Privacy Policy

RosterKin, a shared family assistant for kids' clubs and school admin. Last updated: 10 September 2026.

This policy explains what personal data RosterKin ("RosterKin", "we", "us") collects, why, how we use and protect it, and the choices and rights you have. RosterKin is operated by Maven Enterprise (United Kingdom). By creating an account and connecting your services, you agree to this policy.

RosterKin is designed around data minimisation and the UK Children's Code (Age Appropriate Design Code), and processes personal data in line with the UK GDPR and the Data Protection Act 2018.

Who we are and how to contact us

The data controller is Maven Enterprise (UK), operating RosterKin. For any privacy question, or to exercise your rights, contact hello@mavenenterprise.co.uk.

What data we access and why

Account data

When you create a family account we store your name, email address, and a securely hashed password (argon2id; we never store your password in plain text). We store the family members you allow-list and the details you enter about your family (children's first names and ages, their school or nursery, your home area for finding nearby clubs, and the clubs you save). These children's details are provided by you, the parent/guardian, under your parental responsibility.

Google account data (Gmail and Google Calendar)

If you connect a Google account, we request only the scopes we need to provide the service:

gmail.readonly — to read and classify the messages in the inbox you connect, so we can surface school/club deadlines, payment requests and bookings, and draft replies. This is read-only: RosterKin cannot mark your mail read, change labels, delete mail, or otherwise modify your mailbox. We do not read inboxes you have not connected.
gmail.send — to send an email to a club or school only after a human in your family explicitly approves that specific draft. RosterKin never sends email on its own and never initiates a payment.
calendar.events — to add events you approve to a shared Google Calendar.
openid, email, profile — to identify the connected account.

Google API Services User Data Policy — Limited Use

RosterKin's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

We use Google user data only to provide and improve RosterKin's user-facing features described in this policy.
We do not transfer or sell Google user data to third parties for advertising, marketing, or any other purpose, and we do not use it for advertising.
We do not allow humans to read Google user data, except: with your explicit consent for specific messages; where necessary for security purposes (such as investigating abuse); to comply with applicable law; or where the data has been aggregated and anonymised. Automated processing (classification and summarisation by our system) is not human access.

What we store (and what we don't)

For each processed email we store its classification, a short summary, and the message id — we do not store the email bodies. Full content is fetched on demand only when needed and is not retained.
Google OAuth tokens are encrypted at rest (AES-256-GCM, using a KMS-managed key), are never logged, and are never returned to your browser.
Passwords are stored only as salted, peppered argon2id hashes; sessions are server-side and revocable.
Every action RosterKin takes (classification, event created, email sent) is recorded in an audit log visible to you.

Where your data is processed

Your data is processed and stored in the European Union (Amazon Web Services, London region eu-west-2). Classification and drafting use Amazon Bedrock foundation models within the EU. We do not use your content to train third-party or foundation models.

Who we share data with

We do not sell your data and do not share it with clubs or schools. We use a small number of processors strictly to run the service: Amazon Web Services (hosting, storage, encryption, and Amazon Bedrock model inference). Emails you approve are sent from your connected Google account to the recipient you approve. We may disclose data if required by law.

Retention and deletion

You can export or delete all of your family's data at any time from the dashboard. Deleting your account revokes RosterKin's access to your Google account and purges your tenant data; a minimal, non-personal deletion record may be retained for security and audit. You can disconnect a Google account at any time, which revokes our access.

Children's data

RosterKin is used by parents and guardians to manage their own children's activities. Children's names, ages, and school details are provided by you under your parental responsibility. We apply the UK Children's Code: data minimisation, no profiling for marketing, and no sale of data. Children do not have their own accounts.

Your rights

Under UK GDPR you have the right to access, correct, delete, export (portability), restrict, and object to the processing of your personal data, and to withdraw consent at any time. Contact hello@mavenenterprise.co.uk to exercise these rights. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).

Security

We use encryption in transit (HTTPS) and at rest, KMS-managed keys for tokens, argon2id password hashing, server-side revocable sessions, rate-limited login, and strict per-family data isolation. Reading your inbox is non-destructive by design.

Changes to this policy

We will update this policy as the service evolves and note the effective date above. Material changes will be communicated in the app.

RosterKin is an early pilot service. Contact: hello@mavenenterprise.co.uk.