Less Mayhem

Privacy Policy

Last updated: 28 June 2026

Less Mayhem (“we”, “us”) is operated by Sparked Labs Ltd, a company registered in England and Wales (company number 17043339), registered address 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. We are the data controller for the personal data described below. This policy explains what we collect, why, and your rights under the UK GDPR and the Data Protection Act 2018.

Who can use Less Mayhem

Less Mayhem is a private family hub set up and managed by a parent or guardian. Adults create the account; children do not sign in with their own credentials and we do not knowingly collect personal data directly from children. The managing parent is responsible for the information they add about their household, including children.

Information we collect

  • Account data: your email address (used for sign-in via magic link) and the display name you choose.
  • Household data you add: family name, children’s names and birthdates, routines/chores, allowance amounts, calendar events, lists, meals, notes and messages.
  • Photos you upload to your family gallery.
  • School emails: if you enable email forwarding, messages forwarded to your unique inbound address, which we process to organise school communications.
  • Connected accounts: if you connect Google Calendar, OAuth tokens and the calendar data needed to sync events.
  • Notifications: device push tokens for the devices you opt in to notifications on.
  • Technical data: session cookies and basic device/log data needed to run and secure the service.

How we use it and our lawful bases

  • To provide the service (calendar, lists, chores, photos, school inbox, assistant) — performance of our contract with you.
  • To send notifications you have enabled — consent, which you can withdraw at any time.
  • To keep the service secure and working — our legitimate interests in operating a safe product.

The Hearth assistant

When you use the Hearthassistant, the content of your request and the relevant family context are sent to our AI gateway provider, OpenRouter, which routes them to the AI model your family has selected in Settings to generate a response. We use OpenRouter with prompt logging disabled and do not use your family’s data to train AI models.

Service providers

We share data only with providers that process it on our behalf to run Less Mayhem:

  • Supabase — database, authentication and file storage.
  • Vercel — application hosting and privacy-friendly, cookieless usage & performance analytics (Web Analytics and Speed Insights).
  • Google — only if you connect Google Calendar, to sync your events.
  • OpenRouter — our AI gateway for the Hearth assistant, which routes requests to the AI model your family selects.
  • Cloudflare — to receive and route forwarded school emails, and for content delivery.
  • Firebase Cloud Messaging (Google) — to deliver push notifications you opt into.

Data retention & deletion

We keep your data for as long as your account is active. You can delete your account at any time from Settings → Account. Deleting your account removes your profile; if you are the last parent in a household, it permanently deletes the entire household and all its data (children’s profiles, photos, events and more). Backups are purged on our providers’ routine cycles, within 30 days. If you cannot sign in, see how to request account deletion.

Your rights

Under UK GDPR you may request access to, correction of, or deletion of your personal data, object to or restrict processing, and request portability. You can download a machine-readable copy of your data at any time from Settings → Account. To exercise any other right, contact us at privacy@lessmayhem.com. You can also complain to the UK Information Commissioner’s Office (ico.org.uk).

Cookies, storage & analytics

We use strictly necessary cookies and local storage to keep you signed in and remember preferences such as theme. We do not use advertising or third-party tracking cookies. To understand how the app is used and how it performs, we collect aggregate, cookieless analytics via Vercel (Web Analytics and Speed Insights) — this does not identify you or track you across other websites.

Changes

We may update this policy. Material changes will be reflected by the “last updated” date above.

Contact

Questions? Email privacy@lessmayhem.com.