Jigsaw School Apps

Privacy & Cookie Policy

Last updated: 1 August 2026

---

1. Introduction

This policy explains how Jigsaw School Apps Ltd (“Jigsaw”, “we”, “us”, “our”) collects and uses personal information, and the choices and rights you have.

It applies to:

• the Jigsaw School Apps mobile application (the “App”), available on the Apple App Store and Google Play; and
• our website at jigsawschoolapps.com (the “Website”), including the cookies it uses.

The App is designed to help schools communicate with parents and guardians. Please read this policy alongside any privacy information provided by your child’s school, as in many cases the school — not Jigsaw — decides how the information sent to you through the App is used (see section 3).

2. Who we are

Jigsaw School Apps Ltd is the company responsible for the App and Website.

If you have any questions about this policy or how we handle your information, contact us using the details above.

3. Our role: when we are a “processor” and when we are a “controller”

Data protection law distinguishes between a data controller (who decides why and how personal data is used) and a data processor (who acts on a controller’s instructions).

Where the school is the controller and Jigsaw is the processor. When a school uses the App to communicate with its community, the school decides what to post, who receives it, and what information to include. In relation to that content and those communications, the school is the data controller and Jigsaw acts only as a data processor on the school’s behalf and under its instructions, in line with a written data processing agreement between us and the school. If you have questions about how your school uses your information, or you wish to exercise your rights over that information, please contact your school in the first instance.

Where Jigsaw is the controller. Jigsaw is the data controller for a limited set of information that we decide how to use, including:

• accounts for school staff who use our online management portal;
• technical, installation and usage information collected through the App to run, secure and improve our service (see sections 4, 6 and 7); and
• information you provide to us directly, and cookies, through our Website (see sections 4 and 8).

4. The information we collect

4.1 Parents and guardians using the App

The App does not require you to create an account or log in. When you install and use the App, we (and the school) may process:

• Device and technical information — such as device type, operating system version, app version, and a push-notification token that allows notifications to be delivered to your device.
• Usage and analytics information — such as which posts are opened and how the App is used, collected through analytics tools to help us understand and improve the App (see section 7). This is used in an aggregated way and is not used to build a profile of you as a named individual.
• Survey responses — where your school runs a survey, your responses are collected anonymously. To keep results fair, the App records that a given device has completed a survey (so it can only be completed once per device), but responses are not linked to your name or identity.

We do not collect location data through the App.

4.2 Content sent to you through the App

Posts, calendar events, surveys, contact details and notifications you receive are created and sent by your school, which is the controller of that content (see section 3).

4.3 School staff using the management portal

For staff who administer a school’s app through our online management portal, we process account information including name and email address, and records of actions taken in the portal, in order to provide and secure the service.

4.4 Website visitors

When you visit our Website we may process:

• information you choose to give us, for example when you complete a contact or enquiry form (such as your name, email address, telephone number and message); and
• information collected automatically through cookies (see section 8).

5. How we use your information and our lawful bases

Where Jigsaw is the controller, we rely on the following lawful bases under the UK GDPR:

Where the school is the controller (section 3), the school is responsible for identifying the lawful basis for processing the information it sends through the App, and Jigsaw processes that information only on the school’s instructions.

Where we rely on legitimate interests, we have considered your rights and interests and will provide further detail on request.

6. Push notifications

The App can send push notifications so that your school can keep you informed. Notifications are delivered using the operating system’s messaging services — Apple Push Notification service (APNs) on iOS and Firebase Cloud Messaging (Google) on Android — which process a device token to route the message to your device. You can turn notifications on or off at any time in your device’s settings.

7. Analytics

We use analytics tools to understand how the App and Website are used, so that we can fix problems and improve them:

• Google Analytics for Firebase — usage analytics within the App; and
• Microsoft Azure Application Insights — performance and usage monitoring for the App and our services.

Analytics information is used in an aggregated and de-identified way wherever possible and is not used to identify you as a named individual. You can limit some data collection through your device’s privacy settings.

8. Cookies (Website)

Cookies are small files placed on your device when you visit a website.

Our Website uses only strictly necessary cookies — the limited cookies that WordPress (the platform our Website runs on) may set to keep the site working and secure. We do not use analytics, advertising, tracking or social-media cookies on the Website, and we do not share Website browsing data with third parties for those purposes.

Because we use only strictly necessary cookies, no cookie-consent banner is required. You can still block or delete cookies at any time through your browser settings, although doing so may affect how the Website works.

9. Who we share your information with

We do not sell your personal information. We share it only with trusted providers who help us deliver the service, and where the law requires it. Our key providers (“sub-processors”) are:

• Microsoft — secure UK cloud hosting (Microsoft Azure), performance monitoring (Azure Application Insights), and our business email (Microsoft 365).
• Google — delivery of Android push notifications (Firebase Cloud Messaging) and App usage analytics (Google Analytics for Firebase).
• Apple — delivery of iOS push notifications (Apple Push Notification service).

We may also disclose information where required by law, to protect our rights, or in connection with a business sale or reorganisation. All providers are required to protect your information and use it only for the purposes we specify. We keep an up-to-date record of our sub-processors and can provide it on request.

10. Storing and transferring your information (international transfers)

Your information is hosted in the United Kingdom using Microsoft Azure.

Some of the providers that support the service (such as Google, Apple and Microsoft, for push notifications and analytics) may process limited information outside the UK. Where information is transferred outside the UK, we ensure appropriate safeguards are in place, such as UK “adequacy” regulations, the International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, or the UK Extension to the EU–US Data Privacy Framework. You can ask us for more information about these safeguards.

11. How long we keep your information

For content and communications where the school is the controller, the school decides how long information is kept, and we retain it for as long as the school instructs and while it holds an active subscription with us. When a school’s subscription ends, we delete or return its data within a reasonable period, unless the law requires us to keep it.

The periods below are our standard retention periods; schools can ask us to adjust those relating to their own content:

12. Keeping your information secure

We take appropriate technical and organisational measures to protect your information against loss, misuse and unauthorised access, including secure UK-based hosting, encryption in transit, access controls and regular review of our security practices. No system can be guaranteed 100% secure, but we work to protect your information and to respond appropriately if a problem occurs.

13. Your rights

Under UK data protection law you have the right to:

• be informed about how your information is used;
• access the personal information we hold about you;
• have inaccurate information corrected;
• have your information erased in certain circumstances;
• restrict or object to certain processing;
• data portability in certain circumstances; and
• withdraw consent at any time where we rely on consent.

How to exercise your rights. Because your school is often the controller of the information sent to you through the App (see section 3), please contact your school for requests about that information. For information where Jigsaw is the controller — such as App analytics, management portal accounts or Website enquiries — contact us at info@jigsawschoolapps.com. We will respond within one month.

Complaints. We hope to resolve any concern you raise. You also have the right to complain to the UK regulator, the Information Commissioner’s Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113
• Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

14. Children’s privacy

The App is intended for use by parents and guardians (adults). It is not directed at children, and we do not knowingly collect personal information directly from children through the App. Any information relating to pupils that a school sends through the App is controlled by the school and handled under the school’s own privacy arrangements.

15. Links to other services

The App and Website may contain links to third-party websites or services (for example, links a school adds to a post). We are not responsible for the privacy practices of those third parties, and we encourage you to read their privacy policies.

16. Changes to this policy

We may update this policy from time to time. When we make significant changes we will update the “Last updated” date above and, where appropriate, notify you. Please check back periodically.

17. How to contact us

For any questions about this policy or your information:

Jigsaw School Apps Ltd 2 Maple Crescent, Blythe Bridge, Stoke-on-Trent, England, ST11 9NL
Telephone: 0800 999 7500
Email: info@jigsawschoolapps.com

18. Governing law

This policy and any dispute arising from it are governed by the laws of England and Wales, and are subject to the exclusive jurisdiction of the courts of England and Wales.