Privacy notice
Private by default
Sift collects the minimum information needed for the purpose you choose. Consultation and routine data stay private, are excluded from search indexing, and are not reused across future verticals without separate consent.
Reviewed 31 July 2026
What we process
A guest receives a short-lived private session. An account stores verified email, password hash, preferences, consultations, recommendations, routines, adherence, reminders, cabinet items, reactions, and consent history. Optional photo features remain disabled until private storage and review controls are configured.
Your controls
- View and correct profile and preferences.
- Pause reminders and routines without losing history.
- Download a structured account export.
- Withdraw optional analytics or personalisation consent.
- Delete the account and trigger the documented deletion workflow.
Security and retention
Passwords use Argon2id. Sessions are server-side and use secure HttpOnly cookies in production. Logs are structured to exclude secrets and sensitive free text. Retention and deletion jobs are policy-versioned and auditable.
Contact
For privacy access, correction, deletion, or grievance requests, use the contact page. Identity verification may be required before sensitive data is disclosed or changed.