Privacy policy

Who is responsible

GreenGuruAI is operated by GREENGURUAI LTD, a private company limited by shares and registered in England and Wales under company number 17361381. GREENGURUAI LTD is the data controller for centrally processed personal information.

Contact hello@greenguruai.com for privacy questions or requests.

The patient companion is intentionally local-first. GreenGuruAI does not receive the medication, appointment, supply or evidence information that remains only in your browser.

Adults aged 18 and over

GreenGuruAI is intended only for people aged 18 or over. We do not knowingly invite or collect early-access email addresses or patient-discovery situation messages from anyone under 18. The signup and situation forms require an 18+ confirmation.

If we learn that an under-18 user has submitted centrally held personal information, we will take reasonable steps to remove it. Contact hello@greenguruai.com if this needs to be reviewed.

Early-access emails

If you join early access, we send your email address to MailerLite so it can add you to the GreenGuruAI early-access group and send the welcome email, product news and patient-guide updates you explicitly requested.

The signup form uses an unticked consent box. Your address is added only after you actively tick that box and submit the form. There is no separate confirmation-email step. You can withdraw consent at any time by unsubscribing through an email or contacting us. Addresses are kept while you remain subscribed; limited suppression information may be retained so an unsubscribe request continues to be respected.

Patient-discovery situation feedback

If you use the situation-feedback form on our Rights & Responsibilities page, we collect the situation description you choose to submit, together with limited delivery and security information needed to operate and protect the form. Please do not include medical records, prescription numbers, medicine names, diagnoses or other identifying health information.

Your situation description is processed by GreenGuruAI’s Vercel-hosted server and Resend and delivered to the monitored GreenGuruAI inbox at hello@greenguruai.com. It is not stored in our application database or browser storage and is not sent to analytics, MailerLite, GitHub or public documents. Resend stores the message content while it delivers it and retains it for up to 30 days, after which it is deleted from Resend’s systems. Our hosting and mailbox providers may retain limited operational records under their applicable service terms. Access to the delivered message is limited to the authorised inbox owner and designated backup owner.

We delete situation messages as soon as review is complete and no later than 90 days after receipt, unless a specific legal obligation, active rights request, complaint or security investigation requires a longer period. Any exception is documented with a reason, owner and revised deletion date.

Providing an email address is optional and separate from submitting a situation. If you enter an email address and consent to updates, only that address is sent to MailerLite under the email-updates process described above. It is not included in the situation message.

It is not monitored for urgent help and cannot provide individual medical or legal advice. Despite that warning, free text may still contain personal information supplied by the sender, so access is limited as described above and messages must not be copied into analytics, tickets or public materials.

Patient companion and encrypted browser storage

The patient companion stores medication entries, evidence-checklist choices and prescription-supply totals in an encrypted vault in the current browser on this device. The vault is protected by the PIN you set, and its unlocked encryption key is kept in browser memory only while the vault is open. Installation preferences, feedback-prompt timing and first/last visit timestamps remain separate browser preferences.

This information is not uploaded to GreenGuruAI and is not a secure cross-device medical record. Encryption protects the patient-vault records while the vault is locked, but it cannot protect information while the vault is unlocked or from a compromised device, browser, extension or malicious page code. Anyone who knows the vault PIN or can access the same unlocked browser profile may be able to view it.

You can export a decrypted JSON backup, restore an eligible backup, or delete all patient-app data using the controls in the app. Clearing browser data may also remove the encrypted vault. GreenGuruAI cannot recover the PIN, decrypt the vault remotely or restore deleted local records.

Downloaded JSON backups and printed or saved summaries are not protected by the browser vault. They are controlled by you and may be copied into downloads folders, cloud backups, printer queues or shared locations outside GreenGuruAI’s control.

Treatment administration planner

The private treatment administration planner stores up to twelve fixed task categories, review dates and completed/open states in local browser storage on the current device. It does not ask for a medicine, condition, dose, clinic or pharmacy name, address, contact detail or free-text health note.

Planner task actions, dates and completion states are not sent to GreenGuruAI analytics or another organisation. The planner does not send notifications, emails or messages. You can delete individual tasks, completed tasks or the full plan from the planner page.

The planner record is separate from Patient Companion and pharmacy-tracker backups and deletion controls. Copying or printing the plan creates a new copy controlled by you and your device.

Pharmacy handoff tracker

The private pharmacy handoff tracker stores a current administrative stage, a fixed issue category, stage timestamps and up to six archived handoffs in local browser storage on the current device. It does not ask for medicine names, symptoms, doses, clinic or pharmacy names, addresses, payment details or free-text notes, and tracker actions are not sent to analytics.

You can delete the current handoff or clear the archive using the controls on the tracker page. Its records are separate from the Patient Companion export and backup tools. Clearing browser storage may remove them, and GreenGuruAI cannot retrieve or restore them remotely.

Copying a timeline, printing it or saving it as a PDF creates a new copy controlled by you and your device. Review the timeline before sharing it with a clinic, pharmacy, courier or another person.

Clinic and pharmacy comparison workspace

The private service comparison workspace stores up to three service labels, a clinic-or-pharmacy type, fixed comparison statuses, quoted or published cost figures and update timestamps in local browser storage on the current device. It does not ask for patient names, diagnoses, medicines, symptoms, doses, addresses, payment-card details or free-text clinical notes.

Workspace interactions are not sent as custom analytics events. You can remove an option or clear the complete comparison using the controls on the page. The workspace is separate from the Patient Companion, administration-planner and pharmacy-tracker records, and GreenGuruAI cannot retrieve, verify, rank or restore the locally stored comparison.

Printing or saving the workspace as a PDF creates a copy controlled by you and your device. Service names and costs may still be commercially sensitive to you, so review the document before storing or sharing it.

Other patient tools

Information entered into browser-only planning tools such as appointment preparation remains in the current browser session or local browser storage only where the tool clearly says so. It is not sent to GreenGuruAI or included in analytics. Printing, downloading or saving is handled by your browser and chosen device or destination.

Analytics and product feedback

We use Vercel Web Analytics to understand aggregated page visits and broad feature use. It does not use third-party advertising cookies and is configured so URLs are reduced to their route without query strings before collection. Admin routes are excluded.

Analytics may include a page route, referrer, approximate location, device type, operating system and browser. We also record fixed, non-clinical product events such as whether a signup succeeded, whether the patient app was opened, whether a first general action category was completed, a broad returning-user time bucket, and structured helpful/not-helpful feedback categories.

We do not put email addresses, medication amounts, product names, prescription text, patient notes, planner dates, task states, service-comparison entries, situation descriptions, timestamps or free-text health information into analytics events. Event names and properties are restricted to a bounded allowlist. Where analytics processing is personal data, our intended lawful basis is our legitimate interest in operating, securing and improving the service with minimal privacy impact.

Detailed patient-discovery messages use the dedicated inbox flow described above rather than analytics. Other detailed feedback may be offered through an email link. Do not include medical or prescription information unless it is genuinely necessary for your message. Read Vercel’s Web Analytics privacy information.

Processors, sharing and international processing

MailerLite processes early-access email addresses. Resend processes patient-discovery situation messages for delivery to the monitored GreenGuruAI inbox. Vercel hosts the website and provides web analytics and runtime request handling. GitHub supports source control and deployment workflows. These providers may use approved subprocessors and may process operational information outside the UK under their applicable contractual and transfer safeguards.

We do not sell identifiable patient information, use patient-entered health information for advertising, or share local Patient Companion, administration-planner, pharmacy-tracker or service-comparison records with clinics, pharmacies, employers, insurers or other organisations. We maintain a processor register and review access, contracts, retention and transfer arrangements as the service changes.

Security and retention

We use HTTPS, restricted administration routes, defensive browser security headers, non-cacheable admin and API responses, service-worker exclusions, secret stores, limited access and tested release controls. Patient Companion medication, evidence and supply records use versioned AES-GCM encryption at rest in the browser vault while it is locked. No online or local security control can promise absolute protection.

Operational logs and support, security or patient-discovery correspondence are retained only as long as reasonably needed for service operation, investigation, legal obligations and documented accountability purposes. Patient-discovery situation messages are deleted from the recipient mailbox as soon as review is complete and no later than 90 days after receipt, under the documented correspondence-retention process and the exception handling described in the patient-discovery situation feedback section above. Local patient information remains on the device until you delete it or the browser removes it; GreenGuruAI cannot retrieve or restore it.

Your data-protection rights

For centrally held personal information, you may ask for access, correction, deletion, restriction, portability where applicable, or object to processing. You may withdraw marketing consent at any time. Some rights depend on the circumstances and applicable law.

Because local Patient Companion, administration-planner, pharmacy-tracker and service-comparison information is not received by GreenGuruAI, we cannot search for, access or delete it remotely. Use the relevant tool controls or browser settings on the relevant device.

Contact hello@greenguruai.com. You also have the right to raise a concern with the UK Information Commissioner’s Office at ico.org.uk.

Legal identity and contact details

GreenGuruAI is operated by GREENGURUAI LTD, registered in England and Wales under company number 17361381.

Registered office and correspondence address: 5 Brayford Square, London, E1 0SG, United Kingdom.
Email: hello@greenguruai.com.

Changes and future features

We will update this notice when processing materially changes. Accounts, cloud synchronisation, automated reminders, document uploads, clinic sharing or AI analysis of patient information will not be introduced under this notice without a fresh privacy assessment, appropriate safeguards and updated transparency information.