Privacy policy
Privacy Policy
This Privacy Policy explains what information we collect, how we use it, and your rights.
Introduction
Acornio is a family-linked health tracking application operated by Fendorio Ltd (“we”, “us”, “our”), designed to help users record and understand health-related observations.
We are committed to protecting your personal data and handling it transparently and securely.
For the purposes of UK data protection law, we are the data controller of your personal data. Where applicable, we also comply with relevant United States privacy laws.
Information We Collect
We collect information you provide directly, along with limited technical data required to operate the service.
2.1 Account and Profile Information
- Name
- Email address
- Account credentials
- Household and profile information (including individuals you track)
2.2 Health and Observation Data
You may choose to provide:
This may include health-related personal data, which is treated with additional care.
- Digestive health data (e.g. stool logs)
- Symptoms and wellbeing information
- Food and dietary logs
- Medication records
- Sleep and routine data
- Free-text notes
2.3 Technical and Usage Data
- Device type, operating system, and app version
- Limited app context submitted with feedback, such as platform, app version, and device locale
- Log and diagnostic data (e.g. errors, crashes)
- Basic usage information to improve performance and reliability
2.4 Support and Feedback Data
- Information you provide when contacting support or sending in-app feedback
- Whether you agree to be contacted about feedback you submit
How We Use Your Information
We use your data to:
3.1 Provide the Service
- Create and manage your account
- Store and display your logged observations
- Enable household and profile features
3.2 Generate Insights
- Provide summaries and trends to support understanding and clinician conversations
3.3 Maintain and Improve the Service
- Monitor performance and reliability
- Fix bugs and improve usability
- Review feedback you choose to submit
- Contact you about submitted feedback when you have agreed to this
3.4 Ensure Security
- Detect misuse, fraud, or security issues
- Protect user accounts and system integrity
3.5 Legal Basis (UK / EEA Users)
We rely on:
You may withdraw consent at any time.
- Contract – to provide the service
- Legitimate interests – to operate and improve the product
- Consent – for processing health-related data
Data Storage and Security
We use managed cloud infrastructure provided by Microsoft Azure.
Our primary hosting region is the United Kingdom (UK South).
We retain data only as long as necessary to provide the service and meet legal obligations.
- Encryption in transit and at rest
- Access controls and authentication
- Monitoring and logging
- Regular security updates and practices
Sharing of Information
We do not sell your personal data.
We do not share personal data with third parties for their own marketing purposes.
We may share information with:
5.1 Service Providers
- Trusted providers who help us operate the service (e.g. hosting, infrastructure, support tooling), under contractual obligations.
5.2 Legal Requirements
- Where required by law, regulation, or legal process, or to protect users, the service, or others.
5.3 Business Transfers
- If Fendorio Ltd is involved in a merger, acquisition, or asset sale, your data may be transferred as part of that transaction.
International Data Transfers
We primarily store and process data in the United Kingdom using Microsoft Azure.
If you are located outside the UK, your information may be transferred to and processed in the UK or other countries where our service providers operate.
Where required, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs)
- Transfers to countries with adequacy decisions
Children and Family-Linked Data
Acornio is designed for family use, where one user (typically a parent or guardian) may create and manage profiles for others, including children.
By using the service, you confirm that:
We do not knowingly collect personal data directly from children without parental or guardian involvement.
- You have the authority to provide and manage data for any individual you add
- You are responsible for ensuring that data is entered appropriately
Data Retention
We retain personal data only for as long as needed to provide Acornio, maintain security, meet legal obligations, and honour your choices.
You can request permanent account deletion in the app. We use a 7-day recovery window so accidental deletion requests can be cancelled before live account data is permanently deleted.
After the recovery window, we delete account-owned live data from production systems, including sign-in methods, profiles, observations, clues, summaries, relationships, notification preferences, push tokens, sessions, and account-level data.
Backups are not restored for normal product use after deletion and expire on the established backup schedule. We may retain limited operational, legal, or security records where required, and we minimise or redact personal data in those records where practical.
- For as long as your account is active
- During the 7-day recovery window after an account deletion request
- Or as required for legal, regulatory, or security purposes
Account Deletion and Correction Archives
Removing a log or profile in Acornio is a correction-style archive: it hides that item from normal product views but does not delete the whole account.
Deleting your account permanently is different. It is an account-level erasure request for your live Acornio account and household data.
If you sign in during the 7-day recovery window, we will show the pending deletion status and give you the option to keep the account or sign out.
Your Rights (UK / EEA)
You may have the right to:
To exercise these rights, contact us below.
You also have the right to lodge a complaint with the Information Commissioner's Office.
- Access your personal data
- Correct inaccurate data
- Request deletion
- Restrict or object to processing
- Request data portability
- Withdraw consent (for health data processing)
US Privacy Rights
Depending on your state of residence, you may have additional rights under applicable US privacy laws.
These may include the right to:
Acornio does not sell personal data or use it for targeted advertising.
To exercise these rights, contact us using the details below.
- Request access to personal information we hold about you
- Request deletion of your personal information
- Request correction of inaccurate data
- Opt out of certain types of data sharing
Cookies and Analytics
In the mobile apps, we may use limited analytics and diagnostic tools, including Firebase Analytics / Google Analytics for Firebase, to understand app performance, feature usage, activation, retention, and subscription conversion.
On the public website, we use Google Analytics 4 website analytics only after consent to understand page visits and app-store download clicks.
We configure app and website analytics for first-party product analytics only. Acornio does not use analytics for targeted advertising or remarketing, and we do not sell personal data.
Our custom analytics events are designed to avoid child names, email addresses, free-text health notes, exact health details, purchase tokens, invitation tokens, and other direct identifiers. We use category, boolean, count, and screen metadata instead.
Website analytics consent can be changed from Cookie settings in the website footer.
Changes to This Policy
We may update this Privacy Policy from time to time.
We will notify users of material changes through the app or by email where appropriate.