Legal

App privacy notice

How Seventide collects, uses and protects the information families keep in the app.

Version 1.0, 14 October 2026. This notice covers the Seventide app (app.seventide.app). The Seventide website (seventide.app) has its own short privacy policy.

The short version

Seventide helps families keep records about an older relative’s money, care and health.
We keep your information in the UK. We encrypt it.
Only the people your family invites can see your family’s records. The person who set up the space decides who sees what.
We never sell your information. We do not show adverts or use tracking.
Our emails and phone alerts never mention health details or sums of money.
You can download a copy of your information, or delete it, at any time.

The rest of this notice explains this in more detail.

1. Who we are

Seventide is run by Pro Dev Dynamics Ltd, a company registered in England and Wales (company number 10518869). Our registered office is 1 Richmond Road, Lytham St Annes, FY8 1PE, United Kingdom. When this notice says “we”, “us” or “our”, it means Pro Dev Dynamics Ltd.

We decide how and why personal information in Seventide is used. In data protection law, this makes us the “controller” for everything that happens in Seventide. Families who use Seventide to look after a relative’s affairs are using it for their own family purposes. If a professional, such as a solicitor, downloads information from Seventide and uses it in their own work, they are responsible for that use.

We are registered with the Information Commissioner’s Office (ICO), the UK’s data protection regulator. Our registration number is ZB174979.

We have not appointed a data protection officer, because the law does not currently require one for us. If you have a question about privacy, email support@seventide.app.

2. Some words we use

Workspace: the shared, private space a family sets up in Seventide.
The Principal: the older person the workspace is about. This is usually a parent.
Owner: the person who set up the workspace and pays for it. There is one Owner per workspace.
Attorney: someone who holds a registered Lasting Power of Attorney (LPA), or an older Enduring Power of Attorney (EPA), for the Principal. These are legal documents that let a person make decisions for someone else.
Deputy: someone the Court of Protection has appointed to make decisions for the Principal.
Members: everyone who has been invited to a workspace. This includes family members and professionals such as solicitors.
Mental capacity: the ability to make a particular decision for yourself.

3. Whose information we hold, and where it comes from

We hold information about:

People with a Seventide account. This includes Owners, attorneys, deputies, family members, professionals and the Principal, if they have an account. You give us this information yourself.
The Principal. Most of what is in a workspace is about the Principal, even if they never sign in. It is added by the Owner and other members, or by the Principal.
Other people named in records. For example, people who receive gifts from the Principal (some may be grandchildren under 18), people who pay towards care fees, and care home staff, GPs, nurses, solicitors and council staff named in diary entries, letters or decisions. This information is added by members of the workspace.
People who are invited to a workspace but have not joined yet. The member who invites them gives us their email address.
People who ask for a sign-in email but do not go on to use Seventide.

We do not buy information about anyone, and we do not take it from public sources. If you are named in someone’s workspace and do not have an account, this notice still applies to you. We cannot contact everyone named in a family’s records, so we publish this notice instead. Section 10 explains how to contact us.

4. What information we hold

Your account

Your name and email address. You need to give us your email address to have an account, because that is how you sign in.
How you sign in. If you add a passkey, we keep the passkey’s public part and the name you give it. If you turn on an authenticator app, we keep its secret code, encrypted. We do not use passwords.
Your role in each workspace, and what you are allowed to see.
The date and time you last signed in.
For each device you are signed in on, the type of browser and device (for example “Chrome on Windows”). You can see these and sign them out under your security settings.
If you turn on phone or browser alerts, the address your browser gives us for sending them.
If you pay for a subscription, the plan, its status and the reference numbers Stripe gives us. We never see or store your card details.

About the Principal

Full name, date of birth and the UK nation they live in.
Marital status, whether they own their home, and whether anyone else lives there.
Their care setting and GP.
Their NHS number. This is optional. You do not have to give it.
Details of any LPA, EPA or deputyship, and copies of those documents.
Date of death, if this has happened.

Money records

Bank and other accounts, balances, and transactions. For account numbers we only keep the last 4 digits.
Gifts, including who received them and why.
Care fees, contracts, invoices and payments.
Income and spending records used for tax and care-funding calculations.

Documents

Files you upload, such as bank statements, wills, care contracts and letters.
Text we read from those files so you can search them. For photos and scanned documents this is done by OCR (optical character recognition), which turns a picture of a page into text. PDFs that already contain text, and Word documents, are read on our own servers.

Health information

Some information is about the Principal’s health. The law calls this special category data. It needs extra protection. It includes:

the NHS Continuing Healthcare (CHC) evidence diary and CHC process records. CHC is NHS funding for people whose main need is a health need;
the Attendance Allowance care needs diary and claim records. Attendance Allowance is a benefit for older people who need help with personal care;
health conditions recorded on the Principal’s profile;
documents filed as health documents, such as NHS letters and assessment reports;
the decision log kept by attorneys, which may mention health, wishes and feelings.

Consent and authority records

A record of the Principal’s agreement to the workspace, or an attorney’s or deputy’s declaration that they are acting for the Principal.
Whether that agreement or declaration covers health information.
Who recorded it, how, and when, and any later withdrawal.

Security and activity records

A record of who added, changed or deleted things, and when. We call this the audit log.
A record of each time someone other than the Owner looks at health records, health documents or the decision log.
A record of every export (download pack) created.
The internet address (IP address) used for these actions.
Earlier versions of some records, such as health diary entries, gifts, transactions and decisions. We keep these, encrypted, so that changes can be checked.

How the app is used

We count things like “a workspace was created” or “a pack was exported”. We use this to improve Seventide. Each of these records is linked to the workspace and to a scrambled code for the person, not to their name or email address. They never include names, email addresses, health details or sums of money. We keep them in our own system. We do not use outside analytics companies.

5. Why we use information, and our legal reasons

Data protection law says we must have a legal reason, called a “lawful basis”, for each use.

What we do	Our lawful basis
Run your account and provide Seventide to you	Contract: we need to, to provide the service you signed up for.
Take payment for a subscription	Contract.
Hold information about the Principal	Legitimate interests: the Principal’s own interests (care funding and benefits they are entitled to, the tax exemptions their estate is entitled to, protection from mistakes and financial abuse) and the interests of their family, attorneys and executors in keeping accurate records. Attorneys must keep accounts of the money they manage, and executors must report lifetime gifts to HMRC. See below.
Hold information about other people named in records, such as gift recipients	Legitimate interests of the family in keeping accurate records for tax, care funding and attorney accounts.
Keep the service secure, keep audit logs, and prevent misuse	Legitimate interests in keeping families’ information safe and showing who did what.
Count how the app is used (no names, contact details, health details or sums of money)	Legitimate interests in improving Seventide.
Keep records the law requires, such as our company’s financial records	Legal obligation.

“Legitimate interests” means there is a good reason to use the information, it is needed for that reason, and it does not override the rights of the people it is about. We have written down how we weighed this up. You can object (see section 10).

We do not send marketing emails. If we ever want to, we will ask you first.

The Principal

We treat the Principal’s dignity and wishes as central.

If the Principal can make their own decisions, Seventide asks them to agree to the workspace holding their information. They sign in the app, sign on paper and a photo is uploaded, or make a witnessed paper declaration. The date is recorded. They can see everything about themselves and can object at any time.
If the Principal can no longer make this decision, an attorney with a registered LPA or EPA, or a deputy appointed by the Court of Protection, must declare that they are acting for the Principal and that the Principal lacks capacity to decide. They must upload the LPA, EPA or court order. We record this in the Principal’s profile.

Health information

Health information needs a second legal reason, called a “condition”. Nobody can add health records until one of these is in place:

If the Principal can decide: the Principal’s explicit consent. This means a clear “yes” from the Principal to their health information being kept in the workspace.
If the Principal cannot decide: the declaration of an attorney or deputy (see above). We then rely on the condition for substantial public interest, specifically protecting the economic well-being of an adult who is less able to protect it because of illness or disability (Data Protection Act 2018, Schedule 1, paragraph 19). The health records are the evidence families need to secure NHS Continuing Healthcare, NHS-funded Nursing Care, Attendance Allowance and a correct council means test. We keep a written policy that explains how we protect this information, as the law requires.

If the Principal gave consent while they could decide and later loses capacity, their consent stays in place unless it was withdrawn.

Withdrawing consent. The Principal can withdraw consent for their health information at any time, and an attorney or deputy can withdraw their declaration. If this leaves nothing in place that covers health information, the health records are hidden from everyone straight away, the Owner included, and nobody can add or change them. This covers the health diaries, CHC and Attendance Allowance records, health documents, health packs and letters, and the health details on the Principal’s profile. Health reminders stop, and a full download made during this time leaves them out. Everything is permanently deleted 30 days later, unless a new consent or declaration is recorded within those 30 days, in which case it comes back. The attorney’s decision log is not deleted, because attorneys are expected to keep a record of the decisions they make. If it mentions health details that should be removed, ask us and we will do it.

Decisions about you

Seventide does calculations, for example how much of this year’s gift allowance is left or when savings may reach the council’s limit. These are information for your family. Seventide does not make decisions about anyone that have legal or similarly significant effects.

6. How we protect information

UK storage. We keep your information in Microsoft Azure data centres in the UK (the “UK South” region).
Encrypted when it travels. Information sent between your device and Seventide is encrypted using TLS 1.2 or higher.
Encrypted when stored. Everything we store is encrypted by Microsoft’s storage systems. On top of that, our app encrypts the most sensitive information before it is stored, using a separate key for each workspace. This covers, for example, notes you type (including health notes), names, dates of birth, NHS numbers, account details and uploaded documents. Each workspace key is itself locked by a master key held in Azure Key Vault, a secure key store. Your own name and email address are encrypted by our app with a separate key.
What the workspace key does not cover. Some details are protected by Microsoft’s storage encryption only. These include sums of money and dates, choices picked from lists (for example which care needs a diary entry is about), the workspace’s name, and the short descriptions in the activity log, which can include people’s names.
Each family is kept separate. Our database checks every request so one workspace cannot see another’s records.
Health records are watched. Every time someone other than the Owner opens health records, health documents or the decision log, we record it.
Safe sign-in. You sign in with a passkey, or with a link or a 6-digit code that we email to you. Each link and code works once and expires after 15 minutes. You can also add an authenticator app as a second step. You are signed out after 30 minutes without activity, and after 30 days in any case.
Safe downloads. Documents can only be downloaded through links that expire after 5 minutes.
No adverts or tracking. We do not use advertising or tracking tools.
Private alerts. Emails and phone notifications never include health details or sums of money. They just tell you something needs attention. An invitation email says who invited you and in what role.
Our technical logs. Our technical logs and monitoring do not contain names, email addresses, health details, sums of money, or the codes in sign-in and invitation links. They do contain technical details such as the pages used and record reference numbers. We keep them for 30 days.

No system is perfectly secure. If something goes wrong that puts you at risk, we will tell you and the ICO as the law requires.

7. Who can see your information

People in the workspace

The Owner, attorneys and the Principal can see everything in the workspace.
Family members and professionals see only the parts the Owner allows. For example, the Owner can stop a family member seeing gifts or health records.
Who can add or change records depends on their role.
The Principal, if they have an account, can always see every record about themselves, whatever the other settings.

Companies that help us run Seventide

Company	What they do	Their role
Microsoft (Azure)	Hosting, database, file storage, the key store, sending emails, reading text from photos and scanned documents (OCR), and monitoring that the service is working. Set up in the UK South region, with the email service set to store its data in the UK.	Our processor: acts only on our instructions, under a contract that protects your information.
Stripe	Taking subscription payments on Stripe’s own payment pages. We give Stripe the Owner’s email address, the plan and a reference number for the workspace. Your card details go straight to Stripe and never reach us.	Our processor for taking payments. Stripe also uses payment information for its own purposes, such as preventing fraud and meeting its legal duties, and is responsible for that itself. See Stripe’s privacy policy.

Phone and browser alerts. If you turn on alerts, they are delivered by the push service your browser or phone uses (for example Google, Apple or Mozilla). The alert is encrypted from us to your device, so the push service cannot read it, and it only says that something needs attention.

In the future we plan to let you connect bank accounts so balances update on their own (“open banking”). It would use a company authorised by the Financial Conduct Authority (FCA), and the connection would be read-only: nobody could move money through Seventide. This will only happen if you choose to connect. We will update this notice first.

Exports

You can create packs (PDF or spreadsheet files) for the council, the NHS, HM Revenue & Customs, the Office of the Public Guardian or an executor. We only create these when you ask. Once you download a pack, you decide who gets it.

Others

We never sell your information.
We would only share it with others if the law requires it, for example a court order. We would tell you unless the law stops us.

8. Information leaving the UK

Your records are stored and processed in the UK. A few things can involve countries outside the UK:

Microsoft may need to reach our systems from outside the UK to provide support or fix a fault, and its email service may route emails through other countries while delivering them. Microsoft’s data protection terms include the safeguards UK law requires for this (the UK International Data Transfer Addendum to the EU standard contractual clauses).
Stripe may process payment information in the United States. Stripe is certified under the UK Extension to the EU-US Data Privacy Framework (the “UK-US data bridge”), which UK law recognises as giving adequate protection.
Push services for phone and browser alerts may be outside the UK. The alert they carry is encrypted and contains no personal details.

9. How long we keep information

Families often need these records for many years: HMRC can ask about gifts made up to 7 years before a death, and CHC and care-funding questions can go back further. So we keep a workspace until the Owner deletes it, and we give the Owner the tools to do that at any time.

Information	How long
Your account	Until you delete it (see section 10).
Your workspace	Until the Owner deletes it.
After a free trial (14 days) or a subscription ends	The workspace becomes read-only. You can still see everything, download your information or delete it. We do not delete it just because the trial or subscription has ended.
After the Principal dies	The Owner can keep the workspace as a read-only archive. By default this is 7 years after the date of death, because HMRC can ask questions about the estate for that long. The Owner can choose between 1 and 25 years, or delete it sooner. We remind the Owner 90 days before the period ends and ask them to delete it or keep it longer.
Health records after consent is withdrawn	Hidden at once and deleted after 30 days, unless a new consent or declaration is recorded (see section 5).
Documents deleted in the app	Kept in a “deleted” list, so the Owner or an attorney can restore them, until the workspace is deleted. Ask us if you need one removed for good sooner.
Earlier versions of records, audit logs, and packs you create	Until the workspace is deleted. They are part of the family’s record.
Invitations that were not accepted	Deleted 30 days after they expire or are withdrawn.
Full downloads of a workspace (ZIP files)	Deleted 30 days after they are created. Download yours before then.
Sign-in links and codes	Deleted 7 days after they expire.
Signed-in devices (sessions)	Deleted 7 days after the session ends.
Usage counts	25 months.
Our record of a workspace’s subscription	Until the workspace is deleted. Stripe keeps its own records, and we keep our company’s financial records (such as invoices) for 6 years, as the law requires.
Deletion certificates	Kept so we can show a workspace was deleted. They hold the workspace’s reference number, dates and how many records were deleted, not names or content.
Technical logs and monitoring	30 days.
Backups	Database backups are kept for up to 35 days. Deleted files can be recovered by us for 7 days. Both are encrypted and are deleted automatically.
Offline entries on your device	Removed as soon as they reach us, when you sign out, or after 30 days, whichever comes first.

Deleting a workspace. Only the Owner can delete a workspace. They can delete it straight away or schedule it for up to 30 days later. We delete all its records and documents, and destroy the workspace’s encryption key, within 30 days of the request. The Owner can then download a signed deletion certificate in the app, and members receive an email saying the workspace has been deleted. Encrypted backups still hold a copy until they expire, up to 35 days later. We only restore backups to recover from a disaster. If we ever had to, we would delete the workspace again straight away.

10. Your rights

You have these rights over your personal information:

See it. Ask for a copy of what we hold about you.
Correct it. Ask us to fix anything that is wrong.
Delete it. Ask us to delete it.
Limit it. Ask us to stop using it for a time, for example while we check it is right.
Take it with you. Download it in a common format. Seventide gives you a ZIP file with your records as JSON files (a standard data format), plus your original documents and the packs you created.
Object. Ask us to stop using it where we rely on legitimate interests. We will stop unless there is a strong reason to continue, for example an attorney’s legal duty to keep accounts.
Withdraw consent. Where you gave consent, you can take it back at any time. This does not affect what happened before.
Complain. See section 14.

Our timescales. We reply to requests within one month. If a request is very complex, we may need up to two more months. We will tell you if so. Exports and deletions are completed within 30 days.

Doing it yourself. Under More › Your data:

the Owner, the Principal and an attorney (once their LPA, EPA or court order is recorded) can download a full copy of the workspace;
the Owner can delete the workspace;
anyone can delete their own account. An Owner must first delete their workspaces or hand them over to someone else. If you signed an attorney decision with others, we remove your name and email address but keep the signed decision, so the family’s legal record stays complete.

This works even if the trial has ended. Other members can ask us for a copy of their information at support@seventide.app.

Acting for someone else. An attorney or deputy can make requests for the Principal. We may ask to see the LPA, EPA or court order first.

If you are named in a workspace but have no account, write to support@seventide.app. We will need to confirm who you are. We will also take account of the rights of the family and the Principal.

The Principal’s right to see everything

If the Principal has a Seventide account, they can always see every record about themselves. No one in the workspace can switch this off.

11. Cookies and similar technology

We only use cookies that Seventide needs to work:

a sign-in cookie, so we know you are signed in. It lasts up to 30 days, but we end your session after 30 minutes without activity;
a security cookie. It holds a random code that our app sends back with every change you make, which stops other websites from tricking your browser into making changes (this is called CSRF protection). It lasts 30 days.

These are strictly necessary, so we do not need to ask you to accept them. We do not use tracking or advertising cookies.

Seventide also stores some things on your device:

your display settings, such as your chosen text size, and which workspace you opened last;
the app’s own files, so it opens quickly and works offline. Your records are never stored this way;
entries you add while offline (health diary entries, gifts and transactions). They are saved on your device exactly as you typed them, and are not encrypted there. They are removed as soon as they reach us. If one cannot be sent, it stays so you can try again or discard it, for up to 30 days. Everything waiting to be sent is removed when you sign out. It is kept if you are signed out because you were inactive, so it can be sent when you sign in again.

Please use a device that only you, or people you trust, can open.

12. Children

Seventide is for adults. You must be 18 or over to have an account.

Records may mention children, for example grandchildren who receive gifts. We protect this information in the same way as all other information.

13. Changes to this notice

We may update this notice, for example when we add open banking. We will show the version and date at the top. If we make an important change, we will tell you by email or in the app before it takes effect.

14. Contact us or complain

Contact us: email support@seventide.app, or write to Privacy, Pro Dev Dynamics Ltd, 1 Richmond Road, Lytham St Annes, FY8 1PE, United Kingdom.

Complaints to us. If you are unhappy with how we have used your information, please tell us at support@seventide.app. We will acknowledge your complaint within 30 days, look into it, keep you updated and tell you the outcome.

Complain to the ICO. You also have the right to complain to the Information Commissioner’s Office:

Website: ico.org.uk/make-a-complaint
Phone: 0303 123 1113

Version 1.0, 14 October 2026.