the messages and files you choose to send;
- suggest useful events, actions and reminders for you to check;
- match relevant details to the children in your family;
- send the briefs and service emails you ask for;
- answer support requests and investigate delivery or processing failures; and
- protect, maintain and improve ParentInbox.
Our main lawful basis is that processing is necessary to provide the service you request. We also rely on our legitimate interests in securing, operating and improving the service, where those interests do not override your or a child’s rights. We process information where needed to meet legal obligations. Where we ask for consent for an optional use, you may withdraw it at any time.
Services that help us
We use carefully selected providers to run ParentInbox:
- Supabase for authentication, database hosting and private file storage;
- Railway for application hosting;
- Resend for receiving forwarded email and sending service emails;
- OpenAI for automated document processing;
- PostHog for limited, route-level product analytics when enabled. We disable autocapture, session replay, persistent analytics cookies and user identification; and
- Stripe for subscription checkout, payment processing, invoices and billing management. ParentInbox does not receive or store your full card details.
These providers may process information only to provide their services to us and under appropriate contractual protections. We may also disclose information where the law requires it, or to protect people, our service or our legal rights. We do not sell family information.
International transfers
Some providers may process information outside the UK. Where this happens, we use an applicable adequacy decision or recognised contractual safeguards, together with additional protections where appropriate. Contact us if you would like more information about the safeguard used for a particular provider.
How long we keep information
We keep account and family information while your account is active. Messages, files and confirmed items remain until you delete them or ask us to close the account. Backups and security records may remain for a limited period before they are overwritten. We may keep a minimal record for longer where necessary for security, fraud prevention, legal claims or another legal obligation.
Keeping family information private
Family data is separated by account permissions. Uploads are stored privately and files are delivered through short-lived, authorised access rather than public links. We use encryption in transit and limit production access to people and services that need it. No online service can promise absolute security, so please use a secure email account and tell us promptly if you think your account has been compromised.
Cookies and analytics
ParentInbox uses essential storage and cookies to keep you signed in and protect your session. These are needed for the service to work. Our current product analytics records normalised page names and basic technical context, uses in-memory storage, and does not set persistent analytics cookies. We do not use advertising trackers.
Your data-protection rights
Depending on the circumstances, you may ask us to:
- give you a copy of your personal information;
- correct incomplete or inaccurate information;
- delete information;
- restrict how information is used;
- provide information in a portable format; or
- stop processing based on legitimate interests.
You can delete individual messages and plans inside ParentInbox. For an account deletion, a copy of your data or another rights request, email support@parentinbox.to from your account email. We may need to verify your identity. These rights are not absolute, but we will explain if an exception applies.
Your right to object: You can object at any time to processing based on our legitimate interests. Tell us what you object to and why, and we will stop unless we have compelling lawful grounds to continue.
You may also complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint. We would appreciate the chance to help first.
Changes to this notice
We will update this page when the service or our use of information changes. If a change materially affects your rights, we will provide a clearer notice in the service or by email where appropriate.