Privacy Policy

We collect the minimum needed to measure and report on clinical workload.

• Account information. Name, professional email address, job role (GP partner, salaried GP, locum, trainee, ANP, pharmacist, practice nurse or other), practice affiliation and working pattern.
• Workload and operational data. Session times and durations, time by domain (direct care, triage, indirect care, running the practice, supervision, QI and cluster work, professional responsibilities), patient contact counts by consultation mode, and MDT whole-time-equivalent cover.
• Self-reported ratings. Cognitive load (1–5), perceived continuity of care (0–5) and IT friction (0–5), recorded by the clinician about their own working day.
• Uploaded paper sheets. Photographs of the clinician's own tally sheet, stored in a private bucket readable only by that clinician and processed to extract the numbers on it.
• Billing data. Subscription plan, currency, renewal dates and a payment provider customer reference. No card numbers are stored by us.

We do not use advertising trackers, and we do not build profiles for any purpose other than showing you and your practice your own workload.

• To produce your personal workload reports, session balance, trends and safe working scorecards.
• To produce practice-level capacity reports for practice leads, always as aggregated totals.
• To power the written analysis and improvement suggestions. Only operational figures are sent to the AI provider — never names, emails or free-text notes — and those inputs are not used to train models.
• To manage your subscription, send receipts and tell you about changes that affect your data or your access.

Our lawful bases are performance of a contract (running your subscription), and legitimate interests (providing workload analysis your practice has asked for and keeping the service secure).

Practice leads see aggregated totals only. Individual diary entries, notes and self-rated scores are never shown to a colleague. Charts that could identify one person are suppressed until at least three clinicians have contributed to that view, and clinician-level comparisons are shown as unnamed slots.

The one exception is where a lead records a day on behalf of a colleague at that colleague’s request — that entry is attributed to the colleague and visible to them.

We never sell, rent or trade personal data. We use a small number of vetted providers, each bound by equivalent data protection terms:

• Supabase (EU (Frankfurt / Ireland)) — Managed Postgres database, authentication and encrypted file storage for uploaded paper sheets.
• Cloudflare (UK / EU edge locations) — Application hosting, edge delivery, TLS termination and DDoS protection.
• Stripe (EU / UK (PCI DSS Level 1)) — Subscription payments and invoicing. Card details are entered directly with Stripe and never reach our servers.
• Lovable AI Gateway (OpenAI / Google models) (EU / US processing under standard contractual clauses) — Reads uploaded paper sheets into numbers, and generates the written workload analysis. Only operational workload figures are sent; inputs are not used to train models and are not retained by the model provider for training.

The full list and our processor commitments are set out in the Data Processing Agreement.

• In transit: TLS 1.3 (HTTPS), with HSTS enforced.
• At rest: AES-256 at rest, including database backups.
• Access control: Per-row database authorisation (Row Level Security) scoped to the signed-in clinician.
• Hosting: UK / EU data centres, served through Cloudflare's edge network.
• Sign-in: Email and password or Google sign-in, with hashed credentials handled by the managed auth provider.

While your subscription is active we keep your records so you can see long-term trends. After a subscription ends you have 30 days of full access, then read-only download access, and everything is permanently deleted 90 days after expiry.

The full schedule is in the Terms of Service.

• Access and portability. Download a complete export of everything we hold about you, as JSON or CSV, at any time from Downloads or Settings — no request needed.
• Correction. Change your profile, working pattern and any recorded day yourself in Settings and the diary.
• Erasure. Email hello@studystreaks.co.uk and we will delete your account and personal records within 30 days.
• Objection and complaint. You can object to processing, and you can complain to the Information Commissioner’s Office (ico.org.uk) at any time.

Studystreaks Ltd, company no. SC865254, D-U-N-S © 234235037. Registered office: Studystreaks Ltd, c/o Smith & Wallace & Co., 1 Simonsburn Rd, Kilmarnock, Scotland, KA1 5LA. Data protection enquiries: hello@studystreaks.co.uk.