Privacy Policy

    Last Updated: April 2026

    Introduction

    Julie AI Ltd ("Company", "we", "us", or "our") is committed to protecting your privacy and the privacy of your child. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our services.

    Julie AI is an AI-powered parenting guidance platform designed for parents and guardians of children aged 0 to 3 years. The service is used by parents, but we process personal data about both parents and their children. This policy explains how we handle both.

    Registered Address: 27 Old Gloucester Street, London, WC1N 3AX, UK

    Company No. 16833191

    1. Information We Collect

    1.1 Information You Provide About Yourself (Parent/Guardian)

    • Name and contact information
    • Email address
    • Account credentials
    • Payment information

    1.2 Information You Provide About Your Child

    To deliver personalised parenting guidance, we collect the following data about your child:

    • Date of birth and age
    • Sleep patterns and sleep logs
    • Feeding information (breastfeeding, bottle feeding, weaning)
    • Developmental milestones and observations
    • Health-related concerns you share with us (e.g. teething, colic, reflux)
    • Any other information you choose to share about your child's wellbeing

    This data constitutes special category data (health-related data) under UK GDPR and is subject to the highest level of protection. See Section 3 for the legal basis on which we process this data.

    1.3 Automatically Collected Information

    • IP address and device information
    • Browser type and version
    • Usage data and analytics
    • Cookies (see our Cookie Policy for details)
    • Log data and system activity

    2. How We Use Your Information

    We use the information we collect to:

    • Provide, operate, and maintain our parenting guidance service
    • Deliver personalised sleep, feeding, and developmental guidance based on your child's data
    • Improve and personalise your experience
    • Process transactions and send related information
    • Send administrative information and service updates
    • Respond to your inquiries and provide support
    • Monitor and analyse usage trends to improve the service
    • Detect, prevent, and address technical issues or fraud
    • Comply with legal obligations

    We do not use your child's data for advertising, marketing profiling, or any purpose unrelated to delivering and improving the parenting guidance service.

    3. Legal Basis for Processing (UK GDPR)

    3.1 Article 6 Basis (General Personal Data)

    • Contract: To fulfil our contractual obligations to you as a user of the service
    • Consent: When you have given explicit consent for specific processing activities
    • Legitimate Interests: For service improvement, security, and fraud prevention, where these do not override your or your child's rights
    • Legal Obligation: To comply with applicable laws and regulations

    3.2 Article 9 Basis (Special Category Data — Health Data About Your Child)

    Information about your child's sleep, feeding, health concerns, and developmental milestones constitutes special category data (health-related data) under UK GDPR Article 9.

    We process this data under Article 9(2)(a): you have given explicit consent to the processing of this data for the specific purposes described in this policy. You provide this consent during onboarding and can withdraw it at any time (see Section 6).

    In accordance with UK Data Protection Act 2018 Schedule 1, we maintain an Appropriate Policy Document that sets out our procedures for securing, retaining, and erasing this special category data. This document is available on request by contacting contact@julieai.co.uk.

    4. Data Sharing and Disclosure

    We may share your information with:

    • Service providers who assist in our operations (e.g. cloud hosting, payment processing, and the third-party AI service provider described in Section 4.1)
    • Professional advisors such as lawyers and accountants
    • Law enforcement or regulatory authorities when required by law
    • Third parties in connection with a business transfer or acquisition

    We do not sell your personal information or your child's personal information to third parties. We do not share your child's data with advertisers or marketing platforms.

    4.1 Third-Party AI Service Provider

    To generate the personalised parenting guidance you receive in chat, the Service uses a third-party large language model ("LLM") provider. We are required by Apple's App Store Review Guidelines, by UK GDPR and by our own commitments to you to be specific about this. The providers we currently use are:

    • OpenAI UK Ltd at Suite 1, 7th Floor, 50 Broadway, London, SW1H 0BL, United Kingdom
    • Anthropic Limited, Regents Place, London

    What we send. Each time you interact with Julie, we transmit the following information to the LLM provider so that it can generate a response:

    • The text of the message you write in chat, including any health-related, feeding, sleep or developmental details you choose to share
    • A summary of relevant context from your child's profile (such as age in weeks, current sleep pattern, feeding stage) needed to personalise the response
    • The recent conversation history with Julie that the model needs in order to follow the thread of your discussion

    What we do not send. We do not transmit your name, email address, account credentials, payment information, IP address or device identifiers to the LLM provider.

    What the provider does with this data. The LLM provider processes this data solely to generate a response to your message and return it to Julie. Under our written agreement with the provider:

    • Your data is not used to train the provider's underlying models
    • The provider acts as a processor on our behalf and does not use your data for its own purposes, including advertising or profiling
    • Your data is retained by the provider only for the limited period necessary to process the request and for safety/abuse monitoring (typically no more than 30 days), after which it is deleted
    • The provider is contractually bound to protections that are equivalent to those set out in this Privacy Policy, through a UK GDPR-compliant Data Processing Agreement and the UK International Data Transfer Addendum (or Standard Contractual Clauses) where data leaves the UK

    How we obtain your permission. At sign up, we present a clear in-app consent screen that names the LLM provider, summarises what data will be sent, and asks you to either "Allow" or "Don't Allow." You can also review and change this choice at any time from the in-app Settings → Privacy → AI Processing menu. If you decline, the AI chat features will be unavailable but you can still use other parts of the Service that do not require an LLM call.

    Where the provider is located and how data is transferred. The LLM provider processes data in the United States. We rely on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses to make this transfer lawful under UK GDPR. See Section 9 for further detail on international transfers.

    Changes to our AI provider. If we change LLM providers or add an additional provider, we will update this Privacy Policy, refresh the in-app consent screen, and notify you by email before the change takes effect.

    5. Data Retention

    We retain personal data only for as long as necessary to fulfil the purposes described in this policy. Specific retention periods are as follows:

    • Account data (name, email, credentials): Retained for the duration of your account plus 30 days after deletion
    • Child data (sleep logs, feeding data, developmental milestones, health concerns): Retained for the duration of your account. Deleted within 30 days of account deletion
    • Conversation and interaction logs: Retained for up to 12 months for service improvement, then anonymised or deleted
    • Payment records: Retained for 7 years to comply with UK tax and accounting obligations
    • Analytics and usage data: Retained in anonymised form for up to 24 months

    When you delete your account, all personally identifiable child data is permanently deleted within 30 days. Anonymised, aggregated data that cannot identify your child may be retained for service improvement purposes.

    6. Your Rights

    Under UK GDPR, you have the following rights in relation to your own data and your child's data:

    • Right to access: Request a copy of all personal data we hold about you and your child
    • Right to rectification: Correct inaccurate data
    • Right to erasure: Request deletion of your and your child's data
    • Right to restrict processing: Limit how we use your data
    • Right to data portability: Receive your data in a structured, commonly used format
    • Right to object: Object to processing based on legitimate interests
    • Right to withdraw consent: Withdraw your consent for special category data processing at any time, without affecting the lawfulness of processing before withdrawal

    To exercise any of these rights, contact us at contact@julieai.co.uk. We will respond within one month.

    7. Cookies and Tracking Technologies

    We use strictly necessary cookies and limited analytics cookies to operate and improve the service. Full details are set out in our Cookie Policy. We do not use advertising or retargeting cookies.

    8. Data Security

    We implement appropriate technical and organisational measures to protect your personal information and your child's personal information, including:

    • Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
    • Access controls and principle of least privilege for all team members
    • Regular security reviews and vulnerability assessments
    • Audit logging for access to personal data

    No method of transmission over the internet is completely secure. In the event of a data breach affecting your or your child's data, we will notify the ICO within 72 hours where required and will notify you directly if there is a high risk to your rights.

    9. International Data Transfers

    Your information may be transferred to and processed in countries other than the United Kingdom. Where we transfer data outside the UK, we ensure appropriate safeguards are in place, including:

    • Transfers to countries with a UK adequacy decision
    • Standard Contractual Clauses (SCCs) approved by the ICO
    • Other appropriate safeguards as required by UK GDPR

    Details of our current data processors and the countries in which they operate are available on request by contacting contact@julieai.co.uk.

    10. Children's Data

    Julie AI is designed to be used by parents and guardians of children aged 0 to 3 years. The service is not intended to be used directly by children. However, we process personal data about children as provided by their parent or guardian.

    We take the following additional measures to protect children's data:

    • We only collect child data that is necessary to deliver the parenting guidance service
    • We process child data solely on the basis of explicit parental consent (Article 9(2)(a))
    • We do not use child data for advertising, profiling, or marketing purposes
    • We do not share child data with third parties for their own purposes
    • Parents can view, download, correct, or delete all data about their child at any time
    • All child data is deleted within 30 days of account deletion

    We have assessed the ICO's Age Appropriate Design Code (Children's Code) and concluded that, as the service is designed for and used by adults (parents), the Code does not apply directly. However, we design our data practices with the Code's principles in mind, particularly data minimisation, high privacy defaults, and the best interests of the child.

    11. Changes to This Privacy Policy

    We may update this Privacy Policy from time to time. We will notify you of material changes by email and by posting the updated policy on our website. You are advised to review this policy periodically.

    Contact Us

    If you have any questions about this document or wish to exercise your rights, please contact us at:

    Julie AI Ltd
    27 Old Gloucester Street
    London, WC1N 3AX
    United Kingdom
    Email: contact@julieai.co.uk

    Complaints

    If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

    ICO website: www.ico.org.uk