Frequently asked questions

Your questions, answered

Everything you need to know about how Canopy works, keeps your family's data safe, and fits into your life.

Security & Privacy | Your Documents | How it works | Calendar import | Subscription

🔐 Security & Privacy

Yes. Canopy is built with security as a first principle, not an afterthought. Here’s what that means in practice:

  • All data travels over HTTPS — it is encrypted in transit.
  • Everything stored in our database is encrypted at rest using AES-256.
  • Passwords are hashed using bcrypt and never stored in plain text.
  • Row-level security means only authenticated members of your family can ever read your family’s data. Our staff cannot query your records.
  • Our infrastructure runs in the UK (London), and we process data lawfully wherever you and your family are based.

In the UK. Your family’s data — the database and every file in the Document Vault — is hosted on infrastructure in London, England, in a single region. This applies no matter which country you or your co-parent live in, including Ireland, Australia, the US, and New Zealand.

We keep everything in one region rather than splitting it by country, which is what allows us to enforce row-level security and back up your data consistently. Where this means personal data is transferred outside your home country, we put appropriate legal safeguards in place — Standard Contractual Clauses and/or the UK International Data Transfer Addendum, depending on where you’re based. Full detail is in Section 6 of our Privacy Policy.

No system can guarantee zero risk, but Canopy uses the same infrastructure and security model trusted by thousands of enterprise applications worldwide. Specifically:

  • Row-level security (RLS) is enforced at the database level — even if someone obtained your API keys, they could not read another family’s data.
  • Two-factor authentication is available in Settings. We strongly recommend enabling it — even if your password is ever compromised, a second factor stops an attacker from signing in.
  • Session management — you can sign out of all devices from Settings if you ever suspect unauthorised access.
  • Child account credentials are stored with an additional encryption layer on top of standard password hashing.

As with any online service, using a strong, unique password and enabling two-factor authentication are the two most effective steps you can take.

Never. Canopy is funded entirely by subscriptions. There are no adverts in the app, no third-party advertising trackers, and we do not sell, rent, or share your data with anyone for commercial purposes.

We use a small number of carefully selected sub-processors to deliver the service — for example, our infrastructure provider (Supabase), our email delivery provider (Resend), and Anthropic for AI features. All are bound by Data Processing Agreements. A full list is in our Privacy Policy.

Yes. Canopy is operated by Chrysalis Works Ltd, registered with the ICO (Information Commissioner’s Office) as a data controller. We process personal data lawfully under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

You have the right to access, correct, port, and erase your data — and in Canopy, you can exercise all of these rights directly in the app without contacting us. Full details are in our Privacy Policy.

You can delete your account at any time from Settings → Account → Delete my account. Deletion is immediate and permanent — there are no grace periods, no “we’ll keep it for 30 days” dark patterns.

Before deleting, you can download a complete export of everything Canopy holds about your family — all calendar events, notices, information bank entries, documents, and messages — in a portable format. Go to Settings → Account → Download my data.

📄

Your Documents

Passports, school reports, medical letters — the most sensitive files you own. Here’s exactly how we protect them.

Very safe. Here is the full picture:

🔒

Encrypted at rest

Every file you upload is stored in Supabase Storage with AES-256 encryption at rest. The encryption is applied at the storage layer — files are never stored as raw bytes that could be read if the underlying disk were accessed.

🔐

Only your family can access them

Row-level security is enforced at the database layer — not just in application code. This means even a malicious actor who bypassed the application layer would still be blocked from reading files belonging to other families. Access is limited to authenticated members of your family group.

🔗

Signed, expiring download links

When you view or download a document, Canopy generates a signed URL that expires after a short period. This means there is no permanent, guessable link to your files. Bookmarking a download link will not work after it expires.

🚫

We cannot read your documents

Canopy staff do not have routine access to your stored files. Our infrastructure access controls are set so that files can only be accessed by authenticated users who belong to the relevant family. We do not process document contents with AI or for any purpose other than storing and serving them back to you.

🇬🇧

Data stays in the UK

All storage is hosted in the UK (London). Your documents never leave without your knowledge, and we process data lawfully wherever you and your family are based.

The Document Vault is designed specifically for sensitive family documents — passports, medical letters, school reports. We take its security proportionally seriously.

By default, both parents can view and upload documents. If you add a read-only family member (for example, a grandparent or carer), access to the Info Bank — which includes documents — is off by default. Both parents must agree to grant them access.

Read-only members never have permission to upload, edit, or delete documents — they can only view files that both parents have explicitly granted them access to see.

Any file type is supported. Common uses include:

  • Passports and ID documents
  • School reports and letters
  • Medical letters, test results, prescriptions
  • Court orders and parenting agreements
  • Insurance documents
  • Travel documents and consent forms

How it works

Canopy’s messaging is designed around topics rather than a single chat thread — so conversations about school, medical appointments, and holidays don’t get muddled together.

  • Messages are private between parents only — read-only members (grandparents, carers) cannot see them.
  • Each message thread has a clear topic so conversations stay organised and searchable.
  • Push notifications alert the other parent immediately when a new message arrives.
  • All messages are stored securely and included in your data export — useful for record-keeping.

Messaging is an optional feature — each parent can choose whether to enable it in Settings.

Yes — Canopy provides a private iCal feed that you can subscribe to from any calendar app, including work calendars.

  • Outlook (personal & work) — subscribe to a calendar from URL; updates automatically.
  • Google Calendar — subscribe “from URL” in Other Calendars.
  • Apple Calendar — File → New Calendar Subscription.
  • Any app that supports iCal / ICS subscriptions.

Your Canopy calendar link is in Settings → Calendar → Export. The iCal feed is read-only — changes made in Google or Outlook won’t affect Canopy, which keeps your family calendar as the authoritative source.

When you forward a school newsletter or photograph a flyer, Canopy uses AI to extract the events and add them directly to your family calendar — so you don’t have to type them in manually.

The content of the email or photo is sent to Anthropic’s Claude AI solely for this purpose. Anthropic does not retain API data for training. No other data from your Canopy account is shared — only the email or image you explicitly forward.

This feature requires your consent and can be turned off in Settings at any time. Nothing is sent to AI without your explicit action (forwarding an email or photographing a flyer).

Yes. You can invite family members as read-only members. They get their own login and can see what both parents agree to share with them.

By default, read-only members can see the calendar and the notice board. Access to the Info Bank, parenting schedule, and messaging requires both parents to agree in Settings. This gives you full control over what extended family can see.

Yes. Canopy is available as:

  • iOS app — available on the App Store
  • Android app — available on Google Play
  • Web app — install directly from your browser on any device (Chrome, Safari, Edge)

Both parents don’t need to use the same device type.

📅 How to import your Canopy calendar

Step-by-step guides for Google Calendar and Outlook. Your iCal link is in Settings → Calendar → Export inside the Canopy app.

Google Calendar

1

Copy your Canopy iCal link

In the Canopy app, go to Settings → Calendar → Export and tap Copy link.

2

Open “Other calendars” in Google Calendar

On the left sidebar, find Other calendars and click the + button next to it. Select From URL.

3

Paste your Canopy link and add the calendar

Paste the link you copied from Canopy into the URL of calendar field, then click Add calendar.

4

Done — your Canopy calendar appears

Your family calendar events will appear in Google Calendar and update automatically. Google typically refreshes subscribed calendars every few hours.

Microsoft Outlook

These steps work for Outlook on the web (outlook.com / Microsoft 365) and the Outlook desktop app.

1

Copy your Canopy iCal link

In the Canopy app, go to Settings → Calendar → Export and tap Copy link.

2

Open Calendar and click “Add calendar”

Switch to the Calendar view in Outlook. In the left panel, click Add calendar (or the + icon).

3

Choose “Subscribe from web”

In the dialog that opens, select Subscribe from web.

4

Paste your Canopy link and import

Paste your Canopy iCal URL into the field and click Import. You can give it a name like “Canopy Family”.

5

Done — your Canopy calendar appears

Your family events will appear alongside your work calendar in Outlook. Outlook refreshes subscribed calendars periodically — typically every few hours.

📅

Apple Calendar (Mac)

1

Copy your Canopy iCal link from Settings → Calendar → Export

2

Open Calendar on your Mac, go to File → New Calendar Subscription

3

Paste the link, set refresh to Every 15 minutes, click OK

Enabling iCloud sync means the subscription will also appear on your iPhone and iPad.

Note: The iCal feed is read-only. Events you add in Google, Outlook, or Apple Calendar will not appear in Canopy. Canopy is the source of truth for your family calendar.

💰 Subscription & pricing

Yes — 10 days free, no credit card required. You get access to every feature during the trial. At the end of the trial you can subscribe to continue, or your account stays active with limited access.

No. One subscription covers both parents — and any read-only members you add (grandparents, carers). There are no per-person charges. £6.99/month or £69.99/year for the whole family.

Yes. Cancel any time from the App Store (iOS) or Google Play (Android) — wherever you subscribed. There are no cancellation fees. You keep access until the end of your current billing period.

Both parents need an account to get the most out of Canopy — shared calendars, notices, and messaging only work if both parents are connected. One parent sets up the family and invites the other using a simple invite code. The second parent doesn’t need to pay anything extra.

💬

Still have a question?

We’re a small team and we reply promptly.

hello@canopy-app.app

Ready to get organised?

10 days free. No card required. Cancel anytime.

Start your free trial