Privacy notice

HealthTracker holds health information, which is special category data under UK data protection law. This page explains plainly what is stored and what you control.

Who is responsible

HealthTrack Support is the data controller. Contact: support@healthtrack.uk.

What is stored

• Account: your email address, a one-way hash of your password, your optional name, your time zone and reminder settings, and when you agreed to this notice.
• Health information you enter: the conditions you track, symptom ratings, daily wellbeing ratings, treatments and their dates and changes, events and exposures, notes, and questions for appointments.
• Security records: sign-in and sensitive-action events with your IP address, kept for 12 months, and failed sign-in counters, which are deleted after a day.

Why, and on what basis

Only to provide the tracking, charts and summaries you ask for. The service relies on your explicit consent, which you give when you create an account. You can withdraw it at any time by deleting your account. Your information is not used for advertising, is not sold, and is not used for any unrelated purpose.

How it is protected

• Free-text notes, treatment instructions and appointment questions are encrypted in the database with a key held separately in the server configuration.
• Passwords are stored only as salted hashes. Repeated failed sign-ins are slowed down. Sessions expire after two hours of inactivity.
• The service is designed to be run over HTTPS only. The operator is responsible for enabling it and for securing the server and backups.
• Ratings and other structured entries are stored as ordinary database fields so the charts can be calculated. Database-level encryption at rest depends on the hosting provider.

Who can see it

You can. People you share a summary link with can see that summary until the link expires or you switch it off. The operator and its hosting provider run the system, so a person with administrator access to the server could technically access stored data other than the encrypted notes. Access should be limited and logged by the operator.

Reminders and cookies

If you switch on reminders, an email says only that your check-in is ready. It contains no health information. The site sets one cookie, a session cookie needed to keep you signed in. There are no analytics, advertising or tracking cookies.

How long it is kept, and your rights

• Your information is kept until you delete it or your account. Share links expire after 7 days.
• In Settings you can download all of your data and permanently delete your account and everything in it.
• You can also ask the operator to correct, restrict or explain how your information is used, and you can complain to the Information Commissioner's Office (ico.org.uk).

Backups kept by the operator may hold deleted data for a short period before they are overwritten.