Your child's daily information stays where it belongs.
Gardspace was designed with data minimisation at its core. We collect only what the session requires. We delete it when it's no longer needed. Here's exactly how.
Four principles
Isolation
Each Care Space is completely separate. No family's data ever touches another's.
Role-based access
Parents and Nannies see only what is relevant to their role.
Minimisation
We only collect what is strictly necessary for the session.
Short retention
Sensitive data is deleted automatically. We do not keep what we do not need.
Access by role
Parent / Guardian
- ✓View Daily Reports
- ✓Follow the Thread in real time
- ✓Read the Handover Note
- ✓Manage Care Space settings
- ✗Edit Nanny logs
- ✗Access other families' data
- ✗View deleted photos
Nanny
- ✓Log meals, naps, activities, observations
- ✓Add photos during session
- ✓Write the Handover Note
- ✓Generate invitation links
- ✗Access family account settings
- ✗View other families' Care Spaces
- ✗Retrieve deleted content
Data retention
| Data type | Retention | Deletion |
|---|---|---|
| Photos | 48 hours after session close | Automatic |
| Medical documents | 5 days | Automatic |
| Thread / Daily Report | Duration of active Care Space | On request |
| Early Access email | Until unsubscription | On request |
| Data after account closure | Maximum 30 days | Automatic |
| Referral tokens | No expiration (V1) | — |
Third-party services
| Service | Region | GDPR |
|---|---|---|
| Supabase | EU | GDPR compliant |
| Vercel | Global | GDPR compliant |
| Plausible | EU | Cookieless, GDPR native |
| Resend | Global | GDPR compliant |
For any question about your data: privacy@gardspace.com