Legal

Privacy Policy

Last updated: May 2026 · Applies to earlylane.co.uk and the EarlyLane mobile app
We have written this policy in plain English because you deserve to understand exactly what happens with your data. EarlyLane is built for families in a vulnerable position and we treat your privacy — and your child's privacy — with the seriousness that deserves. We never sell your data. Ever.
Contents
1. Who we are 2. What data we collect 3. Why we collect it and our lawful basis 4. Special category data 5. Children's data 6. How and where we store your data 7. Who we share your data with 8. Our sub-processors 9. How long we keep your data 10. Your rights under UK GDPR 11. Security 12. Cookies 13. Changes to this policy 14. Contact us

1. Who we are

EarlyLane is operated by Stefan Gajewski, trading as EarlyLane, based in England, United Kingdom. We are registered with the Information Commissioner's Office (ICO) as a data controller.

Contact us: hello@earlylane.co.uk

2. What data we collect

We collect different data depending on whether you use our website or our mobile app.

Website (earlylane.co.uk) — waitlist only

DataWhy collected
Email addressTo notify you when EarlyLane launches
Basic usage dataAnonymous analytics to improve the site

Mobile app — EarlyLane

DataWhy collected
Name and email addressAccount creation and login
Child profile — child's first name, year of birth, school name, assessment type, waiting timeTo personalise your experience and Assessment Passport
Journal observations — free-text notes, categories, mood ratings, datesTo power your journal and Assessment Passport. May contain health-related context.
Community postsTo enable the community forum
Teacher collaboration dataObservations shared between you and professionals you invite
Session tokensTo keep you securely logged in
Device informationBasic technical data to ensure the app works on your device

3. Why we collect it and our lawful basis

Data typeLawful basis
Website waitlist emailConsent (Article 6(1)(a))
App account and profile dataContract (Article 6(1)(b))
Journal observationsContract (Article 6(1)(b)) and Explicit Consent (Article 9(2)(a)) for health-related content
Community postsContract (Article 6(1)(b))
AnalyticsLegitimate interests (Article 6(1)(f))

4. Special category data — health-related observations

Important: Observations you log about your child may contain health-related information — for example, notes about sensory sensitivities, emotional regulation, or behaviour patterns. Under UK GDPR this is special category data and receives the highest level of protection.

Our lawful basis for processing this data is explicit consent under Article 9(2)(a) of UK GDPR. By creating an account and logging observations you give us explicit consent to store this data solely to provide the EarlyLane service to you.

This data is stored encrypted in transit and at rest, visible only to you and people you explicitly invite, never shared for commercial purposes, and never used to train AI models without your separate explicit consent. You can withdraw consent and delete all data at any time by deleting your account.

5. Children's data

EarlyLane accounts are created by parents, carers, and education professionals aged 18 or over. Children do not create accounts or interact directly with EarlyLane.

We process information about children — such as first name, year of birth, and behavioural observations — entered by their parent or carer with parental consent. We do not knowingly collect data directly from children under 18. If you believe a child has created an account please contact us immediately.

6. How and where we store your data

App data

Your account, child profiles, journal observations and all app data are stored in a PostgreSQL database hosted on Replit, with infrastructure in the United States and European Union. Data transfers outside the UK/EEA are protected by appropriate safeguards including Standard Contractual Clauses.

Authentication emails

Magic login codes are sent via Resend (resend.com). Resend processes your email address solely to deliver these emails.

Website waitlist

Waitlist email addresses are stored by Mailchimp (Intuit Inc.).

7. Who we share your data with

We do not sell, rent, or share your personal data with any third party for marketing or commercial purposes. We share data only in these limited circumstances:

8. Our sub-processors

Replit
App hosting and PostgreSQL database. Stores all app data including profiles and observations.
Resend
Transactional email. Sends magic login codes and verification emails.
Mailchimp (Intuit)
Email marketing. Stores website waitlist emails only.
Netlify
Website hosting for earlylane.co.uk.
Apple App Store
iOS app distribution per Apple's privacy policy.
Google Play Store
Android app distribution per Google's privacy policy.

9. How long we keep your data

Data typeRetention period
App account and all associated dataUntil you delete your account. Backups purged within 30 days.
Journal observations and child profileUntil you delete your account or individual entries.
Community postsUntil you delete the post or your account.
Website waitlist emailUntil you unsubscribe.
Financial transaction records7 years as required by UK law.

You can delete your account in the app via Profile → Settings → Delete Account, or by emailing hello@earlylane.co.uk. See our Account Deletion page for full details.

10. Your rights under UK GDPR

To exercise any right email hello@earlylane.co.uk. We will respond within 30 days.

11. Security

Your data is encrypted in transit using TLS and encrypted at rest in our database. We use industry-standard security practices and limit access to personal data to only those who need it. If we become aware of a data breach affecting your rights we will notify you and the ICO within 72 hours as required by UK GDPR.

12. Cookies

Website

Our website uses essential cookies to remember your cookie consent preference. We use Google Fonts which may set cookies. We do not use advertising or tracking cookies.

Mobile app

The app uses local storage and session tokens to keep you securely logged in. These are essential and cannot be disabled. We do not use advertising trackers or third-party analytics SDKs in the app.

13. Changes to this policy

When we make significant changes we will notify you by email and display a notice within the app. Continued use of EarlyLane after notification constitutes acceptance. If you do not agree you may delete your account.

14. Contact us

Questions about your privacy?

We read every email and respond within 5 working days.

hello@earlylane.co.uk

EarlyLane · Ellesmere Port · Cheshire · United Kingdom

ICO Registration Number: ZC136770