Transition toolkit privacy policy

The short version

• Transition toolkit does not collect any of your data.
• Everything you enter stays on your phone, encrypted.
• The app has no internet access. It cannot send your data anywhere.
• There are no accounts, no ads, no analytics and no trackers.
• Your data leaves your phone only if you choose to share a GP summary or save a backup file.
• You can delete everything at any time.

Who we are

Transition toolkit is made by HEATHER HERBERT LTD, a company registered in Scotland, company number SC906251. Our registered office is 62 Back Hilton Road, Aberdeen, Scotland, AB25 3ST.

To ask about this policy, email heather@heatherherbert.uk.

What the app stores on your phone

The app stores what you enter, on your phone only:

• medications, doses, times, and injection or application sites
• stock counts and repeat prescription dates
• blood test results and ranges
• care team details, such as your clinic and GP practice
• your name change checklist progress
• your app settings

Some of this is health information, and information about your gender identity. We treat it as highly sensitive.

We never see it. We cannot see it, because it never reaches us.

What we collect

Nothing. The app does not send any information to us or to anyone else.

The app does not request Android's internet permission. You can check this in your phone's app settings.

How your data is protected on your phone

• The app's database is encrypted.
• The encryption key is kept in your phone's secure key storage, which uses its security hardware where your phone has it.
• You can lock the app with your fingerprint, face, screen lock or a PIN.
• By default, the app hides its content from the recent apps screen, and blocks screenshots.
• By default, notifications do not name your medication.
• Discreet mode gives the app a neutral name, icon and colours.
• The app turns off Android's automatic cloud backup, so your data is not copied to Google Drive.

When your data leaves your phone

This only happens when you choose it.

• GP summary. You can make a one-page PDF, and save or share it. You choose where it goes. Once you share it, the person or service you send it to is responsible for it.
• Backup file. You can save an encrypted backup file wherever you choose. It is locked with a passphrase that only you know. If you lose the passphrase, nobody can open the backup, including us.
• Links. Some screens link to websites, such as the battery settings guide and the NHS lab pages behind the blood test guide bands. Tapping a link opens your web browser. The app sends nothing with the link. The website's own privacy policy then applies.

Your control over your data

• You can change or delete any entry at any time.
• "Delete all my data" in Settings removes everything the app has stored, including its encryption key. This cannot be undone.
• Uninstalling the app also removes everything the app has stored on your phone.
• The app does not delete backup files you have saved elsewhere. Delete those yourself.

Information that Google Play collects

We do not control this, but you should know about it.

When you download the app from Google Play, Google processes information under its own privacy policy. If you have allowed your phone to share usage and diagnostics with Google, Google may send us anonymous crash reports and app statistics. These do not include anything you entered in the app. Google's use of this information is covered by Google's privacy policy.

If you test the app before release

To give you the test version, we add the email address of your Google account to the tester list in Google Play Console. Google provides that service for us. We do not store the address anywhere else, and only Heather Herbert can see it. We never share it or publish it.

Our reason for using your address is your consent, which you give when you agree to test the app. We delete it from the tester list within 30 days after the test ends. You can leave the test at any time and ask us to delete it sooner.

The test version collects nothing, exactly as described above. Any feedback you send us is only what you choose to write.

If you contact us

If you email us, we receive your email address and whatever you write. We use it only to reply to you. We delete it within 12 months of the conversation ending, unless the law requires us to keep it.

Please do not send health details by email. We do not need them to help you.

Children

The app is made for adults. It does not ask for your age, and it collects nothing from anyone.

Your rights

UK data protection law gives you rights over your personal data. These include the right to see it, correct it and have it deleted.

We hold no data from the app, so there is nothing from the app for us to give you, correct or delete. All of your app data is under your control, on your phone.

If we hold your email address because you contacted us or tested the app, you can ask us for a copy of what we hold, or ask us to delete it. Email heather@heatherherbert.uk. We will reply within one month.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office, or call them on 0303 123 1113. We would like the chance to put things right first, so please contact us before you do.

Changes to this policy

If we change this policy, we will update the date at the top. If a change affects what data the app handles, we will explain it in the app before the change takes effect. If the app ever gains a feature that uses the internet, we will rewrite this policy before that version is released.