This document is provided for transparency and has not yet been reviewed by a qualified data-protection solicitor.
Last updated: 7 August 2026
ProNectiv Ltd is a company registered in the United Kingdom (company number 17359833), registered office 5 Brayford Square, London, E1 0SG, United Kingdom. We are the data controller for personal data processed through ProNectiv, under the UK GDPR and the Data Protection Act 2018. Contact us at privacy@pronectiv.com.
Only the data needed for a given feature is sent for processing — schedule data for conflict detection, newsletter text for summarisation — not your full household record.
AI output is presented to you as suggestions. It is never written to the database without your explicit confirmation.
AI outputs are not independently verified and should not be relied on for medical or safety-critical decisions.
| Processing | Legal basis |
|---|---|
| Core service | Contract — Art. 6(1)(b) |
| Health data | Explicit consent — Art. 9(2)(a) |
| Children's data | Consent of the household owner with parental responsibility, plus contract necessity |
| Security and fraud prevention | Legitimate interests — Art. 6(1)(f) |
| Analytics | Consent (cookies) |
| Legal compliance | Legal obligation — Art. 6(1)(c) |
| Provider | Purpose |
|---|---|
| Supabase | Database, authentication and file storage |
| Cloudflare | Application hosting |
| Lovable (Lovable Labs AB, Sweden) | Development platform and AI orchestration |
| Resend | Transactional email — EU-US Data Privacy Framework certified |
| PostHog | Product analytics — EU region, Frankfurt |
| Sentry | Error monitoring — EU region |
We do not sell personal data.
Where a processor is located outside the UK or EEA, transfers rely on the UK Extension to the EU-US Data Privacy Framework, or on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.
Deleting a household removes its data, including stored files.
You have the right to access, rectification, erasure, restriction, objection and portability, and the right to withdraw consent. Contact privacy@pronectiv.com.
You can also complain to the Information Commissioner’s Office at ico.org.uk. Requests about a child should come from the household owner or another adult with parental responsibility.
Row Level Security is enforced in PostgreSQL so members can only reach data they are authorised for. Data is encrypted in transit with TLS and encrypted at rest. Access to production systems is restricted.
Essential cookies for sign-in and security are always active. Analytics cookies (PostHog) are only set after you accept them, and you can withdraw consent at any time.
— or open Settings → Analytics cookies in the app.
We may update this policy as the service develops. The “Last updated” date at the top will always reflect the current version. Where a change materially affects how we use your data, we will notify household owners by email and show an in-app notice before it takes effect.