Privacy Policy

1. Who we are

Parentica ("we", "us", "our") provides the Parentica Individual app ("the Service"), a personal subscription app for adults who want practical, research-backed guidance through the different stages of adult life. You subscribe as a private individual, for yourself. There is no employer, no company account and no workplace reporting attached to your subscription.

Parentica is the data controller for the personal data described in this policy. This policy explains, in plain language, what we collect, why, where it is stored, how long we keep it, and how you can exercise your rights under the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and the Swedish Data Protection Act (2018:218).

2. What data we collect

• Account data: your name, email address, password credentials handled by our authentication system, your chosen language, and optionally the life stage and country you tell us about.
• Usage data: courses you open, your progress, learning minutes, saved courses, ratings and the certificates you earn.
• Conversations with Pari: the messages you send to our AI assistant, any voice notes you record together with their transcript, and the assistant's replies.
• Requests and feedback: topic requests, reviews you submit, and any message you send to our support or privacy addresses.
• Device and technical data: push notification subscription details (endpoint, keys, browser type), approximate location derived from your IP address (country and city) so we can show the right language and keep the Service secure, and anonymous visit statistics.
• Subscription data: your plan (monthly or annual) and its status. Payments are handled by our payment provider; we never see or store your card number.

We do not ask for special categories of personal data such as health data, and we do not build a health profile about you. If you choose to describe something personal in a message to Pari, we process that content only to give you the reply you asked for, on the basis of your consent, which you can withdraw at any time by deleting the conversation.

3. Why we collect it (legal basis)

• Performance of a contract (Art. 6(1)(b)): to create your account, give you access to the courses and to Pari, and manage your subscription.
• Legitimate interest (Art. 6(1)(f)): to keep the Service secure, prevent abuse, understand in aggregate how features are used, and improve our content.
• Legal obligation (Art. 6(1)(c)): to keep accounting records and handle tax and consumer-law obligations.
• Consent (Art. 6(1)(a)): for push notifications, optional product or wellbeing emails, and any sensitive detail you choose to share with the assistant. You can withdraw consent at any time.

4. Where your data is stored (EU/EEA)

Your personal data is stored and processed within the European Union / European Economic Area (EU/EEA). The app is built and hosted on secure cloud infrastructure operated by our data processor under a written Data Processing Agreement. That processor supplies the database, file storage, authentication and application hosting behind the Service. All production data, including account records, progress, conversation history, certificates and uploaded files, resides on processor-managed infrastructure located in the EU.

5. No sale of data, no advertising

We do not sell, rent or trade your personal data. We do not allow any third party to keep your personal data for its own purposes. There is no advertising network, data broker or profiling service connected to the Service, and no employer or third party receives information about what you read, ask or do inside the app. Statistics we look at ourselves are aggregated and anonymised so that no individual can be identified.

6. Sub-processors and international transfers

We rely on the following categories of sub-processors, each bound by GDPR-compliant agreements:

• Cloud hosting, database and authentication: primary storage and processing of all app data, within the EU/EEA.
• Email delivery: transactional email such as welcome messages, receipts, reminders and digests that you have asked for.
• Payment provider: to process your subscription payment securely.
• AI model providers: to generate Pari's replies. Messages are processed to produce your answer and are not used to train third-party models.
• Optional integrations (Google Calendar, Google Tasks, Gmail): only activated when you connect your own account, and only to carry out the action you asked for.

Where a sub-processor is established outside the EU/EEA, data is transferred only on the basis of Standard Contractual Clauses, an adequacy decision, or another lawful transfer mechanism under Chapter V of the GDPR.

7. Pari: AI processing and your conversations

When you talk to Pari, your messages, any voice note and its transcript, and the assistant's replies are stored in your own conversation history so Pari can keep context and follow up across sessions. This history is linked to your account only, is visible only to you and to the small team that operates the Service, and is never shared with, sold to or retained by any third party for its own use. AI model providers process message content transiently to generate a reply and are contractually prohibited from retaining it or training their models on it.

You can delete a conversation at any time in the app, and history that has been inactive for 180 days is automatically removed. Pari offers general guidance and emotional support; it is not a medical or emergency service, and you should contact your local healthcare or emergency services when you need them. See our Terms of Use for detail.

8. How long we retain it

• Account and usage data: for as long as your subscription is active, then up to 12 months so you can return to your progress, unless you ask us to delete it sooner.
• Conversation history: kept while your account is active so Pari can keep context; deleted when you delete it, when it has been inactive for 180 days, or when your account is closed.
• Certificates and progress records: kept while your account exists, so you can download them again.
• Push notification subscriptions: removed when you disable notifications, uninstall the app or withdraw consent.
• Billing records: kept as long as accounting law requires, normally seven years.
• Anonymous, aggregated statistics: may be kept indefinitely, as they no longer identify anyone.

9. Your rights under GDPR

As someone using the Service in the EU/EEA, you have the right to:

• Access (Art. 15): get a copy of the personal data we hold about you.
• Rectification (Art. 16): have inaccurate or incomplete data corrected.
• Erasure (Art. 17): have your data deleted, including by requesting account deletion in Settings or by email.
• Restriction (Art. 18): ask us to limit how we use your data in certain situations.
• Portability (Art. 20): receive your data in a structured, machine-readable format.
• Objection (Art. 21): object to processing based on legitimate interests or to direct marketing.
• Withdraw consent (Art. 7): withdraw any consent at any time, without affecting processing already carried out.
• Automated decisions (Art. 22): Pari offers suggestions, not automated decisions with legal or similarly significant effects about you.

Email privacy@parentica.app to exercise any of these rights. We verify your identity and answer within one month, as GDPR requires; for complex requests we may extend this by two further months and will tell you why within the first month.

10. Security measures

We and our processor apply technical and organisational measures (Art. 32 GDPR) appropriate to the risk, including:

• Encryption in transit: all traffic between your device and the Service uses TLS/HTTPS.
• Encryption at rest: stored data and database records are encrypted on our processor's infrastructure.
• Access control: strict role-based access; only authorised administrators can reach user data, and only when necessary.
• Row-level security: each subscriber's records are isolated, so one user cannot read another's data.
• Authentication: secure session handling and password management through the platform's auth backend.
• Regular review: ongoing monitoring of systems, access logs and processing activities.

11. Personal data breach notification

If a breach is likely to put your rights and freedoms at risk, we notify the supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of it (Art. 33 GDPR). Where the risk to you is high, we also tell you directly, describing what happened, the likely consequences and what we have done or propose to do (Art. 34 GDPR).

12. Children and young people

The Service is for adults aged 18 and over, subscribing for themselves. The parenting and family content is written for adults; we do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it promptly.

13. Emails, push notifications and cookies

We send service emails that your subscription requires, such as receipts and important notices. Reminders, digests, daily check-ins and product updates are optional: you switch them on yourself, and every optional email and push notification can be turned off in Settings or with the unsubscribe link in the email.

We use strictly necessary cookies and local storage to keep you signed in and to remember your preferences and language. We do not use advertising cookies or third-party tracking for ads.

14. Changes to this policy

We may update this Privacy Policy as the Service or the law develops. The "Last updated" date above always shows the current version, and we will tell you about material changes by email or in the app before they take effect.

15. Data controller and contact

Parentica is the data controller for your personal data. Base44 acts as our data processor under a written Data Processing Agreement meeting Art. 28 GDPR. To exercise any right or to ask a question:

You also have the right to complain to the Swedish supervisory authority (Integritetsskyddsmyndigheten, imy.se) or to the data protection authority in your own EU/EEA country. This policy is governed by the GDPR, the Swedish Data Protection Act (2018:218) and applicable EU data protection law.