Privacy Policy
HealthLoopAI is designed to help you review your own weekly notes without creating an account, logging in, or sending your spreadsheet to us. This page explains local browser processing, contact messages, book sales, optional donations and future advertising.
Last updated: 26 May 2026
Plain English summary
HealthLoopAI is intended to be a simple website and browser-based weekly analysis tool. The tool may let you select a spreadsheet from your own device so it can create a readable report about weight, steps, estimated calories, alcohol units and digestion notes. The basic concept avoids user accounts and logins.
HealthLoopAI is not a medical device, not a clinical service, and not a substitute for advice from a doctor, nurse, dietitian, pharmacist or other qualified healthcare professional.
Who we are
HealthLoopAI is a privacy-first personal health pattern project available at https://healthloopai.org.
For privacy questions, contact admin@healthloopai.org.
What information may be processed
1. Information in your weekly workbook
Your spreadsheet may contain personal health and lifestyle notes, such as weight, steps, food notes, alcohol units, calories, digestion comments and other weekly reflections.
For the core weekly analysis tool, this information is intended to be processed locally in your browser and not uploaded to us.
2. Website technical information
Like most websites, your hosting provider may automatically process technical information such as IP address, browser type, device type, pages visited, date/time of visit, and basic security logs.
This is normally used to keep the website available, secure and working correctly.
3. Contact information
If you email HealthLoopAI or use the contact form, we may process your name, email address, selected message type, subject and the message you send.
The contact form is delivered using a third-party form service so the message can be sent directly to HealthLoopAI without opening your email app. This means the form provider may process the submitted message and related technical information in order to deliver it.
Do not include sensitive health information in a contact message unless it is necessary.
4. Book sales and donations
If you buy a book, guide or workbook, or make a voluntary donation, payment and order information may be processed by third-party providers such as a book retailer, payment processor or donation platform.
HealthLoopAI should not ask you to send health spreadsheets as part of a book purchase or donation.
5. Cookies and advert information
The current site may use essential cookies or local storage for preferences such as light/dark mode. If Google Ads, AdSense or analytics are added later, additional cookies or similar technologies may be used, as explained below.
How the weekly analysis tool handles your spreadsheet
The weekly analysis tool is designed so you choose a workbook from your own computer or device. The browser reads the file and generates charts, summaries and export files on your device.
- The spreadsheet should not be intentionally uploaded to HealthLoopAI for the standard analysis flow.
- The analysis results should be created in your browser session.
- Exported reports are saved by you to your own device.
- If you refresh the page or close the browser, unsaved analysis results may be lost.
Why information is used and the lawful basis
Where UK GDPR applies, we aim to use personal data only where there is a lawful basis. The exact lawful basis can depend on how the site is configured and how you choose to contact us.
| Purpose | Example information | Likely lawful basis |
|---|---|---|
| Provide the website and tool | Browser session, local file processing, page functions | Legitimate interests or your request to use the tool |
| Security and troubleshooting | Server logs, error information, IP address | Legitimate interests |
| Respond to messages | Name, email address, message content | Legitimate interests or taking steps at your request |
| Remember display preferences | Theme preference stored locally | Legitimate interests or consent, depending on implementation |
| Future adverts or analytics | Cookie identifiers, ad interaction data, device/browser information | Consent where required by law |
Health information and sensitive data
Information about health can be classed as special category data under UK data protection law. HealthLoopAI is designed to avoid collecting your workbook data on our servers for the core weekly analysis.
You should treat any spreadsheet or exported report as private. Do not upload or share reports publicly if they contain information you would not want others to see.
Book sales, donations and third-party payment providers
HealthLoopAI may be funded through book sales, optional donations and future advertising. This helps avoid requiring user accounts, logins or uploads of personal health records to HealthLoopAI.
If you buy a book or make a donation, you may be taken to a third-party provider. That provider may process information such as your name, email address, billing address, delivery address, payment details, fraud-prevention information, order history and transaction references.
We do not receive your full card details from payment processors. The exact information shared with HealthLoopAI depends on the retailer, payment processor or donation platform used.
Cookies, local storage, Google Ads and AdSense
Current preference storage
The site may use your browser’s local storage to remember your display preference, such as light or dark mode. This does not need to identify you personally.
Future Google Ads or AdSense
If Google Ads, Google AdSense or similar advertising services are added later, Google and other third-party vendors may use cookies or similar technologies to serve adverts, limit repeated adverts, measure advert performance, prevent fraud and, where permitted, personalise adverts.
Google’s use of advertising cookies may enable Google and its partners to serve adverts based on visits to this and/or other websites. You can learn more from Google’s own advertising privacy information and ad settings.
Sharing, storage and retention
Who information may be shared with
- Website hosting and security providers, where needed to operate the site.
- Email or contact form providers, if you contact us or submit the contact form.
- Google or other advertising/analytics providers, if those services are added later and allowed by your choices.
- Professional advisers or authorities where required by law.
How long information is kept
Local workbook analysis data is normally held only in your browser session unless you save an exported report. Hosting logs are usually kept for a limited period for security and troubleshooting. Contact messages may be kept while needed to respond and for reasonable record keeping.
Where practical, we aim to keep personal information only for as long as needed to answer a message, manage a request, maintain website security, meet legal obligations or operate the project responsibly.
International transfers
Some service providers, such as website hosting, email, analytics or advertising providers, may process data outside the UK. Where this happens, appropriate safeguards should be used where required by data protection law.
Your privacy rights
Depending on the circumstances and the laws that apply, you may have rights to:
- ask for a copy of your personal data;
- ask for inaccurate data to be corrected;
- ask for data to be deleted;
- ask for use of data to be restricted;
- object to certain uses of data;
- withdraw consent where processing is based on consent;
- complain to the UK Information Commissioner’s Office if you are unhappy with how your data is handled.
To ask a privacy question or make a privacy request, email admin@healthloopai.org.
Children, security and changes
Children
HealthLoopAI is intended for adults reviewing their own weekly health and lifestyle notes. It is not designed for children.
Security
We aim to keep the site simple and privacy-conscious. No website can be guaranteed completely secure, so you should avoid sending sensitive health information by email or contact form.
Changes to this policy
This privacy policy may be updated when features change, such as adding Google Ads, analytics, user accounts, subscriptions or cloud storage, or changing the contact form provider. The “Last updated” date will be changed when the policy is revised.