Legal

Privacy Policy

What we collect, why, who else touches it, and what you can ask us to do about it. Written to be read.

Version 1.1 · Effective August 2026

Awaiting review by a solicitor. Two things to settle with them: a data protection impact assessment, which is likely required for health information at this scale, and the transfer risk assessments named in section 7. Registration with the Information Commissioner's Office is done.

The short version. What you tell us is used to produce your Blueprint and to answer your questions. We also look at patterns across everybody, without names attached, to work out what the platform is missing and what to build next. It is not sold, not used for advertising and not used to train AI models. You can download everything or delete it all from your account, whenever you want, without asking us.

This policy forms part of your agreement with us, alongside the Terms and the Medical and Wellbeing Disclaimer.

1 · Who we are

ControllerExist Better, a sole trader business run by Aishling Doyle, 11 Fenton Drive, Stamford, Lincolnshire, PE9 4NN, United Kingdom.

Contacthello@existbetter.online, for anything in this policy, including exercising a right or raising a concern. A person reads it.

What this coversThe Exist Better website, your Blueprint, Ask Your Blueprint, the library, and anything you buy or book through us.

Who can use itAdults aged eighteen or over.

2 · What we collect, and why

AccountYour email address, your name if you give it, sign-in records and session information. To create and secure your account and let you return. Our basis is contract.

ConsultationEverything you tell us about health, sleep, mood, energy, circumstances, history and goals, including anything you write in your own words. To produce your Blueprint. Contract, and your explicit consent for the health parts.

Your BlueprintYour reading, the patterns found, the suggestions, and every previous version. To deliver the service and to let it develop as you do. Contract and explicit consent.

ConversationsYour Ask Your Blueprint questions and the answers written for you. To answer you and to keep continuity within a conversation. Contract and explicit consent.

PaymentYour subscription status, plan, and what you have bought. Card details go straight to Stripe and never reach us. Contract.

SupportMessages you send us and our replies. Contract, and our legitimate interest in keeping a record.

We do not ask for your date of birth, your address or your telephone number to produce a Blueprint. Optional questions are marked as optional, and leaving one blank never reduces what you receive.

We are not running website analytics, advertising or tracking of any kind. If that changes, this policy changes first, and analytics would only ever run with your consent.

3 · Health information

Most of what you tell us is special category data under Article 9: information about your physical or mental health. It carries additional protection and we treat it accordingly.

Explicit consent, on its ownAsked for separately before the consultation begins, never bundled into acceptance of terms. It names what will be processed and why.

Withdrawable at any timeFrom your account page, in one click, immediately and without explanation. Withdrawal stops all further processing and does not affect what was lawfully done before it.

Never a condition of anything elseYou are never asked to consent to more than the thing you asked for genuinely needs.

RecordedWhat you consented to, when, and the version of the wording you were shown.

Not a health recordExist Better is not a healthcare provider, does not diagnose, and does not create a clinical record.

4 · Who can see what you have written

Your Blueprint is stored against your account in our database, which means it is technically readable by the small number of people with administrative access to that database. Today that is Aishling and anybody she engages to work on the platform.

What we can promise honestly is this. Nobody reads Blueprint content as a matter of routine. Support questions about billing or access are answered without opening anybody's reading. Nothing about your Blueprint is shown to another member, sold, or used for marketing.

Stronger separation than that is a genuine intention rather than a description of today: holding identity and Blueprint content in separate systems, and logging every access to member content. Until that exists, this section says what is true.

Anything we publish about how many people needed a supportive response carries no name, no message and nothing about any individual. It is a count of what the platform did, and it cannot be traced back to a person.

5 · Automated processing and AI

The rule we work to

AI may assist with organisation, pattern recognition and suggestions. Decisions involving people, approval, moderation, safeguarding or professional judgement remain under human control.

Your Blueprint is produced by an automated reasoning system working from curated knowledge, alongside material written and reviewed by people. We say so in the product as well as here.

Not a decision with legal effectArticle 22 restricts solely automated decisions producing legal or similarly significant effects. Your Blueprint is informational. It does not determine access to healthcare, insurance, employment or any entitlement, and no decision about you is made on the basis of it.

The logic, explainedShown in the product rather than described here: which of your answers were used, which frameworks applied, what was set aside, and how confident the reading is.

Human decisions stay humanPractitioner approval, moderation and professional judgement are made by people. Where the platform responds to somebody who appears to be struggling, it offers support and routes to real help. It never assesses, categorises or records a person as being at risk.

Your data does not train modelsWe use a third-party AI provider under terms that prohibit training on our data. We do not train models on member information and we do not permit our providers to.

What is sentOnly what is needed to produce the answer. Requests carry Blueprint content and your first name where it appears in the reading. They do not carry your email address or your account identity.

You can objectAt any time. In practice that means ceasing to use the Blueprint and deleting it, because automated reasoning is what a Blueprint is.

6 · Who processes information for us

Each of these operates under its own written terms, and the list is kept current. Where one changes materially we say so.

VercelHosting the website and running the application. All platform traffic passes through it. United States, under its own transfer safeguards.

NeonThe database. Your account, your Blueprint, your conversations and your purchase records.

OpenAIProducing your Blueprint answers and the Ask Your Blueprint conversation. Blueprint content is sent; your email address is not. Training on our data is not permitted.

StripePayment. Card details go directly to Stripe and never reach us. Stripe acts as an independent controller for its own fraud prevention. United States, under its own transfer safeguards.

ResendSending email: sign-in links, receipts and anything else the platform needs to tell you.

Google WorkspaceCorrespondence. What you send us by email.

Where we later add video for live sessions, or anything else that would handle your information, this list is updated before it goes live.

7 · Information leaving the UK

We prefer UK or EU hosting where it is available. Where a processor operates outside the UK or the EEA, transfers are made under the UK International Data Transfer Addendum or the EU Standard Contractual Clauses.

Recording a transfer risk assessment for each processor is part of the work still to be done, and it is listed here rather than left unsaid.

8 · How long we keep things

Your Blueprint and its historyFor as long as your account is open. Each reading is kept rather than overwritten, because the record over time is the service. Deleted immediately on request.

ConversationsAs above, and deletable.

Account and sign-in recordsWhile your account is open, then thirty days, then deleted.

Payment recordsSix years from the end of the relevant financial year. Required by HMRC, and not deletable on request.

Support correspondenceTwo years, then deleted.

Counts of supportive responsesKept indefinitely, because there is nothing personal in them to delete. A pathway and a date, with no person attached.

9 · Your rights

Under the UK and EU GDPR you have the rights below. Write to hello@existbetter.online to exercise any of them. We respond within one month and we do not charge.

AccessA copy of everything we hold, in a form you can actually open.

RectificationCorrect anything inaccurate. In practice, take the consultation again, or use the words under any part of your reading that says it does not sound like you. It is removed and not said to you again.

ErasureDelete your account and everything in it, except the payment records we are required to keep.

RestrictionAsk us to hold your information without processing it further.

PortabilityYour information in a structured, machine-readable form, and your Blueprints as readable documents.

ObjectionObject to any processing we carry out on the basis of legitimate interests.

Withdraw consentAt any time, without explanation, and without affecting the lawfulness of what came before.

ComplainTo the Information Commissioner's Office at ico.org.uk. We would rather you told us first, and you are not obliged to.

10 · Sharing with a practitioner

Nothing reaches a practitioner unless you send it. You choose what goes, item by item, and you can withdraw it afterwards. A practitioner never has standing access to your Blueprint.

Where you book a session with Aishling, what you have chosen to share is what she has read. Anything discussed in a session is between you and her.

11 · Email and marketing

We send marketing only with your consent, asked for separately from creating an account. Every message carries an unsubscribe that works immediately.

Email that is part of the service is different: sign-in links, receipts, and anything we have to tell you about your account. Those are not marketing and continue while your account is open.

12 · Security

Encryption in transit and at rest. Sign-in without passwords, by email link or passkey, so there is no password of yours for anybody to steal or reuse. Access to the platform's administration is limited to the smallest number of people that can run it.

If a breach ever affected your information in a way likely to present a risk to you, we would tell you and the Information Commissioner's Office within the time the law requires, and we would tell you what we knew rather than what sounded best.

13 · Children

Exist Better is for adults. You must be eighteen or over to create a Blueprint. We do not knowingly collect information from children, and where we learn that we have, we delete it.

14 · Cookies

We set only the cookies needed to keep you signed in, which the rules permit without consent. There are no analytics, advertising or tracking cookies. If we ever add any, they would be set only after you agreed, and refusing would be as easy as accepting.

15 · Changes, and if ownership changes

Where we make a material change to this policy we tell you directly and give reasonable notice before it takes effect. Every version is kept and remains readable, with a note of what changed and why.

If ownership of Exist Better changes through acquisition, merger or investment, your data protection rights remain unchanged. Any new owner must honour this policy or give you clear notice of legally required changes, and you would be told before any transfer of your information, with the chance to export and delete first.

That commitment is deliberate. It protects members, and it protects the business by making the promise explicit now rather than leaving it to be renegotiated later.

Every one of our documents is at existbetter.online/legal.