Compliance

Built to be safe. Built with the rules in mind.

ChatMinder is designed with children’s data protection at its core — not bolted on as an afterthought. UK GDPR-aligned, Online Safety Act-aware, and privacy-first by design.

GDPR data handling

ChatMinder is designed around UK and EU GDPR. Key principles we apply:

  • Data minimisation — we collect only what’s necessary to provide the service
  • Children’s heightened protection — protected user accounts are created and controlled by guardians; no personal data from children is collected independently
  • Data subject rights — guardians can request access to, correction of, or deletion of data through the app or by contacting us
  • Lawful bases — processing is based on contract performance (delivering the messaging service) and legitimate interests (security and abuse prevention)

Online Safety Act design

The UK Online Safety Act requires services to protect children from harm. ChatMinder’s design directly addresses these requirements:

  • Age-appropriate design — all protected users are children under guardian supervision; the app is designed specifically for that context
  • Most-restrictive defaults — new protected user accounts are set to Guardian Managed by default (the most protective level)
  • No commercial profiling — ChatMinder does not use children’s data for advertising or profiling purposes
  • Easy reporting — guardians can flag and report messages, contacts, or content directly from within the app

ICO Children’s Code alignment

The ICO’s Age Appropriate Design Code (Children’s Code) sets 15 standards for online services likely to be accessed by children. ChatMinder’s approach aligns with these standards throughout — including high privacy default settings, no data sharing with third parties for commercial purposes, and no features designed to encourage children to spend more time in the app.

Third-party processors

ChatMinder uses a small number of carefully selected service providers, all operating under data processing agreements. They include providers of cloud hosting, optional AI analysis, payments, notifications and sign-in. Children’s data is never used for advertising, and we never sell data or share it with data brokers.

Our Privacy Policy explains what each type of provider does with your data, and where it is processed.

Data protection contact

For data protection enquiries, including subject access requests, please contact: support@chatminder.app

Security and encryption → · Smart Approval → · Full Privacy Policy →

Group invite links

A group’s invite link shows only the group’s name and description to someone who is not a member. An admin can require approval for every person who joins, and can reset the link at any time so the old one stops working. A child is only ever added to a group with their guardian’s approval. Group invite links and QR codes →