← Back

Privacy Policy

Last updated: May 2026

Who we are

This service is a harm reduction tool designed to help people track and manage their ketamine use. It is operated by [YOUR NAME / ORGANISATION], based in the United Kingdom.

We are registered with the Information Commissioner's Office (ICO). Our registration number is [ICO REGISTRATION NUMBER].

For any privacy-related queries, contact us at: [YOUR CONTACT EMAIL]


Our approach to your privacy

This service is built around the principle that you should be able to use it without us knowing who you are. We do not ask for your name, email address, or any other identifying information. Instead, your account is identified only by an anonymous token — a randomly generated code that only you hold.


What data we collect

Account token

When you create an account, we generate a random anonymous token (e.g. ABCD-1234-WXYZ). This token is your account identifier. We store a version of it in our systems solely to allow you to log in and access your data. We have no way of linking this token to you as an individual.

Password

We store a secure, one-way hashed version of your password using bcrypt. We cannot read your password — only verify it when you log in.

Usage notes and records

Any notes or records you create about your ketamine use are stored in our database linked to your anonymous token. Although this data is not linked to your identity, it relates to health and substance use and is therefore treated as sensitive data under UK law.

Technical data

We may collect minimal technical data such as error logs required to keep the service running. These logs do not contain the content of your notes or your token, and are deleted on a rolling basis.


What we do not collect

  • Your name
  • Your email address
  • Your IP address (beyond what is inherent to operating a web service)
  • Device identifiers or advertising IDs
  • Location data
  • Any data from third-party trackers or advertising networks

Legal basis for processing

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we process your data on the basis of explicit consent. By creating an account and using this service, you consent to your usage records being stored linked to your anonymous token for the purpose of providing you with the harm reduction features of this service.

Because usage records may relate to health and substance use, they are treated as special category data and handled with the highest level of care.

You may withdraw your consent at any time by deleting your account (see Your Rights below).


How we store and protect your data

  • All data is encrypted in transit using HTTPS/TLS
  • Passwords are stored as bcrypt hashes and are never readable by us or anyone else
  • Access to the database is strictly limited
  • We use Supabase as our database and authentication infrastructure. Supabase processes data on our behalf under a Data Processing Agreement. Their infrastructure is hosted within the European Economic Area (EEA). You can review Supabase's security and compliance information at supabase.com

How long we keep your data

We retain your account and associated records for as long as your account is active. If you delete your account, all associated data is permanently deleted within 30 days.

We do not retain data beyond what is necessary to provide the service.


Your rights

Under UK GDPR, you have the following rights:

Right of access — You can request a copy of all data we hold linked to your token.

Right to erasure — You can delete your account at any time. This permanently removes all your records from our systems.

Right to rectification — You can edit or correct any records you have created.

Right to data portability — You can request an export of your data in a machine-readable format.

Right to withdraw consent — You can stop using the service and delete your account at any time, with no obligation to give a reason.

To exercise any of these rights, use the account settings within the app, or contact us at [YOUR CONTACT EMAIL]. Because your account is anonymous, we will ask you to provide your token to verify ownership before fulfilling any request.

Right to complain — If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

ICO helpline: 0303 123 1113 Website: ico.org.uk


Cookies

This service uses only essential cookies required to maintain your login session. We do not use advertising, tracking, or analytics cookies.


Changes to this policy

If we make significant changes to this policy, we will display a notice within the app. Continued use of the service after changes are posted constitutes acceptance of the updated policy.


Contact

For any questions about this privacy policy or how your data is handled:

Email: [YOUR CONTACT EMAIL] Address: [YOUR ADDRESS]