Privacy Policy

1. Who we are

MyTimetable (timetable.ashishgupta.co.uk) is run by Aspiro Consulting Limited, trading as MyTimetable (“we”, “our” or “us”). We are the data controller for the personal information described in this policy. You can contact us at support@aspiro-consulting.co.uk.

MyTimetable is a planner for a child’s school week — morning and evening checklists, kit, lessons, activities and homework — which families can share with each other. This policy explains what information we hold, why, who else handles it, and the choices you have.

2. Information we collect

2.1 Your account

• Your email address.
• Your name, as given by Google or Apple or as you enter it. If there isn’t one, we show the part of your email address before the “@” instead.
• Your profile picture link, if your Google account has one.
• If you sign up with an email address and password: your password, stored only as a secure one-way hash (we can never see it), and whether you have verified your email address. Verification and password-reset links use one-time codes that expire.
• If you sign in with Google or Apple: a record linking that account to your MyTimetable account, as provided by Google or Apple.
• When your account was created, when you last signed in, and the sign-in sessions that keep you signed in.

2.2 Your schedules

Everything you enter into a schedule, which may include:

• The schedule’s name and the child’s name you add to it.
• Lessons — subjects, times, rooms and teachers’ names.
• Homework set and due, kit and dress code, clubs and activities (with times and places, if you add them).
• Your morning and evening checklists.
• Who each schedule is shared with, and whether they can view it or edit it.

2.3 Families

• The names of the families you create.
• The email address of each person invited to a family (and their name, if one was given) — including people who haven’t signed up yet — plus their role and whether they have joined.

We don’t email the people you invite. When someone signs in with an invited email address, the invitation is linked to their account automatically.

2.4 Technical information

• To protect the service from abuse we count requests from each IP address over short time windows. These counts are kept in the server’s memory and aren’t saved to our database.
• For Import, we keep a count of how many imports your account has made in the past hour and day. These counts delete themselves automatically.
• Our hosting provider keeps standard server logs (such as the time of a request and whether it succeeded), which we use to fix problems.

3. How we use your information

• To provide the planner: saving your schedules and showing them to you on each device you sign in on.
• To show a schedule to the family members you choose to share it with.
• To sign you in and keep your account secure.
• To send you account emails: verifying your email address, resetting your password, and telling you if someone tries to register an address that already has an account.
• To read pasted text when you ask us to, using Import (see section 6).
• To prevent abuse and keep the service running.

We do not sell your information, use it for advertising, send marketing emails, build profiles of you or your children, or use your schedules to train AI models.

4. Our legal bases

Under UK data protection law (the UK GDPR and the Data Protection Act 2018), we rely on:

• Contract — to provide the service you signed up for.
• Legitimate interests — to keep the service secure, prevent abuse, send essential account emails, and fix problems.
• Your choices — we only share a schedule, add someone to a family, or send text to Anthropic when you ask us to.
• Legal obligation — where the law requires us to keep or disclose information.

5. Children’s information

MyTimetable is designed for parents and guardians planning a child’s week. Accounts should be held by a parent or guardian, or by an older child with their parent’s or guardian’s agreement. If you are under 13, please only use MyTimetable with a parent or guardian, and with their permission.

Schedules often contain information about children — a child’s name, their subjects, their teachers, their clubs and where activities happen. We use that information only to store the schedule and show it to you and the people you choose to share it with. We don’t use it for advertising or marketing, we don’t sell it, we don’t build profiles of children, and we don’t contact children. We only pass it to another company when you ask us to — for example, text you paste into Import goes to Anthropic.

Please add only what the planner needs. A first name is enough; there’s no need to add addresses, dates of birth or medical information.

If you think a child has created an account without a parent’s or guardian’s knowledge, or you want to review or delete information about your child, email us at support@aspiro-consulting.co.uk.

6. Import (Claude AI)

Import is optional. When you use it, the text you paste (up to 20,000 characters) is sent to Anthropic’s Claude service so it can pick out lessons, homework or activities. We don’t save the pasted text. What Claude finds comes back to your screen as a suggestion — nothing is added to your schedule unless you review it and press Save. Our logs record that an import happened and how large it was, not what it said.

Anthropic handles the text under its own terms and privacy policy. School letters can contain other people’s details, so please remove anything you don’t want sent — for example, other children’s names or medical information — before you paste.

7. Who we share information with

We don’t sell your information. It is shared only in these cases:

• People you choose. A schedule you share can be seen (or, if you allow it, edited) by the family members you share it with. Everyone in a family can see the family’s name and the names and email addresses of its other members.
• Service providers who run parts of MyTimetable for us:
  • MongoDB Atlas — our database.
  • Vercel — hosting the app.
  • Google and Apple — sign-in, if you choose to use them.
  • Resend — sending account emails.
  • Anthropic — reading pasted text, only when you use Import.
  • Google Fonts — the app’s fonts load from Google’s servers, so your browser connects to Google (which sees your IP address) when you open MyTimetable.
• Legal reasons — if the law requires it, or to protect the safety or rights of others.

Some of these providers may process data outside the UK. Where they do, we rely on the safeguards they provide for international transfers under UK data protection law.

8. Guest mode

Guest mode shows a demo week so you can try MyTimetable without an account. Nothing you do as a guest is sent to our servers or saved — it lives only in the open page, and refreshing clears it. The same goes for ticking items off on a phone: that is kept only for your current visit.

9. Cookies

We use only cookies that are strictly necessary to sign you in and keep you signed in: a session cookie that lasts up to 30 days, and short-lived security cookies set while you sign in (for example, to protect against forged requests and to complete Google or Apple sign-in). We use no analytics, advertising or tracking cookies. Because these cookies are essential, we don’t ask for consent; if you block them, you won’t be able to sign in.

10. Keeping your information safe

All traffic is encrypted over HTTPS. Passwords are stored only as secure hashes. Every request for a schedule is checked against who owns it and who it’s shared with, and requests are rate-limited. No system is perfectly secure, but we take reasonable steps to protect your information.

11. How long we keep it

• We keep your account and schedules while your account is open.
• When you delete a schedule or a family in the app, it is removed from our database straight away.
• There isn’t a “delete account” button yet. To close your account, email us from the address you sign in with. We’ll delete your account, the schedules you own and your family memberships within 30 days, unless the law requires us to keep something. People you shared your schedules with will lose access to them; schedules other people shared with you stay with their owners.
• Copies may remain in our providers’ routine backups for a limited time before they are overwritten.

12. Your rights

Under UK data protection law you have the right to:

• Get a copy of the personal information we hold about you.
• Have inaccurate information corrected.
• Have your information deleted.
• Restrict or object to how we use it.
• Receive your information in a portable format.
• Withdraw your consent, where we rely on it.

You can edit or delete anything in your schedules and families yourself. For anything else, email support@aspiro-consulting.co.uk and we’ll respond within one month. If you’re unhappy with how we’ve handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk.

13. Changes to this policy

We may update this policy as MyTimetable changes. We’ll post the new version here and update the “Last updated” date, and we’ll tell you in the app or by email about any significant change.

14. Contact us

Questions about this policy or your information? Email support@aspiro-consulting.co.uk or visit our Help & support page.