Privacy notice
Last updated 8 November 2026
KidRota is in testing. This page will be finalised before it is released publicly; parts in [square brackets] are still being confirmed.
KidRota is run by Cosala Limited. We decide how your information is used, and we're responsible for it under UK data protection law.
Who we are
Cosala Limited, registered in England and Wales, company number 13460700. Registered office: 82a James Carter Road, Mildenhall, Bury St. Edmunds, England, IP28 7DE. Contact us at info@cosala.co.uk.
What we collect and why
| Information | Examples | Why we use it | Legal basis |
|---|---|---|---|
| Your account | Name, email address, the colour that marks your time | To create your account, invite the other parent and send you updates | Contract with you |
| Your children | First names, month and year of birth | To show each child's schedule | Legitimate interests: running the schedule you set up |
| Schedule and handovers | Pattern, start date, handover times and places | To build and show the shared calendar | Contract with you |
| Events | Title, date, time, how often it repeats, and whether it follows the school holidays | To show them on the shared calendar and the home-screen widget | Contract with you |
| To-dos | The job, who's doing it, and whether it's done | To let you share jobs between both homes | Contract with you |
| Information vault | Contacts, clothes and shoe sizes, and other practical details you choose to save | To keep the details both homes need in one place | Contract with you |
| Swap requests and history | Dates, the reason you pick, a short note, replies, times | To let you agree changes and keep a shared record of them | Contract with you |
| Device information | Notification token, app version, device type | To send notifications and fix problems | Legitimate interests |
| Drafts in the message helper | Text you type to rewrite | To suggest a calmer version. [Confirm: drafts are not stored on our servers] | Contract with you |
The other parent in your family can see your shared schedule, events, to-dos, vault, requests and history. We don't sell your information, and KidRota has no adverts.
Sensitive information
KidRota isn't for health, medical or legal information. Please don't put it in notes, events, to-dos or the information vault. The vault is for practical details like contacts and sizes, not medical records. If something like that is added anyway, we protect it like the rest of your record, and you can ask us to remove it.
Companies that help us run KidRota
| Company | What they do for us | Where the data is |
|---|---|---|
| Supabase | Stores your account and schedule | [Location] |
| Cloudflare | Runs our website and links | Global network |
| Resend | Sends invite and update emails | United States |
| Google (Firebase Cloud Messaging) | Delivers notifications to Android phones | United States |
| Expo | Builds the app and [confirm: delivers notifications] | United States |
| [AI provider, if the message helper uses one] | Suggests rewrites of drafts | [Location] |
When information goes outside the UK, we use the safeguards UK law requires, such as approved contract terms.
How long we keep it
We keep your information while your account is open. When you delete your account, we delete your details within 30 days, and from backups within 90 days. [Decide: what the other parent keeps of the shared history after you leave.]
Your rights
You can ask to see, correct, export or delete your information, or object to how we use it. Email info@cosala.co.uk and we'll reply within one month. You can delete your account in Settings or at kidrota.cosala.co.uk/delete-account. If you're unhappy with how we handle your information, you can complain to the Information Commissioner's Office at ico.org.uk.
Children
KidRota is for parents aged 18 and over. Children don't use the app.
Keeping it safe
Your information is encrypted when it's sent and when it's stored, and only people who need it to run KidRota can access it.
Changes to this notice
If we make a significant change, we'll tell you in the app before it takes effect.