Last updated: September 2026 · Effective date: March 2026
September 2026 change: we now say plainly that the original attachments and the formatted copy of a forwarded email are deleted after 90 days, and that a plain-text copy is kept while your account is active. Nothing about what we collect has changed — this describes what happens to it.
Thank you for using Schoolio. We know you're busy — so we've written this policy in plain English.
We'll tell you exactly what data we collect, why we collect it, how we protect it, and what your rights are.
Schoolio is a trading name. The data controller responsible for your information is the company registered in England and Wales that operates Schoolio (contact details at Section 12 below).
We are registered with the Information Commissioner's Office (ICO) as required under UK data protection law. Our ICO registration number is ZC104307.
When you sign up for Schoolio, we collect:
To provide you with organised school communications, you provide us with:
We do not collect children's surnames, dates of birth, addresses, or any other identifying information about children beyond the above.
This information is used solely to organise and label your school communication summaries. It is never shared with third parties for their own purposes.
The core of our service involves you or your schools forwarding school emails to your unique Schoolio email address.
These emails may contain:
We process the content of these emails solely to extract events, deadlines, and actionable information for your digest. We do not store the raw email content beyond the period needed for processing (see Section 6 on retention).
Important: When you forward school emails to Schoolio, those emails may mention other people (other children, teachers, etc.) who have not directly consented to Schoolio processing their data. We only use this information to deliver your digest and do not build profiles on third parties mentioned in emails. Please only forward emails you have legitimately received.
When you subscribe to Schoolio, payments are processed by Stripe, Inc. We do not store your full card details on our systems. We receive only a payment confirmation token and your billing status from Stripe. For more information, see Stripe's privacy policy.
We automatically collect limited technical data to keep the service running reliably:
We do not use tracking pixels, behavioural advertising technology, or sell usage data to third parties.
Under UK GDPR, we must have a lawful basis for processing your personal data. Here is our basis for each type of processing:
Most of our processing is necessary to deliver the service you've signed up for. This includes:
We rely on legitimate interests for:
We have assessed that our legitimate interests do not override your rights and freedoms. You can object to this processing at any time — see Section 8.
We rely on your consent for:
You can withdraw consent at any time by contacting us or using the unsubscribe link in any marketing email.
Schoolio is a service for parents and guardians. We do not knowingly collect data directly from children, and our service is not directed at children.
The children's first names, schools, and year groups you provide are classed as personal data and treated with the same care as your own. This data is:
School emails you forward may incidentally mention children other than your own. We process this content only to extract information relevant to you, and we do not build records about other children.
If you believe we have received data about a child in error, please contact us immediately at support@getschoolio.com and we will delete it promptly.
To deliver Schoolio, we work with a small number of carefully selected third-party processors. Each is bound by a data processing agreement and required to handle your data in line with UK GDPR.
We use a WhatsApp Business API provider (Twilio) to send your daily digest to your WhatsApp number. Your mobile number and digest message content are shared with this provider solely for message delivery.
We use Anthropic's Claude API to process and summarise the content of your forwarded school emails. Email content is sent to Anthropic's API for processing under a data processing agreement. Anthropic does not use API inputs to train its models. Anthropic is a US company, so this processing may take place outside the UK — it is covered by the international-transfer safeguards described below. For more information, see Anthropic's privacy policy.
Stripe processes your subscription payments. Stripe is certified to PCI DSS Level 1. Your financial data is handled directly by Stripe and is not stored on Schoolio servers.
We use a transactional email provider (Postmark) to receive forwarded school emails and send account-related messages. Email content is processed in transit and not retained by the provider beyond delivery.
If — and only if — you agree when we ask, we tell the advertising platform that brought you here (such as Meta, who run Facebook and Instagram) that your visit resulted in a sign-up. They receive a scrambled, irreversible version of your email address and phone number for matching, and nothing about your children, their school, or your school emails. Section 9 explains this in full. If you decline or ignore the question, no advertising platform receives anything about you at all.
Our application and database are hosted with Railway, our websites with Vercel, and original school letters with Amazon Web Services (in the London region, eu-west-2). Where a provider processes data outside the UK — for example Anthropic's AI processing described above — we rely on the safeguards recognised under UK data protection law (data processing agreements incorporating the UK International Data Transfer Agreement or Standard Contractual Clauses with the UK addendum).
We do not sell, rent, or trade your personal data. Full stop.
We share your data only in the following limited circumstances:
We never share your data with advertisers, data brokers, or other third parties for their own marketing purposes.
We only keep your data for as long as necessary.
We retain all account data, child and school information, and digest history for the duration of your subscription.
If you cancel your subscription, your account and its data stay in place so you can reactivate later (for example, after the summer holidays) and so we can resolve any outstanding billing queries.
If you ask us to delete your account (see Section 8), we permanently delete your personal data from our systems promptly, keeping only what we are legally required to retain (for example, billing records). Where a school-wide event was originally created from one of your emails, the event itself may remain for other parents at that school, but the link back to you and your family is removed.
We may retain anonymised, aggregated data (e.g. average number of events extracted per digest) indefinitely for product improvement. This data cannot be used to identify you.
While your account is active, we keep a plain-text copy of each school email you forward to us, along with the dates and details we extracted from it. That is what lets us show you where a date came from, and correct anything our AI got wrong.
We keep the original files for 90 days. Ninety days after an email reaches us, we delete the attachments themselves (such as PDF letters), the formatted version of the email, and any copy of a letter we had stored. After that you can still see what an email said, but you can no longer open the original attachment.
All of it — including the plain-text copy and the extracted details — is deleted when your account is deleted.
We take security seriously. Our measures include:
No system is 100% secure. In the unlikely event of a data breach that affects your rights and freedoms, we will notify you and the ICO within 72 hours as required by law.
You have the following rights regarding your personal data. To exercise any of them, contact us at support@getschoolio.com. We will respond within 30 days.
You can request a copy of all personal data we hold about you.
You can ask us to correct any inaccurate or incomplete data. You can also update most information directly in your Schoolio account settings.
You can ask us to delete your personal data. We will do so promptly, subject to any legal obligations to retain certain records (for example, billing records) — see Section 6 for exactly what deletion covers.
You can ask us to pause processing your data while a dispute is resolved, for example if you believe data is inaccurate.
You can request your data in a structured, machine-readable format (e.g. JSON or CSV).
You can object to processing based on legitimate interests at any time. We will stop unless we can demonstrate compelling legitimate grounds.
Where processing is based on consent (e.g. marketing emails), you can withdraw consent at any time without affecting the lawfulness of prior processing.
If you are unhappy with how we've handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Our website (getschoolio.com) uses a small number of essential cookies to make the site work — for example, to keep you logged in.
We do not use:
When you arrive from a link we have shared or paid for, that link often carries a short tag saying where it came from (for example “instagram”). We store that tag, the page you landed on, and the website that referred you, on your device and then against your account if you sign up. We use it for one thing: working out which adverts actually bring parents to Schoolio, so we stop paying for the ones that don’t. This information stays with us.
We only ever keep the website that referred you (for example “google.com”) — never what you searched for.
If you agree, we tell the advertising platform you came from (such as Meta, who run Facebook and Instagram) that your visit led to a sign-up. This is what allows those platforms to show our adverts to more parents like you, and it is the only situation in which we share anything with an advertising platform.
When we do this:
This only happens if you say yes. We ask when you first visit, and “No thanks” is as easy to press as “Yes”. If you decline, or simply ignore the question, nothing is shared with any advertising platform — and everything on Schoolio works exactly the same either way. You can change your mind at any time by contacting us.
You can also control cookies through your browser settings. Disabling essential cookies may affect how the service functions.
Your daily digest may occasionally include relevant product recommendations or partner offers (for example, school supplies for World Book Day). These are curated by Schoolio and clearly labelled. Clicking a link may result in Schoolio earning a small commission — this never affects the price you pay.
If we ever want to send you promotional content (e.g. referral programme offers, new features), we will ask for your explicit consent first. You can opt out of marketing at any time by:
Opting out of marketing will never affect your access to the Schoolio service.
We may update this policy from time to time. If we make significant changes — particularly any that affect your rights or how we use your data — we will:
Continued use of Schoolio after changes take effect constitutes your acknowledgement of the updated policy. If you disagree with any changes, you can close your account at any time.
For any privacy-related questions, requests, or concerns, please contact us:
Email: privacy@getschoolio.com
Website: getschoolio.com
We aim to respond to all privacy requests within 30 days. For complex requests, we may extend this by a further two months — if so, we will let you know.
Schoolio is a trading name of RyderCo LTD, a company registered in England and Wales. Company registration number: 12409843. ICO registration number: ZC104307.
© 2026 Schoolio. All rights reserved.