Draft. This is a draft and is still being checked before launch.
Privacy notice
Last updated: 9 October 2026
Who we are
On The Day Journal is run by Daryl Bleach, trading as On The Day. We are the “controller” of your personal information, which means we decide how it is used and we are responsible for looking after it.
- Email: hello@ontheday.app
- Postal address: [TO ADD]
- ICO registration number: [TO ADD]
The short version
- Your journal is private. We use it only to run the journal for you.
- We never sell it, never share it for advertising, and have no adverts, tracking pixels or third-party analytics.
- Your health information is encrypted with a key that belongs to your account alone.
- You can download everything at any time, and delete your account whenever you like.
What we collect
Your account: your name, email address and password. We keep only a scrambled version of your password, never the password itself. If you use Face ID or a fingerprint, the passkey stays on your phone, and we keep only its public part.
Your journal, which includes information about your health:
- medicines, doses, when you take them, supply, photos of medicine boxes;
- check-ins: mood, pain, energy, appetite, sleep, toilet, water and notes;
- symptoms and side effects, measurements (such as blood pressure and weight), voice notes and their text;
- appointments, summaries, questions for your doctor and what the doctor said;
- your “About me” card: allergies, conditions, GP, pharmacy, NHS number and next of kin;
- if you connect them: daily figures from Apple Health (sleep, heart rate, steps, oxygen), and appointments from On The Day.
Helpers: if you invite family or friends to help, we keep their name as you typed it, what you let them do, and a log of what they looked at.
Payments: if you pay, Stripe handles your card. We receive only whether your subscription is active and when it renews. We never see your card number.
Technical information: to keep you signed in we keep a record of each signed-in device, with the browser type. We keep short-lived security logs, including IP addresses, to stop attacks such as password guessing. We don’t use cookies for anything except keeping you signed in.
Why we use it, and our lawful basis
| What | Why | Lawful basis (UK GDPR) |
|---|---|---|
| Account details | To create and run your account | Contract (Article 6(1)(b)) |
| Health information in your journal | To keep your diary, send your reminders, and make your summaries | Contract (Article 6(1)(b)), and your explicit consent for health information (Article 9(2)(a)) |
| Helpers’ access | To share only what you choose | Your explicit consent, which you give to each helper and can withdraw at any time |
| Payments | To take subscriptions | Contract (Article 6(1)(b)) and legal obligation for tax records (Article 6(1)(c)) |
| Security logs | To protect accounts and the service | Legitimate interests (Article 6(1)(f)) |
| Service emails | Confirming your email, resetting your password, telling you a trial is ending | Contract (Article 6(1)(b)) |
We ask for your explicit consent to keep information about your health when you sign up, and we record when you gave it. You can withdraw it at any time in Settings. Your diary is then paused (nothing new is kept), and you can still download or delete everything.
We never use your information for advertising, marketing to others, profiling, or training AI. We don’t make automated decisions about you. Patterns and the side-effect watch are calculations on your own diary, shown only to you. They are not decisions about you.
Who we share it with
We share information only with the companies that help us run the service (“processors”). They act on our instructions and under a contract:
- Cloudflare hosts the app, the database and file storage, sends emails and transcribes voice notes (its AI runs inside Cloudflare). Data is stored in Western Europe.
- Stripe takes payments, if you pay. It receives your email address only.
- On The Day, only if you choose to connect it: we receive your upcoming hospital appointments, and send a summary only when you choose to attach one.
We never sell or rent your information, and we have no partnerships with drug companies.
We may have to share information if the law requires it, for example a court order. We would tell you unless we are not allowed to.
Where it is kept
Your journal is stored in Cloudflare’s Western Europe region. Cloudflare’s network is worldwide, so information can pass through other countries on its way to you. Where that happens, it is protected by the UK International Data Transfer Addendum and the EU Standard Contractual Clauses.
How long we keep it
- Your journal: for as long as you have an account.
- When you delete your account, everything is deleted straight away, including the key that unlocks your data. Our nightly backups are encrypted, and copies of your information in them can no longer be read once your key is gone. The backups themselves are removed within 30 days.
- If you stop paying, nothing is deleted. You move to the free plan.
- Security logs: up to 30 days.
- Payment records: Stripe keeps these for as long as the law requires (usually 6 years for tax).
How we protect it
See our plain-English page, How we protect your data.
Your rights
You have the right to:
- see your information: download everything from Settings, at any time;
- correct it: edit anything in the app;
- delete it: Settings, then Delete my account;
- take it elsewhere: the download is in common formats (JSON and spreadsheets);
- withdraw consent: Settings, then Withdraw permission;
- object or ask us to restrict how we use it.
Email hello@ontheday.app for anything you can’t do in the app. We will reply within one month.
Children
The journal is for adults, and for people aged 13 and over with the help of a parent or carer. [TO CONFIRM: minimum age]
Complaints
If you’re unhappy with how we’ve used your information, please tell us first at hello@ontheday.app. You can also complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint, or call 0303 123 1113.
Changes
If we change this notice, we will show the new version here. If the change affects how we use your health information, we will ask for your consent again.