Privacy Policy

Version 1.5 · 8 August 2026 · Republic of Ireland

parentready is built to be private by default. The free planner runs entirely in your browser: the answers you give and the progress you make are stored on your own device and are not sent to us. The optional Premium purchase adds an account and saves your plan so you can pick it up on another device. This policy explains both, what we do and do not collect, and the limited processing that happens when the site is served to you, when you pay, or when you contact us.

1. Who we are

For the purposes of the EU General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018, the data controller is Giacomo Guerrini (trading as parentready.ie), of Apt. 22, Block 1, Island Key, East Road, Dublin, D03 CA33, Ireland (VAT IE2252072LA). You can reach us at info@parentready.ie.

We have not appointed a Data Protection Officer, and are not required to for processing at this scale.

parentready is an independent information service. It is not operated by, affiliated with or endorsed by the Government of Ireland, Revenue, the HSE, the Department of Social Protection or any other public body.

2. What information is involved

2.1 Your planner answers (stored on your device)

As you use the planner you tell it things about your situation. Whether or not you have an account, these answers are saved in your browser's local storage on your own device. This is the complete list:

Your stage: planning, expecting, or baby arrived.
Whether the birth is in the Republic of Ireland.
Whether your household lives in Ireland, asked only if the birth was elsewhere. Yes, no, or not sure. We never ask which country.
An estimated due date, or a date of birth, and any leave start and end dates you enter.
Household make-up as roles only, birth parent and other parent, each with a work status and a MyGovID account status. No names and no PPS numbers.
Birth registration: how far it has got, whether the parents are married to each other, whether the marriage is recorded in Ireland, whether both parents can take part, and whether a family situation applies that needs a different registration route (for example separated or divorced parents, a widowed parent, or another situation). We do not ask you to name a medical or sensitive reason.
Whether the child's PPS number has arrived, and whether you were already claiming Child Benefit for another child.
Whether you want childcare planning included.
Which steps you have marked as done, and where you are in the questions.

If you use the free planner, all of this stays on your device: it is not transmitted to our servers, we cannot see it, and it stays with you until you clear it or use "Delete my journey". Generating your plan as a PDF also happens in your browser, on your device.

2.2 Your account and saved plan

You only ever create an account by choosing to unlock Premium: there is no other sign-up route, and the Login link in the header signs in people who already have an account rather than creating one. Creating the account and paying are two separate steps, though, so if you create an account and then decide not to buy, the account and the saved plan described below still exist. You keep them, without Premium, until you delete them. Everything in this section applies to you in that case exactly as it does to a paying user.

An account involves:

Your email address. Sign-in is passwordless: we email you a one-time link, so we never ask for or store a password.
A copy of your plan, saved to your account. With your consent, the plan described in 2.1 (your answers, your progress, and the baseline your completed steps derive from) is saved to your account so it syncs across your devices. Transient interface state, such as which screen you are on, is not saved to the account.
Your Premium status, a simple yes/no flag recording whether you have paid. It is no when the account is created and becomes yes only once the payment is confirmed, which is what unlocks the paid features.

Because your plan can indicate that you are expecting (with an estimated due date) or that a baby has recently been born (with a date of birth), which relate to pregnancy and childbirth, saving it to your account is done only with your explicit consent, which you give when you create the account and can withdraw at any time (see sections 4 and 8). We deliberately do not collect or store medical or other special-category detail such as a pregnancy loss, a premature birth, or fertility treatment (see section 4). Your account and plan are stored by Supabase in the European Union (see sections 5 and 6).

2.3 Payment

Premium is sold through Lemon Squeezy (Sold through Link, LLC, formerly Lemon Squeezy LLC), which acts as the merchant of record. Lemon Squeezy takes the payment, issues your receipt, and handles refunds and payment disputes, and is an independent controller of the payment details you give it (such as card or billing information). We never receive or store your card details. From the completed order we receive only limited information, such as your email address and an order reference, so we can switch your account to Premium.

2.4 Technical information (server logs)

When your browser loads the site, our hosting provider Cloudflare (Cloudflare, Inc.) may automatically process technical data such as your IP address, browser type and the pages requested, in order to serve the site and keep it secure. Cloudflare acts as our processor for this. These logs are never sent to us and we hold no copy; how long Cloudflare keeps them is set out in section 7 below.

We also use Cloudflare Web Analytics to measure how the site is used. Since Cloudflare already serves the site, this adds no new company to the picture. It records page views along with the device type, browser, country and how quickly the page loaded. It sets no cookies, writes nothing to your device, and does not follow you to other websites or build a profile, which is why it needs no consent from you. We use it for one practical reason: to see whether the site works on the phones people actually use.

We do not use advertising trackers, and nothing we use profiles you or follows you across the internet. We also keep our own simple anonymous count of how often a few things happen on the site, which is described in 2.9. See our Cookie Policy for local-storage details.

2.5 Sign-in and service emails

To send your one-time sign-in link, and to alert us if a paid order cannot be matched to an account, we use Brevo (Sendinblue SAS, France) as our email processor. It processes the recipient email address to deliver these messages.

2.6 Feedback and support messages

If you use the "Feedback" option, it opens a message in your own email app, addressed to info@parentready.ie. The website does not collect or store anything for this; the message is sent by your own email provider, like any email you write. Once it reaches us, we hold your message (and your email address, if you chose to add one) only to read and reply to your feedback. Our lawful basis is our legitimate interest in responding to you (GDPR Art. 6(1)(f)) and acting on the request you made.

Giving your email is optional, only so we can reply. Please do not include sensitive or health details in your message; we do not need them and do not ask for them. We keep feedback emails until your query is resolved and then for up to 12 months, after which we delete them. We never use your email for marketing.

There is also a contact form on our Support page. Unlike the Feedback option, this one is sent by us rather than by your own email app: your message and your email address, plus a name and an order number if you choose to give them, are passed to our server, which emails them to info@parentready.ie through Brevo. The message is not saved in a database. So the form cannot be abused to send spam, we store a one-way salted hash of your IP address and a counter for a short window; never the address itself and never the message. Both are cleared within a day. The same 12-month rule above applies once the message reaches our inbox.

2.7 Sharing your plan with your partner (Premium)

If you switch on Share with your partner, we store a read-only copy of your own plan and give it a private web address containing a long random token. Anyone who has that address can open it, without an account and without signing in, so treat the link as private. The copy holds your stages, your steps and whether they are done, deadlines, official links, and the date your plan is built around (your estimated due date, or the date of birth). It holds no name, no PPS number, no email address and nothing that identifies your account.

If you ask us to email the link, your partner's address is used once to send that single message and is not stored. Nothing is collected about your partner when they open the page. You can turn sharing off or replace the link whenever you like, which stops the old link working immediately, and deleting your journey or your account also ends it. Because sharing is a Premium feature, the link also stops working by itself if your Premium ends, for example after a refund. Sharing is off unless you turn it on, and the lawful basis is your own decision to share your plan.

2.8 Technical error reports

If a script fails while you are using the site, your browser sends us a technical report so we can find the fault and fix it: the error message, the technical stack, the path of the page (the query string is removed first), the address of the script of ours that failed with the line and column inside it, and your browser's user-agent string. It contains no answers from your plan, no email address and no account identifier. Identical errors are merged into a single record with a counter, rather than one record per person. Our lawful basis is our legitimate interest in a service that works and stays secure (Art. 6(1)(f)). These records are held by Supabase in the European Union and deleted after 30 days.

2.9 A simple count of how the site is used

So we can tell whether the service is being used at all, the site counts a handful of fixed events, for example that someone started the journey. What is recorded is only the name of the event, the date, and a running total. There is no identifier, no IP address, no cookie, and the counter writes nothing to your device. The totals cannot be linked back to you or to any single visit, so they are not personal data and there is nothing here for you to consent to. The only thing that would ever be stored on your device is a flag recording that you asked to be left out of the count, and only if you ask for it (see our Cookie Policy). This counter is ours and separate from the Cloudflare measurement in 2.4; neither one profiles you or follows you to other websites.

2.10 Update emails, if you ask for them

The home page has a box where you can leave your email address to hear when something that affects new parents in Ireland changes, for example when a rate moves in the Budget. It is entirely optional and nothing else on the site depends on it.

If you use it we store your email address, the date you gave it, which page you gave it on, and the exact wording you agreed to. We keep the wording because it will be reworded over time and we should be able to show you what you actually agreed to rather than what the page says today. Nothing else is stored: no name, and none of your planner answers, which stay where section 2.1 says they stay.

We use it only to send those update emails. It is never shared, never sold, and never used to advertise to you. Ask us at info@parentready.ie and we will remove you, and every email we send will carry its own way to unsubscribe. The legal basis is your consent, which you can withdraw at any time (see sections 3 and 8).

3. Why we can process it (legal bases)

Contract (Art. 6(1)(b)): to create and run your account, to save and sync your plan, and to provide the Premium features you purchased.
Explicit consent (Art. 6(1)(a), and Art. 9(2)(a) for the health-related element): to save your plan to your account when it can indicate that you are expecting and an estimated due date. You give this at account creation and can withdraw it at any time.
Legitimate interests (Art. 6(1)(f)): to operate, secure and debug the website (including the technical error reports in 2.8), and to read and reply to the feedback and support messages you send us. This is balanced against your rights, and the on-device design keeps it minimal.
Your own decision to share (Art. 6(1)(f)): if you switch on the partner share described in 2.7, we hold and serve a read-only copy of your plan because you asked us to, for as long as you leave it switched on.
Legal obligation (Art. 6(1)(c)): where the law requires us to keep or disclose something (for example tax records relating to a sale).

4. Health-related answers

We have deliberately designed the service to avoid holding medical or other special-category data. In particular, we do not collect or store information about a pregnancy loss, a premature birth, fertility treatment, or any medical condition or diagnosis. Where the planner signposts support after a loss, it simply links you to the official service and saves nothing.

The one health-related thing that can remain is that your plan may indicate where you are in the pregnancy or birth journey: for example that you are expecting (with an estimated due date), or that a baby has been born (with a date of birth). On the free planner this never leaves your device. If you choose to save your plan to a Premium account, this information is stored only with your explicit consent under GDPR Art. 9(2)(a), and used only to provide the cross-device plan you asked for. You can withdraw that consent at any time by deleting your plan or your account (see section 8), after which we stop storing it.

We do not sell your data. We share limited data only with the providers that make the service work:

Supabase (Supabase, Inc.): stores your account and your saved plan, and runs the passwordless sign-in, as our processor. Access is restricted so that a signed-in account can reach only its own row.
Lemon Squeezy (Sold through Link, LLC): takes payment as merchant of record and sends us the order confirmation. It is an independent controller of your payment details.
Brevo (Sendinblue SAS): sends your sign-in link and our internal alerts, as our processor.
Cloudflare, Inc.: serves and secures the website, and measures page views through Cloudflare Web Analytics, as our processor.
Google (Gmail): hosts the inbox that receives support and feedback sent to info@parentready.ie, forwarded through Cloudflare Email Routing.

Each processor acts under a written data-processing agreement. We may also disclose data if required by law or to protect our legal rights.

Separately from those providers: if you switch on Share with your partner (2.7), whoever holds the link can read the copy of your plan. That is your own act of sharing rather than something we decide, we never send the link to anyone you have not named, and you can end it at any time.

6. Transfers outside the EEA

Your account and saved plan are stored by Supabase in the European Union (Ireland). Supabase, Inc. is US-based, and where its US operations access the data we rely on the European Commission's Standard Contractual Clauses. Brevo is in the EU (France).

Lemon Squeezy (US), Cloudflare (US) and Google (US) may process data outside the EEA; for these we rely on an appropriate safeguard such as the EU-US Data Privacy Framework and the European Commission's Standard Contractual Clauses.

7. How long it is kept

Planner answers on your device: kept in your browser until you clear them or delete your journey. We hold no copy.
Account and saved plan: kept while your account exists. If you ask us to delete your account, we delete your account record and your saved plan and stop syncing. Withdrawing your consent, or using "Delete my journey" while signed in, removes the saved plan from your account.
Payment records: held by Lemon Squeezy as merchant of record under its own policy. We keep only the minimal order reference and your Premium status, and any records we must keep for tax law.
Feedback and support emails: kept until your query is resolved and then for up to 12 months, after which they are deleted (see 2.6). The spam-protection hash and counter for the contact form are cleared within a day.
The copy shared with your partner: kept only while sharing is switched on. Turning it off, replacing the link, deleting your journey or deleting your account each ends it (see 2.7).
Technical error reports: deleted after 30 days (see 2.8).
Usage counts: the running totals in 2.9 are kept without a time limit, because they are plain numbers that contain no personal data.
Your address for update emails: kept until you ask to come off the list or unsubscribe, and then deleted (see 2.10). The consent record is deleted with it.
Server logs: we keep no copy and set no period, because we never receive them. They are held by Cloudflare, acting as our processor, and deleted when Cloudflare's retention period expires. The current position is in Cloudflare's Privacy Policy, under "Data retention".

8. Your rights

Under the GDPR you have the right to: access; rectification; erasure; restriction of processing; data portability; and to object to processing. Where we rely on consent, you can withdraw it at any time, and withdrawing it does not affect processing done before you withdrew.

For your on-device planner data you can exercise most of these yourself at any time: view it in the app, edit your answers, use "Delete my journey", or clear this site's storage in your browser. Because this data never reaches us, we cannot send you a copy of it or port it for you; in practice you already hold it, and you can take it with you by downloading your plan as a PDF.

For your account data (your email, your saved plan and your Premium status) these rights apply normally. You can delete your saved plan from within the app, and you can ask us to delete your whole account by emailing info@parentready.ie; we will delete your account record and saved plan and respond within one month. You can also ask us for a copy of your account data.

You also have the right to lodge a complaint with the Irish supervisory authority, the Data Protection Commission (21 Fitzwilliam Square South, Dublin 2, D02 RD28; dataprotection.ie).

9. Children

The service is intended for adults navigating parent administration and is not directed at children. We do not knowingly collect data from children under 16 (the digital age of consent in Ireland).

10. Security

We use HTTPS and appropriate technical and organisational measures to protect the data we handle. Sign-in is passwordless, so there is no password to be stolen. Account data is protected by row-level access rules so that a signed-in account can reach only its own record, and the privileged key that could read across accounts is held only on the server and never in your browser. No method of transmission or storage is completely secure, but keeping the free planner's data on your device removes it from most online risks.

11. Changes to this policy

We may update this policy as the service develops. We will change the version and date above and, for significant changes, provide a more prominent notice.

12. How to contact us

Questions about privacy or your data: info@parentready.ie, or write to the postal address in section 1.