Privacy Policy

OpJourney ("we", "us", "our") operates the OpJourney mobile application and website (the "Service"). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the Service.

By creating an account or using the Service, you agree to the practices described in this Privacy Policy.

Account information: Your name and email address, used to create and manage your account.

Journey details: Information you choose to enter about your surgery, including procedure type, dates, clinic, surgeon, travel, and accommodation details.

Recovery journal content: Journal entries, notes, mood and pain trackers, and any photos, audio, or video you upload.

Payment information: When you purchase OpJourney Premium, payment is processed securely by our payment provider. We do not store your full card details — only a record of your purchase and its status.

Usage data: Standard technical information such as device type, app version, and approximate usage patterns, used to keep the Service secure and reliable.

To provide and personalise your surgery preparation and recovery tools, including checklists, packing lists, calendar, and journal.

To sync your data across devices when you sign in.

To process payments and grant access to Premium features.

To respond to support requests and provide account assistance.

To improve, maintain, and secure the Service.

OpJourney may store information related to your health and medical procedures, which is considered sensitive personal data.

This data is entered by you and is stored privately against your account. It is not used for advertising, sold to third parties, or shared without your explicit action.

You control whether to share your journey or individual journal entries via the share-link feature. Shared links are read-only and can be revoked by you at any time.

We do not sell or rent your personal information.

We share data only with trusted service providers who help us run the Service (for example, hosting, email delivery, and payment processing), under contracts that require them to protect your information and use it only for the purposes we specify.

We may disclose information where required by law or to protect the rights, safety, or property of our users or others.

We retain your information for as long as your account is active, or as needed to provide the Service to you.

You can request deletion of your account and all associated personal content from the Account page in the app. When you do:

Deleted: all surgery journeys, checklists, packing lists, tasks, journal entries, calendar events, notification preferences, shared journey links, contact messages linked to your account, access entitlements, and your user account.

Retained: original payment records are retained in place for accounting, reconciliation, refunds, and disputes. OpJourney is a UK limited company with a 30 April financial year-end. We retain accounting records for six years from the end of the financial year they relate to. The specific fields and retention calculation are being finalised and will be confirmed before any payment records are deleted or replaced.

Requires manual completion: stored media files (photos, audio, video), active login sessions, push notification registrations, and AI assistant conversations are held by our platform provider. Removing the associated entity records does not delete the stored files or conversations themselves — these require manual purge by our team through our provider, and we will notify you when complete.

Provider-controlled: session recordings, provider backups, and security logs are managed by our platform provider. Their retention periods are set by the provider and are not under our direct control. We will request deletion where possible but cannot guarantee timelines for provider-managed data.

If you have an active subscription, deleting your account does not automatically cancel your subscription or issue a refund — please cancel your subscription separately before deletion.

We use reasonable technical and organisational measures to protect your information, including access controls and encryption in transit.

No method of transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

Depending on your location, you may have the right to access, correct, export, or delete your personal information.

You can edit or delete your journey and journal content directly within the app. You can request deletion of your entire account from the Account page in the app.

Because some data is held by our platform provider (stored files, sessions, push registrations, and AI conversations), removing entity records does not delete the underlying stored files or conversations. Complete erasure of stored media and conversations requires manual coordination with our provider. We will process these after your request and notify you by email when complete.

The Service is not intended for children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us so we can remove it.

If you access the Service from outside the United Kingdom, your information may be transferred to and processed in the UK. By using the Service, you consent to that transfer.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Material changes will be communicated within the app or by email where appropriate.

If you have questions about this Privacy Policy or your personal information, please contact our in-app Support team, or email us at the address provided in your account area.