Vertwo is a small family of household apps built and run by Elliot Reeves in the UK. Elliot decides how your data is used and is responsible for it (the "controller" under UK data protection law). Questions or requests about your data: [email protected].
If you're reading this to sign up, you've been invited into an early user-testing group. This round covers Organise, School, House Points and Trips; Finance, Habits and Learn aren't part of it. Testers must be 18 or over. Being a tester doesn't change your rights below — but do bear in mind this is early-stage software.
One account (your name, email address and a scrambled "hashed" copy of your password — never the password itself) works across every app you use. Beyond that, each app keeps only what it needs to do its job:
| App | What it holds |
|---|---|
| Your account | Name, email, password hash, your household and its members, which apps each member can use, sign-in and two-factor records, notifications, and any support requests you send us. |
| Organise | Calendars, events, trips, polls and bookings you create or are shared into, event locations (so they can be shown on a map), and whether an event's notes mention something you need to do. If you use the Bob assistant, in the app or on Telegram, your messages to it, the calendar details needed to answer them and your 👍/👎 feedback. If you link Telegram, your Telegram chat ID. |
| School | Records you or another adult in your household enter about your children: name, birth year (not full date of birth), school, year group, class, admission number, the school's contact details and location, and the reminders ("needs you" items) you add. |
| House Points | Your household's chores, rooms and rewards, and who completed or claimed what. |
| Trips | Trips you create, who's on them, activities, checklists, flights (including live status lookups), car details and any attachments you upload. |
| Finance | Bank transactions you import and how you categorise them. Not part of this test. |
| Habits | Habits you track and your completion history. Not part of this test. |
| Learn | What you enter there directly; it has its own separate account. Not part of this test. |
We also keep some records simply because the service runs:
A household can include children. Children don't have their own login — an adult in the household (a parent or guardian) adds and manages their record, and is responsible for what's entered about them.
For testers: your consent, given when you register. For the details you enter about your children, that consent is yours as their parent or guardian. You can withdraw consent at any time by asking us to delete your account — see "Your rights" below. The server and email logs above rely on our legitimate interest in keeping the service secure and working; they expire on their own.
We only use the cookies needed to keep you signed in and to protect your session. There are no advertising or tracking cookies, and no analytics.
We don't sell data and don't share it beyond what running the service needs. These companies handle some of it for us:
| Who | What for |
|---|---|
| Hetzner (Germany) | Hosts the server where everything is stored. |
| Cloudflare | Sits in front of every app for security and delivery, so it sees your traffic. Also stores our encrypted backups. |
| Mailjet | Sends our emails (sign-in codes, verification, password resets, invites, notifications). |
| OpenAI / Anthropic | Power the AI features: the Bob assistant, picking an icon for each event, and spotting to-dos in event notes. Only what's needed for that request is sent (for example an event's title or notes), and it isn't used to train their models. |
| Telegram | Carries your chats with Bob, if you link Telegram. Telegram's own privacy policy applies to those chats. |
| Photon (komoot) and OpenStreetMap | Photon turns an event's location into a map position; OpenStreetMap supplies the map, so it sees your IP address when a map is shown. |
| AviationStack | Looks up live flight status when you check a flight. |
| Open-Meteo, postcodes.io | Weather for your child's school day. Only the school's location is sent, nothing about you. |
Some of these are based outside the UK (notably the US). Where they are, we rely on the safeguards they offer for international transfers (such as the UK Extension to the EU-US Data Privacy Framework, or standard contractual clauses).
Shared things behave like shared things: if you delete your account, calendars, trips and households other people use are handed to another adult where possible, and we'll talk to you first if something shared would be lost.
Under UK data protection law (UK GDPR), you can ask us to:
Email [email protected] for any of these, or use Help & support while signed in. We handle requests by hand during testing, answer within one month, and confirm when it's done. If you're not happy with how we've handled a request, you can complain to the UK regulator, the Information Commissioner's Office (ICO).
Passwords are never stored in plain text, and signing in needs a code sent to your email. Connections to every app are encrypted, backups are encrypted, and the server only accepts traffic through Cloudflare. If something ever goes wrong that affects your data, we'll tell you directly, not just update this page.