Privacy Policy

Who We Are

My Cancer Journey is developed and operated by David Jackson, an individual developer based in the United Kingdom. This is a personal health companion app designed to help individuals and their loved ones manage information during a cancer journey.

For data protection purposes, David Jackson acts as the Data Controller under the UK General Data Protection Regulation (UK GDPR).

What Data We Collect

The app collects and stores the following information that you choose to enter:

• Account information — your name and email address used to sign in
• Food diary entries — meals, nutritional data, and photos of food
• Journal entries — personal diary entries and thoughts
• Medical diary — appointments, dates, and notes
• Medications — medication names, doses, and schedules
• Documents — medical documents and files you upload
• Notes — personal notes you create within the app
• Music preferences — saved playlist links
• Resource links — links to websites you save
• App settings — your preferences such as access passwords and visible pages

We do not collect any data passively. Everything stored is data you have explicitly entered into the app.

How Your Data Is Stored

All data is stored securely using Supabase, a cloud database platform. Supabase stores data on servers provided by Amazon Web Services (AWS). Data may be held in data centres within the United States or European Union.

Supabase is compliant with SOC 2 Type II and provides encryption at rest and in transit for all stored data. Your data is protected by database-level access controls (Row Level Security) ensuring only authorised users can access it.

Uploaded documents and food photos are stored in Supabase Storage, a secure file storage service with access controlled by authentication tokens.

AI Processing

The app uses artificial intelligence features provided by Anthropic (claude.ai) for the following optional features:

• Analysing photos of food to estimate nutritional content
• Looking up nutritional information for foods you describe
• Correcting grammar and spelling in journal entries
• Improving clarity of journal entries
• Looking up medication information

When you use these features, the relevant text or image is sent to Anthropic's API for processing. Anthropic's privacy policy applies to this processing. We do not send any identifying information alongside AI requests. Anthropic's API data is not used to train AI models.

All AI features are optional. The app functions fully without using them.

Who Can Access Your Data

By default, only you can access your data. The app allows you to invite trusted people such as family members or carers with different levels of access:

• Viewers — can read content you choose to make visible to them
• Contributors — can add content such as notes and diary entries

You control who is invited and can revoke access at any time from Settings. Invited users cannot access your private journal entries or documents you have locked.

David Jackson, as developer, has administrative access to the Supabase database for maintenance and support purposes only, and does not routinely access user data.

Data Retention

Your data is retained for as long as your account is active. Items moved to Recently Deleted are permanently removed after 30 days.

If you wish to delete your account and all associated data, please contact us at the email address below. We will permanently delete all your data within 30 days of your request.

Your Rights Under UK GDPR

As a UK resident, you have the following rights regarding your personal data:

• Right of access — you can request a copy of all data we hold about you
• Right to rectification — you can correct inaccurate data
• Right to erasure — you can request deletion of your data
• Right to data portability — you can request your data in a portable format
• Right to restrict processing — you can ask us to limit how we use your data
• Right to object — you can object to processing of your data

To exercise any of these rights, please contact us using the details below. We will respond within 30 days.

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Sensitive Health Data

This app handles sensitive personal health information including medical documents, medications, and health-related diary entries. This data is classified as special category data under UK GDPR.

We process this data solely on the basis of your explicit consent, which you give by choosing to enter this information into the app. This data is never shared with third parties except as described in this policy, and is never used for advertising or commercial purposes.

Cookies and Tracking

This app does not use advertising cookies or tracking technologies. We do not use analytics services such as Google Analytics. No data is shared with advertisers.

Supabase uses authentication tokens stored locally on your device to keep you signed in. These are essential for the app to function and are not used for tracking.

Children's Privacy

This app is not intended for use by children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided data through this app, please contact us and we will delete it promptly.

Changes to This Policy

We may update this privacy policy from time to time. When we make significant changes, we will update the date at the top of this page. We encourage you to review this policy periodically.