Privacy, in plain words

This page explains what MyPatchly collects, on this website and in the MyPatchly app on Telegram, where it goes, and how to make us forget it.

Who we are

MyPatchly is made by Hushful Ltd, a company registered in England and Wales (company number 16748595) and registered with the UK Information Commissioner’s Office as a data controller (registration ZC100500). If anything on this page needs a human, write to info@hushful.ai.

What we collect, and when

• Browsing this website: our host, Cloudflare, handles technical details such as your IP address in order to deliver the pages. We count visits with Plausible, which uses no cookies and stores no personal information.
• Arriving from one of our ads: if you click a MyPatchly ad on Facebook or Instagram, we tell Meta when you arrive on this website from that ad, when you start the quiz and when you join, so we can see which ads work. We don’t do this if you’re in Washington, Nevada or Connecticut, or if we can’t tell which US state you’re in. Each time, we send the ad’s click reference (from the link you clicked), the time, a reference number for the event, our website address, your IP address and your browser’s user-agent string, and we ask Meta to apply its Limited Data Use setting. We never send your name, email, quiz answers or anything you log. We don’t put a Meta pixel on our website, and we don’t set Meta cookies or use your browser’s storage for this. We don’t keep a separate copy of the events we send Meta (we keep only the ad’s click reference, for up to 7 days, as explained below); Meta keeps the events under its own policy. We do this because we have a legitimate interest in knowing which ads work. To stop Meta linking this kind of activity to you, use the “Your activity off Meta technologies” setting in your Facebook or Instagram account. You can also object by emailing info@hushful.ai.
• Your personal game link: when you join, we give you your own link into MyPatchly. When you first open the game with it, the game tells our website which link was used and when, and we keep that with your sign-up (see “How long we keep it”). We do this because we have a legitimate interest in knowing which sign-ups become players and which ads and pages bring them. If you came from one of our ads, with the same exceptions as above (Washington, Nevada, Connecticut, or if we can’t tell which US state you’re in), we also keep the ad’s click reference with your sign-up for up to 7 days, and when you first open the game we tell Meta: we send the click reference, the time, a reference number for the event and the browser user-agent string recorded when you joined, and ask Meta to apply its Limited Data Use setting. We never send Meta your name, email, quiz answers, or any other activity or logs from the game.
• Joining on mypatchly.com: your first name and email, your quiz answers and garden result, which link brought you here, the date and time, and two things your browser sends automatically (its technical name and the country your connection comes from).
• Using MyPatchly in Telegram: your Telegram user ID and display name; what you log (food photos and descriptions, mood, energy, mental clarity and feelings); readings you add from your own glucose or ketone monitor, including the screenshots; and how you use your garden.
• Posting in the Garden Gate: if you join our Telegram group for testers, our helper account in the group collects what you post there, including earlier messages from the group’s history, with your Telegram display name and the time. We use it to fix problems and improve MyPatchly. Other members can see your posts too, so please keep health details and other personal information out of the group. We delete what we keep within 12 months of the beta ending, unless the law requires us to keep it longer, and you can ask us to delete your messages sooner.
• Feedback summaries: to write private feedback summaries for our team, we send the text of your Garden Gate posts, with names removed, to Anthropic’s API (Claude), which processes it for us in the United States. Anthropic doesn’t use this data to train its models and keeps it only for a short period to check for misuse.
• Check-ins: if you take part, your answers to five short questions about everyday life, at the start and end of the beta.
• Monitor requests: your answers to the suitability questions. In the UK, your name, delivery address and, if you give one, a phone number. In the US, your name, your email address and the receipt for the monitor you buy, which you email to us.
• Partner seasons and pilots: if you opt in, that you took part. Partners only ever receive group totals, never anything about you.

Why we use it, and on what basis

• To run MyPatchly and your garden: because you asked us to (UK GDPR Article 6(1)(b), providing the service).
• To show your food, mood and readings back to you: this includes information about your health, so we ask for your explicit consent before you start logging and use it only for the purposes on this page (Articles 6(1)(a) and 9(2)(a), explicit consent). You can withdraw consent at any time, without any penalty, by asking us to delete your data.
• To understand whether the beta works: we analyze records under a user number rather than your name, and report only group results. Check-in answers are used the same way, with your consent.
• To email you about MyPatchly: with your consent. Every email has an unsubscribe link that works first time.
• To send you a monitor, or pay you back for one: only at your request. In the UK we post it to you and delete your address and phone number once it has been delivered. In the US you buy the monitor yourself and email us the receipt, and we pay you back through Wise, our payment provider. We give Wise your name, email address and the amount; Wise then asks you for your bank details directly and handles them under its own privacy notice. We never see your bank details.

You don’t have to give us anything. Without an email we can’t invite you, and without logs there’s no garden to grow.

MyPatchly shows your information back to you. It does not diagnose, interpret or advise, and it makes no automated decisions about you.

Reading your photos and screenshots

When you send a food photo or a monitor screenshot, our service passes it to an AI model to read what is in it, then returns the result to you. Our own service does not keep the image. We use Google’s Gemini on a paid Google account: under Google’s terms for paid use, it does not use what you send to train or improve its models, and keeps it for up to 55 days only to detect misuse. If Gemini is unavailable, OpenAI reads it instead and keeps it for up to 30 days to detect misuse.

Who helps us

• Telegram, where MyPatchly runs. Your use of Telegram itself is covered by Telegram’s own privacy policy.
• Google Firebase, which stores your garden and your logs.
• Render, which runs the service that reads food photos and monitor screenshots.
• Google (Gemini) and OpenAI, which read the photos and screenshots, as described above.
• Cloudflare, which hosts this website and stores sign-ups, check-in answers and monitor requests. We keep an encrypted backup copy of these.
• Kit, which sends our emails.
• Wise, our payment provider, which sends US monitor pay-backs and handles your bank details under its own privacy notice.
• Anthropic, which writes private summaries of Garden Gate feedback for our team, with names removed.
• Plausible, which counts website visits without collecting personal information.
• Meta Platforms Ireland Limited, for the ad measurement described above. We and Meta are joint controllers for sending this information; Meta then uses it as an independent controller under its privacy policy. Meta may process it outside the UK, including in the United States.

Some of these companies process information outside the UK, including in the United States. Where they do, we rely on the transfer safeguards approved under UK law that are set out in their data processing terms. Email us for details of the safeguards for any provider.

How long we keep it

Our starting point, which we are confirming during the beta, is to keep your information while you use MyPatchly and for up to 12 months after you last use it, then delete it. You can ask us to delete it sooner at any time, and we act on requests within one month. Copies held by our AI providers to detect misuse expire on their own schedules, described above. UK monitor delivery addresses and phone numbers are deleted as soon as the monitor arrives. Records of US monitor pay-backs, with their receipts, are part of our company accounts: UK tax rules require us to keep them for six years from the end of the financial year they belong to, so we can’t delete them sooner on request. Any results we publish describe the group and never identify anyone.

Your side of the deal

• See, correct or download your information: email us and we’ll show you exactly what we hold, in a format you can take elsewhere.
• Be forgotten, or withdraw consent: ask, and we delete your information.
• Restrict or object: you can ask us to pause or stop using your information for a particular purpose.
• Leave the emails: unsubscribe from any email.
• Complain: you can contact the UK’s Information Commissioner at ico.org.uk. We’d appreciate the chance to put things right first.

A few plain boundaries

• MyPatchly is for adults aged 18 and over.
• MyPatchly is a wellness product, not a medical device. Nothing in it diagnoses, treats, or replaces care from a professional.

If this page changes

We’ll update it here and change the date below. If a change matters to what we hold about you, we’ll tell you in MyPatchly or by email.

Hushful Ltd · company number 16748595 · ICO registration ZC100500 · last updated 29 October 2026 · Privacy · Terms · Support