Legal

Privacy Policy

What we collect, why, who else touches it and what you can ask us to do about it. Written to be read.

Version 1.2 · Effective October 2026

The short version. What you tell us is used to produce your Blueprint and to answer your questions. We also look at patterns across everybody, without names attached, to work out what the platform is missing and what to build next. It is not sold, not used for advertising and not used to train AI models. You can download everything or delete it all from your account, whenever you want, without asking us.

This policy forms part of your agreement with us, alongside the Terms and the Medical and Wellbeing Disclaimer.

1 · Who we are

ControllerExist Better, a sole trader business run by Aishling Doyle, based in Stamford, Lincolnshire, United Kingdom. Written to at hello@existbetter.online and a postal address given on request.

RegisteredWith the Information Commissioner's Office under reference ZC032238. The register is public at ico.org.uk so you can check it yourself.

Contacthello@existbetter.online, for anything in this policy, including exercising a right or raising a concern. A person reads it.

What this coversThe Exist Better website, your Blueprint, Ask Your Blueprint, the library and anything you buy or book through us.

Who can use itAdults aged eighteen or over.

2 · What we collect and why

AccountYour email address, your name if you give it, sign-in records and session information. To create and secure your account and let you return. Our basis is contract.

ConsultationEverything you tell us about health, sleep, mood, energy, circumstances, history and goals, including anything you write in your own words. To produce your Blueprint. Contract and your explicit consent for the health parts.

Your BlueprintYour reading, the patterns found, the suggestions and every previous version. To deliver the service and to let it develop as you do. Contract and explicit consent.

ConversationsYour Ask Your Blueprint questions and the answers written for you. To answer you and to keep continuity within a conversation. Contract and explicit consent.

PaymentYour subscription status, plan and what you have bought. Card details go straight to Stripe and never reach us. Contract.

SupportMessages you send us and our replies. Contract and our legitimate interest in keeping a record.

We do not ask for your date of birth, your address or your telephone number to produce a Blueprint. Optional questions are marked as optional and leaving one blank never reduces what you receive.

We count visits to the site using Vercel, who already host it. This tells us how many people visit, which pages they read, which site they came from and roughly which country and kind of device they are on. It uses no cookies and stores nothing on your device. Each visit is counted with a code that is thrown away within a day, so we cannot tell who you are or link one visit to the next. Private links, such as a shared Blueprint or an unsubscribe link, are never recorded. We do this because we have a legitimate interest in knowing how the site is used. There is no advertising and no tracking across other sites.

3 · Health information

Most of what you tell us is special category data under Article 9: information about your physical or mental health. It carries additional protection and we treat it accordingly.

Explicit consent, on its ownAsked for separately before the consultation begins, never bundled into acceptance of terms. It names what will be processed and why.

Withdrawable at any timeFrom your account page, in one click, immediately and without explanation. Withdrawal stops all further processing and does not affect what was lawfully done before it.

Never a condition of anything elseYou are never asked to consent to more than the thing you asked for genuinely needs.

RecordedWhat you consented to, when and the version of the wording you were shown.

Not a health recordExist Better is not a healthcare provider, does not diagnose and does not create a clinical record.

4 · Who can see what you have written

There is no screen anywhere on this platform, including the one Aishling uses to run it, that takes a member and shows you their Blueprint. Every reading, every answer and every Clarity Room conversation is fetched against the account that is signed in and no other. The pages used to run the platform count how many Blueprints exist. They cannot open one.

We check this rather than promise it. A test runs before every release that walks every place this software reads what you have written and fails if a single one of them is not tied to the account it belongs to.

Here is the honest limit. Your Blueprint is stored in a database. Anybody with the keys to that database can query it directly, which is how a fault gets found and fixed. Today that is Aishling and anybody she engages to work on the platform. That is true of every service of this kind and it is the part no test can remove.

What we can promise honestly is this. Nobody reads Blueprint content as a matter of routine. Support questions about billing or access are answered without opening anybody's reading. Nothing about your Blueprint is shown to another member, sold, or used for marketing.

Stronger separation again is a genuine intention rather than a description of today: holding identity and Blueprint content in separate systems, so that what is in the database cannot be tied to a name. Until that exists, this section says what is true.

Anything we publish about how many people needed a supportive response carries no name, no message and nothing about any individual. It is a count of what the platform did and it cannot be traced back to a person.

5 · Automated processing and AI

The rule we work to

AI may assist with organisation, pattern recognition and suggestions. Decisions involving people, approval, moderation, safeguarding or professional judgement remain under human control.

Your Blueprint is produced by an automated reasoning system working from curated knowledge, alongside material written and reviewed by people. We say so in the product as well as here.

Not a decision with legal effectArticle 22 restricts solely automated decisions producing legal or similarly significant effects. Your Blueprint is informational. It does not determine access to healthcare, insurance, employment or any entitlement and no decision about you is made on the basis of it.

The logic, explainedShown in the product rather than described here: which of your answers were used, which frameworks applied, what was set aside and how confident the reading is.

Human decisions stay humanPractitioner approval, moderation and professional judgement are made by people. Where the platform responds to somebody who appears to be struggling, it offers support and routes to real help. It never assesses, categorises or records a person as being at risk.

Your data does not train modelsWe use a third-party AI provider under terms that prohibit training on our data. We do not train models on member information and we do not permit our providers to.

What is sentOnly what is needed to produce the answer. Requests carry Blueprint content and your first name where it appears in the reading. They do not carry your email address or your account identity.

You can objectAt any time. In practice that means ceasing to use the Blueprint and deleting it, because automated reasoning is what a Blueprint is.

6 · Who processes information for us

Each of these operates under its own written terms and the list is kept current. Where one changes materially we say so.

VercelHosting the website, running the application and counting visits anonymously. All platform traffic passes through it. United States, under its own transfer safeguards.

NeonThe database. Your account, your Blueprint, your conversations and your purchase records.

OpenAIProducing your Blueprint answers and the Ask Your Blueprint conversation. Your reading is written by a large language model run by OpenAI on servers in the United States: what you told us in the consultation is sent there to produce it. Your email address and your name are not sent. Training on our data is not permitted and we have that in writing.

StripePayment. Card details go directly to Stripe and never reach us. Stripe acts as an independent controller for its own fraud prevention. United States, under its own transfer safeguards.

ResendSending email: sign-in links, receipts and anything else the platform needs to tell you.

Google WorkspaceCorrespondence. What you send us by email.

Where we later add video for live sessions, or anything else that would handle your information, this list is updated before it goes live.

7 · Information leaving the UK

We prefer UK or EU hosting where it is available. Where a processor operates outside the UK or the EEA, transfers are made under the UK International Data Transfer Addendum or the EU Standard Contractual Clauses.

Recording a transfer risk assessment for each processor is part of the work still to be done and it is listed here rather than left unsaid.

8 · How long we keep things

Your Blueprint and its historyFor as long as your account is open. Each reading is kept rather than overwritten, because the record over time is the service. Deleted immediately on request.

ConversationsAs above and deletable.

Account and sign-in recordsWhile your account is open, then thirty days, then deleted.

Payment recordsSix years from the end of the relevant financial year. Required by HMRC and not deletable on request.

Support correspondenceTwo years, then deleted.

Counts of supportive responsesKept indefinitely, because there is nothing personal in them to delete. A pathway and a date, with no person attached.

9 · Your rights

Under the UK and EU GDPR you have the rights below. Write to hello@existbetter.online to exercise any of them. We respond within one month and we do not charge.

AccessA copy of everything we hold, in a form you can actually open.

RectificationCorrect anything inaccurate. In practice, take the consultation again, or use the words under any part of your reading that says it does not sound like you. It is removed and not said to you again.

ErasureDelete your account and everything in it, except the payment records we are required to keep.

RestrictionAsk us to hold your information without processing it further.

PortabilityYour information in a structured, machine-readable form and your Blueprints as readable documents.

ObjectionObject to any processing we carry out on the basis of legitimate interests.

Withdraw consentAt any time, without explanation and without affecting the lawfulness of what came before.

ComplainTo the Information Commissioner's Office at ico.org.uk. We would rather you told us first and you are not obliged to.

10 · Sharing with a practitioner

Nothing reaches a practitioner unless you send it. You choose what goes, item by item and you can withdraw it afterwards. A practitioner never has standing access to your Blueprint.

Where you book a session with Aishling, what you have chosen to share is what she has read. Anything discussed in a session is between you and her.

11 · Email and marketing

We send marketing only with your consent, asked for separately from creating an account. Every message carries an unsubscribe that works immediately.

Email that is part of the service is different: sign-in links, receipts and anything we have to tell you about your account. Those are not marketing and continue while your account is open.

12 · Security

Encryption in transit and at rest. Sign-in without passwords, by email link or passkey, so there is no password of yours for anybody to steal or reuse. Access to the platform's administration is limited to the smallest number of people that can run it.

If a breach ever affected your information in a way likely to present a risk to you, we would tell you and the Information Commissioner's Office within the time the law requires. We would tell you what we knew rather than what sounded best.

13 · Children

Exist Better is for adults. You must be eighteen or over to create a Blueprint. We do not knowingly collect information from children and where we learn that we have, we delete it.

14 · Cookies

We set only the cookies needed to keep you signed in, which the rules permit without consent. There are no analytics, advertising or tracking cookies. If we ever add any, they would be set only after you agreed and refusing would be as easy as accepting.

15 · Changes and if ownership changes

Where we make a material change to this policy we tell you directly and give reasonable notice before it takes effect. Every version is kept and remains readable, with a note of what changed and why.

If ownership of Exist Better changes through acquisition, merger or investment, your data protection rights remain unchanged. Any new owner must keep to this policy, or give you clear notice of legally required changes. You would be told before any transfer of your information, with the chance to export and delete first.

That commitment is deliberate. It protects members and it protects the business by making the promise explicit now rather than leaving it to be renegotiated later.

Every one of our documents is at existbetter.online/legal.