Privacy

Last updated 23 October 2026. Vestigia is in beta, being tested by a small number of families. This notice covers the app and our website, www.vestigiaapp.com.

Vestigia is a private place for families to record their children’s learning. Your family’s records are yours. We keep only what the app needs to work, we never sell or share it, and there are no adverts, trackers or analytics.

What we keep

• Your agreement: when you sign up or join, each parent or carer agrees to this notice, for themselves and for the learners they add. We record when, and which version.
• Accounts: parents’ and carers’ names and email addresses, passwords (stored only in a scrambled form we cannot read), and two-factor sign-in settings. Learners have no email address; their sign-in is a PIN on a device a parent has approved.
• Learners: the details a parent enters, such as name, date of birth and year group (all but the name are optional), daily time targets, and an optional profile photo.
• Learning records: what you log, with any notes, photos and files. Photos are checked and resized, and location and camera details are removed before they are stored.
• Signed-in devices: for each device that is signed in, the type of device and browser and its internet (IP) address, so you can see and sign out devices from your Account page.
• Settings: your colour scheme, Easier reading, and any stopwatch in use.
• News emails: when you create your account we ask whether you’d like occasional emails with news, tips and offers. We keep your answer, when and where you gave it, and the exact question you saw, so we can show what you agreed to. Change it any time in Account › Emails. We don’t send these emails yet; when we do, every one will have a link to stop them.
• Activity log: to fix problems and keep accounts safe, we log what happens in the app: for example signing in, a wrong password, or an entry being added, changed or deleted. Each line holds the time, the kind of account (parent, carer or learner), which fields changed (not what they say), and the device: its type, browser, screen size, whether the app was installed, and the app version. It never holds names, email or IP addresses, or anything you write or upload.
• App feedback (testing only): what you send, who sent it, the page you were on, and details of your device to help fix problems: its type, browser, screen size, whether the app was installed, and the app version. We do not record your IP address with feedback. Feature votes and suggestions are kept with your name.

Our website

• Joining the beta: if you ask to join on our website, we keep your first name, email address, your answer about news emails, and, if you tell us, how many children you home educate, your local authority and how you keep records now, so we can invite you and understand who is joining. Only the app’s developer sees these.
• Contact form: we keep your name, email address, the topic and your message, so we can reply.
• No cookies or tracking: the website sets no cookies and uses no analytics. If that changes, we’ll ask first and update this notice.
• We don’t record your IP address with either form.

Who can see it

• Your family’s records can be seen only by your family: parents and carers see everything; each learner sees only their own learning.
• The app’s developer does not look at families’ records. Besides the activity log, which has no content, and parents’ and carers’ names and email addresses (so they can help if you cannot sign in), they read only app feedback, suggestions and votes, which are sent to them on purpose (in the app, and in a daily email summary to them).
• Our own usage counts: so we can see how the beta is going, the app counts how many times each page is opened each day, for each family and kind of account (owner, guardian or learner) and kind of device (phone, tablet or computer, and whether the app is installed). These are numbers only: no names, no content and no page addresses, and they are not sent to anyone else. Only the app’s developer sees them, on an admin page.
• Other families never see your records, feedback or votes. Vote counts are shown, but never who voted.

Services we use

• Hosting: the app and its data are stored on a server in the UK, with a UK hosting company.
• Backups: every night an encrypted copy of the app's data is kept in Amazon Web Services' London data centre, in the UK. It is encrypted before it leaves our server, with a key only we hold, so Amazon cannot read it.
• Email: emails such as sign-in codes and links, invitations, stopwatch and LA review reminders are sent through Brevo, an email service based in the EU. If you switch on the daily or weekly summary, it includes your learners’ first names and the titles of a few entries from that day or week. Emails from the website’s forms reach us through the same service.
• Password check: when you choose a password we check it has not appeared in a known data breach (Have I Been Pwned). Only the first few characters of a scrambled version are sent, never the password itself.

Fonts and everything else the app needs are served from our own server, so nothing about your visit is sent to other companies.

How long we keep it

Records stay until you delete them or delete your family’s account. Deleted photos and files are removed straight away. When the owner deletes the family’s account, everything is permanently deleted 14 days later (so a mistake can be undone), and copies in our backups go as those backups are replaced, within six weeks. Downloads of your records are kept for 7 days. Signed-in device details go when that device is signed out. The activity log is kept for 12 months. Page-open counts are kept for 24 months. App feedback will be deleted when testing ends. Requests to join the beta and messages from the website’s contact form are deleted after 12 months.

Your choices

You can see, change or delete your records in the app at any time. Parents and carers can download a copy of everything under Account, and the family’s owner can delete the whole family’s account there too. For anything else, send us a message through App feedback, under Account when you are signed in.

Questions

Send them through App feedback under Account when you are signed in, or through the contact form on our website. If this page changes, the date at the top will change too, and we will ask you to agree to it again.