Privacy Impact Assessments

This is GroupApp's register of privacy impact assessments: the record of what was examined before a feature that touches personal information shipped, and what came of that examination. Each one says what the feature collects, whose information it is, where it goes, what could go wrong, what stops it going wrong, and, where children are involved, why the design is in their best interests.

Nothing here is legal advice. These are GroupApp's own reasoning about its own design, written so that they can be read, checked and argued with. Where an assessment records a risk that has not been removed and is being lived with, it says so in those words. Citations to the Children's Online Privacy Code are to the exposure draft; section numbers may move when the Code is registered, which is due on 10 December 2026, and every assessment is re-read against the registered text at that point.

An assessment is marked Draft while the feature it describes is being designed, Built once the design is in the app and the assessment has been revised against it, Retrospective if it was written after the feature already existed, and Current if it describes the app as a whole and is re-run when the app changes.