Privacy

MVP privacy notice — draft, not legal advice.

This prototype stores saved access preferences only in your browser using local storage. The prototype does not send profile information to a server.

A production service should collect only the information needed to personalise journeys, provide clear consent and retention choices, secure any account data, document its UK GDPR lawful basis and additional condition where special-category health data is processed, and provide deletion/export controls.

Do not launch a production version using this draft notice without a proper privacy review.