Privacy

My Medical Daybook (Daybook for short) is made and run by Mark 1 Apps Ltd, a company registered in England and Wales (company number 17510025), which is responsible for the information the app holds (the "data controller" in UK law). Contact: support@mymedicaldaybook.co.uk.

The short version

• What you record in Daybook is yours. It is kept in a separate folder for your household. Only the people you invite can see it, apart from the operator and the companies listed under "Who can see it", and anything you choose to send to an AI service.
• Nothing is sold, nothing is used for advertising, and nothing is used to train AI.
• Your health information leaves your household's folder only when you use a feature that sends it (listed below, each one started by a tap), or through the medicine reminders if you switch them on.
• You can delete any entry, document or recording yourself, and you can ask for everything to be exported or erased.
• No cookies, no tracking, no analytics.

What Daybook stores

Your sign-in: your email address and password (held by Google's Firebase Authentication; Daybook never sees the password), your first name, your role in the household (family, read only, or medicines and treatment only), whether you are the patient or a carer, and which household you belong to.

What your household records: check-ins (pain, mood, sleep, sickness, appetite, energy, with Crohn's or colitis a weekly question about joints, eyes, skin and mouth, and what you write), readings (temperature, heart rate, blood pressure, oxygen, weight and BMI), food and drink, notes, questions for the care team and their answers, including any voice recordings you choose to make, medicines, doses and reminder times, letters and documents you photograph or paste in and the explanations saved with them, bowel movements (the type, any blood, urgency and accidents, and with Crohn's or colitis your usual number a day and whether you have a stoma), symptoms between check-ins, which conditions Daybook is set up for, treatment sessions and the calendar, exercise ticks, steps, sleep, workouts and food totals if you connect Apple Health, saved meals, who to contact (names, roles, phone numbers, any extension or menu option, and email addresses), and your settings.

On your phone: a copy of your account record and of the records you have opened, so the app works on a weak signal, and a few settings (which charts you view as tables, the exercise filter, the weight unit, the opener). Words typed into a note, a question or a check-in are kept on the phone until you save or close that screen, so they are not lost if the phone closes the app; they are cleared when you save, cancel or clear them, and after 7 days at most. Your browser holds these and they go when you clear its data.

If you turn on reminders: each phone's push address and browser type, so the reminder reaches it. For Daybook Assistant: a daily count per household of how many requests were made and how many words they used, for the cost.

Where it is kept

In Google Cloud's Firestore database in London (the europe-west2 region), through Google's Firebase service and under Google's security measures. Everything travels encrypted (HTTPS), and Google encrypts it when stored. It is not end-to-end encrypted, so Google's systems and the operator can technically reach it. Anything you send with an AI button goes to Anthropic in the United States. The app itself is served from GitHub Pages.

Who can see it

• The members of your household, according to the access they were given. Family members can add, change and delete. A read-only member sees everything and changes nothing. A "medicines and treatment only" member sees medicines, the treatment calendar (with the mood marks) and the readings, sleep and drinks charts, and nothing else. The database itself enforces these rules, not just the app.
• Mark 1 Apps Ltd, as the operator, has administrative access to the database in order to run it. That access is used only to fix a problem you have reported or to keep the service running, not to read anyone's records.
• Google, as the company hosting the database, under its own data processing terms.
• Cloudflare, which runs Daybook's bridge, and Anthropic, only for what you send with an AI button, as described below.
• Nobody else, unless the law requires it.

What leaves your household's folder, and when

• Daybook Assistant, only when you tap. Daybook Assistant is Daybook's name for its AI helper, which is Claude, an AI model made by Anthropic, a US company. Five features send something through Daybook's bridge to Anthropic for it: Explain with Daybook Assistant (a letter's text or page photos), Suggest questions to ask and Summarise with Daybook Assistant (the Notes for the team text), Read it from a photo (a photo of a medicine) and Add from a photo or PDF of the plan (an exercise or physio plan). So that information goes to the United States. Anthropic does not use what is sent through its API to train its models and handles it under its own terms. The bridge keeps nothing of what was sent or returned, only a count of words used, for the cost. An explanation of a letter is saved with the letter, and you can change or delete it; the other replies are shown for you to check, and only what you then save is kept. There is a daily limit per household.
• Your own AI app. "Send to my AI app" and "Copy for my AI app" put the text on your phone's share sheet or clipboard. Where it goes from there is between you and the app you choose.
• Save as PDF, Print, Share and Copy make a copy for you to give to the clinic or someone else. Once it has left the app, it is in your hands.
• Tap to speak uses your phone's own speech recognition (Apple's on an iPhone, Google's in Chrome). Depending on the phone, the audio may be processed on the phone or on that company's servers under their terms. Daybook receives only the words.
• Provide feedback (while Daybook is in Beta) sends what you type, any picture you add, which screen you were on, the app version and the kind of phone to Mark 1 Apps Ltd through the bridge, so the app can be put right. It is kept only until the Beta is over, is never part of your household's records and is read by Mark alone. Never put health details in it unless the problem needs them.
• Apple Health. Nothing goes to Apple from Daybook. If you set up the Health Auto Export app to send steps, sleep, workouts, weight and BMI, and food totals, that data comes from your phone to Daybook's bridge and into your household's folder. The bridge keeps the last message it received, trimmed, so a problem with the feed can be checked.
• Reminders. If you turn on medicine reminders, each notification goes through your browser's push service (Apple, Google or Mozilla). The message is encrypted so that service cannot read it, and unless you switch it off it names no medicine ("A medicine is due"), so no medicine name shows on your lock screen.
• Fonts and chart code. The app loads its fonts from Google Fonts and some code libraries from Cloudflare's cdnjs. Those servers see your phone's internet address when the app loads, as with any website. None of your entries go to them.
• Daybook's bridge. A small service on Cloudflare that handles sign-up, invites, the Apple Health feed, reminders and Daybook Assistant's requests. It checks your sign-in, or for the Apple Health feed your household's inbox key, and writes only your household's records and your own sign-up record. Cloudflare keeps standard request logs for a short time.

Why it is held

To provide the service you have asked for, with your explicit consent for the health information you choose to record. UK data protection law calls health information "special category data", which is why it is handled with the care above. You can withdraw consent at any time by deleting what you recorded or asking for it to be erased.

How long

Until you delete it. Deleting an entry, document or recording removes it from the database straight away. Removing a member removes their access and their reminders. The last Apple Health message held by the bridge is overwritten by the next one. Export and household deletion with one tap are planned; until they arrive, ask using the contact details at the top and it will be done within 30 days. Google keeps standard server logs for a limited period.

Your rights

Under UK data protection law you can ask to see the information held about you, have it corrected, have it erased, have a copy to take elsewhere, and object to how it is used. Ask using the contact details at the top. You can also complain to the Information Commissioner's Office at ico.org.uk.

Children

A sign-in holder must be 18 or over. A parent or carer may record on behalf of someone they look after, including a child, with that person's agreement where they are able to give it.

The demo

The Guest button opens a shared demo. Everything in it is made up, anyone can see what is added, and it is wiped every night. Put no real details in it.

Changes

If this policy changes, the date at the top changes.

Back to the home page