Pilot Privacy Notice

This explains what information we collect during the pilot, what we do with it, how long we keep it and what happens when we delete it. We have written it to describe what our systems actually do in as plain English and as little technical jargon as we can.

Who is responsible for your information

PICKLEJUICE LIMITED (company number 13177736), registered at 117 Clifden Road, London E5 0LW, is the data controller for the pilot. Picklejuice Limited is the company behind Yado.

You can reach us about anything in this notice at hello@yado.uk.

What we collect

About you, the parent

• Your name, email address and phone number.
• The postal address we send the device to.
• If you add a co-parent, their name, email and phone number.
• Your account sign-in details.

About your child

• A name or nickname of your choosing, and their school year group. We do not ask for their full legal name, their age, or their date of birth.
• The trusted contact phone numbers you set for them.

From the device

• Location, worked out from satellite positioning and from nearby WiFi networks and mobile masts.
• Device condition: battery level, whether it is charging, and whether it is moving.
• A regular check-in confirming the device is working.
• Events: an SOS being raised, and arriving at or leaving the places you set.

From the app and from the pilot itself

• A notification token, so we can send alerts to your phone.
• Technical diagnostics if the app crashes.
• Your feedback: survey answers, messages you send us, and notes from any conversation or interview.

Why we are allowed to use it

We rely on your consent, which you give by signing the consent form, and which you can withdraw at any time. Because your child is under 13, you give that consent on their behalf. We also ask your child to agree in their own words, which is not a legal requirement but matters to us.

Withdrawing consent does not undo anything we did lawfully beforehand, but it stops us going further and starts the deletion described below.

Who else sees it

We do not sell your information, and we do not use it for advertising. We use these companies to run the service:

We will also share information if the law requires us to, or if we believe a child is at risk of serious harm.

Where your information is stored, and why that is fine

Your information is stored on Google Cloud servers in Belgium, inside the European Union. We are a UK company, so it is fair to ask whether that weakens your protection. It does not, and here is the plain version of why.

The UK and the EU recognise each other's standards

When the UK left the EU it did not leave GDPR behind. It copied it into UK law as the UK GDPR, sitting alongside the Data Protection Act 2018. The rules you are used to, the lawful bases, your rights, the duties on us, all carried across.

Both sides then formally recognised each other. The EU recognises the UK as providing essentially equivalent protection, and renewed that recognition in December 2025, running to December 2031. Going the other way, which is the direction that applies to us, the UK recognises every country in the European Economic Area as fully adequate.

What that means for you

Storing your information in Belgium is treated in UK law as a routine, permitted transfer. It needs no special contracts or extra safeguards, because the protection is not considered to drop when the data crosses the Channel.

In practice:

• The same rules apply. We remain a UK company bound by UK GDPR wherever the servers sit.
• Your rights are unchanged. Access, correction, deletion and complaint all work exactly as they would if the servers were in Manchester.
• The ICO is still your regulator. You complain to them, not to a Belgian authority.
• Your data stays in Europe. This is not a transfer to a country with weaker protection or different surveillance rules.

If any of that changes, we will tell you.

How long we keep it

We keep the pilot information for six months after the pilot ends. That time is what makes it a pilot: we need it to review what happened and use it to improve Yado.

After six months we delete it, and we will email you to confirm that it has been done. If you would like it deleted sooner, ask us and we will.

What deletion actually does

When we delete your account, everything tied to it goes from our live systems: your details, your child's details, the locations, the events, the contacts, the settings. That is a genuine deletion, not a hidden flag.

Four things behave differently, and you should know about all four:

• A record that a deletion happened. We keep a note that an account was deleted and why. It contains no personal information about you or your child.
• Support conversations. If you raised a support ticket we keep the ticket so we can count and learn from them, but we strip out anything that identifies you, including names and phone numbers.
• The device and its SIM. The device returns to our stock and can be given to someone else. Its own record and the SIM's activation history stay with the device, not with you. Your settings and contacts are wiped from it.
• Our long-term archive. We keep a technical archive of what devices reported, and today deleting your account does not remove your device's history from that archive. It is not connected to your account or used to look at individual families, but we would rather tell you it exists than claim a cleaner picture than we have.

If you add a co-parent and then delete your own account, their account continues to exist in its own right.

How to delete your account

You can start a deletion yourself, at any time, without giving a reason. There are three ways:

• In the Yado app: Settings, then Account, then Delete account.
• On the web: sign in at yado.uk, then Settings, then Account.
• By email: write to hello@yado.uk and ask us to delete your account. Use this one if you cannot sign in.

Whichever route you take, deleting is a 30-day countdown, not an instant switch. Everything keeps working during those 30 days, and you can stop it at any point before the end — choose "Keep my account" in the app or on the web, or email us. Once the 30 days have passed, your account and its data are erased as described above, and that cannot be undone.

Only the person who set the account up can start or cancel a deletion. If you are a co-parent on someone else's account and want your own details removed, email hello@yado.uk and we will take care of it.

Your rights

• See what we hold about you and your child.
• Correct it if it is wrong.
• Have it deleted, at any point, without giving a reason.
• Withdraw your consent, which also ends your part in the pilot.
• Ask us to stop using it in a particular way, or to send you a copy.
• Complain to the Information Commissioner's Office at ico.org.uk if you are unhappy with how we have handled things. We would rather you told us first, but you do not have to.

Email hello@yado.uk for any of these and we will come back to you within a month.