Last updated: June 2026
This policy explains what personal data IncludeMe collects, why, and what rights you have over it. We built IncludeMe for families of children with additional needs, so we've tried to be especially careful and clear here — please get in touch if anything is unclear.
If you write a review, send a message to a provider, or describe a child's needs anywhere in the app, that information may reveal details about a disability or health condition. Under UK GDPR this counts as "special category" data. We only use it to operate the feature you used it for (e.g. passing your message to the provider you contacted) — never for advertising, and never sold to third parties.
IncludeMe is a directory of SEND activities, therapies and charities. For data protection purposes, IncludeMe is the "data controller" of the information described below. Contact us at hello@includeme.uk.
| Data | When |
|---|---|
| Name & email | When you create an account |
| Account type (family / organisation) | When you create an account |
| Favourites & saved filters | When you use those features |
| Reviews & ratings you write | When you submit a review |
| Messages, phone number, and details about your situation | When you message a provider via "Enquire" |
| Organisation details (name, address, contact info, listing content) | If you list or claim a business/charity |
| Approximate location | If you allow location access, to show nearby listings |
| Basic usage data (e.g. which listings are viewed) | Automatically, to show providers their own analytics |
We do not knowingly collect data directly from children. Where information about a child appears (e.g. in an enquiry message), it's provided by the parent or carer using the app, not by the child.
Our legal basis is generally your consent (for optional features like enquiries and reviews) or our legitimate interest in running a useful directory service (for things like basic usage counts).
When you send an enquiry to a provider, we share what you submit (your message, contact details, anything you've written) with that organisation so they can respond. We use Supabase to host our database and authentication — they process data on our behalf under their own data processing terms. We do not sell personal data to third parties, and we don't use third-party advertising trackers.
We keep account data for as long as your account is active. You can delete your account at any time from Account settings, which removes your profile; some content you've posted publicly (like a review) may be retained in anonymised form unless you ask us to remove it.
Under UK GDPR, you can ask us to: access the data we hold about you, correct it, delete it, or export it. Email hello@includeme.uk and we'll respond within a reasonable time. You can also complain to the Information Commissioner's Office (ICO) if you're unhappy with how we've handled your data.
Accounts are protected by Supabase Auth (industry-standard hashed passwords, optional sign-in with Google/Apple). We restrict access to personal data so that, for example, only you can see your own enquiries, profile and notification settings.
We don't currently use third-party advertising or analytics cookies. Basic, non-personal usage counts (like how many times a listing was viewed) are stored to help providers understand interest in their service.
If we make material changes, we'll update the date at the top of this page and, where appropriate, notify you in the app.
Questions, requests, or concerns about your data: hello@includeme.uk.