Privacy notice

Who we are

Mosaic is provided by [BUSINESS NAME], [REGISTERED ADDRESS]. We are the data controller for your account information. ICO registration: [ICO NUMBER]. For any privacy question or request, email [PRIVACY CONTACT EMAIL].

What we collect

• Account details: your name, email address and sign in method.
• Family content you add: events, tasks, birthdays, children's names or nicknames, lists, budgets, vehicles and notes.
• Documents and emails you upload or forward so Mosaic can suggest plans from them.
• Device details needed for alerts, such as push notification registrations, and basic technical logs to keep the service secure.

Why we use it (legal basis)

• To provide the service you signed up for (contract): storing your plans, sharing them with your family, reminders and briefings.
• To keep Mosaic safe and working (legitimate interests): security, fixing faults and preventing misuse.
• Optional tips and feature emails (consent): only if you tick the box. You can change this anytime in Notifications and alerts or with the link in any email.
• Essential account messages, such as password resets and invitations, are part of the service.

No marketing partners

Your opt in is for emails from Mosaic only. We never sell your data, never share your email with other companies for their marketing, and never send partner or third party offers.

Children

Children appear as profiles managed by their parents and do not have accounts. Their information is only used to organise your family's plans and is never used for marketing.

Who helps us run Mosaic

These providers process data only on our instructions and under data protection agreements:

• Cloud hosting and secure database (stores your account and family data).
• Postmark (sends and receives emails).
• An AI service that reads uploaded documents and forwarded emails to suggest plans. Suggestions stay drafts until you approve them.
• Postcoder (address lookup) and the DVLA (vehicle details), only when you use those features.
• Google or Apple, only if you choose to sign in with them.

Some providers may process data outside the UK; where they do, we rely on approved safeguards such as UK adequacy regulations or standard contractual clauses.

Who in your family can see what

• Every item has a visibility: only you, shared with named people, or the adults in your family.
• Access to a child's information requires an explicit grant.
• When someone's access is removed, it stops applying to reads, notifications and files.

How long we keep it

We keep your data while your account is active. If you ask us to delete your account, we remove your personal data within 30 days, except where we must keep limited records for legal or security reasons.

Your rights

You can ask to access, correct, delete or export your data, object to or restrict how we use it, and withdraw consent at any time. Email [PRIVACY CONTACT EMAIL] and we will respond within one month. You can also complain to the Information Commissioner's Office at ico.org.uk.

Cookies and storage

Mosaic uses only the storage needed to keep you signed in and to work offline. We do not use advertising or tracking cookies.