Effective Date: July 2026
YoungMindsApp Ltd ("YoungMindsApp", "we", "us", or "our") takes very seriously and is committed to safeguarding its clients’ privacy. This Privacy Policy describes how we collect, use, process, and protect personal data in connection with our YoungMindsApp Services (the "Services"). This Policy is designed to comply with applicable data protection laws, including the General Data Protection Regulation (EU GDPR), the UK General Data Protection Regulation (UK GDPR), the UK Data Protection Act 2018, and the California Consumer Privacy Act (CCPA), along with other relevant U.S. privacy laws.
YoungMindsApp processes two types of personal data:
A. DATA PROCESSED BY YOUNGMINDSAPP AS DATA CONTROLLER
1. Contact Information
YoungMindsApp is the data controller of your account and registration information. For any privacy inquiries, contact our Data Protection Officer at: dpo@youngmindsapp.co.uk.
2. Data Collected
3. Purpose of Processing
4. Legal Basis
5. Disclosure of Data
Personal data may be shared:
6. International Transfers
Your data may be transferred outside the European Economic Area (EEA). Safeguards such as Standard Contractual Clauses (SCCs) are in place.
7. Data Retention
Personal data is retained for the duration of your account and up to five years thereafter, in accordance with legal requirements.
8. Security Measures
We implement industry-standard technical and organizational measures to protect your data.
9. Your Rights (UK, EU, US Residents)
You may:
To exercise these rights, contact: dpo@youngmindsapp.co.uk.
10. CCPA-Specific Rights (US Users)
California residents may request:
YoungMindsApp does not sell personal data, including location information, and does not use location information for cross-context behavioural advertising, targeted advertising, or marketing purposes.
Requests can be submitted via email or support request. Identity verification will be required.
B. DATA PROCESSED BY YOUNGMINDSAPP AS DATA PROCESSOR
1. Role Definition
2. User Data Collection
Collected from monitored devices, may include:
iOS Device Data Collection (via MDM Profile)
For iOS devices, after installing the Mobile Device Management (MDM) profile, the YoungMindsApp will have limited access to information necessary for providing web monitoring and filtering functionality. The App does not have access to the content or transmitted data of websites visited. Only metadata required for filtering and reporting is collected.
All data transmitted from the device is sent to YoungMindsApp systems and is not sold or shared with unauthorised third parties. Data may be processed by authorised service providers listed in Appendix I only where necessary to host, secure, maintain, or provide the Services.
The specific information collected through the MDM profile includes:
This information is processed exclusively for the purposes described above, in accordance with the parent’s configuration and applicable privacy laws.
Location Services Data
Where enabled by the parent or legal guardian, YoungMindsApp may collect location information from monitored devices in order to provide location-based parental supervision features. This may include information such as the device’s current or recent location, location updates, and related technical data necessary to provide location reporting within the Services.
Location information is collected only where the relevant Location Services permissions have been enabled on the monitored device and configured by the parent or legal guardian. Parents and legal guardians are responsible for ensuring that they have the necessary authority, consent, or other lawful basis to enable and use location monitoring, particularly where the monitored device is used by a child or minor.
Location information is processed solely to provide the Services requested by the parent or legal guardian, including parental reporting, device supervision, safety-related features, and screen time management. Location information is disclosed only to the parent or legal guardian through the Services and is not sold, rented, or used for advertising or marketing purposes.
YoungMindsApp does not use location information for targeted advertising, profiling for marketing purposes, or disclosure to unauthorised third parties. Location information may be processed by authorised service providers only where necessary to host, secure, maintain, or provide the Services, and only in accordance with applicable data protection obligations.
3. Processing Instructions
Processing is conducted based on your control panel configuration and support interactions. You are solely responsible for configuring and using the parental control tools and ensuring you have the necessary consents from all individuals whose data you collect, particularly children or minors, where required by applicable law. YoungMindsApp processes User Data exclusively according to your instructions.
Where location monitoring is enabled, YoungMindsApp processes location information only in accordance with the parent’s or legal guardian’s configuration and instructions. The parent or legal guardian may disable location-related features through the device settings or the Services, where available.
4. Retention
User Data is retained during the subscription and may be deleted at any time by the account holder, subject to any legal or technical retention requirements. Location information is retained only for as long as necessary to provide the location-related features of the Services or as otherwise configured within the Services.
YoungMindsApp does not use identifiable location information for marketing, advertising, or sale to third parties. Where data is used for analytics, it is aggregated or anonymised where reasonably possible and is not used to identify a child’s location or movements.
5. Sub-processors
YoungMindsApp may share User Data, including location information where necessary to provide the Services, with authorised third-party service providers listed in Appendix I. Such providers may process data only on YoungMindsApp’s behalf and only as necessary to host, secure, maintain, or provide the Services. YoungMindsApp does not sell User Data or location information to third parties and does not share location information for marketing or advertising purposes.
6. Security Breaches
In the event of a breach, YoungMindsApp will notify you and the competent authority within 72 hours, where required.
7. End of Services
Upon account termination, data is deleted unless legally required to be retained.
8. Users’ Rights
YoungMindsApp will assist you in facilitating any rights requests made by data subjects.
9. Legal Compliance and Indemnification
As the Data Controller, you warrant that:
You agree to indemnify and hold YoungMindsApp harmless from any claims, damages, or losses arising from the processing of User Data where such claims result from your failure to obtain valid consent or from your misuse of the Services.
C. CHILDREN’S PRIVACY (UK, EU, US)
We comply with:
Parental consent is required before processing personal data of children under 13. We do not knowingly collect data from children under this age without verifiable parental consent.
By using the Services, you confirm that:
D. COMMERCIAL COMMUNICATIONS
Users may receive emails including alerts, promotions, and updates related to our Services. You can opt out at any time by clicking "unsubscribe" or contacting support@youngmindsapp.co.uk.
E. UPDATES TO THIS POLICY
This Privacy Policy may be updated. The effective date will be revised and users will be notified via the platform or email.
Appendix I: Third Party Processors
