Privacy & your data
Spectrum Compass is designed so you can get useful suggestions without sharing sensitive information.
What we never ask for
- Children's names, ages, dates of birth or photos
- Diagnoses, medical or health information
- School, address or contact details for children
What this website stores
- Sensory preference answers – in this browser tab only, cleared when you close it
- Saved places – a list of venue IDs in this browser’s local storage, kept until you clear them
- Demo admin changes – fictional venue records stored only in this browser, with a separate reset on the admin page
- Questionnaire answers and saved-place IDs are not uploaded or synced by this prototype
- The website still makes requests to load pages and assets; hosting may process technical diagnostics. This is not a promise of zero server requests
- Correction reporting is not connected: no reports are collected, sent or monitored
- Official website, booking and map links open external services when selected
- Directory filters appear in the page address and may remain in browser history or hosting logs; they describe venue categories, not a child’s age or questionnaire answers
- Public venue records, official source URLs, checking dates and image rights metadata are held in Lovable Cloud. Visitors cannot write to these records
- Adult editorial accounts use secure sign-in; only a separately granted administrator role permits venue editing. Original image uploads for rights review are private
- Photograph permission requests and review evidence are administrator-only records. Copying a request does not send it; saving approval does not automatically release an image
Private profiles for parents, guardians and authorised carers (closed beta)
- Signed-in adults only. Guest search, the questionnaire and browser bookmarks work without an account
- Each child profile holds only a single first name or chosen alias (never a surname), an optional broad age band and fixed sensory choices, plus that child’s favourite places and any outings you save
- Never enter real names, diagnoses, medication, addresses, schools, photos, case notes or behaviour notes — there are no fields for them
- Profiles are visible only to the adult who created them. There is no sharing, no invitations and no organisation-wide access
- Any adult parent or legal guardian can sign in with Google and save profiles after the guardian declaration; please use fictional profiles during testing
- Carers and support workers send a short access request (organisation name, an optional work email for our review, and who gave written permission). It contains nothing about any child
- A carer sees a child’s profile only after that child’s parent/guardian approves a connection with chosen permissions and the carer accepts. Spectrum Compass does not independently verify carers; a parent’s approval does not replace an employing organisation’s own data-protection responsibilities
- Carer approval is time-limited. If it expires or is revoked, the carer immediately loses access to the profiles, favourites and plans they created; we then handle removal as agreed with the organisation or guardian
- You can download or delete your data, and delete your account, from your dashboard. Approval decisions are kept in an administrator-only audit log
- Parents/guardians can connect one child profile with an approved carer using a one-time code that works once, for 30 minutes. Both people must accept; there is no people search or email lookup
- The parent or guardian chooses what each carer can see or do. Carers see only that child’s nickname, broad age, sensory choices and (if allowed) favourites, suggestions and trip updates — nothing else
- A carer’s own separate profiles are never merged or matched with a parent’s, even if first names are the same. A first name together with sensory choices is personal data, not anonymous; only you and adults you explicitly connect can see it. Routines store only fixed checklist, step and day/time choices — no addresses or free text. A parent can claim a carer-created profile only with a one-use code the carer generates and an explicit authority confirmation; the parent receives a separate copy, the carer’s record is not handed over, and this is switched off during the beta review
- Connections pause automatically if the carer’s authorisation lapses, and either person can end one at any time or end it and flag a concern
- Trip updates (Leaving, Arrived, Heading back, Finished) share no location. Live trip location is switched off for everyone and collects nothing while it is reviewed
- Parents can invite a carer by email for one child. We store only a keyed fingerprint of the address and a masked hint. Only someone signed in with that exact verified email, who is already an approved carer, can accept — and the parent confirms again before anything is shared
- Invitation emails are not being sent yet. If one is sent in future it will say only that someone has invited you, with no child details
- Visit journals are added by hand only, never from location. They use fixed choices (what was enjoyed, what helped, what was harder) and a month at most, not exact times
- Carer entries wait for the parent’s approval, and parents choose per entry whether approved carers can see it. Other carers never see unapproved entries
- Written practical tips and sharing journals with carers are switched off during the private beta review
- Entries can be reported, which stops them being shared. Parents can delete any entry for their child at any time
- Suggestions and updates appear only inside the site. We send no emails or push notifications about them
- This beta has not completed legal review and we do not claim it is compliant with data protection law
Clear your data
Remove your answers and saved places from this browser. Demo admin edits are separate; reset them on the admin dashboard.