Privacy Notice

1. Who we are

HYE ("Higher Than Yesterday") is a service provided by Antler Consult, which is the data controller for the personal information handled in the app.

Your care is delivered by one of our practitioners. Today that is John Hadley, practising in Brentwood, Essex and online.

Questions, requests, or anything that looks wrong: hyehypnosis@gmail.com. If you would rather write, ask us at that address for the practice's postal address and we will send it to you.

2. What we collect

Your account email address (and your name, if your Google account shares it). Your bookings: the time, whether the session is online or in person, and a phone number if you choose to leave one. The recordings we make for you: the script and the audio. Basic technical logs to keep the service running and safe.

If you turn notifications on, a device token from Google's push service, so we can reach that phone or browser. It identifies the device rather than you, we hold one per device you have turned them on for, and turning notifications off in Settings deletes it.

Before your first session we gather a confidential intake, so your therapist can look after you properly: your date of birth and contact details, your GP practice, what you'd like help with, and health information you choose to share, including a short health screen, any medications, and symptoms you tick.

That intake includes health information, which UK GDPR treats as a special category. We handle it with particular care: it is encrypted, only your therapist and the people who run the service can access it, and we use it only to provide your care.

3. Why we use it

To provide HYE (our contract with you): your bookings, your recordings, and the emails that confirm them. We don't sell your data, and there is no advertising in HYE and no tracking of you across other websites.

For the health information in your intake, our lawful basis is your explicit consent, which you give during the intake and can withdraw at any time.

4. Who processes it for us

A small number of providers process data on our instructions, under contract:

• Supabase Database and sign-in (your account, bookings, recordings, and your encrypted intake), hosted in the UK/EU.
• Stripe Card payments for memberships and sessions. HYE never sees or stores your full card number; Stripe handles that directly.
• Google Placing your booked sessions on your therapist's calendar, and Google sign-in if you choose it.
• Anthropic (Claude) Three things: helping your therapist draft your recording's script, writing Momo's replies during your consultation, and turning the note you leave on your daily check-in into the question we ask you about it next time. All three mean the words you type are sent as you give them. Requests are sent without retention; nothing is used to train models.
• ElevenLabs Turns approved scripts into audio in a practitioner's cloned voice. Only the approved script text is sent.
• Resend Transactional email, like "your recording is ready".
• PostHog Product analytics, hosted in the EU: which pages are opened and whether things like booking succeed. Events are linked to your account so we can tell a returning member from a new one, but it is set up so it cannot receive your intake, your messages, or the words of your recordings, and it never records your screen.
• Firebase Cloud Messaging (Google) Delivering push notifications to your phone or browser, if you turn them on. The notification text is deliberately generic and never names a recording or anything you have told us.
• Hetzner The server the HYE application itself runs on, in the EU.
• Google (Tag Manager and Ads) Measuring whether an advert we paid for led to somebody joining, so we know which ones are worth running. Nothing is sent until you agree to it, and it carries the plan bought and the amount, never a name, an email or anything you have told us.

5. Cookies and analytics

We use a small amount of product analytics to see which parts of HYE people actually use, and whether things like booking succeed. It is deliberately narrow: it records which page was opened and whether an action worked, and it is set up so that it cannot receive anything you write. Your intake answers, what you say to Momo, and the words of your recordings are never sent to it. It never records your screen. Where a web address contains the id of a record, that id is removed before anything leaves your browser.

The first time you visit we ask whether we may store a cookie for this. Until you answer, and also if you say no, nothing is stored on your device for analytics, and HYE works exactly the same either way. To change your answer, clear this site's data in your browser and the question comes back.

Signing in also stores a small amount of data on your device to keep you signed in. That is necessary for HYE to work, so it is not part of the question above.

6. Your practitioner, and their voice

Your therapist sees your bookings and the recordings made for you; that's how the service works.

HYE's audio is spoken by a cloned voice. Today it is a clone of John Hadley's own voice, created and used with his written, revocable consent, and only ever for scripts a practitioner has approved.

7. Keeping it safe

Everything travels over TLS, and access to member data is role-restricted: only your therapist and the people who run the service can see it.

8. Your rights

You can delete your account, and everything in it, from your profile page at any time. What that removes, and the little we are obliged to keep, is set out in full on our account deletion page. Write to hyehypnosis@gmail.com to ask for a copy of everything we hold about you. You also have the usual UK GDPR rights (access, rectification, objection), and the right to complain to the ICO at ico.org.uk.

You can also choose what we contact you about. Settings has a switch for each kind of message, every one of those emails carries an unsubscribe link that works without signing in, and messages about your sessions and your payments always arrive because you need them.

9. Children

HYE is for adults. We see people aged 18 and over, the intake asks for a date of birth and will not continue without one that is 18 years ago or more, and the service is not directed at children. If you believe a child has given us information, write to hyehypnosis@gmail.com and we will delete it.

10. Where your data is held

Your account and your records are stored in the UK or the European Economic Area. A few of the providers in section 4 are based in the United States, so some information reaches them there. Where that happens it is covered by the UK's approved transfer routes, either the UK Extension to the EU-US Data Privacy Framework or the International Data Transfer Addendum to the European Commission's standard contractual clauses, together with our own contract with that provider.

11. Retention and changes

We keep your data while your account is active. If you stop using HYE without asking us to erase it, your clinical record is kept for eight years after your last session and then deleted, which is the period our practitioners' professional indemnity and the usual standard for adult health records require.

When you ask us to erase your account we delete it, though your therapist may need to keep a limited clinical record for a period where a professional or legal obligation requires it; we'll tell you if that applies to you. A record of any payments is also kept where tax or accounting law requires it: your name is removed from it, but it keeps the payment reference, which Stripe can still trace back to the card that paid. If this notice changes in a way that matters, we'll tell you before it takes effect.