Privacy Policy

Last updated: 11 October 2026

Who we are

CDA (Child Maintenance Dispute Assistant) is an app for UK parents with a child maintenance case. It is provided by CDAAPP LTD, a company registered in England and Wales (company number 17499678), registered office 71–75 Shelton Street, Covent Garden, London WC2H 9JQ. CDAAPP LTD is the data controller for the limited information described in this policy, such as support emails. You can contact us at support@cdaapp.co.uk. This email is for help with the CDA app only – we can't help with your child maintenance case or contact the Child Maintenance Service for you (see If you email us below).

What the app stores – and where

CDA stores the information you enter only on your own phone, inside the app's private storage. This can include:

• your profile (name, address, contact details, case reference, region)
• your children's names and dates of birth
• overnight care records, payments, calls, calendar events and letters
• documents and photos you add, and your signature
• your settings, such as reminders and the fingerprint lock

CDA doesn't need an account, and it doesn't collect, receive or send your personal data to us. We do not have a server that receives this information, and we cannot access it. We don't use analytics, advertising or tracking in the app.

When information leaves your phone

• When you choose to share it – for example, exporting a PDF or CSV, printing, or sharing a document. You decide where it goes (email, Google Drive and so on), and that service's own privacy policy applies.
• Find my MP – when you tap Find my MP in a complaint letter, CDA sends only your postcode to UK Parliament's public Members website (members-api.parliament.uk) to look up your MP's name and contact details. This happens only when you tap it, nothing else is sent, and nothing is sent to us. UK Parliament's own privacy notice applies.
• Email to ICE – this opens your own email app with your letter to the Independent Case Examiner filled in. Nothing is sent until you press send, and it goes from your email account straight to ICE, never through us.
• Backups – if you create a backup, the file is encrypted with a password you choose (AES-256) and saved where you choose. We never receive it or your password, so we can't recover it if the password is lost.
• Google Drive backup (optional) – only if you turn it on. You sign in with your own Google account, and CDA encrypts your data on your phone with your password before uploading it to your own Google Drive, on the schedule you choose. Google can't read the backups and we never receive them. CDA can only see the backup files it created, not the rest of your Drive. For automatic backups, the password is kept in your phone's secure storage and is never sent to Google or to us. You can turn it off or disconnect at any time.
• Links – links to GOV.UK and other official pages open in your browser. Nothing about your case is sent with them.

Google user data

If you connect Google Drive, CDA uses your Google account only to save, list, download and delete its own encrypted backup files in your Drive. It does not read your other files, and it does not share your Google data with anyone. CDA's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. To remove CDA's access, disconnect in Settings → Google Drive backup, or at myaccount.google.com/permissions.

Phone permissions

• Notifications – to show reminders you've turned on. Reminders are scheduled on your phone and don't use the internet.
• Fingerprint, Face ID or screen lock – only if you turn on the app lock, and to confirm it's you before deleting all data. This is checked by your phone; the app never receives your fingerprint or face data.
• Files and photos – only the files you pick yourself when adding a document or restoring a backup.
• Internet – used only for Find my MP, Google Drive backup (if you turn it on), checking your Google Play subscription and opening links. Your records are never sent to us.

Subscriptions and payments

If you buy a subscription, the payment is handled by Google Play under Google's privacy policy. We do not receive your card or bank details. The app receives confirmation of whether your subscription is active so it can unlock features.

If you email us

Our support email is only for help using the CDA app – for example a problem, a question about a feature, or a bug. We can't give advice about your child maintenance case, and we can't contact the Child Maintenance Service for you. For help with your case, contact the Child Maintenance Service directly, or use the free, independent services listed in the app under Support.

If you contact support, we use your email address and message only to reply and help you. We keep support emails for as long as needed to deal with your request, and delete them within 24 months. Please don't send case documents or personal details we don't need.

Children

CDA is designed for adults (18 and over). It may hold information about your children that you enter, but this stays on your phone. We do not knowingly collect information from children.

Your rights

Because your records stay on your phone, you control them directly: you can view, change, export or delete anything in the app at any time. Settings → Security → Delete all data, uninstalling CDA or clearing its data removes everything from your phone. Backups you've saved elsewhere, such as in your Google Drive, are yours to keep or delete. For any information we hold about you (such as support emails), you have rights under UK data protection law, including to access or delete it – email us to ask. You can also complain to the Information Commissioner's Office at ico.org.uk.

Changes to this policy

If the way the app handles data changes, we'll update this page and the date above before the change takes effect.