Privacy Policy
Last updated: August 3, 2026
Who we are
Healthfolio (healthfolio.online) is operated by COGNERA LLP, a limited liability partnership registered in England and Wales, company No. OC457887. The data controller for your personal data is COGNERA LLP, registered office: 3rd Floor, Suite 207, Regent Street, London, W1B 3HH, United Kingdom. If anything in this policy is unclear, write to us at support@healthfolio.online.
What we collect
- Laboratory documents you upload: photos or PDF files of lab reports.
- Values you enter manually (for example, individual lab results).
- Your email address, if you choose to save it — used to send you a sign-in link to your card.
- Anonymous usage analytics (which screens are used, without the content of your answers or documents).
Legal basis and your consent
Your health answers and any lab reports you upload are health data — a special category of personal data under UK and EU GDPR (Article 9). We process them only with your explicit consent (Article 9(2)(a)): you give it when you accept the consent screen before the questionnaire, and separately by ticking the consent box before your first document upload. We record which version of the consent text you accepted and when.
You can withdraw your consent at any time — we then stop processing your health data. Withdrawal does not affect processing carried out before you withdrew. You can delete your data yourself from your card, or by emailing support@healthfolio.online; deletion removes your answers, uploaded documents, extracted values, and card facts.
Health information (Personal Screening Plan)
When you use the screening quiz and plan, we collect the answers you choose to give: your age band and sex, height and weight, symptoms you select, conditions a doctor has told you about, procedures and surgeries you report, cancer and cardiovascular history among close relatives, smoking history, and when you last had specific checks. If you choose to upload a lab report, we also process the values and reference ranges it contains; uploading is always optional and you can delete an uploaded document at any time.
We use this information for one purpose: to build, personalize, and update your plan and the chat that supports it. We do not sell this information, we do not use it for third-party advertising, and we never share your health answers, your uploaded results, or anything derived from them — including counts, categories, or scores — with advertising platforms such as Meta or Google, in any form. Payments are processed by Stripe; Stripe receives your payment details, not your health answers. You can delete your data at any time from your plan settings or by emailing support@healthfolio.online; deletion removes your card, answers, uploaded documents, and plan.
Health and medication information (GLP-1 Companion Plan)
When you use the GLP-1 Companion quiz and plan, we collect the answers you choose to give: symptoms you select, appetite and eating patterns, activity, age band, height and weight, your goals, and information related to your GLP-1 medication — its form (weekly injection, daily pill, compounded) and how long you have been taking it. We never ask for or store dosage amounts. We use this information for one purpose: to build, personalize, and update your plan and the chat that supports it. We do not sell this information, we do not use it for third-party advertising, and we never share your health answers with advertising platforms (such as Meta or Google) in any form. Payments are processed by Stripe; Stripe receives your payment details, not your health answers. You can delete your data at any time from your plan settings or by emailing support@healthfolio.online; deletion removes your card, answers, and plan.
Processors we use
- Vercel — website hosting.
- Supabase — database and file storage (your card, documents and extracted values).
- Resend — transactional email (sign-in links).
- PostHog — anonymous usage analytics (processed in the EU).
- Stripe — payment processing (Stripe receives payment details, not your health data).
- Anthropic — AI processing: used to read the text of documents you upload, to render report and chat text, and to generate general educational explanations of lab markers that fall outside our core set. These AI explanations describe what a marker measures as general information — they are not a diagnosis and are not verified by a doctor; only the marker name and unit are sent, never your specific value.
Advertising conversion measurement
If you arrive from one of our ads and make a purchase, we report that purchase to the advertising platform the ad ran on (Google Ads, Meta) server-to-server, so the platform can measure which ads lead to purchases. This report contains only: the fact of the purchase, the amount paid and its currency, the click identifier the platform attached to its own ad link, and a one-way hash (SHA-256) of your email address used solely to match the purchase to the ad click — it cannot be reversed back into your address. It never contains health data: no documents, no lab values, no answers, and nothing about how you use the service.
International transfers
Some of our processors store or process data outside the United Kingdom. Where that happens, the transfer is protected by safeguards recognised under UK GDPR: the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, or an applicable UK adequacy decision. Copies of the relevant safeguards are available on request at support@healthfolio.online.
Cookies
Our analytics is cookieless: it runs in memory, sets no cookies and stores nothing on your device. The only cookie we set is a functional one that remembers your language choice; it is not used for tracking or advertising and does not require consent.
How long we keep data
Your card and documents are kept for as long as you use the service. If you delete your card or ask us to delete it, the data is removed from our systems; backups expire on a rolling basis.
Your rights
You can request access to your data, a copy of it (export), correction, or deletion at any time — with the in-app controls or by emailing support@healthfolio.online. We answer within 30 days.
Your right to complain
If you are unhappy with how we handle your data, please tell us first at support@healthfolio.online— we will do our best to put it right. You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk.