Children's Privacy Notice

Activity Atlas is operated by mDropit Ltd, company number 16351304.

Version: 1.4 Last updated: 20 October 2026 Effective: 20 October 2026

In short

Children can look at public activities and Explore without an account. Accounts, private invitations, family sharing and messaging are for adults aged 18 or over. Children must not sign in using an adult's account or join a private event chat. Parents, guardians or other authorised adults may add a participant to plan reminders or book an activity.

Participants can be children or adults. This notice explains the extra care we take where a participant is a child.

What an adult can add

An adult can add:

• an optional name, nickname or initials for their own device/browser;
• a private participant code on our server;
• optional birth month/year on their own device, used only there to help choose a provider-published age range;
• optional notes about a planned activity, which may sync with the planner;
• activities saved, planned or booked for the participant;
• an opaque person reference for a trial booking, without a name or birth details.

The optional planning label, such as a name or initials, stays on the adult's own device/browser. Optional birth details and the age derived from them stay there too. Activity Atlas does not collect a child’s name or birth details through the planner or current trial booking request. A child profile is never required to book a trial.

Please add as little as possible

Parents and organisers should only add information needed to plan or book activities. Please do not add sensitive details such as health information, school information, safeguarding information or anything else that is not needed for the activity.

Why we use children's data

We use minimal children's data so the adult account holder can:

• plan activities;
• save activities;
• receive reminders;
• book sessions or trials;
• manage booking status and attendance without sending device-private labels to providers.

When an adult first adds a participant, they confirm they have permission to manage planner information for the participants they add. If a participant is a child or dependent, they confirm they are the parent, guardian or otherwise authorised.

Our child-data promises

• Children do not create Activity Atlas accounts.
• A child's planner name is optional.
• Planner labels stay on the adult's own device/browser.
• We keep a private participant code on our server instead of requiring a real name.
• Planner birth details and locally derived age stay on the adult's device. The app may use them to suggest one provider-published class, but the adult confirms and only that class selection is sent to Activity Atlas.
• We do not use children's data for advertising.
• We do not sell children's data.
• We do not profile children for marketing.
• We do not add device-private child labels or birth details to push messages. Private message alerts use generic wording; public provider announcements may show their published text.
• Activity alerts and reminders are in the app, not email. Local, favourite and reminder-match alerts are optional.
• Planner suggestions never use a child's details: if a provider lists an activity a family already planned, our suggestion to connect the two compares only the venue and activity type of the planner entry, and the provider is never told which families matched.
• Reminder alarms live on the adult's own device and are switched off there at sign-out, account switch, or when access to an activity ends, so a child's schedule does not keep ringing on a device the family no longer uses.
• We ask providers to use booking data only to deliver the activity and manage attendance.
• Current trial booking requests reject names and birth details. Older retained attendee fields follow our retention and anonymisation process.

When a provider sees details

If an adult books an activity, the provider sees the booking, attendance and adult account details needed to manage it. The provider does not receive the participant’s private name or birth details from the app. Any additional information the provider needs for safety must be requested directly from the adult under the provider’s own privacy notice. An opaque account-linked reference is still treated as personal data, even though it does not contain a name.

Providers are responsible for running their activities safely and lawfully. They must not use children's data for unrelated marketing or other purposes.

Switching devices

Because participant labels stay on the adult's own device/browser, a label may need to be re-added after switching device, reinstalling the app, clearing browser storage or using a new browser. This is intentional privacy protection.

Choices and rights

Adults can:

• use initials or a nickname instead of a real name;
• skip optional device-only birth details unless useful;
• edit or remove participant details;
• delete their account;
• ask us for a copy, correction or deletion of personal data.

Contact: support@activityatlas.co.uk

If you are a young person reading this

You can browse public activities without joining a private conversation. If someone invites you to an account or chat, do not join; ask a trusted adult for help. If you think your information is on Activity Atlas and you are worried, please speak to a parent, guardian, teacher or another trusted adult. They can contact us at support@activityatlas.co.uk and we will help.

Device-only health reminders and chosen browser transfers

In current versions, doctor appointments and health/medication reminder types stay on the adult's own device. They do not sync with family or the account. Older synced health entries can be reviewed, moved or removed by their owner; contact us for help. Do not put medical records in ordinary shared notes or chat.

An adult may deliberately use the encrypted label-transfer tool to copy chosen local labels to a browser they pair. The browser stores the selected labels locally; this tool does not upload them to our server. A transfer link must stay private. Adults should clear local information on shared devices. This limited transfer does not encrypt conversations end to end.

If a child has accessed an adult account, or somebody uses an invitation to contact or endanger a child, contact support@activityatlas.co.uk. Use Report or block for a message. In immediate danger call 999. We assess child-access risks even though private accounts are contractually for adults.