Privacy policy
We keep as little as we can about your family, never sell it, and never show adverts. This page explains what we do keep and why.
Last updated 15 October 2026
The short version
- For your child, all we need is a first name or nickname. We never ask for surnames, birthdays, schools or photos.
- For you, we keep your email address so you can sign in, and a record of your purchase.
- We don't show adverts, we don't use tracking or analytics cookies, and we never sell or share your information for marketing.
- You can ask us for a copy of your information, or ask us to delete it, at any time by emailing hello@pabloandpoppy.co.uk. You can also delete your account yourself from My account.
When you're signed in, your chart is also saved online so it can come back on a new phone; otherwise it is kept only on your own phone or tablet and we can't see it.
Who we are
Pablo & Poppy is a small family business in the United Kingdom, run by a sole trader. In this policy, "we", "us" and "our" mean Pablo & Poppy.
Pablo & Poppy is run by Christopher Knee, a sole trader, at 7 Lewis Lewis Avenue, Blackwood, NP12 1JG, United Kingdom. You can reach us at hello@pabloandpoppy.co.uk.
We are the "controller" of your personal information, which means we decide how it is used and are responsible for looking after it under UK data protection law (the UK GDPR and the Data Protection Act 2018).
For children
Hello, explorer! Pablo and Poppy only know the name your grown-up typed in, the animal you picked, and how far you have walked along the trail. We don't ask where you live or what you look like, and we never tell anyone else about you. If you have a question, ask your grown-up to email us.
Pablo & Poppy is set up and paid for by a parent or carer. Children use the trail screen, but only a grown-up, with their PIN, can change anything or award points. We have designed it with the ICO's Age Appropriate Design Code (the Children's Code) in mind: privacy is high by default, there are no adverts, no chat, no sharing with other users, no location and no profiling.
What we keep and why
| Information | Why we need it | Legal basis |
|---|---|---|
| Your email address, and your name and email from Google if you choose "Continue with Google" | To create your family account, sign you in, and send sign-in codes and your welcome email | Contract: we need it to provide the adventure you bought |
| Your purchase: what you bought, when, the price, and a reference from Stripe or the marketplace you bought from. Never your card details. | To unlock the adventure, handle refunds and keep the records the law requires | Contract, and legal obligation (tax records) |
| Your child's chart: their first name or nickname, chosen explorer and trail, missions, points, badges, rewards and treats | To run the reward chart and, when you're signed in, to keep a copy online so you can open it on another device, get it back if a phone is lost, or get back in if you forget your PIN | Contract |
| Gift and activation codes, and which account used them | To make sure each code works once, for the right family | Contract, and legitimate interests (preventing misuse) |
| Emails you send us, including feedback from the app and answers to our tester feedback form | To answer you and improve Pablo & Poppy | Legitimate interests (helping customers and improving the product) |
| Basic technical information, such as your IP address and browser, in short-lived security logs | To keep the site working and protect it from attacks and abuse | Legitimate interests (security) |
Your grown-up PIN is stored in a scrambled form (a "hash") that can't be turned back into the PIN. It is never included in backup files. When your chart is saved online, the scrambled form goes with it, so the same PIN works on your other phone; we never see the PIN itself.
We don't send marketing emails. If we ever want to, we will ask you first and you can say no.
What stays on your device
The chart is saved in your browser's own storage on your phone or tablet, so it works without the internet. Clearing your browser's data for this site, or deleting the home-screen app, removes it from that device. You can make a backup file from the grown-ups' area at any time. When you're signed in, a copy is also saved online; you can delete that copy in the grown-ups' area under Settings, and it is deleted with your account.
Who helps us
We use a few trusted companies to run Pablo & Poppy. They only use your information to provide their service to us, under contracts that protect it:
- Cloudflare: hosts the website, protects it from attacks, and stores accounts and synced charts.
- Stripe: takes payments on its secure checkout page. Stripe handles your card details; we never see them. Stripe also uses payment information to prevent fraud and meet its own legal duties, as explained in Stripe's privacy policy.
- Google: only if you choose "Continue with Google" to sign in.
- Resend: sends sign-in codes and welcome emails, and passes answers from our tester feedback form to our inbox.
- Zoho Mail: our email inbox, for messages you send to us.
- Etsy or eBay: if you buy there, that marketplace shares your order details with us so we can send your activation code. Their own privacy policies apply to the purchase.
We would only share information with anyone else if the law required it, for example a valid request from the police.
Some of these companies process information outside the UK, including in the European Union and the United States. When they do, they use safeguards approved under UK law, such as the UK International Data Transfer Addendum or the UK Extension to the EU-US Data Privacy Framework.
How long we keep it
- Your account and chart: for as long as you have an account. If you delete it from My account, it goes straight away; if you ask us to delete it, we do so within 30 days. Your purchase record stays, no longer linked to your email.
- After a refund: we keep the chart for 30 days in case it was a mistake, then delete it.
- Accounts not used for 3 years: we email you first. If we don't hear back within 30 days, we delete the chart but keep a record of your purchase, so you can still sign in later.
- Purchase records: 6 years, because UK tax law requires it.
- Emails you send us: up to 2 years after we last hear from you.
- Sign-in codes: they stop working after a few minutes and are deleted soon after. Security logs are kept for a short time, normally no more than 30 days.
Your rights
Under UK data protection law you can ask us to:
- give you a copy of the information we hold about you and your child;
- correct anything that is wrong;
- delete your information;
- stop or limit how we use it, or object to us using it;
- give you your information in a format you can take elsewhere.
Email hello@pabloandpoppy.co.uk and we will reply within one month. There is no charge. We may need to check it's really you, usually by replying from the email on your account.
If you're unhappy with how we've used your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
Changes to this policy
If we change how we use your information, we'll update this page and the date at the top. If a change is important, we'll also email account holders before it takes effect.