Privacy
Last updated 16 August 2026
Lodestead holds ordinary family information — names, school runs, dinners, jobs around the house. We treat it as private by default, we do not sell it, and there are no advertising trackers anywhere in this product.
Who is responsible
Lodestead is the data controller for the information described here. Contact: [email protected]. The registered legal entity will be named here once incorporation completes; until then the operator is the individual behind that address.
What we store
- Your account — email address and a hashed password. We never store the password itself.
- Your household — the household name, the family members you add (a display name, a colour, an optional role and date of birth), and your settings.
- Your content — calendar entries, chores and their completions, meals, lists, payments due, countdowns and notes.
- Wall displays — a name, a hashed device credential, and when the display was last seen.
- Billing — a Stripe customer and subscription reference, the plan and its renewal date. Card details never reach Lodestead; they go straight to Stripe.
- Operational logs — short-lived request logs for reliability and abuse prevention.
What we do not do
- We do not sell or share your data with advertisers.
- We do not build advertising profiles.
- We do not run third-party ad trackers, Meta Pixel or session recording.
- We do not read your household content except where you ask us to for support, or where the law requires it.
Children
Lodestead is designed to be run by adults on behalf of a household. Children appear as family members added by a parent; they do not need an email address and they do not get a login. We do not profile children or target anything at them. The ICO's Children's Code informs how this is built, and it is reviewed as the product changes.
Where it lives
Data is stored on Cloudflare's infrastructure and served from their global network. Transport is encrypted. Access is scoped to your household — every request is checked against the household it belongs to, and this is covered by automated tests.
How long we keep it
Your content stays until you delete it or delete your household. If a subscription lapses, data is retained so you can come back — it is not destroyed because a card expired. Deleted households are removed on a short, defined schedule rather than immediately, so an accidental deletion can be recovered.
Your rights
Under UK GDPR you can ask for a copy of your data, correct it, delete it, restrict how it is used, or object to its use. Export and household deletion are available in the app; anything else, email [email protected]. You may also complain to the Information Commissioner's Office at ico.org.uk.
Processors we use
- Cloudflare — hosting, database, network.
- Stripe — payments and subscription billing.
- Open-Meteo — weather for your display. Only approximate coordinates are sent; nothing about your family goes with it.