Privacy by design

Collect less because ASH needs less.

The public version of ASH should be designed so that account recovery is possible without building an unnecessary identity profile around the young person.

✓ Carer email for account access and recovery

✓ Nickname-based child profiles

✓ No child legal name required

✓ No date of birth required

✓ No address or school required

✓ No location tracking

✓ No advertising

✓ No behavioural advertising profile

What still matters

Even when a child uses only a nickname, information stored behind a carer account can remain pseudonymous rather than truly anonymous. The service should therefore continue to protect the diary as sensitive information and keep account identity separate from daily records wherever practical.

Public-launch requirements

This page is currently a product summary, not the final legal privacy notice. Before open public registration, publish a reviewed privacy notice, retention/deletion rules, consent information and a clear process for exercising data rights.

Sharing

Exports and future clinician-sharing links should omit the carer's email and other account identifiers. The family can identify the young person to their own professional outside ASH.