Privacy notice

Last updated 7 October 2026. This is a draft for review and does not certify legal compliance.

This notice explains what information NeuroPathway and Safe Space hold, why, and who can see it. NeuroPathway Support Limited is responsible for the service.

What we hold

• Your account: email address, name and the role you chose.
• Child profiles you add: first name, optional last name, year group and EHCP status.
• Observations, support tried and outcomes you record.
• Consent decisions and the child's views, kept as a dated history.
• Safe Space journals, mood check-ins and a private support level worked out on the device from the entry.
• Safeguarding concerns raised and the decisions recorded about them.
• Text you choose to send to an AI tool, the draft it returns, and a short record of that use.

This information can identify a person, so we do not describe it as anonymous.

Who can see it

• Parents see the children they added and everything recorded for them.
• School, CAMHS and GP staff see a child only after the parent invites them by email and gives the matching consent. They see the child's name, year group, EHCP status and approved submissions — never the parent's own observations or journals.
• Safe Space journals are visible only to the person who wrote them. They are never shared automatically.
• These rules are enforced by the database, not only by hiding buttons.

AI tools

AI is only used when you press a button to ask for it. The text you choose is sent to an AI service to draft neutral notes. A person must check every draft before it is used, and the original text is kept alongside it.

Your rights

You can ask to see, correct or delete your information, or object to how it is used, by emailing tanjahanson.neuropathway@zohomail.eu. You can also complain to the Information Commissioner's Office (ico.org.uk).

Still to be confirmed: ICO registration number; lawful basis and special-category condition for each type of data; data processors and any transfers outside the UK; how long each type of record is kept; whether a Data Protection Officer is appointed; a completed data protection impact assessment.