Privacy notice

Version 2026-10-30.1 · Last updated 30 October 2026

BetterDay is an invite-only wellbeing tool. You choose whether to provide health and wellbeing information. BetterDay uses it to show your history and look for personal patterns. It is not a medical service and does not provide medical advice.

Who is responsible

For this private beta, Gareth Alan-Williams is the data controller. Privacy questions and rights requests can be sent to privacy@betterdaybeta.co.uk.

Information BetterDay uses

• Your invited email address and account identifier.
• Information you choose to enter, such as your BetterDay goals, starting-point answers, coaching-tone preference, sleep, mood, meal descriptions and selected meal type, hydration, movement, body measurements, alcohol entries and wearable readings.
• Results BetterDay creates from that information, including scores, recovery states, insights and personal patterns.
• Limited technical information needed for authentication, security, reliability and deletion processing.
• For this private-beta review, limited participation and activity facts such as invitation/start status, onboarding completion, first and last use and the number of distinct saved dates. These facts do not include the contents of your wellbeing entries.
• Feedback you choose to give Gareth privately by WhatsApp, during brief check-ins or face-to-face, together with the contact details and participant label needed to administer the invited cohort.

Why it is used

BetterDay uses your information to authenticate your account, save and restore your entries and onboarding choices, tailor the tone and focus of eligible recommendations, show your personal history, calculate wellbeing summaries and look for patterns that may be useful to you. Identifiable health information will not be used for advertising or general AI-model training during the private beta.

This private beta also assesses whether invited adults use BetterDay repeatedly, experience early value, find its reflections useful and might consider paying for a future product. Gareth uses only the limited participation and activity facts described above and feedback you choose to provide for this commercial-validation purpose. He does not inspect or reuse the contents of your health and wellbeing entries for commercial validation, and BetterDay does not add broad third-party analytics for this private beta.

Who can use BetterDay

BetterDay is for people aged 18 or over. After signing in, you must confirm that you meet this age requirement before using the app. BetterDay records the confirmation version and time, but does not ask for your date of birth or treat the confirmation as verified proof of age.

Lawful basis and consent

For the limited private-beta administration, activity facts and optional feedback, Gareth relies on legitimate interests under UK GDPR Article 6(1)(f): evaluating the early private beta and deciding whether to continue, change or stop it. The processing is limited to invited adults, avoids the contents of wellbeing entries, uses no broad analytics and gives you the right to object or stop taking part.

Creating an invited account does not count as consent.

Health and wellbeing information is processed under your consent in UK GDPR Article 6(1)(a) and explicit consent in Article 9(2)(a). Consent version 2026-10-28.1 covers saving and restoring account history and onboarding choices, showing personal patterns, and bounded personalisation. This version expressly includes the limited OpenAI sharing described below. Earlier consent does not count as agreement to this updated choice. The consent box is unticked by default. You may refuse consent, or withdraw it later in Profile & settings. Withdrawing consent stops further health-data synchronisation and prevents subsequent AI requests from passing the server permission check. A request already sent to OpenAI cannot be recalled. You can separately ask BetterDay to delete your saved health data, including your saved onboarding profile and personalisation choices.

Adding a selected meal type records another part of the meal entry you choose to save. It does not change consent version 2026-10-28.1 or permit a new use of your information.

The private-beta transparency update does not add commercial validation to the health-data consent and does not require BetterDay to inspect your entries. If that boundary changes, BetterDay must review the DPIA and request fresh consent where required.

Feedback and participation choices

Participation is voluntary and unpaid. Direct feedback is not anonymous to Gareth: he will normally know who sent a WhatsApp message or spoke to him. You may decline a check-in, decline a face-to-face conversation, object to the commercial-validation processing or stop participating without giving a reason. Material findings placed in the project repository use participant labels and are de-identified; raw messages, names, contact details and unnecessary personal or wellbeing details are kept out of GitHub.

Please do not include another person's information or unnecessary health details in feedback. If feedback incidentally contains health information, Gareth will not reuse it for commercial validation and will delete or minimise it when it is no longer needed.

Where information is processed

BetterDay uses Supabase for invited accounts and protected application data, and Vercel to host the application. For recommendation wording, OpenAI may receive the selected coaching tone and up to three deterministic approved recommendation candidates. Recurring-food observations and optional food-coaching suggestions in Insights, and the calendar summaries and graph explanations in Progress, use BetterDay’s fixed rules and wording. Those features do not send a wording request to OpenAI or store a history of coaching suggestions. For movement plan-versus-actual wording, OpenAI may receive only the number of comparable and supporting sessions, the already-decided longer, shorter or broadly-as-planned direction, typical absolute and percentage difference, bounded confidence and an approved communication intent. It does not receive the raw movement timeline, dates, individual plans or actual durations, movement timestamps or provenance, or an account identifier. For a user-requested food interpretation, OpenAI may receive only a capped meal description. The selected meal type is currently stored for your history but is not sent to OpenAI or used for recommendations. OpenAI API requests use store:false. Processor and international-transfer decisions remain under review for any wider beta.

BetterDay uses Google Workspace, including Gmail and Google Groups, for privacy requests and operational correspondence. Messages may contain your contact details and information you choose to send. Please avoid unnecessary health information. Google and its service providers may process this information outside the UK under applicable data-transfer safeguards. Gareth handles privacy requests. The planned backup role is limited to operational acknowledgement and serious-incident communications, with no access to your in-app wellbeing records.

How long information is kept

• Active-account health information is kept while your account is active and your consent remains valid.
• After 12 months without authenticated activity, BetterDay plans to send a 30-day deletion warning. If you do not return, the health data and account will be deleted.
• Derived scores, insights and learning history are deleted with their source health information.
• Supabase creates daily database backups and makes the most recent seven days available for recovery. Data deleted from the live service may remain in an earlier backup until that backup expires.
• Before deletion starts, BetterDay sends a minimal keyed recovery marker to the privacy mailbox. It contains no email address, raw account identifier or wellbeing information and is normally retained for 14 days.
• Application and security logs are intended to be minimised and retained for no longer than necessary.
• The identifiable participant register and raw direct feedback will be reviewed after the decision about the next steps for this private beta and deleted or minimised within 90 days. Material needed for an unresolved privacy, safety or complaint matter may be kept only until that matter is closed. De-identified findings may be retained as part of the project record.

The automated inactivity-deletion process is not yet active. It is planned before any account reaches 12 months of inactivity. The current short, invited pilot does not depend on this automation; you can request deletion at any time using the choices below.

Unresolved operational matters are kept until resolved. Resolved operational alerts are kept for 365 days from resolution and synthetic test alerts for 90 days, with disposal during the quarterly review. Deletion recovery markers normally follow the separate 14-day rule, extended only for an unresolved incident or deletion. Relevant mailbox and Group copies are reviewed separately. Google may take up to 180 days to complete deletion from its systems after information is no longer recoverable by us, unless retention is legally required.

Your deletion choices

Delete my health data

You can start health-data deletion in Profile & settings, or request it by emailing privacy@betterdaybeta.co.uk. This withdraws health-data consent, deletes saved health history and related derived information, and keeps your sign-in account.

Delete my data and account

To request deletion of your data and account during this private beta, email privacy@betterdaybeta.co.uk. Full account deletion is not currently available through Profile & settings. BetterDay will verify your request and arrange removal of your saved information and sign-in account. This ends your access to BetterDay.

BetterDay must verify completion before describing the deletion as complete. If an older backup is ever restored, it remains isolated while deletion markers are matched and the deletion is reapplied; it is not returned to users first.

Your rights

You may ask for access to, correction of, or deletion of your personal information; withdraw consent; request a portable copy where applicable; restrict or object to processing where the law provides; and complain about how your information is handled. Contact the privacy address above first. You may also complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint.

Security and limitations

BetterDay uses invited authentication and account-scoped controls. No internet service can promise absolute security. Because this is a small private beta, please do not enter information you are uncomfortable testing with, urgent medical information, or information about another person.

Changes to this notice

The 30 October 2026 update clarifies the current routes for health-data and full account-deletion requests. It does not change consent version 2026-10-28.1, processing purposes or retention periods.

The 28 October 2026 update makes limited OpenAI sharing explicit in the consent choice and requires renewed agreement. The information sent, provider and purposes remain bounded as described above; this is not permission to send full wellbeing history or account details.

If the purposes or important handling arrangements change, BetterDay will update this notice and request fresh consent where required. The 26 September 2026 update added private-beta commercial-validation transparency. The 27 September 2026 clarification records optional meal-type structure but adds no new purpose or recipient. The 1 October 2026 clarification records that recurring-food coaching and Progress explanations now use fixed wording without an OpenAI wording request. The 5 October 2026 wording clarification replaces internal testing labels with plain language; the testing scope, uses of information and retention periods remain the same. The 15 October 2026 update explains Google Workspace operational correspondence, the planned limited backup role and mailbox/provider deletion limits. Those earlier notice updates did not alter the health-data purposes; the current explicit AI-sharing choice is recorded as consent version 2026-10-28.1. The consent version accepted with your account is recorded while your account exists.