PRIVACY & YOUR INFORMATION

Clear about privacy.

This website

This version has no accounts, enquiry forms, advertising tools, or analytics scripts. The preparation checklist runs in your browser. Its selections are not saved or transmitted by the website code.

This website is hosted on GitHub Pages. Cloudflare provides domain registration and DNS, and handles redirects from roomtosay.app. Visiting the website or a redirect involves requests to the relevant providers, which may process technical information such as your IP address and request details. See GitHub’s privacy statement and Cloudflare’s privacy policy.

Designed with your privacy in mind

Privacy is a design priority as we build Room to Say. Our planned approach is: your information stays on your device unless you enable private iCloud sync. The features below are approved development plans, not confirmed as implemented or available.

Local use and optional private iCloud sync

We plan to support offline, local-first use without a separate Room to Say account or Sign in with Apple. If you choose private iCloud sync, it will use your existing iCloud account and Apple’s CloudKit private database.

Sync is intended to carry notes, doctors, conditions, appointments and history, briefs, saved summaries, and answers across your devices and device changes. Migration and restoration on a second device still need implementation and testing. Sync is not an independent backup, and we cannot yet promise recovery, unlimited storage, or end-to-end encryption.

On-device summaries and sharing

AI summary drafts are planned to run on your device, without cloud AI. Availability will depend on device, operating system, and language support. Drafts will reference your source notes and need your review and editing before sharing. A manual brief will remain an option.

Using the app will not automatically send information to a clinician. You choose what to include and what to share. Optional condition tags will be entered by you; the app is not intended to infer diagnoses.

Optional app lock

We plan an optional native Face ID or Touch ID lock with device-passcode fallback, rather than a separate app PIN or account login. Concealed app-switcher previews and discreet notifications and widgets are also planned. These protections are not yet verified.

Recovery plans

Encrypted export and import are part of the recovery plan, but are not yet verified as implemented. We will explain the available sync, export, and recovery options before launch.

The Room to Say app

The app is in development. Its privacy policy needs to explain the information it processes, where that information is stored, who can access it, and the choices available to you. We will publish those details before the app launches.

This website does not ask you to submit health information.

What needs to be confirmed before launch

• The identity and contact details of the organisation responsible for the app and website.
• Health notes, appointment details, optional photos and condition tags, iCloud-related processing, and any other information the app processes. No separate Room to Say account is planned.
• Storage, backup, sync, exports, and any AI processing, including third-party services where used.
• Why information is used, who receives it, and where it is processed.
• Retention, deletion, consent, and the choices and rights available to users.
• How use by young people or carers is handled.
• The live website hosting provider and its data practices.

Privacy enquiries

For privacy and data questions, email privacy@roomtosay.org. Please avoid including sensitive health information in your first message.

Emails sent to our published addresses are forwarded through Cloudflare Email Routing to a Gmail inbox. The information you choose to send is processed by those email services, separately from app notes. The website itself has no submission form.