Privacy Policy

Last updated: May 2026  ·  Operated by ViVa Labs Ltd

1. Who we are

TwoParents is a parenting support app operated by ViVa Labs Ltd ("we", "us", "our"). This policy explains what personal data we collect, why we collect it, and your rights under UK GDPR.

Questions about this policy: privacy@vivanlabs.com

2. What data we collect

Account data

• Email address — to create and authenticate your account
• Display name — shown to your partner within your family group
• Password (stored as a secure hash — we never see it in plain text)

Family & child data

• Child's first name (optional) — shown only within your family
• Child's date of birth — used to match tips to the right age bracket
• Parenting style (from quiz) — used to personalise tip selection
• Additional needs flag (optional) — stored for future SEND-adapted tip personalisation; never shared with third parties
• Partner status — whether a second parent has joined your family

Usage data (with your consent)

• Which features you use and how often
• Tip feedback (helpful / not for us / hard)
• Mid-week check-in responses
• Anonymous device identifiers

We collect usage data only if you consent at first launch. You can change this at any time in Settings.

Technical data

• Push notification token — used to send your Monday tip and Wednesday nudge
• Device timezone — used to deliver notifications at the right local time

3. Why we collect it and our lawful basis

Purpose	Data used	Lawful basis
Providing the app and personalising tips	Account, family & child data	Legitimate Interests
Delivering push notifications	Push token, timezone	Legitimate Interests
Improving the app	Anonymous usage data	Consent
Security and fraud prevention	Account data, device data	Legitimate Interests

4. Children's data

We collect a child's date of birth and optionally their name solely to match weekly tips to the right developmental stage. This data is visible only to members of your family group, is never shared with third parties, is never used for advertising, and is deleted when you delete your account.

TwoParents is intended for use by adults (18+). The app is a tool for parents, not children.

5. Who we share data with

We do not sell your data. We share it only with:

• Supabase (database and authentication) — EU-hosted, GDPR-compliant
• PostHog (analytics, EU instance) — only if you consent; anonymous data only
• Apple Push Notification Service — push token only, for notification delivery
• Sentry (crash reporting) — anonymised crash data, no personal information

6. How long we keep your data

• Active accounts: data retained while your account is active
• After account deletion: all personal data deleted within 90 days
• Anonymous analytics data: retained for up to 2 years, then deleted

7. Your rights

Under UK GDPR, you have the right to access, correct, or delete your personal data. Account deletion is available directly in Settings → Account → Delete account. For all other requests, email privacy@vivanlabs.com.

You also have the right to complain to the ICO (Information Commissioner's Office) at ico.org.uk.

8. Data security

All data is transmitted over HTTPS/TLS. Passwords are hashed and never stored in plain text. Row-level security on our database ensures each family can only access their own data.

9. Changes to this policy

We will notify you of material changes via the app. The "last updated" date at the top of this page will always reflect the current version.

10. Contact

ViVa Labs Ltd · London, UK · privacy@vivanlabs.com