How we look after your information

Last updated 22 October 2026

The short version

What you record in GentleLibra is health information. We keep it only so the app can work for you.
Your records are private to your account and stored in London.
Your photos are encrypted on your device before they are uploaded. Nobody else can see them, including us and Google.
No advertising, no analytics, no tracking. We never sell or share your information.
You can delete your account and everything in it at any time.

Who we are

GentleLibra is provided by RKC Consultancy Ltd, which is the data controller for the information you put into the app. If you have any question about your information, or want to use any of your rights, email support@gentlelibra.com.

What we hold

Your account

You sign in with Google or Apple, through Firebase Authentication. We receive what your provider shares with us: your name, your email address, a link to your profile picture, and an account identifier. If you use Apple's "Hide My Email", we receive a private relay address instead. We don't ask for anything else to sign up.

What you record

Everything you choose to enter, for example:

medications, HRT and supplements, their schedules, the doses you take, skip or take late, and stock counts;
symptoms, food and drink, fluid and discharge, bleeding and cycle notes, and hair, skin and body notes;
appointments, things you're waiting on, notes about what was said, and prescription certificate dates;
progress photos, which are encrypted (see below).

This is health information, which UK data protection law treats as special category data and protects more strictly.

Technical information

Like any online service, the Google systems that run the app handle technical information such as IP addresses and sign-in times, to deliver the service and keep it secure. We don't use this to profile you.

What we don't do

No analytics or usage tracking in the app.
No advertising, and no advertising or tracking identifiers.
We never sell your information, and we don't share it with anyone except the service providers below, who run the app on our behalf.

Why we use it, and our lawful basis

We use your information only to provide GentleLibra to you: to show your schedule, spot missed doses and low stock, remind you, display your patterns, and build your report.

Account details: because we need them to provide the service you asked for (performance of a contract).
Health information: your explicit consent, which you give when you choose to record it. You can withdraw consent at any time by deleting the information or your account.

Where it is kept, and who can see it

Your records are stored in Google Cloud's London region (europe-west2), using Firebase Cloud Firestore and Cloud Storage. Each account's data is kept separately, and security rules allow only you, signed in, to read or change it. The app also keeps a copy on your device so it works offline.

Firebase Authentication, which handles sign-in, is a global Google service, so your account details (not your health records) may be processed outside the UK. Google protects these transfers with the safeguards UK law requires, under its data processing terms.

We don't look at your records. As the people who run the service, our administrators could technically reach your records in the Firebase console (but never your photos). We would do so only to fix a problem you ask us to help with, or if the law requires it.

Our service providers

Google (Firebase, Google Cloud): storage, sign-in and hosting, acting as our processor.
Apple and Google: if you sign in with them, under their own privacy policies.

Your photos are encrypted on your device

Before a photo leaves your phone or computer, the app encrypts it with a key that exists only on your device (AES-GCM, 256-bit). Only the encrypted version is uploaded. It can be unlocked only with your device's key, your passkey (such as Face ID) or the recovery key you keep. Neither we nor Google can see your photos, and they're never saved to your camera roll.

Because only you hold the keys, we can't recover your photos if you lose your device, your passkey and your recovery key.

Reminders and your doctor report

Dose reminders are scheduled on your phone. They show the medication name and dose, which can appear on your lock screen. You can turn reminders off, or hide notification previews in your phone's settings.

Your doctor report is put together on your device. It leaves your device only if you print, save or share it yourself.

How long we keep it, and deleting it

We keep your information for as long as you have an account. You can delete individual entries at any time, and you can delete your whole account from the Profile screen with "Delete my account". That permanently deletes your records, your photos, your device's photo key and your sign-in account. You can also ask us by emailing support@gentlelibra.com.

To protect against accidents, our database keeps automatic backups for 7 days, so deleted information is gone from backups within 7 days.

Your rights

Under UK data protection law you can ask us to:

give you a copy of your information (access), including in a format you can take elsewhere (portability);
correct it, or delete it;
restrict or object to how we use it;
and you can withdraw your consent at any time.

Email support@gentlelibra.com. We'll reply within one month.

If you're unhappy with how we've handled your information, please tell us first. You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint or 0303 123 1113.

Age

GentleLibra is for adults aged 18 and over.

This website

gentlelibra.com uses no cookies and no analytics. It is hosted on Firebase Hosting, and its fonts come from Google Fonts, so Google receives your IP address when you visit, to deliver the pages.

Changes to this policy

If we change how we use your information, we'll update this page and the date at the top, and tell you in the app before any significant change takes effect.