How we handle your data.

**Account information**: When you sign up, we collect your name, email address, and organisation name. This lets you log in and helps us identify your account.

**Evidence and entries**: The observations, photos, voice notes, and files you capture through Lighthouse QIP are stored so you can access them across devices and share them with your team.

**Usage data**: We collect basic information about how you use the app — which features you use, how often you log in, and any errors you encounter. This helps us improve the product.

**Contact form submissions**: When you fill in our contact or demo request forms, we collect the information you provide so we can respond.

We do not collect information about children. Lighthouse QIP is designed for educators and leaders to document their own observations and reflections. Any references to children in your entries are your responsibility and remain under your control.

We do not sell your data to third parties. We do not use your data for advertising. We do not share your information with anyone except as described in this policy.

**To provide the service**: Your data powers the features you use — dashboards, reports, action tracking, and team collaboration.

**To improve the product**: We analyse usage patterns (in aggregated, anonymised form) to understand which features help and which need work.

**To communicate with you**: We use your email to send account notifications, respond to support requests, and occasionally share product updates. You can opt out of non-essential emails at any time.

**To keep things secure**: We monitor for suspicious activity and use your account information to verify your identity if you need support.

**UK-based infrastructure**: Your data is hosted on servers located in the United Kingdom, operated by Supabase — a secure, SOC 2-compliant platform.

**Encryption**: Data is encrypted in transit (HTTPS/TLS) and at rest. Passwords are hashed using industry-standard methods.

**Access controls**: Only authorised team members can access production data, and only for specific support or maintenance purposes. We log all access.

**Backups**: Your data is backed up automatically. In the unlikely event of data loss, we can restore from backups taken regularly.

**Access**: You can view all the data we hold about you by logging into your account or contacting us.

**Correction**: If any information is inaccurate, you can update it in your account settings or ask us to correct it.

**Deletion**: You can delete your account and all associated data at any time. We will remove your data from active systems within 30 days and from backups within 90 days.

**Export**: You can download all your entries, actions, and reports in standard formats (CSV, PDF) at any time.

**Complaints**: If you are unhappy with how we handle your data, you have the right to complain to the UK Information Commissioner's Office (ICO).

We use essential cookies to keep you logged in and maintain your session. These are necessary for the app to function.

We do not use third-party tracking cookies for advertising. We do not share cookie data with advertisers or data brokers.

We use basic analytics to understand how visitors use our public website. This data is anonymised and helps us improve our marketing pages.

We use Supabase for database hosting, authentication, and storage. Their privacy practices are governed by their own policy, which aligns with GDPR.

We use Vercel for website hosting. They process minimal data — primarily web traffic logs — and do not access your account information.

We do not integrate with social media platforms for login or data sharing.

Lighthouse QIP is intended for use by adults working in early years settings. We do not knowingly collect personal information from children under 16.

If you believe a child has provided us with personal information without parental consent, please contact us and we will delete it promptly.

We may update this privacy policy as the product evolves or as regulations change. If we make significant changes, we will notify you by email or through the app.

The "Last updated" date at the top of this page shows when the policy was last revised.

If you have questions about this privacy policy or how we handle your data, please contact us:

**Email**: hello@lighthouseqip.com

**Address**: Lighthouse QIP, 123 Innovation Street, London, EC1A 1BB, United Kingdom

We aim to respond to privacy-related enquiries within 2 business days.