Privacy policies

General privacy information

GP Accipe Ltd (company number 16653943, registered in England & Wales) is the data controller for Accipe, DermWizard, and UK Budget Planner mobile applications. We are committed to protecting your privacy and handling personal data transparently in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Protection Officer & contact

If you have any questions, wish to exercise your rights, or request a copy of your data, please contact:

support@accipe.co.uk
GP Accipe Ltd, 8 Richards Avenue, Romford, RM7 9ES, United Kingdom.

Your rights under UK GDPR

You have the right to:

• Access – request a copy of the personal data we hold about you.
• Rectification – ask us to correct inaccurate or incomplete data.
• Erasure – request deletion of your personal data, subject to legal obligations.
• Restrict processing – temporarily block processing while a query is resolved.
• Data portability – obtain and reuse your data for your own purposes.
• Object – object to processing based on legitimate interests or direct marketing.
• Withdraw consent – at any time, where processing is based on consent (e.g. push notifications or personalised ads).

To exercise any right, contact us. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) – ico.org.uk.

Data security & retention

We rely on enterprise-grade infrastructure (Google Cloud / Firebase) to store data securely. Retention periods:

• Account data: kept while your account is active, plus a short period to allow reactivation.
• User-generated content: may be retained anonymously after account deletion for service improvement.
• Advertising IDs & analytics: retained as long as required for operational analytics and ad fraud prevention, typically no longer than 26 months unless required by law.

Data collection, analytics & advertising (Accipe & DermWizard)

This section applies to Accipe and DermWizard only. It does not apply to UK Budget Planner, which does not use AdMob, Firebase Analytics, or Crashlytics — see UK Budget Planner below. This section explains how we collect technical data, analytics, and advertising information automatically when you use Accipe or DermWizard.

1. Information collected automatically (device & usage)

• Device identifiers: IP address, Advertising ID (Apple IDFA / Android AAID), Firebase installation ID.
• Usage data: screen views, feature interactions, session duration, crash reports (collected anonymously via Firebase Analytics).
• Device metadata: device model, operating system version, language/region settings, app version.

This data helps us understand app performance, fix bugs, and improve user experience. It does not include any patient-identifiable or clinical data you might input into the apps.

2. Advertising & consent (Google AdMob)

We use Google AdMob to display advertisements. Accipe is ad-supported. DermWizard may show ads on the free tier; users who purchase DermWizard Pro do not receive advertisements. AdMob may collect and process the data listed above (especially Advertising ID and IP address) to serve ads to eligible users.

• Personalised ads: With your explicit consent (via the Google UMP consent form shown on first launch), Google may use your advertising ID and interests to show relevant ads across apps.
• Non-personalised ads: If you decline consent or reset your preferences, ads will be context‑based (e.g. related to app content) and will not use your browsing history or profiling.
• Data shared with Google: Device ID, IP address, advertising ID, and ad interaction data are shared with Google for ad delivery, frequency capping, and fraud prevention. Google Privacy Policy applies.

Managing consent: You can change your ad preferences at any time:

• Open the app (Accipe or DermWizard) → Settings → “Manage Ad Privacy” or “Privacy choices”.
• Alternatively, reset your Advertising ID in device settings (iOS: Settings → Privacy → Advertising → Reset Advertising Identifier; Android: Google Settings → Ads → Reset advertising ID).

Withdrawing consent will not remove ads but will make them non-personalised. Your choice is stored and respected across sessions.

3. Analytics & crash reporting

We use Firebase Analytics and Crashlytics to monitor app health and aggregate usage patterns. All analytics data is pseudonymised and cannot be used to identify you individually. You can opt out of analytics via your device settings (Limit Ad Tracking on iOS / Opt out of Ads Personalisation on Android), which also limits analytics collection.

Accipe app GP Toolkit

Last updated: 13 April 2026

This section supplements the general privacy information and the data collection & advertising section above. In case of conflict, this app-specific section provides additional detail.

1. Information you provide (Accipe specific)

• Account registration: First name, last name, email address, professional role (e.g. GP Partner, trainee), NHS Clinical Commissioning Group (CCG) or Health Board.
• Content contributions: Local referral pathways (surgery name, address, ODS code, official NHS email, service type, privacy status). Referral hints (text & optional images). Ethical & admin hints (title, content, tags).
• Contact form & support: name, email, subject, message (used only to respond).
• Subscriptions to surgeries/pathways: we store which content you follow to send relevant updates via Firebase Cloud Messaging (with your consent).

2. How we use Accipe data

• Create/manage your account and provide personalised content (role‑based views).
• Display “Added by [name]” alongside community contributions (moderated before publication).
• Send service notifications (e.g. new hints, referral pathway updates for managers).
• Improve the app using aggregated, de-identified usage data (as described in the general data collection section).

3. Legal basis (UK GDPR) for Accipe processing

• Contract performance: account creation, core toolkit features.
• Consent: push notifications and user‑generated content publication (withdraw by unsubscribing or editing profile).
• Legitimate interests: community feature management, app security, usage analytics (balanced with your rights).

4. Data sharing & third parties (Accipe)

• Google Firebase (Firestore, Authentication, Functions, Messaging) – core backend.
• Mailjet / SendGrid – transactional emails (verification, contact form replies).
• Ko-fi – donations (their privacy policy governs donation data).

We do not sell your data. Your contributions remain visible to other Accipe users as per community guidelines.

5. Your choices in Accipe

You can edit your profile, unsubscribe from content, or delete your account directly inside the app (Settings → Delete Account). For full data export or erasure requests, email support@accipe.co.uk.

Note on advertising & analytics: Accipe implements the common data collection and AdMob advertising described in the general data collection & ad section above. Your ad preferences are managed there.

DermWizard app GP Dermatology Toolkit

Effective date: 17 August 2026

This section supplements the general privacy information above. DermWizard does not require registration with an email address or password. No patient-identifiable data is ever stored on our servers. For in-app purchases, the app may create an anonymous Firebase user ID to sync Pro entitlement — see In-app purchases (DermWizard Pro) below.

1. What DermWizard collects locally & online

• Local-only clinical data: Any dermatology selections (morphology, body site, symptoms) made during a consultation remain strictly on your device – they are not uploaded to any server.
• Automated data: As described in the general data collection & advertising section, we collect device identifiers, usage analytics, and advertising IDs for AdMob and crash reporting.

2. In-app purchases (DermWizard Pro)

DermWizard offers an optional one-time in-app purchase (DermWizard Pro) via the Apple App Store and Google Play. This is a non-consumable product, not a subscription.

• What Pro unlocks: removal of advertisements, a higher daily allowance for AI image analysis, multi-angle photo upload, clinical notes in image analysis mode, colour themes, and selected Learning Hub podcasts and videos. Pro does not change how clinical data is processed and does not turn the app into a diagnostic or regulated medical device.
• RevenueCat (RevenueCat, Inc.): Purchase receipts and entitlement status are processed by RevenueCat to verify whether your install has an active Pro entitlement. RevenueCat receives identifiers needed to link your purchase to the app (e.g. store receipt, anonymous app user id). See the RevenueCat Privacy Policy.
• Firebase Anonymous Authentication (Google LLC): On supported mobile builds, the app may call signInAnonymously() so each install has a stable Firebase UID without collecting your email or name. That UID is linked to RevenueCat as the application user id for entitlement sync. If you clear app data or lose the anonymous session, Restore purchases (via your Apple or Google account) remains the source of truth for your Pro entitlement.
• Restore purchases: Available in DermWizard → Settings. Uses your App Store or Google Play account; we do not store payment card details.
• Refunds: Handled by Apple or Google according to their respective store policies.

3. Third-Party Artificial Intelligence (AI) Services

DermWizard uses optional AI features that transmit limited, anonymised data to third-party providers. These features are only activated when you explicitly choose them.

• Google Gemini API (Google LLC): Used for the "Image Analysis" mode. High-resolution images of skin lesions (no patient identifiers) are transmitted to Google’s servers for visual processing. Under our agreement, data is not used to train foundation models and is retained for up to 30 days for abuse monitoring.
• DeepSeek API (DeepSeek-AI): Used for the "AI Ranking" mode. Clinical signs, symptoms, and morphology descriptions (anonymised, no PII) are transmitted to generate a ranked list of differential diagnoses. API inputs are not used for model training.

Data minimisation: You are instructed never to upload identifiable patient information (names, DOB, NHS numbers). Both providers comply with GDPR standards for data processing agreements.

4. Atlas Section and Medical Images (DermNet & Public Domain)

• Image sources: CDC Public Health Image Library (public domain), NLM Open-i (open access/CC licenses), Wikimedia Commons (CC licenses), and DermNet (used with permission).
• User restrictions: Images are for in-app educational use only; bulk downloading or commercial reuse is prohibited.

5. Learning Hub — videos, YouTube, and RSS podcasts

The Learn tab may include teaching articles, hosted videos, YouTube videos, and podcasts (including episodes loaded from third-party RSS feeds). This content is educational only. Playing it does not create a DermWizard account and does not send patient-identifiable or consultation data to those providers.

• Hosted videos and audio: Some items are streamed from our storage or a content host we control. Last-opened Learn items and podcast playback position are stored locally on your device.
• YouTube videos (Google LLC): When you play a YouTube video in Learn, YouTube may collect device and usage data (for example IP address, device identifiers, and playback events) under the Google Privacy Policy and YouTube privacy practices. We do not receive that YouTube analytics as patient or clinician records. YouTube may show its own player UI and cookies according to Google’s policies.
• RSS podcasts: The app may fetch public RSS feeds from third-party publishers to list episodes, then stream audio from the publisher’s enclosure URL. The feed host and audio host may see your IP address and standard device/request metadata. We do not upload clinical notes, lesion photos, or other consultation data to RSS publishers.
• Third-party educational content: YouTube videos and RSS podcasts are produced by their authors or publishers. Inclusion in DermWizard is for education and does not mean we endorse a particular diagnosis, treatment, or clinical pathway. Credits (author, source, licence) may be shown in-app where provided.

6. Advertising & analytics (reference to general section)

As detailed in the general data collection & advertising section, DermWizard uses Google AdMob for ads on the free tier only — Pro users do not receive ads. Firebase Analytics provides aggregated usage insights. You can manage personalised ad consent at any time via the in-app “Manage Ad Privacy” button (Settings menu).

7. Your rights in DermWizard

• Since DermWizard does not use email/password accounts, there is no traditional account profile to delete. Anonymous Firebase UIDs used for Pro entitlement may persist until you clear app data or contact us.
• To exercise rights regarding analytics or advertising data (e.g., request information about your Advertising ID processing), contact support@accipe.co.uk.
• You may reset your Advertising ID in device settings to limit tracking.

8. Medical disclaimer (DermWizard)

DermWizard is an educational clinical-reference tool for qualified healthcare professionals. It is not a diagnostic medical device and does not provide definitive diagnoses, treatment plans, or autonomous clinical decisions.

• Clinician responsibility: The final clinical assessment, diagnosis, management, and referral decision remain the sole responsibility of the clinician. The app supplements — and does not replace — history, examination, professional judgment, or local pathways.
• Learn, Diagnose, and Atlas content: Condition summaries, quizzes, articles, hosted videos, YouTube videos, RSS podcasts, atlas images, and AI or rule-based differentials are decision support and teaching aids only. Third-party Learn media is not a personalised medical opinion about any patient.
• Sources: Core clinical pathways are derived from the Primary Care Dermatology Society (PCDS) and other publicly available dermatology references. Atlas images carry source attribution.
• Urgency: If a lesion is clinically suspicious of malignancy, follow urgent / 2WW pathways regardless of any score, ranking, or educational content in the app.

Patients and members of the public should always seek professional medical advice. Do not rely on DermWizard for self-diagnosis.

9. Children’s privacy

DermWizard is intended for use by healthcare professionals and is not directed at individuals under 16. We do not knowingly collect data from minors.

UK Budget Planner app Personal finance

Effective date: July 2026

UK Budget Planner is an offline-first personal budget planner by GP Accipe Ltd (trading as Accipe). Budget numbers stay on your device. We do not require an Accipe account, do not link to banks, and do not show ads. Optional features you enable may send limited data off-device as described below.

1. What data is stored locally

• Budget data: Income, costs, debts, court orders, assets, goals, recurring rules, custom categories, and related settings are stored in a local SQLite database on your device. This financial content is not uploaded to Accipe servers.
• Security credentials: PIN hashes and biometric unlock preferences are stored locally using your device's secure storage. We do not receive or store your PIN.
• Widgets & preferences: Home-screen widget snapshots and appearance settings stay on your device.
• On-device OCR: When Cloud OCR is off, receipt text recognition runs with on-device ML Kit and does not leave the device for that purpose.

2. Optional features that may leave your device

• Encrypted backups (.clbak): Manual export uses AES-256-GCM. You choose where to store the file. Optional automatic backup saves encrypted files to your Google Drive (Android and iOS, via Google Sign-In) or your iCloud Documents (iOS). Accipe does not host or decrypt these backups.
• Cloud OCR: If you enable Cloud OCR, a receipt image may be sent over HTTPS to our OCR proxy, which uses Google Cloud Vision to extract text. Images are processed to return text/amounts and are not retained by Accipe after processing. You can leave Cloud OCR off and use on-device OCR only.
• Firebase Crashlytics & Performance: In release builds, crash reports, stack traces, and device/install identifiers may be sent to Google Firebase to help us fix bugs and monitor stability. This is diagnostics — not a marketing analytics SDK, and not your budget contents.
• Google Fonts: The app may download font files from Google Fonts for UI or PDF export.
• Share / export: When you export CSV, PDF, or .clbak via the system share sheet, the destination is under your control.

3. What we do not do

• We do not link to banks or Open Banking APIs.
• We do not create a developer-hosted user account for budgeting.
• We do not sell your personal or financial data.
• We do not use advertising SDKs, AdMob, or Firebase Analytics for marketing.

In-app Analytics / Insights / Tips screens compute results locally using your on-device data and bundled ONS UK household benchmarks.

4. Legal basis & your rights

Primary budget processing occurs on your device under your control. Optional backups, Cloud OCR, and diagnostics are based on your choice to use those features and/or our legitimate interest in app stability (Crashlytics/Performance). You can access, edit, export, or delete budget data in the app.

Data deletion: See our dedicated instructions at accipe.co.uk/apps/ukbudgetplanner/data-deletion/ — how to remove local data, Drive/iCloud backups, and how to email us to delete diagnostics we may hold.

For other correspondence, contact support@accipe.co.uk.

5. Children's privacy

UK Budget Planner is not directed at children under 13. We do not knowingly collect personal data from children.

6. Disclaimer

UK Budget Planner is a budgeting tool, not regulated financial advice. It is inspired by the StepChange budget planner format but is not affiliated with or endorsed by StepChange. For debt help, contact StepChange Debt Charity, Citizens Advice, or National Debtline.