Last updated: 19 June 2026 · Effective: 19 June 2026
In one breath: Arbor helps you understand and support your child's development. You — the parent or guardian — control your child's information. We do not sell your data, we do not show third‑party ads, and we never use your child's content to train AI models unless you explicitly turn that on. Data is stored in the European Union and you can export or delete it at any time.
Arbor (“we”, “us”) provides the Arbor mobile and web application for parents and caregivers to track milestones, log observations, practice activities with their child, and receive non‑diagnostic guidance. For the purposes of EU/UK GDPR, Arbor is the data controller for the information you provide through the app.
| Category | Examples | Source |
|---|---|---|
| Account | Email, authentication identifiers, family/household membership | You, at sign‑up |
| Child profile | First name or nickname, age/age‑band, optional avatar | You |
| Observations & activity | Milestones, behaviour notes, practice results you choose to log | You |
| Optional media | A photo to create an avatar; microphone audio during speech‑practice | You, only when you start that feature |
| Technical | Device type, app version, crash and performance diagnostics | Automatically, minimised |
We practise data minimisation: we ask only for what a feature needs, and sensitive child content is kept out of ordinary application logs.
Arbor is intended to be used by a parent or legal guardian, not by children directly. Information about a child is entered and managed by the adult who owns the account. We rely on your consent and parental authority to process a child's information, consistent with the U.S. Children's Online Privacy Protection Act (COPPA) and Article 8 GDPR. You can review, correct, export, or delete your child's information at any time from within the app, or by contacting us.
| Purpose | GDPR legal basis |
|---|---|
| Provide the app and your account | Performance of a contract |
| Generate guidance, summaries and practice content | Performance of a contract |
| Process a photo or voice for an optional feature | Your explicit, revocable consent |
| Keep the service safe, debug, prevent abuse | Legitimate interests |
| (Optional) improve AI models | Your explicit opt‑in — off by default |
Arbor uses AI to produce non‑diagnostic guidance, summaries, stories and stylised avatars. To deliver these features, relevant text or media may be processed by our AI provider (Google) acting as our processor under contract.
We do not sell personal data and we do not share it for third‑party advertising. We share data only with:
Your data is stored in the European Union (Google Cloud, europe‑west4, Netherlands). We keep your information for as long as your account is active. When you delete a child or your account, we remove the associated records and propagate the deletion to our processors; routine backups expire shortly thereafter.
Subject to applicable law, you can access, correct, export, restrict, or delete your and your child's data, and withdraw consent for optional processing. The app provides in‑product export and erase tools; you can also email us. EU/UK users may lodge a complaint with their local data‑protection authority.
We protect data with authentication, database access rules scoped to your family, transport encryption (HTTPS), rate limiting, and minimised logging of sensitive content. No system is perfectly secure, but we work to protect your family's information and to limit who can access it.
We may update this policy as the app evolves. We will revise the “last updated” date above and, for material changes, provide a notice in the app.
Questions, requests, or to exercise your rights: privacy@arbor.family.