Privacy Policy
Introduction
Blanket ("we," "us," or "the App") is committed to protecting your privacy and the privacy of your family. This Privacy Policy explains how we collect, use, store, and safeguard information when you use our mobile application.
Blanket is designed for parents and guardians of children with ADHD. The primary user is the adult caregiver, not the child. We take particular care with the sensitive nature of the information you choose to record in the App.
Information We Collect
Information You Provide About Your Child
When you set up the App, you may enter the following about your child:
- First name (used for personalisation within the App)
- Age
- ADHD diagnosis status (e.g., diagnosed, suspected, in evaluation)
- Biggest challenges (e.g., focus, transitions, emotional regulation)
- Parenting goals
Behaviour and Wellbeing Data
As you use the App, you may choose to record:
- Behaviour entries — category, intensity (1–5 scale), triggers, context, location (e.g., home, school), outcome, strategy used, strategy effectiveness rating, and who reported the behaviour (e.g., parent, teacher, caregiver)
- Daily wins — title, details, category, and optionally a photo (stored as image data on your device)
- Medication tracking — medication name, dosage, frequency, adherence logs, optional effectiveness ratings (1–5 scale), observed side effects, and notes
- Parent emotional check-ins — your emotional state, intensity, triggers, context, and coping strategies used
- Meltdown entries — trigger, location, duration, intensity, what helped, what didn't help, time of day, and notes
- Chat messages — your messages to the AI assistant, the AI's responses, and metadata such as session topic and detected emotional tone (e.g., frustrated, anxious, hopeful) used to tailor supportive responses
This information constitutes "special category data" under GDPR Article 9 as it relates to health conditions.
Co-Parent Sync (Optional)
If you choose to use the co-parent sync feature, you may enter a co-parent's name and email address. This information is stored locally on your device and is used to coordinate shared visibility of selected data categories (behaviours, wins, medications, and strategies). You control which categories are shared with your co-parent.
Information We Do Not Collect
We do not collect your phone number, physical address, payment information, contacts, geographic location data, device identifiers for tracking, or any data from other apps on your device.
How We Use Your Information
All information you enter is used solely to:
- Personalise parenting strategies and recommendations to your child's needs
- Track behavioural patterns and surface helpful insights over time
- Generate progress reports (PDF) for your personal use or to share with healthcare providers
- Power the AI chat assistant with conversational context (see AI Chat section below)
- Detect emotional tone in chat messages (e.g., frustrated, anxious, hopeful) to provide more empathetic and relevant responses
- Provide crisis de-escalation resources when needed
- Store photos you attach to daily wins locally on your device for your personal reference
We do not:
- Sell your data to any third party
- Use your data for advertising or marketing purposes
- Share your data with analytics services
- Transfer your data off your device without your explicit action (e.g., choosing to export)
Data Storage and Security
On-Device Storage
Your core app data is stored locally on your device using Apple's SwiftData framework. We do not operate a user account backend or cloud database for your personal records.
Some app resources (such as strategy video metadata and media files) are fetched from third-party hosting/CDN infrastructure. Those providers may receive standard web request metadata (for example, IP address, device/browser headers, and request timestamps) required to deliver content.
Encryption and Protection
- Data is protected by iOS file-level encryption when your device is locked with a passcode or biometric authentication
- Sensitive credentials (such as API keys) are stored in the iOS Keychain with hardware-backed encryption
- The parental PIN is hashed using SHA-256 before storage in the Keychain
- Exported files are protected with iOS
FileProtectionType.complete, meaning they cannot be read while the device is locked
We strongly recommend enabling a device passcode and Face ID or Touch ID for maximum protection.
Parental Controls
The App includes a parental gate (PIN or biometric authentication) to prevent children from accessing settings, exporting data, or exiting child-facing screens such as calm-down activities.
AI Chat Assistant
Blanket includes an optional AI-powered chat assistant to help parents with ADHD parenting strategies. This is the only feature that sends user-entered chat content to an external AI provider.
What Happens When You Use AI Chat
- Your chat messages are sent to Groq, Inc. for processing by an AI language model (Llama 3.1)
- Limited context from your app usage may be included to improve response quality (for example: child age group, recent behaviour categories, and strategies you frequently use)
- Messages are processed in real time to generate responses
- We use this integration for response generation only and not for advertising profiling
What Is Not Automatically Shared with Groq
- Your full child profile record
- Full behaviour logs, medication logs, win photos, or exported reports
- Data from unrelated parts of the App unless included in the AI chat context described above
If you type identifying information (for example names or contact details) into a chat message, that content will be sent as part of your message.
Important Disclosures
- The AI assistant is not a licensed therapist, counsellor, or medical professional
- Responses are generated by artificial intelligence and may not always be accurate
- This feature requires your separate consent before first use
- You can disable or revoke consent for AI chat at any time in Settings
- If you express thoughts of self-harm or crisis, you will be directed to professional crisis resources (e.g., 988 Suicide & Crisis Lifeline, 999/112 emergency services)
For more information, see Groq's Privacy Policy.
Children's Privacy (COPPA Compliance)
Blanket is designed for use by adults (parents and guardians) to support their children. It is not intended for direct use by children under 13.
- The App requires parental confirmation during setup
- Some features (such as the calm-down screen and breathing exercises) may be used with children present, but all data entry and management is performed by the parent or guardian
- Parental controls prevent children from accessing sensitive areas of the App
- We do not knowingly collect personal information directly from children
We comply with the Children's Online Privacy Protection Act (COPPA) by ensuring parental control over all child-related data.
Data Retention
You have full control over how long your data is kept:
- Default retention period: 24 months (configurable in Settings)
- Data older than your chosen retention period may be automatically removed
- You can export all your data at any time using the in-app export feature
- You can delete all data immediately via Settings
- When you delete the App from your device, all local data is permanently removed
Your Rights
Under the UK GDPR, EU GDPR, and applicable data protection laws, you have the right to:
- Access your data — use the in-app Export feature to download your information
- Rectify inaccurate data — edit any entry directly in the App
- Erase your data — use Settings to delete all data, or delete the App entirely
- Restrict processing — disable specific features (e.g., AI chat) in Settings
- Data portability — export your data in standard formats (CSV, PDF)
- Withdraw consent — revoke any consent at any time through Settings; this does not affect the lawfulness of processing carried out before withdrawal
To exercise any of these rights, use the in-app features or contact us at the address below.
Third-Party Services
Services We Use
| Service | Purpose | Data Shared | Retention by Third Party |
|---|---|---|---|
| Groq, Inc. | AI chat response generation (optional) | Chat messages you enter, plus limited AI context fields | See provider policy |
| Cloudflare R2/CDN (media host) | Delivery of strategy video manifest and media assets | Standard request metadata needed to serve files | See provider policy |
Services We Do Not Use
Blanket does not integrate with:
- Advertising networks or ad tracking
- Third-party analytics platforms (no Firebase, Google Analytics, Mixpanel, or similar)
- Social media platforms
- Crash reporting services that collect personal data
Tracking and Privacy Nutrition Label
Blanket does not track you across other companies' apps or websites. Our Apple Privacy Manifest (PrivacyInfo.xcprivacy) confirms:
- NSPrivacyTracking: No
- NSPrivacyTrackingDomains: None
- NSPrivacyCollectedDataTypes: None collected for tracking
The only accessed API is UserDefaults, used solely for storing your in-app preferences and settings.
International Data Transfers
All data is stored on your device. The only international data transfer occurs if you choose to use the AI chat feature, in which case chat messages are sent to Groq's servers for processing. Groq processes data in the United States. By enabling the AI chat feature, you consent to this transfer.
Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, you will be asked to review and accept the updated policy within the App before continuing to use it.
The "Last Updated" date at the top of this policy indicates when the most recent changes were made.
Contact Us
If you have questions about this Privacy Policy, your data, or wish to exercise your data protection rights, please contact us:
Email: hello@blanketparent.com
General Support: hello@blanketparent.com
Data Controller: Paul Vernon
Governing Law
This Privacy Policy is governed by the laws of the United Kingdom. Any disputes relating to this policy shall be subject to the exclusive jurisdiction of the courts of England and Wales.