Privacy Policy
This policy explains what personal information we collect when you use the Places To Play website and mobile app, how we use it, who we share it with, and the rights you have over it. We've tried to write it in plain English — being upfront about your data is part of how this whole thing is meant to work.
It is written to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
Places To Play ("we", "us", "our") is the data controller for the personal information described in this policy. That means we're responsible for how it's collected and used.
- Controller: Places To Play
- Email: hello@placestoplay.uk
2. What this policy covers
This policy applies to:
- the Places To Play website (our marketing site and public playground directory); and
- the Places To Play mobile app (Android, with iOS to follow).
Where the website or app links to third-party services (for example, the Google Play Store or Apple App Store, or an external website), those services have their own privacy policies, and we're not responsible for them.
3. The information we collect
We collect as little as we can. In particular:
- You don't need an account to use Places To Play.
- Your favourites stay on your device. When you save a playground, that list is stored locally on your phone — it never reaches our servers, so we don't know which playgrounds you've saved.
3.1 Information you give us
- Contributions you make: information you add about a playground — for example its features (shade, fencing, toddler equipment, loos, accessibility, and so on), corrections, and any notes or photos you choose to submit. These are submitted without an account and are not linked by us to your identity.
- A contact email for contribution updates (optional): if you choose to give us an email address so we can let you know when a contribution you submitted has been reviewed.
- Anything you send us directly: for example, if you email us or use a contact form, we keep the message and your contact details so we can reply.
3.2 Information collected automatically when you use the app or site
- Approximate or precise location (app only, and only with your permission): used to show you playgrounds near you. See section 4.
- Device and technical information: such as device type, operating system version, app version, and (on the website) IP address and browser type, used for security, troubleshooting, and to keep the service working.
- Usage analytics: privacy-preserving, aggregated information about how the app and website are used — for example, how often a feature is opened, or that a favourite was saved (but never which one). We deliberately keep this lean and free of personal identifiers (see section 8).
3.3 Information from third parties
- If you install the app via the Google Play Store or Apple App Store, those stores may share limited information with us (such as aggregated install and crash data) in line with their own policies.
4. Location data
Because finding a nearby playground is the whole point, the app can use your device's location — but only if you grant permission, and you can turn that permission off at any time in your device settings.
- We use your location to work out which playgrounds are near you and to show them on the map.
- We use it only in the moment you ask for nearby results. We do not log or store your location on our servers, we do not keep a history of where you've been, and we do not use your location to track or profile you.
- The map itself is drawn from basemap tiles we host ourselves, so your location and your browsing of the map are not shared with a third-party map provider.
5. How and why we use your information, and our legal bases
Under UK GDPR we must have a lawful basis for using your personal information. Here's what we do and why:
| What we use it for | Information used | Legal basis |
|---|---|---|
| Show you playgrounds near you | Location (with permission) | Our legitimate interests in providing the core feature, enabled by the location permission you grant on your device |
| Let you contribute playground information and publish it to other users | Your contributions | Our legitimate interests in building and maintaining a useful, shared dataset |
| Check, moderate and maintain the quality of contributed data | Contributions | Our legitimate interests in keeping information accurate, safe and trustworthy |
| Tell you when a contribution has been reviewed | Your contact email, if you gave one | Consent |
| Understand and improve the app and website | Privacy-preserving, aggregated analytics | Our legitimate interests in improving the service |
| Keep the service secure and prevent abuse | Technical and log data | Our legitimate interests in security, and compliance with legal obligations |
| Respond to your enquiries or reports | Your contact details and message | Our legitimate interests in helping you |
| Comply with the law | As required | Legal obligation |
Because your favourites are stored only on your device, we don't process them at all — there's nothing for us to hold, share, or lose.
Where we rely on legitimate interests, we've considered whether that interest is overridden by your rights, and we don't use it where it would be. Where we rely on consent (for example, giving us an email for updates), you can withdraw it at any time without affecting anything we did before you withdrew it.
6. Your contributions and the shared dataset
The app gets better because parents add what they know. It's important you understand how that works:
- Information you contribute about a playground (its features, corrections, notes) becomes part of the shared, public dataset that other users see. It's meant to be shared — that's the point.
- Contributions are submitted without an account, so we don't link them to an identifiable person. This also means that once a contribution is part of the dataset, we generally can't single out and remove "your" specific contributions, because we've no way of knowing which were yours.
7. Photos and content you submit
If you're able to submit photos or free-text notes: please only add content that is safe and appropriate, and do not include images in which individual children are identifiable, or any other personal information about other people, without a lawful basis to do so. We may remove content that doesn't meet our guidelines.
8. Analytics — and how we keep it privacy-first
We keep analytics deliberately lean, because this is a family app and we'd rather know less about you.
- In the app, we use Aptabase (EU), a privacy-focused analytics tool. It records anonymous events (such as which screens are opened, or that a favourite was saved — but never which playground) to help us improve the app. It does not collect personal identifiers, does not build a profile of you, and its data is hosted in the EU.
- On the website, we use Plausible Analytics, a privacy-focused, cookie-free analytics tool that collects aggregated statistics only and does not track individuals across sites. Its data is hosted in the EU.
Because these tools don't use tracking cookies or collect personal data in a way that identifies you, they run without an intrusive consent banner. If we ever introduce a tool that does set non-essential cookies, we'll ask for your consent first (see section 9).
9. Cookies and similar technologies
Website: We use only the cookies and local storage that are strictly necessary to make the site work (for example, remembering your cookie preferences). We do not use advertising or cross-site tracking cookies. Our website analytics (Plausible) does not use cookies. If we ever introduce non-essential cookies, we'll ask for your consent first through a cookie banner set to decline non-essential cookies by default.
App: The app uses local storage on your device to function — including to hold your saved favourites, which stay on your device and are not sent to us.
10. Who we share your information with
We do not sell your personal information. We share it only with service providers ("processors") who help us run Places To Play, and only so far as they need it. Each is bound by a data processing agreement.
| Provider | What they do | Where data is held |
|---|---|---|
| Supabase | Hosts our database and the shared playground dataset (including contributions) | United Kingdom (London region) |
| Aptabase (EU) | App analytics (no personal identifiers) | European Union |
| Plausible | Website analytics (aggregated, cookie-free) | European Union |
| Host Lincoln Ltd. | Hosts the website and the map basemap tiles | United Kingdom |
| Google (Google Play) / Apple (App Store) | App distribution and crash reporting | See their own policies |
We may also disclose information if we're required to by law, or to protect the safety and rights of users.
11. International data transfers
We keep personal data within the UK or the European Economic Area (EEA). Our database is hosted in the UK (Supabase's London region), and our analytics providers (Aptabase EU and Plausible) host data in the EU, which the UK recognises as providing an adequate level of protection.
Some of our providers are international companies whose staff may, on occasion, access data from outside the UK/EEA to provide support. Where that happens, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, as set out in each provider's data processing terms.
12. How long we keep your information
- Contributions: retained as part of the shared, public dataset for as long as they remain useful, as explained in section 6.
- Contact email for contribution updates (if given): kept for 12 months after your submission has been reviewed.
- Enquiries and reports: kept for 12 months after your query is resolved.
- Analytics: aggregated and not tied to you as an individual; retained in line with our analytics providers' settings.
- Technical and security logs: kept for a short period, up to 90 days, and then deleted.
13. How we keep your information secure
We take reasonable technical and organisational measures to protect your information, including encryption in transit, access controls, and hosting with reputable providers. Collecting so little in the first place — no accounts, device-only favourites, no stored location — is itself a core part of how we keep you safe. No online service can be guaranteed completely secure, but we work to protect your data and to keep the amount we hold to a minimum.
14. Your rights
Under UK GDPR, you have the right to:
- be informed about how we use your data (this policy);
- access the personal data we hold about you;
- rectify inaccurate or incomplete data;
- erase your data ("right to be forgotten"), in certain circumstances;
- restrict how we use your data, in certain circumstances;
- data portability — receive your data in a portable format, in certain circumstances;
- object to processing based on our legitimate interests; and
- withdraw consent at any time, where we rely on consent.
To exercise any of these rights, contact us at hello@placestoplay.uk. We'll respond within one month. Exercising your rights is free, and we won't treat you any differently for doing so.
Please note: because we collect so little and don't hold accounts, there may be cases where we genuinely cannot identify any personal data relating to you (for example, anonymous contributions). Where that's the case, some of these rights may not apply, because there's nothing we can link to you. We'll always explain if that happens.
15. Children's privacy
Places To Play is designed for and directed at parents and carers — that is, adults. It is not intended for use by children, and we do not knowingly collect personal data from children.
While the app is about places children play, it is not a service aimed at children, and we do not collect personal data about your children.
16. Changes to this policy
We may update this policy from time to time. When we make significant changes, we'll update the "last updated" date at the top and, where appropriate, let you know in the app or on the website.
17. How to contact us or make a complaint
If you have any questions about this policy or how we handle your information, please contact us at hello@placestoplay.uk.
If you're not happy with how we've handled your data, you have the right to complain to the UK's data protection regulator:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
Helpline: 0303 123 1113
We'd appreciate the chance to put things right first, so please do get in touch with us before you approach the ICO.