Privacy Policy
HealthDirect · NeuralSignal Corporation Limited · Last updated 24 September 2026
This explains what HealthDirect records about you, where it goes, and who can see it. It describes what the software actually does — not what it might do one day.
Who we are
HealthDirect is operated by NeuralSignal Corporation Limited. For anything in this policy, contact support@neuralsignal.co.uk.
What we hold
| Kind | What it is |
|---|---|
| Account | Name, email address, phone number, profile photo |
| Health record | Date of birth, blood type, allergies, ongoing conditions, height and weight, emergency contact, insurance details |
| Care | Appointments, consultation notes written by your clinician, prescriptions, lab results, imaging studies and their reports |
| Vitals | Readings you record, or that we read from Apple Health or Health Connect with your permission |
| Messages | Chat with your clinician, and files you attach |
| Payments | Amounts, dates and status. Never card numbers — see below |
| Device | A push notification token, so we can reach your phone |
| Crash reports | The error, and where in the code it happened. Never your data — see below |
Video and voice consultations
Consultations are encrypted end to end and travel directly between your device and your clinician's wherever the network allows. Where a direct connection is impossible, the encrypted stream is relayed by our server, which cannot read it.
We do not record consultations. No audio or video is stored by us at any point. What persists is the notes your clinician chooses to write.
The symptom checker
If you use the AI symptom checker, this is sent to our AI provider (currently OpenAI) to produce the assessment:
Your name, email address, phone number and account identifier are not sent. The provider receives the symptom description alone and cannot connect it to you from what we send. The result is stored on your record so you and your clinician can refer back to it.
The symptom checker is not a diagnosis and is not a substitute for a clinician.
Crash reports
When the app or the server hits an error, a report is sent so we can fix it. It contains the fault — the error, where in the code it happened, and which screen or endpoint you were on. It does not contain your name, your record, what you typed, or a screenshot.
These reports go to our own server, not to a crash reporting company. No third party receives them.
Apple Health
Only if you grant permission, we read heart rate, blood pressure, glucose, weight, blood oxygen and steps to keep your record current, and write back vitals you record here. Steps are only shown to you after a sync and are never stored. On Apple Watch, the app also reads your resting heart rate and heart rate variability, to fill in a reading before you log it. Readings we take from Apple Health become part of your HealthDirect record on our servers, marked as coming from Apple Health, where you and your clinician can see them; the app does not store Apple Health data in iCloud, and never uses it for advertising, marketing or data mining, and never sells or shares it with anyone for those purposes. You can withdraw this at any time in Settings › Privacy & Security › Health, and nothing else in HealthDirect stops working.
Health Connect
On Android, and only if you grant permission, we read heart rate, blood pressure, weight, blood glucose, blood oxygen and steps from Health Connect to keep your record current. A sync looks at the last seven days and brings in the newest reading of each; steps are only shown to you after a sync and are never stored. A reading you add yourself can be saved back to Health Connect — heart rate, resting heart rate, heart rate variability, blood pressure, blood glucose, blood oxygen, weight, height, body fat, body temperature or respiratory rate — but never one you add for a family member. Readings we take from Health Connect become part of your HealthDirect record on our servers, marked as coming from Health Connect, where you and your clinician can see them; the app never uses Health Connect data for advertising, marketing or data mining, and never sells or shares it with anyone for those purposes. You can withdraw this at any time in Health Connect’s app permissions, and nothing else in HealthDirect stops working.
Payments
Card payments are handled by Stripe. Your card number is entered into Stripe's own component and goes straight to them — it never reaches our servers, and we could not store it if we wanted to. We keep the amount, the date, the status and the last four digits.
Location
Your location is read only at the moment you tap “Share my location” on the Emergency screen, to put a map link in the message to your emergency contacts. It is not tracked, not stored, and not read at any other time.
Face ID and passkeys
Face ID happens entirely on your device; we never receive your face data. If you create a passkey, your device keeps the private key and we store only the public half — which cannot be used to sign in as you.
Who can see your record
- You — all of it, and you can export it as a PDF at any time.
- Clinicians you have consulted — the record of the care they are involved in. A clinician you have never had an appointment with cannot see you at all; this is enforced by the server, not by the app.
- Our administrators — account and operational data for support and safety. Administrative access to records is logged.
We do not sell your data. We do not share it for advertising. We do not profile you for marketing.
Where it is held
On servers in the European Union, encrypted in transit with TLS. Our AI provider processes symptom descriptions on their own infrastructure, which may be outside the UK and EU.
How long we keep it
Medical records are retained while your account exists and for as long afterwards as the law requires clinical records to be kept — deleting a consultation record is not always ours to do. Account data is removed when you close your account. Ask us and we will tell you exactly what is held about you.
Your rights
You can delete your account yourself at any time from Settings → Account in the app: your identity is removed immediately and clinical records are kept only for the period the retention rules above require. Under UK data protection law you can also ask for a copy of your data, ask us to correct it, object to how we use it, or withdraw a permission you have given. Write to support@neuralsignal.co.uk. If you are not satisfied you can complain to the Information Commissioner's Office at ico.org.uk.
Children
HealthDirect is for adults. A parent or guardian may add a child as a family member and manage their care on their behalf.
Changes
If we change what we do with your data, this page changes with it and the date above updates. Material changes are notified in the app.