OmniHealth is a personal health-journaling service that lets you record and understand your health in one place, and share it with the family, carers and clinicians you choose.
OmniHealth is operated by Omni Solutions and Services Ltd (“OmniHealth”, “we”, “us”), a company registered in England and Wales (company number 14911492), with its registered office at 74 Thamesbank Place, London SE28 8PS. For the purposes of UK data protection law — the UK GDPR and the Data Protection Act 2018 — we are the controller of the personal information described in this policy.
This policy explains what information we collect, why, who we share it with, how we keep it safe, and the rights you have. It covers the OmniHealth mobile app and the website at omnihealth.solutions.
When you create an account we collect your name and email address, and a securely hashed version of your password (we never store your password as plain text). To confirm it’s really you, we send a one-time code to your email. You may also tell us your country of residence, which we use to show the right currency and pricing.
OmniHealth is a health journal, so most of what we hold is health information you choose to enter. This is special-category data under UK data protection law and we treat it with particular care. It can include:
If you keep a journal for someone else — for example your child — the health information in it is about them, and we hold it on the same basis (see Section 4).
If you connect Google Health Connect, we read the health and fitness data types you explicitly grant and import them into your profile. See Section 5 for the full detail.
Some features (such as AI questions and automated summaries) use Omni credits, which come with a plan or can be bought in packs. In the iPhone and Android apps, purchases are made through Apple or Google; on the website, card payments are handled by Stripe. We never receive or store your full card details. We keep a record of your plan, credits, purchases and wallet transactions.
When you give or withdraw a permission — such as your health journal permission or the AI permission — we keep a record of who made the choice, which journal it covers, when, the exact wording and version you were shown, the app or browser used (including IP address and app version) and, for a journal kept on someone else’s behalf, the authority you confirmed. We keep this so we can show what was agreed.
To keep the service secure and working, we automatically record limited technical information such as your device type and app version, and security logs of requests to our system (including IP address and timestamps) used to detect abuse and troubleshoot problems.
We use your information only to run OmniHealth and the features you turn on: to create and secure your account; to store, display and chart the health data you record; to answer AI questions you ask; to power your Emergency Card; to let you share a profile with people you invite; to process wallet top-ups; and to keep the service safe and reliable.
Under the UK GDPR we rely on the following legal bases:
We do not use your health data for advertising, and we do not sell your personal information to anyone.
We don’t store or organise anything in a health journal until its owner has given explicit permission for that journal.
When we ask. The first time you open a journal — on the website or in the app — we explain what we store, why, and who receives information when you choose to share it, and ask you to agree. This is a separate choice from accepting our Terms, from marketing, and from the AI permission. Accepting our Terms has never counted as this permission.
A real choice. You can choose “Agree and continue” or “Not now”. If you choose “Not now”, nothing counts as consent and the journal stays closed — it needs this permission to work — but your account settings, support, and your privacy rights (including downloading or deleting your data) remain available.
Journals you keep for someone else. Each journal (profile) has its own permission. For a child’s journal, it is given by a parent, legal guardian or other person with parental responsibility. For another adult, it should be given by someone legally authorised to act for them (for example an attorney for health and welfare or a court-appointed deputy) or someone they have asked to keep the journal for them. We record who gave permission and the authority they confirmed. People you invite to a journal can use it only while its owner’s permission is in place.
Withdrawing. You can withdraw your permission for any journal you own at any time — as easily as you gave it — under Data & privacy rights on the website or Privacy in the app. When you withdraw, straight away we:
If you ask us to delete a withdrawn journal, its health information, attachments and the profile are permanently deleted after 30 days; you can cancel before then by giving permission again. Withdrawing doesn’t affect processing that took place before.
On Android, OmniHealth can connect to Health Connect to import health and fitness data you already keep on your device. This is entirely optional and off until you turn it on.
You choose what to share. When you connect, Health Connect’s own screen asks which data types to allow. We only ever request read access, and only to the health and fitness types relevant to your health journal. You can grant some, all, or none, and change your choice at any time.
The data types OmniHealth can read from Health Connect are:
These are read from whichever app or device writes them to Health Connect — for example a connected wearable such as a Fitbit — and only after you grant permission. We request read access only; OmniHealth never writes to Health Connect.
How we use it. Data you import is added to your OmniHealth profile as clearly labelled “(Google Health)” entries so it appears alongside your other readings in your River and charts. We use it solely to show you your own health information inside the app.
What we don’t do. In line with Google’s Health Connect requirements, we do not use Health Connect data for advertising or marketing, we do not sell it, and we do not share it with third parties for their own purposes. We do not transfer it to any AI model except where you personally ask an AI question and that reading forms part of the context (see Section 6).
Staying in control. You can stop sharing at any time in the Health Connect settings on your device, and you can ask us to delete the data we’ve already imported (see Your rights). Disconnecting stops future imports; it does not by itself remove readings already saved to your profile.
OmniHealth lets you ask an AI assistant questions about a health journal, and lets a journal’s owner turn on automated weekly or monthly AI summaries. To produce these, we send your question (if any) together with relevant information from that journal to a third-party AI provider (currently OpenAI).
Separate AI permission. Nothing is sent to the AI provider until you have given the AI permission, which is separate from your health journal permission. You can withdraw it at any time from the Ask AI screen; withdrawing also switches off automated summaries you set up. AI features also stop for any journal whose health journal permission has been withdrawn.
Before it leaves our system, the health context is pseudonymised — names, dates of birth, contact details and attachments are removed, and names and phone numbers are stripped from note text where we can detect them. The AI provider processes this to return an answer and does not use it to train its models on our instructions. AI answers are general information to help you understand your data; they are not a medical diagnosis and are not a substitute for advice from a qualified clinician.
You control who can see a health journal. When you create an invite code, the family member or carer you invite can see the parts of the journal their role allows. You can also grant a health professional or care provider access for a period you choose, and switch on connected tools that add readings to your journal. You can review who has access and remove it at any time, and all of this sharing ends if you withdraw your health journal permission.
We use a small number of trusted providers to run the service. They act as our processors, only handle data as needed to provide their service to us, and are bound to protect it:
Purchases made in the iPhone or Android app are processed by Apple or Google under their own terms and privacy policies; they tell us which purchase was made so we can apply it to your account.
We may disclose information if required by law, to comply with a legal obligation, or to protect the rights, safety and security of our users and the service.
The Emergency Card feature lets you create a link (and QR code) that a first responder can open without unlocking your phone or signing in. If you create such a link, the specific items you have chosen to flag as emergency-visible become viewable by anyone who has the link, for the period you set. You choose exactly what to include, you must confirm consent before a public link can be created, and you can switch a link off at any time. Links stop working automatically if the journal’s health journal permission is withdrawn. Please only include information you are comfortable being seen in an emergency.
In the iPhone and Android apps, plans and credit packs are bought through Apple or Google, who handle the payment; we receive confirmation of the purchase and apply it to your account. On our website, card payments are processed by Stripe, which is certified to the PCI-DSS security standard — your card details are entered on Stripe’s secure payment page and we never see or store your full card number. We keep a record of your purchases, plan, credits and wallet transactions.
We take the security of your health data seriously. Measures include encryption of data in transit (HTTPS/TLS), storing passwords only as salted hashes, per-request access checks so people only see profiles they’re authorised for, private storage for attachments served through short-lived signed links, and audit logging. No system can be guaranteed perfectly secure, but we work to protect your information and to respond promptly to any issue.
Our website uses a small number of cookies and similar technologies.
_ga and _ga_*, which last up to 2 years. They are not set unless you accept.We set Google Analytics up to protect your privacy: we never send it your health information, we remove anything after a “?” or “#” in web addresses and hide Emergency Card links, and we have turned off Google signals and advertising features. Google may process this data outside the UK under appropriate safeguards (see International transfers). Our legal basis is your consent.
You can change your mind at any time using the Cookie settings link at the bottom of every page. If you reject analytics cookies, we remove any that were set. The OmniHealth mobile apps do not use Google Analytics.
We keep your information for as long as your account is active and you continue to use OmniHealth.
OmniHealth is operated from the United Kingdom and we aim to keep your data within the UK or the European Economic Area. Some of our processors (for example, AI processing) may handle data in other countries, including the United States. Where personal data is transferred outside the UK, we rely on an appropriate safeguard recognised under UK data protection law, such as the UK International Data Transfer Agreement or an adequacy decision, so your data continues to be protected.
Under UK data protection law you have the following rights over your personal information. You can download your data, delete your account and withdraw your health journal permission yourself under Data & privacy rights on the website (account deletion and journal permission are also in the app, under Delete account and Privacy). For anything else, contact us using the details below.
Get a copy of the personal data we hold about you.
Correct information that is inaccurate or incomplete.
Ask us to delete your data (the “right to be forgotten”).
Receive your data in a portable, machine-readable form.
Limit or object to certain processing.
Withdraw your health journal or AI permission at any time, without affecting past processing.
You also have the right to complain to the UK’s Information Commissioner’s Office (ICO) at ico.org.uk if you’re unhappy with how we’ve handled your information — though we’d ask you to contact us first so we can try to help.
If you live outside the UK, you may also have rights under the data protection law of your country, and you can contact your local data protection authority where one exists. You can exercise any of these rights by contacting us, wherever you live.
OmniHealth is intended for adults. You must be 18 or over to create your own account. A parent or guardian may keep a health journal on behalf of a child in their care; they give the health journal permission for that child’s journal, and we record their authority (see Section 4). If you believe someone under 18 has created their own account without a guardian, please contact us and we will remove it.
We may update this policy from time to time as the service evolves or the law changes. When we make a significant change, we’ll update the “last updated” date above and, where appropriate, let you know in the app. Please check back occasionally.
For any question about this policy or your data — including to exercise your rights — please contact our privacy team:
Email privacy@omnihealth.solutions
Post Omni Solutions and Services Ltd, 74 Thamesbank Place, London SE28 8PS