Privacy Policy

The data controller is Ros Millett, trading as DysPhilter®, registered in the United Kingdom. We follow the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

The information you give us or that we process to run the service:

• Your account details: name, email, and the role you choose.
• Messages you send or receive that DysPhilter filters, translates, or holds for you.
• Voice recordings and transcripts, if you use voice features.
• Health, care, and access information you choose to store, such as in a Health Passport or care log.
• Sealed evidence records in your Truth Vault.
• Payment details are handled by our payment provider. We do not store your full card number.

We use your information only where we have a good reason:

• Consent: when you agree, for example to share access with a trusted person.
• Contract: to provide the service you signed up for.
• Legal obligation: to keep records the law requires, or to respond to a court.
• Legitimate interest: to keep the service safe and stop abuse, in a way that respects your rights.

We do not sell your data. We only share it:

• With a trusted person you choose, only for the time you allow, and only what you allow them to see.
• With your employer, only if you use a Work profile and only what the work settings permit. Your personal data stays separate.
• With service providers who help us run the platform (such as hosting and payments), under contract and only as needed.
• Where the law requires it, for example a court order.

We keep your data only as long as we need to. Personal messages in an Enterprise (Work) profile are cleared after thirty days by default, while anonymised statistics may be kept longer for legal protection. Sealed evidence in your Truth Vault is kept until you ask for it to be removed, unless the law says we must keep it.

DysPhilter can be used by children and young people with safeguards. When a young person uses DysPhilter, a parent, carer, or trusted adult can help set it up. We only collect what is needed to provide the service, and we keep it to a minimum.

You have the right to:

• See what data we hold about you.
• Fix it if it is wrong.
• Ask for it to be erased.
• Get a copy to take elsewhere (portability).
• Object to how we use it.
• Withdraw your consent at any time, without changing past processing done with consent.

To use any of these rights, contact us using the details below.

We use encryption, access controls, and secure cloud hosting. Sealed records are hashed and chained so they cannot be secretly changed. Only you can unlock the raw content of your Truth Vault, through a three-stage check.

We use a small number of cookies to keep the service working and to remember your accessibility settings. See our Cookie Policy for the details.

If you are not happy with how we handle your data, please contact us first and we will try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Email: rosmillet@diversesolutionscanopy.onmicrosoft.com (use this for privacy questions). A dedicated DysPhilter email will replace this once set up.