Last updated: July 2026 · Effective date: March 2026
July 2026 change: we clarified how long forwarded email content is kept and how account deletion works, so this policy describes exactly how the service operates today.
Thank you for using Schoolio. We know you're busy — so we've written this policy in plain English.
We'll tell you exactly what data we collect, why we collect it, how we protect it, and what your rights are.
Schoolio is a trading name. The data controller responsible for your information is the company registered in England and Wales that operates Schoolio (contact details at Section 12 below).
We are registered with the Information Commissioner's Office (ICO) as required under UK data protection law. Our ICO registration number is ZC104307.
When you sign up for Schoolio, we collect:
To provide you with organised school communications, you provide us with:
We do not collect children's surnames, dates of birth, addresses, or any other identifying information about children beyond the above.
This information is used solely to organise and label your school communication summaries. It is never shared with third parties for their own purposes.
The core of our service involves you or your schools forwarding school emails to your unique Schoolio email address.
These emails may contain:
We process the content of these emails solely to extract events, deadlines, and actionable information for your digest. We do not store the raw email content beyond the period needed for processing (see Section 6 on retention).
Important: When you forward school emails to Schoolio, those emails may mention other people (other children, teachers, etc.) who have not directly consented to Schoolio processing their data. We only use this information to deliver your digest and do not build profiles on third parties mentioned in emails. Please only forward emails you have legitimately received.
When you subscribe to Schoolio, payments are processed by Stripe, Inc. We do not store your full card details on our systems. We receive only a payment confirmation token and your billing status from Stripe. For more information, see Stripe's privacy policy.
We automatically collect limited technical data to keep the service running reliably:
We do not use tracking pixels, behavioural advertising technology, or sell usage data to third parties.
Under UK GDPR, we must have a lawful basis for processing your personal data. Here is our basis for each type of processing:
Most of our processing is necessary to deliver the service you've signed up for. This includes:
We rely on legitimate interests for:
We have assessed that our legitimate interests do not override your rights and freedoms. You can object to this processing at any time — see Section 8.
We rely on your consent for:
You can withdraw consent at any time by contacting us or using the unsubscribe link in any marketing email.
Schoolio is a service for parents and guardians. We do not knowingly collect data directly from children, and our service is not directed at children.
The children's first names, schools, and year groups you provide are classed as personal data and treated with the same care as your own. This data is:
School emails you forward may incidentally mention children other than your own. We process this content only to extract information relevant to you, and we do not build records about other children.
If you believe we have received data about a child in error, please contact us immediately at support@getschoolio.com and we will delete it promptly.
To deliver Schoolio, we work with a small number of carefully selected third-party processors. Each is bound by a data processing agreement and required to handle your data in line with UK GDPR.
We use a WhatsApp Business API provider (Twilio) to send your daily digest to your WhatsApp number. Your mobile number and digest message content are shared with this provider solely for message delivery.
We use Anthropic's Claude API to process and summarise the content of your forwarded school emails. Email content is sent to Anthropic's API for processing under a data processing agreement. Anthropic does not use API inputs to train its models. Anthropic is a US company, so this processing may take place outside the UK — it is covered by the international-transfer safeguards described below. For more information, see Anthropic's privacy policy.
Stripe processes your subscription payments. Stripe is certified to PCI DSS Level 1. Your financial data is handled directly by Stripe and is not stored on Schoolio servers.
We use a transactional email provider (Postmark) to receive forwarded school emails and send account-related messages. Email content is processed in transit and not retained by the provider beyond delivery.
Our application and database are hosted with Railway, our websites with Vercel, and original school letters with Amazon Web Services (in the London region, eu-west-2). Where a provider processes data outside the UK — for example Anthropic's AI processing described above — we rely on the safeguards recognised under UK data protection law (data processing agreements incorporating the UK International Data Transfer Agreement or Standard Contractual Clauses with the UK addendum).
We do not sell, rent, or trade your personal data. Full stop.
We share your data only in the following limited circumstances:
We never share your data with advertisers, data brokers, or other third parties for their own marketing purposes.
We only keep your data for as long as necessary.
We retain all account data, child and school information, and digest history for the duration of your subscription.
If you cancel your subscription, your account and its data stay in place so you can reactivate later (for example, after the summer holidays) and so we can resolve any outstanding billing queries.
If you ask us to delete your account (see Section 8), we permanently delete your personal data from our systems promptly, keeping only what we are legally required to retain (for example, billing records). Where a school-wide event was originally created from one of your emails, the event itself may remain for other parents at that school, but the link back to you and your family is removed.
We may retain anonymised, aggregated data (e.g. average number of events extracted per digest) indefinitely for product improvement. This data cannot be used to identify you.
We keep the content of forwarded school emails (including attachments such as letters) while your account is active. This is so you can reopen the original letter from your dashboard at any time, and so we can review and correct anything our AI extracted. Forwarded email content is deleted when your account is deleted.
We take security seriously. Our measures include:
No system is 100% secure. In the unlikely event of a data breach that affects your rights and freedoms, we will notify you and the ICO within 72 hours as required by law.
You have the following rights regarding your personal data. To exercise any of them, contact us at support@getschoolio.com. We will respond within 30 days.
You can request a copy of all personal data we hold about you.
You can ask us to correct any inaccurate or incomplete data. You can also update most information directly in your Schoolio account settings.
You can ask us to delete your personal data. We will do so promptly, subject to any legal obligations to retain certain records (for example, billing records) — see Section 6 for exactly what deletion covers.
You can ask us to pause processing your data while a dispute is resolved, for example if you believe data is inaccurate.
You can request your data in a structured, machine-readable format (e.g. JSON or CSV).
You can object to processing based on legitimate interests at any time. We will stop unless we can demonstrate compelling legitimate grounds.
Where processing is based on consent (e.g. marketing emails), you can withdraw consent at any time without affecting the lawfulness of prior processing.
If you are unhappy with how we've handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Our website (getschoolio.com) uses a small number of essential cookies to make the site work — for example, to keep you logged in.
We do not use:
We may use anonymised, privacy-preserving analytics (such as aggregate page view counts) to understand how the site is used. This data cannot be linked back to you.
You can control cookies through your browser settings. Disabling essential cookies may affect how the service functions.
Your daily digest may occasionally include relevant product recommendations or partner offers (for example, school supplies for World Book Day). These are curated by Schoolio and clearly labelled. Clicking a link may result in Schoolio earning a small commission — this never affects the price you pay.
If we ever want to send you promotional content (e.g. referral programme offers, new features), we will ask for your explicit consent first. You can opt out of marketing at any time by:
Opting out of marketing will never affect your access to the Schoolio service.
We may update this policy from time to time. If we make significant changes — particularly any that affect your rights or how we use your data — we will:
Continued use of Schoolio after changes take effect constitutes your acknowledgement of the updated policy. If you disagree with any changes, you can close your account at any time.
For any privacy-related questions, requests, or concerns, please contact us:
Email: privacy@getschoolio.com
Website: getschoolio.com
We aim to respond to all privacy requests within 30 days. For complex requests, we may extend this by a further two months — if so, we will let you know.
Schoolio is a trading name of RyderCo LTD, a company registered in England and Wales. Company registration number: 12409843. ICO registration number: ZC104307.
© 2026 Schoolio. All rights reserved.