Privacy notice

Last updated 9 November 2026.

Who we are

Autistic Insights (“we”) runs autisticinsights.co. We are the data controller for the limited information described here. You can contact us via the details on our contact page.

Using the website

You can read every article and use every free resource without giving us any personal information. We don’t use advertising or tracking cookies.

Our hosting provider (Amazon Web Services) processes technical information such as IP addresses to deliver pages and protect the service from abuse. This is necessary to run the website (our legitimate interest).

Analytics

We may use privacy-friendly, cookieless analytics to count page visits and how often resources and links are used, in aggregate. These analytics don’t use cookies, don’t identify you, and don’t track you across other websites. We use this to understand which resources are useful (our legitimate interest).

Free tools (like the energy diary)

Anything you enter into our free tools is stored only in your browser on your device (using “local storage”). It is never sent to us. You can export or delete it at any time from within the tool, or by clearing your browser’s site data.

Push notifications (optional reminders)

Some free tools let you turn on gentle reminders, such as a daily energy check-in or a routine reminder at a time you choose. They’re off unless you turn them on, and your browser asks your permission first.

What we store, and why. To send a reminder at the right time we store only:

• your browser’s push subscription (a web address and encryption keys created by your browser for this site)
• each reminder’s type (from a fixed list, for example “energy check-in”), time, days of the week and timezone
• the date you turned reminders on
• a random ID and a scrambled (hashed) copy of a secret code that only your browser holds, so only you can change or delete your reminders

We don’t store your name, email address or anything you type into the tools, and the wording of every reminder comes from a fixed set we write. To stop the service being misused, we also keep a short-lived count of requests per scrambled IP address, which is deleted within an hour. Our legal basis for reminders is your consent.

Who delivers them. Reminders are relayed to your device by your browser’s push service: Google (Chrome, Edge on Android and most other browsers), Apple (Safari, and sites added to the Home Screen on iPhone and iPad), Mozilla (Firefox) or Microsoft (Edge on Windows). Messages are encrypted so that the push service can’t read them. Our reminder service runs on Amazon Web Services in London (eu-west-2).

Turning them off. Use “Turn off” in the tool, which deletes everything we store about your reminders straight away. You can also block notifications for this site in your browser or phone settings. When the push service tells us a subscription no longer works, we delete it automatically.

How long we keep it. If you don’t open a tool with reminders or change them for 12 months, we delete your reminder data automatically. Backups used for recovery are overwritten within 35 days.

Waitlists for app ideas

You can choose to join a waitlist for an app we’re working on. It’s optional, and you can use everything else on the site without it.

What we store. For each waitlist you join, we store:

• your email address, only so that we can email you
• which app you joined the waitlist for
• whether you’ve confirmed your email address, and the dates you signed up and confirmed
• which version of the consent wording you agreed to, so we can show what you said yes to
• your answer to our research question, if you chose to give one

We also store a scrambled (hashed) version of your email address, which we use to find your record, and the times of recent confirmation emails, so the form can’t be used to flood someone’s inbox. We don’t store your name, IP address or details about your device. To stop the form being misused, we keep a short-lived count of requests per scrambled IP address, which is deleted within an hour.

Why, and our legal basis. We use this only to email you about the app you chose, for example when you can try an early version or when it launches, and to understand how much interest there is. When we report on interest, we use totals, not individual people. Our legal basis is your consent, which you can withdraw at any time.

Confirming your email. After you sign up, we email you a link to confirm. We don’t add you to the waitlist until you click it. If you don’t confirm within 7 days, we delete your details automatically.

Unsubscribing. Every email has an unsubscribe link, and one click is all it takes. It removes you from that app’s waitlist. If you’re not on any other waitlist, it also deletes your email address and everything else listed above. We keep only a scrambled record that you unsubscribed (not your email address), so we don’t email you again by mistake. You can also contact us to unsubscribe, or to ask for a copy of your information or for all of it to be deleted.

How long we keep it. We keep confirmed waitlist details until you unsubscribe, or until the app launches and we’ve told you it’s available, or until we decide not to build it. Then we delete them. We review our waitlists at least every six months. Backups used for recovery are overwritten within 35 days.

Who sends the emails. We send emails using Amazon Simple Email Service (SES). Your waitlist details are stored and processed by Amazon Web Services in London (eu-west-2).

Your rights

Under UK data protection law you have rights to access, correct, delete or export your information, to object to or restrict how we use it, and to withdraw consent. Contact us to use these rights. You can also complain to the Information Commissioner’s Office (ico.org.uk).

Changes

If we change how we use information, we’ll update this page and the date at the top.