Privacy & Data Protection
Prototype — August 2026
Your Safe Space is built around one idea: the young person is in control of their own words. We collect as little as possible, protect it carefully, and never share a private entry without a clear, recorded reason.
What we collect
- Only what you choose to add: check-ins, journal entries, goals, and your “What Helps Me” profile.
- Feelings, notes and drawings are treated as special category data and given the highest level of protection.
- We practise data minimisation — we do not ask for information the tool does not need.
Who can see your information
- Private entries are visible only to you. No adult can read them in real time.
- You decide, entry by entry, whether to share with a named person in your Safe Circle.
- Every time a trusted adult opens something you shared, it is written to an access log you can see.
- Access is need-to-know and role-based, following the Caldicott Principles.
How it is protected
- Privacy by design: security is built in from the start, not added later.
- Encryption of sensitive data, secure sign-in, and controlled export only.
- Handled in line with UK GDPR and the Data Protection Act 2018.
- A Data Protection Impact Assessment (DPIA) is completed before any real data is collected.
Your rights and control
- You can change who sees an entry at any time, or delete it whenever you want.
- You can ask for a copy of your information or ask for it to be removed.
- Clear data retention rules mean information is not kept longer than needed.
- For older children with capacity, independent consent is supported under the Gillick competence framework.
This is demonstration content for a prototype. It summarises NeuroPathway's intended governance and is not a substitute for a signed data-protection or safeguarding agreement.