This privacy policy explains what personal data LOQT collects, why, and what rights you have over it. If anything here is unclear, or you have a question we have not answered, email us at contact@loqt.app.

What Information We Collect

We do not sell personal data, and we do not use or share personal data with any third party for advertising, marketing or analytics purposes. We only collect what is needed to deliver the LOQT service to you. You are asked to approve the LOQT service agreement when you first download the app.

When you create a LOQT account we collect your name and either a phone number or an email address. A phone number can only be supplied when you create your account. To let us communicate with you and personalise the service, you can also provide a surname, an email address if you have not already given one, age and gender. The same applies to other adults in your family or school group who join LOQT, whether they downloaded it themselves or you invited them.

To operate the service, we also need certain information about the children whose devices you manage, for example a profile name and the status of the device they use. We do not require this information to come directly from a child, it is provided or authorised by the parent or guardian who controls the account. Where a school enables the optional app allow list feature, we also read the list of applications installed on that child's device, so the correct applications can be permitted. This feature is not currently switched on for any school. What we can see if it is switched on differs by platform: Apple's Family Controls framework is more restrictive about what an app can see than Android, so the level of detail available to us depends on the child's device.

We do not build a behavioural profile of any child from the data we collect. LOQT does not request or collect location data from children's devices.

As part of delivering the service we automatically receive and record non-personal information in our server logs from your device.

Whether you use LOQT for free or as a paying customer, we do not promote or carry advertising in the app or on our website. LOQT is designed to help parents and guardians manage the digital wellbeing of children of all ages, but the administration, configuration and settings of the app are intended to be used by adults aged 18 or over.

Personal information submitted about children is encrypted in transit and at rest. We encourage the parent or guardian of any child using a device managed through LOQT to actively guide how that child interacts with it, to help prevent accidental disclosure of personal information.

We designed LOQT with regard to the standards in the Information Commissioner's Office Age Appropriate Design Code, including keeping default settings as private as possible, collecting only what the service needs, and giving parents clear and proportionate control rather than building profiles of children for any purpose beyond running the service.

SMS and Mobile Information

LOQT sends text messages to account holders who provide their own mobile number in the LOQT app. We send two types of message: one time verification and device pairing codes, sent when you create an account, sign in or link a device, and account notifications about activity in your family or school group. We do not send marketing or promotional text messages.

We collect your mobile number only when you enter it yourself in the app. We do not purchase, rent or otherwise obtain mobile numbers from third parties.

We use Twilio to deliver these messages on our behalf, including to account holders in the United Kingdom, the United States and Canada. Twilio processes your mobile number and message content solely to deliver the message and may not use it for its own purposes. No mobile information is shared with any other third party for marketing or promotional purposes. Sharing with a subcontractor who provides support services, such as customer service, is permitted under the same restriction.

Message and data rates may apply. Message frequency depends on your account activity. You can opt out at any time by replying STOP to any message. For help, reply HELP or email contact@loqt.app.

Children's Use, Parental Consent and Account Control

LOQT is a parental control service designed to help parents and legal guardians support their child's digital wellbeing.

A child may only use LOQT where a parent or legal guardian has created and manages the account. Children cannot independently register for LOQT, create their own profiles, or manage app settings without parental approval.

Parents or legal guardians are responsible for creating and maintaining the parent account, linking and managing any child devices or profiles, and providing consent for the collection and processing of a child's personal data in accordance with this policy.

LOQT is not a social platform for children. The app does not provide social networking features, public profiles, messaging between users, or user generated content shared with others. Child users do not interact independently with other users through the service.

Parents remain in full control at all times and may review, manage, or request deletion of their child's data by contacting us at contact@loqt.app.

Data Controller and Data Processor

Under the UK General Data Protection Regulation and the Data Protection Act 2018, a Data Controller decides why personal data is collected and how it is used, and a Data Processor processes personal data on behalf of the controller, following the controller's instructions.

Where LOQT is used by a school, the school is the Data Controller. The school decides why LOQT is used, which pupils are enrolled, and how the service is applied within the school. LOQT (Do It Get It Ltd) is the Data Processor, processing personal data on the school's instructions and in line with our data processing agreement with that school.

Where LOQT is used directly by a family, without a school, LOQT acts as both Data Controller and Data Processor. We decide the purposes for which data is collected, to deliver the LOQT service, and we process that data accordingly.

Who We Share Personal Data With

We do not sell personal data. To deliver the LOQT service we work with a small number of service providers who process personal data on our instructions, only for the purpose stated, and who may not use it for their own advertising, marketing or analytics purposes. These are:

A cloud hosting and storage provider, based in the United Kingdom.

A text message delivery provider, to send the verification codes, device pairing codes and account notification messages described under SMS and Mobile Information.

A push notification provider, to deliver notifications to the LOQT app.

An email delivery provider, to send account and notification emails.

For schools that choose to enable this integration, a school management information system integration provider, to bring across pupil, class and timetable information from the school's own systems so that LOQT tasks can be assigned correctly. This only happens for schools using this feature, on that school's own instruction.

The device manufacturer's own parental control framework, to provide the screen time management functionality LOQT relies on, and to process in app purchases.

Each of these providers is contractually required to protect personal data. None of them may use LOQT data for their own purposes.

Reviewing, Correcting and Deleting Your Personal Data

You have the right to ask us to confirm whether we hold personal data about you, to access it, to correct it, or to have it deleted, by contacting us at contact@loqt.app. You also have the right, in certain circumstances, to receive the personal data you provided to us in a portable format, to restrict how we process it, or to object to that processing.

Where you ask us to delete personal information, we will complete that request without undue delay, and in any event within 90 days, save where we are required or entitled to retain specific information to comply with a legal obligation. See Data Retention below for how we do this.

You may withdraw any consent you have given us for processing your personal data at any time, in the same way, provided we are not required by law or professional standards to retain that information.

You have the right to lodge a complaint with a supervisory authority. In the UK this is the Information Commissioner's Office.

Security

All personal data is encrypted both in transit, using TLS, and at rest. Our servers are hosted on Amazon Web Services in London, United Kingdom. Our databases are internal only and are not directly accessible from the public internet.

Access to personal data within our organisation is restricted to authorised personnel, on a need to know basis. We are currently undergoing independent assessment for Cyber Essentials certification, and Cyber Essentials Plus certification has been arranged to follow immediately afterwards.

We are registered with the Information Commissioner's Office, registration number ZC110979.

Data Retention

When you request deletion of personal information, whether by closing your account or by contacting us directly, we complete that request within 90 days, save where we are required or entitled to retain specific information to comply with a legal obligation. We do this by anonymising the data: your name, email address, phone number, task descriptions, age, and any other personal information you may have added within the app are all removed, so that no personal information identifying you or your child remains.

We may keep the anonymised record beyond that point for statistical and reporting purposes. Anonymised data of this kind cannot be used to identify you or your child, and is not covered by the rights described in this policy.

De-Identified or Anonymised Data

We may create de-identified or anonymised data from personal data, by removing anything that could make it identifiable. Our use of genuinely anonymised data is not covered by this policy.

Legal Basis for Processing

We process your personal data for a variety of purposes. In some cases we ask for your consent. In others, data protection law allows us to process your personal data without consent, including where this is necessary to perform our contract with you, to comply with a legal obligation, or for our legitimate interests, provided those interests are not overridden by your own rights and freedoms.

If You Are in the European Union or European Economic Area

This section applies in addition to the rest of this policy if you are a data subject resident in the European Union or the European Economic Area, and to our processing of personal data that takes place there. If anything in this section conflicts with another part of this policy, this section takes priority for those residents.

We disclose personal data only where permitted under applicable European and national data protection law. The third parties who may receive data are the service providers named under Who We Share Personal Data With above. None of them may use your data for advertising, marketing or analytics purposes.

You have the same rights described under Reviewing, Correcting and Deleting Your Personal Data above: to know whether we process your data, to access it, correct it, delete it, receive a portable copy of it, restrict its processing, or object to it. You may exercise any of these rights, or withdraw consent, by contacting us at contact@loqt.app. You have the right to lodge a complaint with the supervisory authority in your own country, as well as with the UK Information Commissioner's Office.

If You Are Using LOQT From Outside the United Kingdom or European Economic Area

LOQT is a UK company and this policy is written under UK data protection law. If you use LOQT from a country outside the United Kingdom and the European Union or European Economic Area, we apply the same protections, and the same rights to access, correct or delete your personal data described in this policy, to you as well.

Changes to This Privacy Policy

We may update this policy from time to time, for example to reflect a change in the law or in how LOQT works. Where a change is material, we will let you know, for example by email or by a notice in the app, and show the date this policy was last updated. Continuing to use LOQT after a change has taken effect means you accept the updated policy. If you do not agree with a change, please stop using LOQT and contact us at contact@loqt.app.

Contact Us

For any question about this policy, or to exercise any of your rights, email us at contact@loqt.app.

LOQT | Do It Get It Ltd | contact@loqt.app | loqt.app ICO Registration: ZC110979