Privacy Policy

Who We Are

myHomeEdPlan is operated by Sarah Withers. We provide a personalised home education curriculum service at myhomeedplan.com. When this policy refers to "we", "us" or "our", it means myHomeEdPlan.

Contact: hello@myhomeedplan.com

What Information We Collect

Information you give us when you sign up

• Your email address
• Your child's first name and date of birth
• Your child's interests, learning styles, and home education preferences
• Any diagnosis, neurodevelopmental profile, or support needs you choose to share
• Resources available to you at home
• Your location (used only to suggest local opportunities where relevant)

Information generated through using the service

• Activity completion data and ratings you submit
• Worksheet responses saved to the Work and Evidence area
• Skills progress data generated from activity ratings
• Progress report content generated on your request

Payment information

Payments are processed securely by Stripe. We do not store your card details. We receive only confirmation of payment status from Stripe.

Our Legal Basis for Processing Your Data

We rely on the following lawful bases under UK GDPR:

• Contract - processing your and your child's information is necessary to provide the service you have subscribed to (generating and personalising the learning plan, tracking progress, billing).
• Consent - where you choose to share sensitive information such as a diagnosis or neurodevelopmental profile, we rely on your explicit consent, since this is special category data under UK GDPR. You can withdraw this consent at any time by contacting us; withdrawing consent may limit how well we can personalise activities, but will not affect the lawfulness of processing carried out before withdrawal.
• Legitimate interests - for limited purposes such as improving the service using aggregated, anonymised usage patterns, and preventing fraud or misuse.

How We Use Your Information

• To generate and personalise your child's monthly education plan
• To track activity progress and adapt future activities based on ratings
• To generate progress reports when you request them
• To send you your plan, reports, and service-related emails
• To manage your subscription and account
• To improve the service based on aggregated, anonymised usage patterns

Children's Data

We take the privacy of children seriously. Information about your child is collected only from you as their parent or carer, and is used solely to personalise their learning plan.

We do not knowingly collect data directly from children. The service is designed for parents and carers to use on behalf of their home-educated children.

Sensitive information such as diagnosis, neurodevelopmental profile, and support needs is used only to personalise activities. It is stored securely and never shared with third parties, other than the processors listed below, strictly as needed to provide the service. We design our processing of children's data with the principles of the ICO's Age Appropriate Design Code in mind, including data minimisation, high privacy by default, and not using children's data in ways that are detrimental to their wellbeing.

How We Store and Protect Your Data

Your data is stored on secure servers. Plan files are stored on Cloudflare R2 (cloud storage). Activity and subscriber data is stored in a secure MySQL database hosted on Railway.

We use industry-standard security practices including encrypted connections (HTTPS) for all data transmission.

Retention - We retain your data for as long as your subscription is active, plus a one-month period after cancellation to allow you to retrieve your records and in case you choose to resubscribe. After this period, your personal data is deleted or anonymised, except where we are required to retain it for legal or accounting purposes. You can request deletion at any time; see "Your Rights" below.

International Data Transfers

Some of the third-party services we use (see below) are based outside the UK, including in the United States. Where your data is transferred outside the UK, we ensure appropriate safeguards are in place, such as the provider's participation in a recognised data protection framework, or Standard Contractual Clauses approved for use under UK GDPR. You can request further details of these safeguards by contacting us.

AI Processing

When generating content, relevant details about your child (age, interests, learning style, diagnosis if provided) are included in the request sent to our AI provider, Anthropic (Claude).

Anthropic processes this data to generate the response and does not use it to train their models under standard API terms. For Anthropic's privacy policy, visit anthropic.com/privacy.

Third-Party Services We Use

• Stripe — payment processing (stripe.com/privacy)
• Anthropic Claude API — AI plan and report generation (anthropic.com/privacy)
• Cloudflare R2 — plan file storage (cloudflare.com/privacypolicy)
• Brevo — transactional email delivery (brevo.com/legal/privacypolicy)
• Tally — intake form collection (tally.so/privacy)

Each of these services has its own privacy policy. We only share the minimum data necessary with each provider for them to perform their function.

Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you and your child
• Correct any inaccurate information
• Delete your data (right to erasure)
• Restrict how we process your data
• Object to processing in certain circumstances
• Data portability - receive your data in a usable format

To exercise any of these rights, email us at hello@myhomeedplan.com. We will respond within one month, as required by law. If you are unhappy with how we have handled your data, you have the right to complain to the UK's supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk.

Cookies

Our website uses cookies. For full details of what cookies are used, their purpose, and how to manage your preferences, please see our Cookie Policy, which is the definitive source for cookie information and takes precedence over any general statement here.

The plan itself uses your browser's localStorage to save activity progress locally on your device. This data stays on your device and is not transmitted to us except when the save function is triggered.

Changes to This Policy

We may update this policy from time to time. If we make significant changes, we will notify you by email. The date at the top of this page shows when it was last updated.