Privacy Policy
This Privacy Policy explains how Eclo Health LTD (“we”, “us”, “our”, or “Eclo”) collects, uses, and protects information when you use the Eclo mobile application (the “App”). We are based in the United Kingdom, and we act as the data controller for the personal data described below.
Eclo is not a medical service. Eclo provides educational information about dietary supplements based on published evidence. It does not provide medical advice, diagnosis, or treatment, and it is not a substitute for professional healthcare. See our Terms of Service for more on this.
1. Who we are and how to contact us
Eclo is operated by Eclo Health LTD, a company registered in England and Wales under company number 17306736, with its registered office at 124 City Road, London, EC1V 2NX.
For any privacy questions or to exercise your rights, contact us at ismail@eclohealth.com.
2. The information we collect
Information you provide
- Account information: your email address, used to create and sign in to your account (via one-time email codes or, where offered, Google or Apple sign-in).
- Your supplement stack: the supplements you add, their doses, timing, and the goals you associate with them.
- Intake logs: records of when you mark supplements as taken or skipped.
- Outcome logs: optional self-reported ratings (such as sleep, energy, and focus) that you choose to enter.
- Preferences: settings such as your chosen currency and reminder configuration.
Information collected automatically
- Usage and analytics data: how you interact with the App (screens viewed, features used), collected to understand and improve the product.
- Diagnostic data: crash reports and performance data to help us find and fix problems.
- Device and technical data: device type, operating system version, and similar technical identifiers.
Information from third parties
- Authentication providers: if you sign in with Google or Apple, we receive basic account identifiers from them to authenticate you. We do not receive your password.
- Payment and subscription status: when you purchase a subscription, Apple processes the payment. We receive confirmation of your subscription status, not your payment card details.
A note on health-related information. Some information you choose to enter — such as the supplements you take and your self-reported outcome ratings — may relate to your health or wellbeing. We treat this information with particular care. Where this constitutes special category data under UK data protection law, we process it on the basis of your explicit consent, given when you choose to enter it, and you can withdraw that consent at any time by deleting the data or your account.
3. How we use your information
We use your information to:
- Provide the App’s core features — building your stack, generating your analysis, sending reminders, and showing your logs and reviews.
- Operate your account and authenticate you when you sign in.
- Process and manage your subscription and trial.
- Understand how the App is used so we can improve it, fix problems, and develop new features.
- Communicate with you about the service, including important changes and support requests.
- Comply with our legal obligations and enforce our Terms of Service.
4. Our legal bases for processing (UK GDPR)
We rely on the following legal bases:
- Contract: to provide the App and the features you ask for, and to manage your account and subscription.
- Consent: for optional health-related outcome logging and for any non-essential analytics where consent is required. You may withdraw consent at any time.
- Legitimate interests: to improve and secure the App, prevent misuse, and understand product usage, balanced against your rights.
- Legal obligation: where we must process data to comply with the law.
5. How we share your information
We do not sell your personal data. We share information only with service providers who help us run the App, and only as needed. These include:
- Cloud hosting and database providers that store your data securely on our behalf.
- Analytics and diagnostics providers that help us understand usage and fix problems.
- Authentication providers (Google, Apple) where you choose to use them.
- Apple, which processes subscription payments and manages billing.
- Email delivery providers used to send sign-in codes and service messages.
We may also disclose information where required by law, to protect our rights, or in connection with a business transfer. We require our service providers to protect your data and to use it only for the purposes we specify.
6. International transfers
Some of our service providers may process data outside the United Kingdom. Where they do, we put appropriate safeguards in place — such as UK-approved standard contractual clauses or transfers to countries with adequacy status — so that your data receives an equivalent level of protection.
7. How long we keep your information
We keep your personal data for as long as your account is active and as needed to provide the App. If you delete your account, we delete or anonymise your personal data within a reasonable period, except where we must retain certain information to comply with legal obligations, resolve disputes, or enforce our agreements.
8. Your rights
Under UK data protection law, you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request deletion of your data (“right to be forgotten”).
- Object to or restrict certain processing.
- Request portability of data you provided to us.
- Withdraw consent at any time, where we rely on consent.
You can exercise many of these directly in the App (for example, by editing or deleting your stack, logs, or account). To make any other request, contact us at ismail@eclohealth.com. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.
9. Security
We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and reputable infrastructure providers. No system is perfectly secure, but we work to protect your information and to address any issues promptly.
10. Children
Eclo is not directed to children and is intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us and we will delete it.
11. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the App or by email. The “Last updated” date at the top shows when it was last revised.
12. Contact us
If you have any questions about this Privacy Policy or how we handle your data, contact us at ismail@eclohealth.com.