Privacy Policy

Last updated: April 2026

1. Introduction

Welcome to myEczemaApp ("the App"), operated by MyEczemaHealth ("we", "us", "our"), a company registered in England and Wales. We are committed to protecting your privacy. This policy explains what data the App collects, how it is stored, and the limited circumstances in which any data leaves your device.

myEczemaApp is built with a privacy-first approach. Your health data is stored locally on your device and is never uploaded to our servers. We do not have user accounts, we do not maintain a database of your personal information, and we do not sell or share your data with advertisers.

2. Data we collect

The App allows you to record the following health and lifestyle information as part of your daily logs:

  • Skin symptoms - itch, redness, dryness, and oozing severity (each rated 0-10).
  • Flare severity - an overall daily flare score (1-10).
  • Mood - your emotional state (e.g. happy, calm, anxious, stressed).
  • Stress level - rated 1-10.
  • Sleep - hours slept.
  • Diet - free-text food diary entries and common food categories.
  • Medications and treatments - names, brands, steroid strength, ingredients, application reminders, and usage notes.
  • Triggers - environmental and lifestyle factors such as heat, cold, pollen, detergent, exercise, and others.
  • Photos - images taken with your device camera to track your skin visually.
  • Notes - free-text notes you add to any log entry.
  • Treatment experiments - records of treatments you are testing, including start dates, scores, and personal notes.
  • GP referral tracking - referral stages and dates you enter to track your NHS journey.

The App also stores your preferences (theme, notification settings, region) and subscription state (tier, streak count, trial dates) locally on your device.

We do not collect your name, email address, phone number, or any other identity or contact information. The App does not require you to create an account.

3. How your data is stored

All health data, medication records, photos, preferences, and log entries are stored locally on your device using Hive, an encrypted local database. This data never leaves your device unless you explicitly choose to use one of the features described in Section 4 below, or you create a manual backup (Section 6).

We do not operate servers that store your health data. We have no ability to access, view, or recover your data remotely.

4. When data leaves your device

There are three specific features where limited data is transmitted over the internet:

4.1 AI Pattern Analysis (Pro feature)

When you request an AI analysis, your recent log data (up to 7 days of entries including flare scores, stress levels, sleep hours, food diary text, triggers, creams used, and symptom scores) is sent to Google's Gemini API for processing. This data is sent through our secure proxy server. Photos are never sent to the AI service.

Google processes this data in accordance with their Gemini API Terms of Service. As per Google's API data usage policy, data sent through the Gemini API is not used to train Google's models.

Free users receive 4 AI analyses. After that, AI analysis is available to Pro and Pro+ subscribers only.

4.2 Community Features (EczemaRank)

The Community tab connects to EczemaRank (eczemarank.co.uk), our treatment ranking platform. When you browse treatments, submit a vote, or write a review, this data is sent to our servers. Specifically:

  • Browsing treatments - we receive your request but no personal data.
  • Voting on treatments - we store your rating and an anonymous session identifier (a random ID generated on your device, not linked to your identity). A 4-hour cooldown prevents repeat voting on the same item.
  • Writing reviews - we store the review text, rating, optional username (you choose what to enter), pros/cons, and the anonymous session identifier. Reviews are publicly visible on EczemaRank.

No health data from your logs is sent to EczemaRank. Your votes and reviews are not linked to your log entries, symptoms, or any other personal health information.

4.3 News Articles

The App may fetch eczema-related news articles from third-party news APIs. These requests do not include any of your personal or health data.

5. Camera and photo access

The App requests camera permission so you can photograph your skin as part of your daily log. Photos are stored locally on your device only. They are never uploaded to our servers, sent to the AI service, or shared with any third party. Photos are included in manual backups you create (Section 6) and are subject to the same data retention policies as your log entries.

6. Backup and restore

You can manually create an encrypted backup of all your data (log entries, medications, settings, experiments, and photos) as a ZIP file. This backup is generated on your device and shared using your device's native share sheet. You control where the backup is saved (e.g. your own cloud storage, email, or local file system). We do not receive or store your backups.

You can restore from a backup at any time by importing the ZIP file back into the App.

7. Notifications

The App uses local notifications only. These include medication reminders, daily logging reminders, and weekly backup reminders. All notifications are scheduled and triggered on your device. No notification data is sent to or processed by our servers. You can enable or disable each notification type independently in Settings.

8. In-app purchases and payments

Subscriptions (Pro and Pro+) are handled entirely by Apple (App Store) or Google (Google Play). We do not collect, process, or store your payment information, credit card details, or billing address. All payment processing, receipts, and subscription management are handled by the respective platform. Please refer to Apple's Privacy Policy or Google's Privacy Policy for details on how they handle your payment data.

9. Data retention

The App automatically removes log entries older than your retention limit based on your subscription tier:

  • Free - 7 days of log history.
  • Pro - 30 days of log history.
  • Pro+ - 365 days of log history.

If your subscription expires, there is a 30-day grace period during which your data is retained at the level of your previous subscription. After the grace period, older entries beyond your current tier's limit will be automatically removed.

You can delete all your data at any time by uninstalling the App, which removes all locally stored data from your device. You can also delete individual log entries or medications from within the App.

10. Analytics and tracking

The App does not include any analytics SDKs, advertising trackers, or third-party tracking tools. We do not track your usage patterns, screen views, or behaviour within the App. We do not use cookies.

11. Children's privacy

myEczemaApp is not designed for or directed at children under the age of 13. We do not knowingly collect data from children under 13. If you are a parent or guardian and believe your child has provided data through the App, please contact us and we will advise on how to remove it (since data is stored locally on the device, you can delete it by uninstalling the App).

12. Your rights under UK GDPR

Under the UK General Data Protection Regulation (UK GDPR), you have rights including:

  • Right of access - you can access all your data directly within the App or by creating a backup.
  • Right to erasure - you can delete individual entries within the App or all data by uninstalling.
  • Right to data portability - you can export all your data using the backup feature.
  • Right to restrict processing - you can choose not to use AI analysis or community features, keeping all data on-device.

Because your data is stored locally and we do not maintain a central database of user information, most of these rights are exercised directly through the App itself, without needing to contact us.

For community content (reviews and votes on EczemaRank), you may contact us to request removal.

13. Third-party services

The App interacts with the following third-party services:

  • Google Gemini API - for AI pattern analysis (Pro feature). Log data (not photos) is sent for processing.
  • Apple App Store / Google Play - for subscription management and payment processing.
  • EczemaRank API - for community treatment rankings, votes, and reviews.

14. Changes to this policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

15. Contact us

If you have any questions about this privacy policy or your data, you can contact us at:

Email: hello@myeczemaapp.com

Company: MyEczemaHealth, England and Wales