Privacy notice

Updated 2026-10-16

YOUR BUSINESS NAME, YOUR BUSINESS POSTAL ADDRESS, operates GutNote and controls your personal data. Contact hello@example.co.uk for privacy requests.

What we store and why

We store your name, email, timezone, password hash, consent records, trial dates and purchase references to run your account. Your optional meal, symptom, stool and daily-note records are health information. We process account information to perform our contract, health information with your explicit consent, temporary hashed abuse-prevention counters derived from IP addresses and email addresses for our legitimate interest in protecting the service, and required payment records for legal obligations.

Where your information goes

Your diary text is encrypted in the database. Dates, entry types, account details and payment references are not covered by that diary encryption. Data is decrypted by the server when you view or export it. This is not end-to-end encryption. The operator can technically access data where needed to provide support or maintain the service.

Our hosting provider stores the service and backups. Our email provider delivers account emails, without diary entries. Stripe processes payments; we do not store card numbers. We do not use advertising trackers, sell diary information or send diary contents to AI services. Necessary session cookies keep you signed in. Hosting and email provider identities, processing locations, any international transfer safeguards and processor agreements are available from the operator.

Retention and your choices

Your diary remains until you delete entries or your account, or request erasure. We do not automatically delete a diary when a trial expires. Unverified registrations are removed after seven days. Account deletion removes live diary records immediately; encrypted backups expire within 30 days. Limited payment and accounting records may be retained for six years, without a link to your deleted diary account. Stripe retains its own records under its privacy policy.

You can access and export your records, correct entries, delete your account and withdraw health-data consent by account deletion. You may also request restriction, object where applicable, or contact us about your rights. You can complain to the UK Information Commissioner’s Office at ico.org.uk. Contact us before deleting your account if you need help exporting your diary.

Your responsibility

Use a unique password and keep downloaded files private. Downloads contain health information in readable form. Do not enter other people’s personal information in your diary.