Privacy policy
Last updated: 23 September 2026. This version covers our first pilot, running from 14 to 28 October 2026.
The short version
- Your diary is yours. We only collect what the app needs to work.
- Nobody reads or reviews your diary entries. The app doesn't analyse your health or alert anyone.
- Your information is stored securely in the EU (Ireland).
- We never sell your information or use it for advertising, and we don't use any tracking or analytics.
- You can delete your account and everything in it whenever you want.
- Who we are
- What we collect
- Why we use it
- Nobody is watching your diary
- Who can access it
- Where it's kept and how
- Research
- How long we keep it
- Your rights
- Changes to this policy
Who we are
Perrin Companion is provided by NBH Tech Ltd (trading as NBHTech), a company registered in England and Wales, company number 17398218, at 379 Stockport Road, Altrincham, WA15 7UR. We decide how your information is used, which makes us the "controller" under data protection law.
We have applied to register with the Information Commissioner's Office (ICO) and will add our registration number here once it's issued.
Questions about your information? Email hello@nbhtech.co.uk.
What we collect
Your account
Your email address and the details needed to sign you in securely. Passwords are protected by our sign-in provider, Supabase, and we can never see them.
Your profile
To get started we ask for your first name, your sex assigned at birth, whether you're having Perrin Technique treatment, and whether you've been diagnosed. Depending on your answers, we may ask a follow-up question or two, such as who diagnosed you or when your treatment started.
You can also choose to add your date of birth, gender identity, height, weight and more about your treatment and diagnosis. These are optional. You can change or clear any profile detail at any time from your Profile page.
Your diary
The check-ins, symptoms, notes and treatment records you choose to enter.
A one-off questionnaire
At the start, everyone fills in the PFRS (Profile of Fatigue Related States), a standard 54-question symptom questionnaire that takes about 10 to 15 minutes. It forms the starting point of your diary.
Sign-in information
When you sign in, our sign-in provider records your IP address, what kind of device and browser you're using, and when you signed in. This keeps your account secure.
A note on health information. Your symptoms, treatment details and questionnaire answers are health information, which the law protects more strongly than other data. Please don't write other people's names or personal details in your notes.
Why we use it
We use your information for one thing: to give you a personal symptom diary that works. That means storing what you enter, showing it back to you, keeping your account secure and replying if you contact us.
Legally, we rely on your consent, which you give when you sign up (UK GDPR Article 6(1)(a)). For your health information, we rely on your explicit consent (Article 9(2)(a)).
Nobody is watching your diary
We don't read your entries to check on your health, look for problems or decide whether you need help. The app doesn't calculate scores, interpret your entries or send health alerts, and nothing is passed to a practitioner.
That also means the app isn't a way to ask for help. Please don't use a diary entry to ask for medical or emergency help. Contact your GP, NHS 111, or 999 in an emergency.
Who can access it
To keep the app running, Sean Bourke, Director of NBH Tech Ltd, can access the database directly, for example to fix a fault or carry out a deletion request. This access is never used to read, assess or act on what you've written.
We also use a few trusted companies to run the app. They only handle your information on our instructions:
| Company | What they do |
|---|---|
| Supabase | Stores the app's database and handles signing in. Holds your account, profile, diary and questionnaire information. |
| Lovable | Hosts and runs the app. |
| Cloudflare | The network Lovable's hosting runs on. Cloudflare also hosts this website. |
| GoDaddy | Sends our emails, such as sign-up confirmations and password resets. Sees your email address. |
| OpenStreetMap | Provides the map on the app's Care tab. If you open the map, your device loads the map images from OpenStreetMap, which sees your IP address, just as it would on any website with a map. |
We don't use analytics, tracking or advertising tools. We will never sell your information or share it with advertisers. We'd only share it with anyone else if the law required us to, and then only what's required.
Where it's kept and how we protect it
Our database is in the EU, in Ireland (Amazon Web Services, eu-west-1). Lovable and Cloudflare run their services on networks around the world.
Your information is encrypted while it travels over the internet and while it's stored. The database is set up so that each person's information can only be reached through their own account. No system is ever completely secure, but we take this seriously.
Research
We are not using or sharing anyone's diary or questionnaire information for research.
Dr Raymond Perrin is planning a wider research programme that might, in future, invite Perrin Companion users to contribute anonymised information. If that happens, we'll explain exactly what it involves and ask for your permission separately first. Saying no will never affect your use of the app.
How long we keep it
| Information | How long |
|---|---|
| Account, profile, diary and questionnaire | Until up to 28 days after the pilot ends on 28 October 2026. Everything is deleted by 25 November 2026 at the latest, or sooner if you delete your account. |
| Backups | Kept for a short time (currently up to 7 days) and then replaced. Deleted information stays in a backup until that backup is replaced. We only use backups to repair the app after a fault. If we ever restore one, we delete any information that should already have been deleted straight away. |
| Deletion records | When an account is deleted, we note only the date and time, with no name, email or account ID. We also keep a separate list of pilot account IDs until the backups have all been replaced, so that we can repeat deletions after a restore if needed. Then we destroy the list. |
To delete your account yourself, go to Profile → Privacy & safety → Request data deletion in the app. See Delete your account for the full steps.
Your rights
You can ask us to:
- send you a copy of your information
- correct anything that's wrong
- delete your information
- limit how we use it
- give you your information in a format you can take elsewhere
You can also withdraw your consent at any time by emailing us or deleting your account. The diary can't work without using your health information, so withdrawing consent means we'll stop providing the diary to you.
Email hello@nbhtech.co.uk and we'll respond within one month. If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office. You don't have to come to us first.
Changes to this policy
If we make an important change, we'll tell you before it takes effect. The date at the top shows when this policy was last updated.