Privacy Policy

Cyril is operated by:

LIOT Ltd
Company number: 13112711
Registered address: 20-22 Wenlock Road, London, England, N1 7GU
United Kingdom

For any privacy question, or to exercise your data rights, contact us at hello@meetcyril.com.

LIOT Ltd is the data controller for the personal data described in this policy, and is registered with the Information Commissioner’s Office (ICO) under registration reference ZC169784.

Cyril is built around a small number of privacy commitments. These are not just promises; they are how the product is designed.

Household isolation. Your data belongs to your household and is never shown to another household. We do not pool, compare, or share personal data between households. The only data shared across households is public school reference information (such as term dates and public school calendar links), which contains no personal data about you or your children.

We do not read your inbox. Cyril does not connect to, log into, or read your email account. We never request access to your Gmail, Outlook, iCloud, or any other inbox. Cyril only ever sees the specific emails, messages, photos, and notes that you choose to forward or upload to it.

We keep raw inputs only as long as we need them. The original content you forward or upload (the raw email, the photo, the voice note) is typically deleted within 90 days. We keep the structured information Cyril extracts from it (for example, “school trip on 14 March”) until you delete your household.

Your data is yours. You can delete your data permanently at any time.

We collect the following categories of personal data.

Information you give us when you set up your account. Your email address (used to sign in), and the names, year groups, and school enrolments of the children in your household. You may also invite other adults to your household, in which case we hold their email addresses.

Content you choose to forward or upload. This is the heart of the Service. It includes emails you forward to your unique Cyril address, messages and voice notes you forward from messaging apps, and photos or documents you upload (for example, a photographed paper letter). This content may contain personal data about you, your children, and other people mentioned in those communications.

Information Cyril extracts from that content. From the content you provide, Cyril identifies actions, events, dates, and reminders, and organises them into your household plan.

Subscription and billing information. When you subscribe in the app, payment is handled by Apple’s App Store or Google Play, not by us. We receive confirmation of your subscription status from those platforms (via our subscriptions provider) but we do not receive or store your card details. If you subscribe on our website, payment is handled by Stripe, through our subscriptions provider RevenueCat. We do not receive or store your card details.

Technical and usage information. Basic information about how you use the app, the device you use, and diagnostic data used to keep the Service working and to fix errors. When you create your household, we also record which country you signed up from, worked out from your internet connection’s IP address using the DB-IP country database on our own servers. We keep only the country, never the address, and use it to understand where families are joining Cyril from.

Cyril processes information about children (such as a child’s name, year group, school, and school events) so that parents and authorised adults can manage their family’s school admin. The data subject using Cyril is the adult account holder, not the child. Children do not have accounts and do not use the Service directly.

We take the sensitivity of children’s information seriously and handle it in the spirit of the ICO’s Age Appropriate Design Code. We do not use children’s information for advertising, profiling, or any purpose other than providing the Service to your household.

We use your personal data to:

• Provide the Service: organising your forwarded content into a per-child action list, calendar, reminders, and an assistant you can ask about your family’s school life.
• Send you notifications and reminders you have asked for, including the weekly digest.
• Manage your subscription and account.
• Keep the Service secure, diagnose problems, and improve reliability.
• Respond to your support requests.

Our lawful bases under UK GDPR are:

• Performance of a contract (Article 6(1)(b)): processing your data to deliver the Service you have subscribed to.
• Legitimate interests (Article 6(1)(f)): keeping the Service secure and reliable, and improving it, in ways you would reasonably expect and that do not override your rights.
• Consent (Article 6(1)(a)): where we ask for it, such as for certain notifications. You can withdraw consent at any time.

We do not sell your personal data. We share with advertising companies only what tells us whether an advert worked: the Android advertising ID described under 'Install attribution on Android', and, if you accept cookies on our website, the website measurements described under 'Cookies and analytics on our website'. Nothing about your children, and nothing your school sends, is ever shared.

Cyril includes an assistant that answers questions about your family’s school life. It only ever draws on your household’s own data and public school reference information. It does not draw on other households’ data. To generate answers, relevant content from your household is processed by Anthropic, our AI provider (see “Our AI provider” below), under strict confidentiality terms; it is not used to train their models.

Cyril uses AI models provided by Anthropic, PBC (“Anthropic”) for two things: reading the content you forward or upload, to pull out the actions, dates, and reminders that matter, and answering the questions you ask Cyril.

What we send. Only the content you choose to give Cyril (the emails, photos, messages, and notes you forward or upload) and your questions to the assistant, together with the relevant items from your own household plan. We do not send Anthropic your inbox, and we never send another household’s data.

Why we send it. To power Cyril’s sorting of your content and the answers the assistant gives you. This is processing carried out on our behalf, under Anthropic’s commercial terms, to deliver the Service to you.

It is not used to train models. Under Anthropic’s commercial API terms, the content Cyril sends is not used to train Anthropic’s models. It is processed to return Cyril’s result and is not retained by Anthropic to train its models. This protection applies equally to every household.

How long Anthropic keeps it. Anthropic processes the content to produce a result and retains it only for a limited period for trust and safety purposes under its commercial terms, after which it is deleted. Cyril’s own retention of the raw content you forward is covered under “How long we keep your data” above.

Where it is processed. Anthropic may process this content outside the UK, including in the United States. Where it does, we rely on appropriate safeguards (such as a UK International Data Transfer Agreement or equivalent) to protect your data.

We use a small number of trusted service providers (“processors”) to run Cyril. They process your data only on our instructions and under contract. They include providers for:

• AI processing of the content you forward, to extract actions and answer your questions (Anthropic, see “Our AI provider” above).
• Cloud hosting and databases.
• File and image storage.
• Inbound email and messaging routing.
• Transactional email (such as sign-in links).
• Subscription management.
• Card payments on our website (Stripe).
• Error monitoring and diagnostics.

Some of these providers may process data outside the UK. Where they do, we rely on appropriate safeguards (such as UK International Data Transfer Agreements or equivalent) to protect your data.

We may also disclose data if required by law, or to protect our rights, users, or the public.

On Android, the Cyril app reads your device’s advertising ID when you first open it, so that we can tell which advert led to the install. This is the only thing it is used for. It is not used to build a profile of you, it is never combined with anything your school sends you, and it is never used for anything to do with a child.

Two companies process this on our behalf: AppsFlyer, which measures installs, and Meta, which tells us whether an install came from one of our adverts. They act on our instructions and for no other purpose.

You can switch this off on your device, and Cyril will keep working. On most Android phones: Settings, then Privacy, then Ads, and choose “Delete advertising ID”. Some phones put it under Settings, Google, then Ads. Once you delete it, Cyril receives no advertising ID at all and the attribution stops.

The iPhone app does not do this. It is built without advertising ID support, so there is nothing to switch off and nothing is read.

This section applies only to our marketing website, meetcyril.com. Apart from the Android install attribution described above, the Cyril app contains no analytics or advertising trackers.

On the website we use Google Analytics 4, the Meta (Facebook) Pixel, and the TikTok Pixel to understand how the site is used and to measure our marketing. These load only if you accept analytics cookies. No cookie-based analytics run, and no analytics cookies are set, before you choose.

If you accept, these tools collect information such as the pages you visit, your approximate location, your device and browser, and how you arrived at the site. Google Analytics sets cookies beginning “_ga”; the Meta Pixel sets a “_fbp” cookie and reports a page view to Meta; the TikTok Pixel sets a “_ttp” cookie and reports a page view to TikTok. We use this to improve the site and to measure our marketing.

If you accept and then start a plan on our website, we also tell Meta how far through it you get, as a step number from 1 to 7, and when you create your account, choose a plan, start your free week and make your first payment, so we can see which adverts work. With these we send Meta the “_fbp” and “_fbc” cookie values, your IP address and browser details, and a scrambled (hashed) form of your email address and account number. We never send anything about your children or anything your school sends. Choosing “Essential only” means none of this is sent.

In the same way, if you accept and then start a plan on our website, we tell TikTok when you open it, when you reach its second step, when you start your free week and when you make your first payment, so we can see which TikTok adverts work. With these we send TikTok the “_ttp” cookie value, the click reference TikTok adds to its adverts’ links, your IP address and browser details, and a scrambled (hashed) form of your email address and account number. We never send anything about your children or anything your school sends. Choosing “Essential only” means none of this is sent.

Whichever choice you make, when you start a plan on our website we keep with your account the address of the page you arrived on, including any campaign labels in it and the click reference Meta, Google or TikTok adds to its adverts’ links, so we can see which advert brought you. We do not send this address to Meta or TikTok.

When you first visit, a banner asks for your choice before any cookie-based analytics load. Choosing “Essential only” means Google Analytics, the Meta Pixel, and the TikTok Pixel do not load at all. You can change your choice at any time using the “Cookie choices” link in the footer.

We also use Ahrefs Web Analytics on the website. Unlike the tools above, it is cookieless: it sets no cookies and stores nothing on your device, and it does not collect personal data or identify you. Because it needs no cookies and no device storage, it runs for every visitor and does not depend on your cookie choice. It gives us only anonymised, aggregate figures, such as page views and where visitors arrive from, which we use to understand how the site is performing.

• Raw forwarded and uploaded content: typically deleted within 90 days.
• Extracted actions, events, and your household information: kept until you delete them or delete your household.
• Account and subscription records: kept for as long as your account is active, and for a reasonable period afterwards where we are required to retain records (for example, for tax or legal reasons).

When you delete your household, we permanently delete your personal data, subject to any limited records we are legally required to keep.

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate data.
• Erase your data (“right to be forgotten”).
• Restrict or object to certain processing.
• Data portability: receive your data in a usable format.
• Withdraw consent where we rely on it.

You can delete your household directly in the app. To exercise your other rights, including access to your data, contact us at hello@meetcyril.com. We will respond within the timeframes required by law.

You also have the right to complain to the ICO (ico.org.uk), though we hope you will contact us first so we can help.

We protect your data using technical and organisational measures, including access controls that keep each household’s data strictly separate and never visible to another household, encryption in transit, and restricted access to production systems. No system is perfectly secure, but we take reasonable steps appropriate to the sensitivity of the data.

We may update this policy from time to time. If we make material changes, we will notify you in the app or by email. The “last updated” date at the top shows when it was last revised.

LIOT Ltd
20-22 Wenlock Road, London, England, N1 7GU
hello@meetcyril.com