Rock and your data

Who we are

Rock is made by Rocks Make Pebbles, which is run by TCG Community Apps Ltd, a company registered in England and Wales (company number 17268896) with its registered office at 66 Paul Street, London EC2A 4NA. TCG Community Apps Ltd is responsible for the personal information described here (the "controller" in data protection law). For anything about privacy, email support@rocksmakepebbles.co.uk.

What Rock keeps

About you and anyone you invite:

• Your email address, so you can sign in with a code we email you, and the name you choose to show in the file.
• Who is in each file, their role (owner, editor or viewer) and any invitations.
• Records of sign-ins, including the time, IP address and browser, to keep accounts secure.
• A reminder address for each device where you turn on reminders, and a record of each AI action (who, which job and when), so the daily limit works.

In your family's file, whatever you and the people you invite put in it:

• Your child's first name, and if you add them, their date of birth, nursery or school, where you are up to and which part of the UK you live in.
• Log entries, your own view, tags and flags, and any photos, videos, voice notes and files you attach.
• Originals you scan, such as diary pages, letters and forms, with a fingerprint of each, the text you checked, and the AI's first reading of each page, including whether it thought the page might describe a risk to a child.
• Requests and their history, referrals and their history, the people involved and their contact details.
• The one-page profile, your next steps, and a record of each evidence pack you make, including any AI summary.

A file can hold sensitive information about your child's health, development and needs, and about difficult days. It can also name other people, such as staff and other children. Please think about what you add, and leave out other children's names where you can.

What Rock never does:

• No adverts, analytics, tracking or selling of data.
• Never sends anything to anyone. You send emails yourself, from your own account.
• Never uses your file to train AI, or to profile you or your child.
• We only email you about your account, such as sign-in codes, replies to you and changes to this notice. No marketing.

On your phone

Rock keeps a few things in your browser's storage on each phone or computer you use:

• Your sign-in, so you don't have to sign in every time.
• Basic details of your file, such as your child's first name, so Rock opens quickly.
• Draft emails you haven't sent yet.
• Logs and photos you made with no signal, until they are saved to the file.

Signing out (in More) turns off reminders on that device and clears your drafts and file details from it. Anything not yet saved to the file stays on the phone, and Rock warns you first. Anyone who signs in to Rock on that phone next could see it, so sync before you sign out on a shared device. A reminder can show the wording of a request on your lock screen, so think twice before turning reminders on for a shared device.

When the AI sees it

Rock uses Claude, an AI made by Anthropic, for four jobs. Each one runs only when you tap, and sends only what that job needs:

• Reading a scanned page: the photo or PDF you chose (every page of a PDF), your child's first name, their nursery or school, and today's date.
• Drafting an email: the requests you chose, their history and the evidence linked to them (including your own view, labelled as yours), your child's name, date of birth and nursery or school, who you are writing to, your first name and any note you added.
• Suggesting wording for the profile: your child's first name, the profile so far and up to your 200 most recent saved log entries, without your own view.
• Writing a summary for an evidence pack: who the pack is for, its dates, your child's name and nursery or school, and the entries you chose for that pack, including your own view, labelled as yours. The summary box is ticked to start with, so untick it if you don't want the AI to read them.

Rock keeps the AI's reading of a page with the original, and a pack's summary with the pack. Drafts stay on your phone until you send or leave them, and profile suggestions only become part of the profile if you use them. Anthropic does not use what we send to train its models, and deletes it within 30 days, unless it has to keep something longer to deal with misuse of its service or because the law requires it. Our page on how the AI helps explains the rules it follows.

Why we use it, and our lawful bases

• Your account, the file's members and reminders are needed to give you the service you asked for. Our lawful basis is contract.
• Your family's file is kept with your explicit consent, because it can include information about your child's health. We ask for your clear agreement before you start a file. You can withdraw it at any time by asking us to delete the file.
• Details of other people in a file, such as staff named in a diary page or added to People, are held for the legitimate interest of the family in keeping an accurate record of their child's support.
• Sign-in records and the daily AI count are kept for our legitimate interest in keeping accounts secure and stopping misuse.

Who else handles it

• Supabase runs Rock's database, file storage and sign-in for us.
• Vercel hosts Rock and runs its server code, in London. Like any web host, it processes your IP address and browser details to deliver the app and protect it from attacks, and keeps them for a short time.
• Anthropic provides the AI, only when you tap, as above.
• Resend delivers our emails, such as sign-in codes. It sees your email address and the message.
• Your browser's push service (from Apple, Google, Microsoft or Mozilla) delivers reminders. The reminder is encrypted on its way, so the push service cannot read it.

They act only on our instructions, under contracts that require them to protect your information. We do not sell your information or share it with anyone else.

Where it is stored

During the beta, Rock's database and files are stored in the United States, in Amazon Web Services' US East data centres. Supabase, Anthropic, Vercel and Resend are based in the United States and may also handle some information there. When information is handled outside the UK, it is protected by safeguards approved under UK law.

How long we keep it

• Your family's file: until its owner asks us to delete it.
• Your account, and the record of your AI actions: until you ask us to delete your account.
• When we delete a file, its entries, originals, requests, referrals, people and profile are deleted from our database and storage. Copies in our providers' backups are deleted as those backups expire.
• If someone leaves a file, they lose access to it straight away. What they added stays in the file, because it is part of the family's record.
• Sign-in and technical logs are kept by our providers for a short time, then deleted.

Keeping it safe

• Database rules mean each person can only ever reach the files they belong to, and viewers can only read. We test this with automated checks.
• Everything travels over encrypted connections, and is encrypted where it is stored on our providers' servers.
• Originals are kept in private storage and can never be overwritten. Log entries keep every earlier version.
• There are no passwords to steal. You sign in with a code sent to your email.
• Access to our systems is limited to the people who run Rock, and protected with two-step sign-in.

Rock is not end-to-end encrypted yet, so the people who run Rock could reach a file through the database if they had to. We only do that if you ask us to, for example to fix a problem, or if the law requires it. You can help keep your file safe by using a passcode on your phone and keeping your email account secure, because that is how you sign in.

If you are named in a family's file

If you work with a child, for example at their nursery, school or a health service, a parent may add your name, role and work contact details to People, or scan a note or letter you wrote. The file is the family's own record. Only the people they invite can see it, and Rock never contacts you.

You have rights over information about you, as set out below. Because we don't look inside families' files, the quickest route is usually to ask the family. You can also email us and we will help.

Children

• Rock is for adults: parents, carers and others the family invites. Accounts are for people aged 18 or over, and children never sign in.
• A file is about a child, so we treat it with extra care. Parents and carers make the choices about their child's information, and can use their child's data protection rights for them. As children grow up, they can use those rights themselves.

Your rights

Under UK data protection law you can ask for a copy of your information, ask us to correct or delete it, ask us to limit or stop using it, and ask for it in a form you can take elsewhere. Where we rely on your consent, you can withdraw it at any time.

You can download a copy of your logs, requests, people and a list of your originals yourself, in More, Your data. For anything else, including referrals, the profile and evidence packs, email support@rocksmakepebbles.co.uk and we will reply within one month.

If you are unhappy with how we have handled your information, you can complain to us at the same address. We will acknowledge your complaint within 30 days, keep you updated, and tell you the outcome. You can also complain to the Information Commissioner's Office on 0303 123 1113.

Cookies and changes to this notice

Rock uses only the cookies and browser storage it needs to keep you signed in and work offline. There are no advertising or analytics cookies.

If we change how Rock uses information, we will update this page and the date at the top, and email everyone with a file before a change that affects them applies. The Rocks Make Pebbles website has its own privacy notice, and Pebble has its own too.