Privacy notice
What we hold, why we hold it, and what you can do about it.
In plain English
- Everything you write in the Hub is saved privately to your own account. Nobody else using the Hub can see it.
- The only exception is the Support Circle: information you deliberately share with a person you have invited, in the areas you have ticked, for as long as you choose.
- Some of what you write is health-related — how you are feeling, sensory needs, communication needs, medication reminders. That is treated as sensitive information and is never sold, never used for advertising, and never used to make decisions about you.
- You can read everything you have written, change it, or ask for your account and its contents to be deleted.
What we collect
- Account information: your email address, and the sign-in links sent to it.
- Profile information: anything you choose to put in My Brain, My Way and similar reflection tools.
- Wellbeing and health-related information you enter voluntarily: sensory needs, energy and capacity notes, communication preferences, medication reminders, Body Check and Emotion Check entries, PIP and benefits notes.
- AI interactions: the text you send to a personalised-support tool and the response it returns.
- Completion Lab data: projects, ideas, stages, work and hyperfocus sessions, restart notes, completed projects.
- Communication My Way: saved messages, visual board tiles, status cards and your communication profile.
- Regulate & Reset: saved sensory strategies, recovery favourites and preferences.
- Support Circle: the notes, help requests and routine notes you write, who you have invited, what each person may see, and updates support people leave.
- Voice features: speech is handled by your own device or browser. Audio is not recorded, stored or sent to us. Only the text you keep is saved.
- File uploads: files you attach to a project, stored in a private area only your account can open.
- Authentication information: sign-in times and session records needed to keep your account secure.
- Usage and technical data: pages loaded, errors, and a count of personalised-support actions used against your monthly allowance.
- Cookies: see the cookie policy. Non-essential cookies are only set if you agree.
Why we use it
- To give you an account and keep your work available to you.
- To provide the tools you have chosen to use.
- To share only what you have chosen to share with your Support Circle.
- To operate memberships, allowances and billing.
- To keep the service secure and to fix faults.
Lawful basis (UK GDPR)
Providing the Hub to you under your membership is performance of a contract. Keeping the service secure and working is our legitimate interest. Non-essential cookies rely on your consent, which you can withdraw at any time.
Health-related information you enter is special category data under Article 9. We process it on the basis of your explicit consent, given when you choose to enter it, and you can withdraw that consent by deleting the entries or your account.
ADMIN: COMPLETE BEFORE LAUNCH — confirm the data controller's legal name, trading name, registered address and, if registered, ICO registration number.
ADMIN: COMPLETE BEFORE LAUNCH — confirm whether a Data Protection Officer or privacy contact is appointed, and the contact route.
Service providers
We use a small number of providers to run the service: hosting and database, authentication and email delivery for sign-in links, an AI provider for personalised-support tools, and a payment provider for memberships. They act on our instructions and do not use your information for their own purposes.
ADMIN: COMPLETE BEFORE LAUNCH — list each processor by name and role, and confirm the data processing agreement is in place for each.
International transfers
Some providers may process data outside the UK. Where they do, appropriate safeguards such as the UK International Data Transfer Addendum are required.
ADMIN: COMPLETE BEFORE LAUNCH — confirm which providers process data outside the UK, the countries involved, and the safeguard relied on for each.
How long we keep it
Support Circle daily notes expire automatically at the time you choose — most default to the end of the day — and stop being visible to anyone. Everything else is kept while your account is open, because it is your record and you may want to come back to it.
ADMIN: COMPLETE BEFORE LAUNCH — set and publish retention periods for: closed accounts, billing records (statutory minimum applies), technical logs, and backups.
Deleting your information
You can delete individual entries at any point in the Hub itself. You can also ask for your whole account and its contents to be deleted. See the data and deletion page for how that works.
Your rights
- Ask for a copy of what we hold about you.
- Correct anything that is wrong.
- Ask for your information to be deleted.
- Restrict or object to certain processing.
- Withdraw consent, including for health-related entries and non-essential cookies.
- Complain to the Information Commissioner's Office (ico.org.uk) if you are unhappy with how we have handled your information.
ADMIN: COMPLETE BEFORE LAUNCH — confirm the privacy contact address used to handle rights requests and the response timescale.