Privacy

Last updated 2026. Plain-English summary. Not legal advice.

isanyonepoorly? exists to show what’s going round an area without ever pointing at a single family. Privacy isn’t a feature here; it’s the whole design.

What we store about a report

When someone reports an illness we keep only: the condition (a label, e.g. “tummy bug”), a rough area, when it started, and the day. The “area” is a postcode sector at the finest (for example SW11 2, a couple of thousand households), and the district for roll-up (SW11).

We never store a full postcode or address, a child’s name or date of birth, or anything that identifies a family. If you type a full postcode, we reduce it to the sector and discard the rest immediately.

Nothing shows until at least three families agree

We only ever display or alert on something once at least 3 reports exist for that area and condition (“k-anonymity”). If a sector is too sparse, we roll it up to the wider district; if that’s still too sparse, we show nothing. The view can never get fine enough to single anyone out.

Reports are anonymous

Reports aren’t linked to your account. To stop trolling and duplicates we keep a one-way, daily-rotating token derived from your network address; it’s never shown and never joined to a person.

Your account

If you sign up to check your nursery and area, we store your email (for sign-in and the alerts you ask for), the places you pin, and your preferences. We use passwordless magic-link sign-in, so there’s no password to leak.

Your rights

You can delete your account and all its data at any time from your account page. Deletion removes your email, pins and alert history. Past reports remain only as anonymous, aggregated counts that can’t be traced back to you.

Email & payments

We send email for sign-in links and the alerts you switch on. Payments are handled by Stripe; we never see your card details.

Questions? Email [email protected].