Privacy Policy

Unity Care Networks Ltd is the data controller for Somapath. Somapath is a trading name of Unity Care Networks Ltd, registered in England and Wales.

Contact us about privacy at admin@somapath.co.uk.

• Account details — your email address, your password in encrypted form, whether you are reading for yourself or supporting someone, and any focus topics you choose.
• Health-related data you enter — your daily check-ins (body symptoms, mood rating, sleep hours and quality, how you are functioning, and your free-text note), thought records, conversation-prep notes and the one-page summaries you generate. Under UK GDPR this is special category data concerning health.
• Use of the app — which chapters you have opened and your reading progress, so we can show ticks and apply the free allowance.
• Subscription data — your plan, status and renewal date. Card details are handled by our payment provider and never reach our servers.
• Technical data — basic logs needed to run the service securely.

• To give you the account and content you asked for, and to take payment — performance of our contract with you (UK GDPR Article 6(1)(b)).
• To keep the service secure, prevent misuse and meet our legal duties — legitimate interests and legal obligation (Article 6(1)(f) and (c)).
• To store and show you your health-related check-ins and notes — your explicit consent (Article 9(2)(a)), which you give by choosing to write them and can withdraw at any time by deleting them or your account.

We do not use your data to train AI models, we do not profile you, and we never sell your data.

Only you. Somapath does not share your check-ins or notes with your GP, your NHS team, your family or anyone else. Nothing you write is sent to anyone automatically — if you want your GP to see a summary, you print or share it yourself.

We use trusted suppliers to run the service: a cloud hosting and database provider, and a payment provider. They act on our instructions under written contracts and do not use your data for their own purposes. Where data leaves the UK we rely on UK adequacy regulations or the International Data Transfer Addendum.

We keep your account and the things you write until you delete them or close your account. When you delete your account we remove your personal data within 30 days, apart from records we must keep for tax and accounting (normally six years) and security logs kept for a short period.

Under UK GDPR you can ask for a copy of your data, correct it, delete it, restrict or object to how we use it, take it elsewhere in a portable form, and withdraw consent. You can export or delete everything yourself from your account page, or email us and we will respond within one month.

If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first.

We use only what the service needs: a sign-in session cookie and small settings stored in your browser, such as your chosen text size. No advertising or tracking cookies.

Somapath is for adults aged 18 and over. We do not knowingly collect children's data.

Data protection enquiries and rights requests: admin@somapath.co.uk, addressed to the Data Protection Lead, Unity Care Networks Ltd.

See also our Terms of Use and Not medical advice.