PRIVACY POLICY
Last updated: 25 September 2026
Who we are
The Her Edit App is operated by Ugbah Ventures Ltd, a company registered in England and Wales (company number 16796778), trading as The Her Edit. Our registered address is 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.
For UK data protection law, Ugbah Ventures Ltd is the data controller for the personal information described in this policy.
You can contact us about anything in this policy at hello@theheredit.co.uk.
What this policy covers
This policy explains what personal information we collect when you use The Her Edit App, why we collect it, how we look after it, and what rights you have over it.
It covers the app at heredithub.com. Our website at theheredit.co.uk is covered by a separate policy here
The information we collect
Information you give us when you join
- Your name or preferred name
- Your email address
- The Edit you choose during onboarding (Health, Career, Money, Motherhood, Growth or Business)
- Any interests or focus areas you select for your profile
- Your time zone, so notifications reach you at the right hour
Information you create inside the app
This is the heart of the app, and most of it is sensitive. It may include:
- Health information — how you are feeling, your energy levels, symptoms you flag and their severity, medications you record and whether you have taken them, appointments, and notes you write for a consultant or doctor
- Journal entries and reflections — anything you write in the Journal, your weekly intentions, and your daily check-ins
- Financial information — savings goals, target amounts, and amounts saved, if you use the Money Edit
- Career and business information — goals, priorities and next steps, if you use those Edits
Information collected automatically
- Basic technical information needed to run the app, such as your device type and browser
- If you enable notifications, a push subscription token generated by your browser
- Error logs if something goes wrong, so we can fix it
App Store purchases. If you become a member in our iPhone app, payment is handled by Apple. We use RevenueCat, Inc. to confirm your subscription with Apple. RevenueCat receives an anonymous member ID and your purchase details (plan, dates and status) — never your journal, health or other personal content. Apple and RevenueCat act as our processors for this purpose.
What we do not collect
We do not use advertising trackers. We do not sell your information to anyone. We do not build advertising profiles from what you write.
Health information and why we ask for your consent
Under UK GDPR, information about your health is special category data and is given extra protection in law.
We can only process it with your explicit consent, which you give the first time you open the Health Hub. You are never required to use the Health Hub, and you can stop at any time.
You can withdraw your consent whenever you like, from the Legal section of your Profile settings. Withdrawing consent deletes your health entries and closes the Health Hub. It does not affect your journal, goals or other records, and it does not affect anything we did lawfully before you withdrew it.
We use your health information only to show it back to you inside the app, to generate the summaries and patterns in your check-in history, and to produce the PDF report if you choose to create one. We do not share it with anyone.
Our lawful bases
| What we do | Lawful basis |
|---|---|
| Creating and running your account | Performance of a contract with you |
| Storing your journal entries, goals and reflections | Performance of a contract with you |
| Storing your health information | Explicit consent (Article 9(2)(a)) |
| Sending you notifications you have enabled | Consent |
| Keeping the app secure and fixing faults | Legitimate interests |
| Responding when you contact us | Legitimate interests |
Who can see your information
You can. Everything you write is visible only to you inside your own account.
Our technology providers can hold it, but do not read it. We use:
- Supabase to store your data, hosted in London (eu-west-2)
- Lovable as the platform the app is built and hosted on
- Apple and Google push services to deliver notifications, if you enable them. These services receive only the notification itself, never your entries.
Each of these acts as a data processor on our behalf, under a contract that requires them to keep your information secure and to use it only for the purposes we specify.
Nobody else. We do not share your information with advertisers, data brokers, insurers, employers, or anyone else. The only exception is if we were legally required to disclose it — for example, by a court order.
Your PDF report. If you generate a report to share with a doctor or consultant, that file is created on your device and shared by you. We do not send it anywhere on your behalf.
Where your information is stored
Your data is stored in the United Kingdom. Our database is hosted in London, and your information does not leave the UK.
If that ever changes, we will tell you before it does, and we will put appropriate safeguards in place.
How long we keep it
We keep your information for as long as you have an account with us.
When you delete your account, your information is permanently deleted from our systems, including your journal entries, health records, goals and profile. This is a genuine deletion, not a hidden archive. Some information may persist briefly in routine backups before being overwritten.
If your account is inactive for more than two years, we will contact you before deleting it.
How we protect it
- Every piece of your data is separated from every other user’s by database-level access controls, so no one else using the app can reach it
- Your data is encrypted in transit and at rest
- Access to the production database is limited to those who need it to operate the app
- We commissioned an independent security review of our database architecture in 2026 and act on what it finds
No system is perfectly secure, but we take this seriously, particularly given what you trust us with.
Your rights
Under UK data protection law you have the right to:
- Access a copy of the information we hold about you
- Correct anything that is wrong — you can edit most of this yourself in the app
- Delete your information, in full, at any time
- Restrict how we use it
- Portability — receive your information in a usable format
- Object to processing based on legitimate interests
- Withdraw consent at any time, including for health information and notifications
To exercise any of these, email hello@theheredit.co.uk. We will respond within one month.
If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
Children
The Her Edit App is intended for women aged 18 and over. We do not knowingly collect information from anyone under 18. If you believe a child has given us their information, please contact us and we will delete it.
Cookies and similar technologies
The app uses only what it needs to work — storing your login session so you stay signed in, and remembering your preferences. We do not use advertising or tracking cookies.
Changes to this policy
If we change this policy in a way that materially affects you, we will let you know by email or in the app before the change takes effect. The date at the top shows when it was last revised.
A note from Fiona
I built this app because I needed it, and because I wanted somewhere to keep the details of my own health that felt private and calm rather than clinical and exposed.
What you write here is yours. I have tried to build this so that it stays that way — architecturally, not just as a promise in a policy. If you ever have a question about how your information is handled, write to me directly and I will answer it honestly.