Last updated 14 September 2026.
Who we are
All We Can is run by [To confirm: the organisation's legal name, registered address, and company or charity number]. We decide how your data is used, which makes us the controllerunder UK data protection law.
For anything about your data, email [To confirm: a privacy contact address]. [To confirm: Whether we have a Data Protection Officer, and how to reach them].
What we collect
Your account
- Your name, email address and password. The password is stored only as a hash.
- Whether you have confirmed your email address.
- While you are signed in: the browser details of each session and a shortened IP address (the network you connected from, not your device), so we can keep you signed in and spot misuse.
- When you last signed in or used the app, so we can tell an unused account from yours.
- Whether you are a moderator.
Whether you have chosen to appear on the leaderboard.
You tell us you are 13 or older when you sign up, and we record that you did and when. We don't ask for your date of birth.
What you share
- Acts of kindness: the title, description, how many people it helped, a photo if you add one, the place and town, and whether you shared it anonymously or for a school.
- Photos are redrawn on your device before they are sent, which removes hidden details such as where and when the photo was taken.
- We look up the place and town to put a pin on the map, and round the pin to about a kilometre.
- Ideas you suggest, reports you make about content, and requests to join or set up a school.
When you use the service
- A log of requests to our server — the page or action, when, and your account if signed in. The IP address in this log is shortened before it is stored, so it no longer identifies a single connection.
- Your notifications, and your settings for them, including whether we email them to you.
- If you turn on notifications in your browser, the address your browser gives us to deliver them.
We don't use analytics, advertising or tracking services, and our fonts are served from our own server.
What is public
Nothing you share is public until a moderator has approved it. Once approved, anyone can see:
- The act's title, description, photo, how many it helped, the town, and the rounded pin on the map. The exact place you typed is seen only by you and moderators.
- Your name on the act — unless you shared it anonymously or for a school.
- On the leaderboard, only if you choose to appear: your name, how many acts you have shared, how many people they helped, and your current daily streak. It is off until you turn it on inYour data, and you can turn it off there at any time. Anonymous and school acts never count towards it.
Your email address is never public.
Why we use it
The law asks us to name a lawful basis for each use.
| What we do | Lawful basis |
|---|---|
| Run your account, publish what you share, and tell you about moderation decisions and your schools — in the app, and by email once you confirm your address | Providing the service you signed up for (contract) |
| Moderate content and handle reports | Our legitimate interest in keeping the service safe and lawful |
| Show the leaderboard | Your consent, which you give and withdraw with the switch in Your data |
| Publish acts that describe other people, including pupils | Our legitimate interest in sharing kindness, balanced by moderation and the rules below [To confirm: basis for data about pupils] |
| Request logs, security and backups | Our legitimate interest in keeping the service secure and working |
| Browser notifications | Your consent, which you can withdraw in your browser at any time |
Where we rely on legitimate interests you can object — see your rights. We don't make automated decisions about you: moderation is done by people.
Schools and children
Accounts are for people aged 13 or over. If we learn that an account belongs to someone younger, we delete it. Younger pupils take part through a teacher.
When a member of staff shares an act for their school:
- the act is credited to the school, and the staff member's name is never shown on it;
- the school's public page does not say who set the school up or who works there;
- staff must not name or describe a pupil — no names or class names, nothing about a child's health, faith, needs or family — and a moderator checks every act before it is published;
- acts shared for a school have no photos, and are deleted once the next school year ends.
Before its staff share anything, each school accepts our school terms, which make it responsible for having its own permission to share what they post. A parent or pupil who wants a school act taken down can press Report on the act — you don't need an account, and we don't ask who you are — ask the school, or email us at [To confirm: a privacy contact address]. We take it down first and ask questions after.
School admins can see the names of staff who belong to or ask to join their school. Once a school year, one of them confirms that everyone listed still works there; we record who confirmed and when.
Who else sees it
- Moderators see everything shared, including the exact place and rejected acts.
- Our operators can see all data in order to run the service, and can act as your account to help with a problem. When they do, it is recorded.
- Our hosting provider, [To confirm: the hosting provider and the country the server is in], stores the data on our behalf.
- Our email provider, Resend, sends the emails we send you — password resets, address confirmations and notifications — so it handles your email address and what each email says. [To confirm: where Resend processes it, and how that is protected].
- The OpenStreetMap Foundation (UK) receives the place and town of an act, from our server, to find it on the map. Map images are fetched through our server, so your IP address is not sent to them.
- Your browser's notification service (for example Google, Mozilla or Apple) delivers notifications if you turn them on. The message is encrypted.
- Backup storage: [To confirm: whether copies are kept with an offsite storage provider, which one, and where].
We don't sell your data. [To confirm: How data leaving the UK is protected, if the host or backup storage is outside the UK].
How long we keep it
| Data | Kept |
|---|---|
| Your account | Until you delete it, or until nobody has signed in to it for 2 years. Then we email you, and delete the account 30 days later if you still haven't signed in |
| A signed-in session | Until you sign out, or 7 days after you last used it |
| Published acts and ideas | Until you or a moderator delete them. When you delete your account you choose whether your acts go too. If we delete an unused account, its acts stay without the name |
| Acts and ideas a moderator turned down, and school requests that were declined | 90 days after the decision, photos included |
| Acts shared for a school | Until the end of the school year after the one they were shared in (31 August), then deleted. If the school leaves All We Can, its acts come off the site at once and are deleted with the school |
| Reports about content | 1 year after the report is closed |
| Notifications | 90 days after you read them; 1 year if you never do |
| Request log | The most recent 2,000 requests, so older entries drop off as new ones arrive |
| Backups | 14 days, so deleted data leaves them within 14 days |
On your device
We use one cookie, to keep you signed in. It is needed for the service to work, so we don't ask before setting it, and it isn't used to track you.
The app stores public acts, photos and map images on your device so it opens quickly and works with a poor connection. Clearing this site's data in your browser removes them.
Your rights
You can:
- get a copy of your data, to keep or take elsewhere — download it any time from Your data;
- delete your account from Your data, and choose whether your acts are deleted or kept without your name. Acts shared for a school stay with the school. If you are a school's only admin, hand the school to a colleague first;
- correct your name or email by emailing us, and edit an act a moderator has sent back to you;
- object to how we use your data, or ask us to restrict it;
- stop notification emails with the switch in Your data — they still arrive in the app;
- withdraw consent for the leaderboard in Your data, and for browser notifications in your browser settings.
For anything you can't do in the app, email [To confirm: a privacy contact address]. We reply within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaintor on 0303 123 1113. We'd appreciate the chance to put it right first.
Changes to this notice
When we change how we use your data we update this page and the date at the top. If a change matters to you, we'll tell you in the app before it takes effect.