Privacy Policy

Last updated: 31 May 2026

This Privacy Policy explains how CareRecord ("the App"), operated by Britannia Digital Limited ("we", "us", "our"), collects, uses, and protects your personal information when you use our iOS application.

By using the App, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

We collect the following information you provide directly:

• Full name, date of birth, address, and phone number (profile setup)
• Medication names, doses, schedules, and durations
• Symptom logs including pain levels and energy levels
• Lab results you upload to the App
• Your postcode (used only for locating nearby GP, hospital, and A&E services)

We also collect limited technical data:

• Device type and operating system version
• App usage data (crash reports, error logs)
• Firebase Authentication data (email address and user ID)

2. How We Use Your Information

• To provide and operate the App's features (medication tracking, symptom journal, lab results)
• To send you push notifications for medication reminders and course-end alerts
• To generate PDF health summaries for you to share with your doctor
• To find nearby GP surgeries, hospitals, and A&E services based on your postcode
• To improve the App and fix technical issues

We do not use your health data for advertising or sell it to third parties.

3. Data Storage and Security

Your data is stored securely on Google Firebase (Firestore), hosted in the European Union. Access to your data is protected by Firebase Authentication — only you can read or write your own data using your unique account credentials.

All data is transmitted over encrypted HTTPS connections. We apply industry-standard security measures to protect your information against unauthorised access, alteration, or disclosure.

4. Data Sharing

We do not sell, trade, or rent your personal information. We share data only with:

• Google Firebase — for secure cloud storage and authentication
• Apple — for push notification delivery via APNs
• OpenFDA / NHS Open Data — for medication information lookups (no personal data is sent)

PDF exports are generated on your device and shared only by your own action (e.g. email or AirDrop). We do not receive or store exported PDFs.

5. Your Rights (UK GDPR)

As a UK resident, you have the right to:

• Access — request a copy of the data we hold about you
• Rectification — correct inaccurate data
• Erasure — request deletion of your account and all associated data
• Portability — receive your data in a structured, readable format
• Withdraw consent — at any time, by deleting your account within the App

To exercise any of these rights, contact us at the address below.

6. Data Retention

Your data is retained for as long as your account is active. If you delete your account, all personal data is permanently deleted from our systems within 30 days.

7. Children's Privacy

The App is not intended for children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

8. Push Notifications

The App may send push notifications for medication reminders and alerts. You can disable notifications at any time in your iPhone Settings → Notifications → CareRecord.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. Continued use of the App after changes constitutes your acceptance of the new policy.

10. Contact Us

If you have any questions or requests regarding this Privacy Policy:

This privacy policy applies to the CareRecord iOS application. Britannia Digital Limited. Registered in England and Wales.