Privacy Policy
Last updated: 20 May 2026
1. Who we are
muddl is a UK-focused family organisation product currently operating a pre-launch website and waitlist at muddl.co. For the purposes of this Privacy Policy, muddl, we, us and our refer to this project. muddl is operated by Oliver Tuck in the UK. You can contact us about privacy matters at hello@muddl.co.
This Privacy Policy explains how we collect, use and protect personal information when you use muddl.co and join the muddl waitlist. This policy currently applies to the pre-launch muddl website and waitlist only. When the full muddl app launches, we will update this policy to explain any additional app-specific data use before or at the point that data is collected.
2. What information we collect
At the pre-launch stage, we collect limited information.
Information you give us
When you join the waitlist, we collect your email address, marketing consent status, the source of the signup
(for example prelaunch_page), and your waitlist status (for example waitlist). You
must actively agree to receive muddl launch and product updates before joining the waitlist.
Information collected automatically
When you visit muddl.co, we may collect limited technical information such as:
- your browser type and version;
- device type;
- approximate location based on IP address;
- pages visited;
- referring website or source, where available;
- time and date of your visit;
- cookie consent choices; and
- basic security and server logs.
Analytics information
If you accept non-essential cookies, we may use Mouseflow to understand how visitors use muddl.co. Mouseflow may collect interaction data such as clicks, scrolling, page movement and page navigation, which we use to improve the website experience. Mouseflow is only loaded if you accept non-essential cookies. We do not use Mouseflow for advertising or retargeting. We aim to configure analytics tools in a privacy-conscious way, including masking typed inputs where available and avoiding the deliberate collection of sensitive information through analytics. The waitlist signup form is excluded from recording.
3. What we do not collect on the pre-launch website
On the pre-launch muddl.co website, we do not currently collect:
- children’s names;
- children’s dates of birth;
- school names;
- calendar events;
- family member details;
- payment card details;
- medical information; or
- special category data.
The full muddl app may later allow parents, carers or guardians to add family and calendar information. A fuller app-specific privacy policy will be published before or at app launch.
4. How we use your information
We use your information to:
- add you to the muddl waitlist;
- send you launch updates and product updates about muddl;
- manage your consent and unsubscribe choices;
- operate, maintain and secure the website;
- understand how the website is used and improve it;
- prevent misuse, spam, fraud or abuse; and
- comply with legal obligations.
We do not sell your personal information.
5. Our lawful bases for using your information
Under UK data protection law, we need a lawful basis to use personal information. We rely on the following:
| Purpose | Type of data | Lawful basis |
|---|---|---|
| Adding you to the waitlist | Email address, consent status, signup source, waitlist status | Consent |
| Sending launch and product updates | Email address | Consent |
| Storing your cookie choices | Cookie preference data | Legitimate interests / strictly necessary operation |
| Website security and abuse prevention | Technical logs, IP address, device/browser information, security challenge results | Legitimate interests |
| Understanding website usage with Mouseflow | Analytics and interaction data | Consent |
| Keeping records where legally required | Relevant records | Legal obligation |
You can withdraw your consent to product update emails at any time by using the unsubscribe link in our emails or by contacting us.
6. Who we share information with
We use trusted service providers to operate muddl.co. They only process information where needed to provide their services to us. Current or planned providers include:
| Provider | Purpose |
|---|---|
| Supabase | Storing waitlist data and supporting backend services |
| Netlify | Hosting muddl.co |
| Cloudflare Turnstile | Protecting the waitlist form from automated abuse |
| Resend | Sending launch and product update emails |
| Mouseflow | Website analytics and session recording after consent |
| Google Fonts | Loading website fonts, where used |
The full muddl app may also use additional services such as Stripe for payments, Google OAuth for sign in, WeatherAPI for weather data, and GOV.UK services for public holiday data. Where these are used in the app, they will be described in the app version of this policy. We may also share information where required by law, to protect our rights, to prevent fraud or abuse, or in connection with a business transfer or restructuring.
7. International transfers
Some of our service providers may process personal information outside the UK. Where personal information is transferred outside the UK, we aim to use appropriate safeguards, such as:
- UK adequacy regulations;
- standard contractual clauses or equivalent transfer terms;
- data processing agreements; and
- provider security and privacy commitments.
Our Supabase database is currently hosted in West Europe, London, UK.
8. How long we keep information
We only keep personal information for as long as we need it. For the pre-launch waitlist:
- waitlist and product update email addresses will be kept until you unsubscribe, ask us to delete them, or we no longer need them for muddl launch and product updates;
- unsubscribe records may be kept for longer where needed to make sure we do not email you again by mistake;
- cookie consent choices may be stored for up to 12 months, unless you reset or delete them sooner;
- website security logs are kept only for as long as needed for security, troubleshooting and legal reasons; and
- Mouseflow analytics data is kept according to our Mouseflow settings and subscription limits, and only for as long as needed to improve the site.
If you contact us directly, we may keep the message for as long as needed to respond and keep a reasonable record of the request.
9. Your rights
Under UK data protection law, you may have rights to:
- access the personal information we hold about you;
- correct inaccurate information;
- ask us to delete your information;
- object to or restrict certain uses of your information;
- withdraw consent where we rely on consent;
- request a copy of your information in a portable format, where applicable.
To exercise your rights, contact us using the email address above. If you are unhappy with how we handle a privacy concern, you can also contact the UK Information Commissioner’s Office.
10. Children’s information
The pre-launch muddl.co waitlist is for adults, parents, carers and guardians. It is not intended for children, and at the pre-launch stage we do not ask for children’s personal information. The future muddl app may allow adults to add limited information about children, such as names and family calendar information. Children are not intended to create accounts or use muddl directly. Before the app launches, we will update this policy to explain how children’s information is handled. If you have concerns about a child’s information, contact us.
11. Marketing emails
If you join the waitlist, we will use your email address to send launch and product updates about muddl. We will not use the waitlist to send unrelated third-party marketing. You can unsubscribe at any time using the unsubscribe link in our emails or by contacting us.
12. Cookies and similar technologies
We use cookies and similar technologies to make the website work, remember your cookie choices, and, if you consent, understand how the site is used. For more information, see our Cookie Policy.
13. Security
We use technical and organisational measures designed to protect personal information. These may include access controls, secure hosting, encrypted connections, database permissions and limiting access to people or services that need it. No online service is completely secure, so we cannot guarantee absolute security.
14. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date above. If we make material changes, we will take reasonable steps to make them clear, such as updating this page or contacting you where appropriate.