Privacy policies

📋 General privacy information

GP Accipe Ltd (company number 16653943, registered in England & Wales) is the data controller for both GP Accipe and DermWizard mobile applications. We are committed to protecting your privacy and handling personal data transparently in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Protection Officer & contact

If you have any questions, wish to exercise your rights, or request a copy of your data, please contact:
📧 support@accipe.co.uk
✉️ GP Accipe Ltd, 8 Richards Avenue, Romford, RM7 9ES, United Kingdom.

Your rights under UK GDPR

You have the right to:

• Access – request a copy of the personal data we hold about you.
• Rectification – ask us to correct inaccurate or incomplete data.
• Erasure – request deletion of your personal data, subject to legal obligations.
• Restrict processing – temporarily block processing while a query is resolved.
• Data portability – obtain and reuse your data for your own purposes.
• Object – object to processing based on legitimate interests or direct marketing.
• Withdraw consent – at any time, where processing is based on consent (e.g. push notifications or personalised ads).

To exercise any right, contact us. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) – ico.org.uk.

Data security & retention

We rely on enterprise-grade infrastructure (Google Cloud / Firebase) to store data securely. Retention periods:

• Account data: kept while your account is active, plus a short period to allow reactivation.
• User-generated content: may be retained anonymously after account deletion for service improvement.
• Advertising IDs & analytics: retained as long as required for operational analytics and ad fraud prevention, typically no longer than 26 months unless required by law.

📊 Data collection, analytics & advertising (both apps)

This section applies equally to GP Accipe and DermWizard. It explains how we collect technical data, analytics, and advertising information automatically when you use any of our apps.

1. Information collected automatically (device & usage)

• Device identifiers: IP address, Advertising ID (Apple IDFA / Android AAID), Firebase installation ID.
• Usage data: screen views, feature interactions, session duration, crash reports (collected anonymously via Firebase Analytics).
• Device metadata: device model, operating system version, language/region settings, app version.

This data helps us understand app performance, fix bugs, and improve user experience. It does not include any patient-identifiable or clinical data you might input into the apps.

2. Advertising & consent (Google AdMob)

We use Google AdMob to display advertisements, which helps keep both GP Accipe and DermWizard free to use. AdMob may collect and process the data listed above (especially Advertising ID and IP address) to serve ads.

• Personalised ads: With your explicit consent (via the Google UMP consent form shown on first launch), Google may use your advertising ID and interests to show relevant ads across apps.
• Non-personalised ads: If you decline consent or reset your preferences, ads will be context‑based (e.g. related to app content) and will not use your browsing history or profiling.
• Data shared with Google: Device ID, IP address, advertising ID, and ad interaction data are shared with Google for ad delivery, frequency capping, and fraud prevention. Google Privacy Policy applies.

Managing consent: You can change your ad preferences at any time:

• Open the app (GP Accipe or DermWizard) → Settings → “Manage Ad Privacy” or “Privacy choices”.
• Alternatively, reset your Advertising ID in device settings (iOS: Settings → Privacy → Advertising → Reset Advertising Identifier; Android: Google Settings → Ads → Reset advertising ID).

Withdrawing consent will not remove ads but will make them non-personalised. Your choice is stored and respected across sessions.

3. Analytics & crash reporting

We use Firebase Analytics and Crashlytics to monitor app health and aggregate usage patterns. All analytics data is pseudonymised and cannot be used to identify you individually. You can opt out of analytics via your device settings (Limit Ad Tracking on iOS / Opt out of Ads Personalisation on Android), which also limits analytics collection.

🩺 GP Accipe app GP Toolkit

Last updated: 13 April 2026

This section supplements the general privacy information and the data collection & advertising section above. In case of conflict, this app-specific section provides additional detail.

1. Information you provide (GP Accipe specific)

• Account registration: First name, last name, email address, professional role (e.g. GP Partner, trainee), NHS Clinical Commissioning Group (CCG) or Health Board.
• Content contributions: Local referral pathways (surgery name, address, ODS code, official NHS email, service type, privacy status). Referral hints (text & optional images). Ethical & admin hints (title, content, tags).
• Contact form & support: name, email, subject, message (used only to respond).
• Subscriptions to surgeries/pathways: we store which content you follow to send relevant updates via Firebase Cloud Messaging (with your consent).

2. How we use GP Accipe data

• Create/manage your account and provide personalised content (role‑based views).
• Display “Added by [name]” alongside community contributions (moderated before publication).
• Send service notifications (e.g. new hints, referral pathway updates for managers).
• Improve the app using aggregated, de-identified usage data (as described in the general data collection section).

3. Legal basis (UK GDPR) for GP Accipe processing

• Contract performance: account creation, core toolkit features.
• Consent: push notifications and user‑generated content publication (withdraw by unsubscribing or editing profile).
• Legitimate interests: community feature management, app security, usage analytics (balanced with your rights).

4. Data sharing & third parties (GP Accipe)

• Google Firebase (Firestore, Authentication, Functions, Messaging) – core backend.
• Mailjet / SendGrid – transactional emails (verification, contact form replies).
• Ko-fi – donations (their privacy policy governs donation data).

We do not sell your data. Your contributions remain visible to other GP Accipe users as per community guidelines.

5. Your choices in GP Accipe

You can edit your profile, unsubscribe from content, or delete your account directly inside the app (Settings → Delete Account). For full data export or erasure requests, email support@accipe.co.uk.

📌 Note on advertising & analytics: GP Accipe implements the common data collection and AdMob advertising described in the general data collection & ad section above. Your ad preferences are managed there.

🔬 DermWizard app GP Dermatology Toolkit

Effective date: 13 April 2026

This section supplements the general privacy information above. DermWizard does not require a user account, and no patient-identifiable data is ever stored on our servers.

1. What DermWizard collects locally & online

• Local-only clinical data: Any dermatology selections (morphology, body site, symptoms) made during a consultation remain strictly on your device – they are not uploaded to any server.
• Automated data: As described in the general data collection & advertising section, we collect device identifiers, usage analytics, and advertising IDs for AdMob and crash reporting.

2. Third-Party Artificial Intelligence (AI) Services

DermWizard uses optional AI features that transmit limited, anonymised data to third-party providers. These features are only activated when you explicitly choose them.

• Google Gemini API (Google LLC): Used for the "Image Analysis" mode. High-resolution images of skin lesions (no patient identifiers) are transmitted to Google’s servers for visual processing. Under our agreement, data is not used to train foundation models and is retained for up to 30 days for abuse monitoring.
• DeepSeek API (DeepSeek-AI): Used for the "AI Ranking" mode. Clinical signs, symptoms, and morphology descriptions (anonymised, no PII) are transmitted to generate a ranked list of differential diagnoses. API inputs are not used for model training.

Data minimisation: You are instructed never to upload identifiable patient information (names, DOB, NHS numbers). Both providers comply with GDPR standards for data processing agreements.

3. Atlas Section and Medical Images (DermNet & Public Domain)

• Image sources: CDC Public Health Image Library (public domain), NLM Open-i (open access/CC licenses), Wikimedia Commons (CC licenses), and DermNet (used with permission).
• User restrictions: Images are for in-app educational use only; bulk downloading or commercial reuse is prohibited.

4. Advertising & analytics (reference to general section)

As detailed in the general data collection & advertising section, DermWizard uses Google AdMob for ads and Firebase Analytics for aggregated usage insights. You can manage personalised ad consent at any time via the in-app “Manage Ad Privacy” button (Settings menu).

5. Your rights in DermWizard

• Since DermWizard does not store personal accounts, there is no account data to delete.
• To exercise rights regarding analytics or advertising data (e.g., request information about your Advertising ID processing), contact support@accipe.co.uk.
• You may reset your Advertising ID in device settings to limit tracking.

6. Medical disclaimer (DermWizard)

DermWizard is an educational support tool only. It does not provide definitive diagnoses. All clinical content is derived from the Primary Care Dermatology Society (PCDS) and other publicly available dermatology references. Healthcare professionals must exercise their own clinical judgment; patients should always seek professional medical advice.

7. Children’s privacy

DermWizard is intended for use by healthcare professionals and is not directed at individuals under 16. We do not knowingly collect data from minors.