GDPR & your data rights

CustodyGuard is built and owned by Tap One Marketing, registered with the Information Commissioner's Office (ICO) as a data controller under registration number ZB744042. For the evidence you create about your own family matters, you act as the author and we process it on your instruction to keep it secure, tamper-proof and available to you.

• Contract — creating your account, storing your logs, producing export bundles and taking payment for a plan.
• Legitimate interests — keeping the service secure, preventing abuse, and maintaining an immutable audit trail so records remain admissible.
• Legal claims — special category data (health, wellbeing, safeguarding details) and any criminal-offence data you record is processed for the establishment, exercise or defence of legal claims in family proceedings.
• Consent — optional features you switch on, such as GPS capture, camera and microphone access, and alerts to your trusted contacts.

You have the right to be informed, to access a copy of your data, to rectify inaccurate data, to restrict or object to processing, to data portability, and to erasure. You can exercise access and portability yourself at any time using the export bundles in your dashboard.

Two rights work differently here, and deliberately so. Because the records are designed as court evidence, we do not delete or silently overwrite entries. Corrections are made by amendment: your new version is saved, the previous version is preserved, and the reason you give is recorded in the audit trail. That satisfies rectification while keeping the record honest.

Erasure is not absolute where data is needed for legal claims. CustodyGuard holds records until the later of six years after your account or case is closed, or the date your child turns 25 — the standard threshold for child-related proceedings. Your dashboard shows the earliest release date calculated from each child's date of birth. After that point you can request deletion and we will remove the records and their attachments. You can close your account at any time; closure stops processing for new entries but does not shorten the retention period.

Data is encrypted in transit and at rest. Files, audio, video and receipts sit in private storage reachable only through short-lived signed links issued to you. Parent-to-parent messages are end-to-end encrypted in your browser, so we hold only ciphertext. Access is scoped per account by row-level security, and solicitors or social workers only ever see what you explicitly grant, for as long as you allow it.

• Cloud hosting, database and storage — infrastructure provider.
• Stripe — payments and subscription billing.
• Transactional email delivery for invites, alerts and receipts.
• Speech-to-text processing for audio statements you choose to transcribe.
• Reverse geocoding to turn coordinates into a street address when you capture a GPS fix.

Where a processor operates outside the UK, transfers are covered by UK adequacy regulations or the International Data Transfer Addendum to the EU Standard Contractual Clauses, with appropriate technical safeguards.

Your records will often name your child, the other parent, and third parties such as teachers or officers. Record only what is relevant and proportionate to the matter. Do not share geotagged images with anyone — they can reveal a home address. When you share a read-only link, you are disclosing that data yourself, so filter by category and set an expiry.

Contact us first and we will respond within one month. If you are not satisfied you can complain to the Information Commissioner's Office at ico.org.uk, or by calling their helpline. Raising a complaint does not affect your other rights.