Privacy Policy

Who we are

Digital Doctor Ltd is a private limited company registered in England and Wales (Company No. 12127450), with a registered office at Suite A, 82 James Carter Road, Mildenhall, IP28 7DE. We build iOS applications, including inkoo, Car Identifier, Cellar Ledger, Rep Counter, Movie Picker, FocusTimer, Expense Tracker, and ISS Tracker.

If you have any questions about this policy, contact us at hello@digitaldoctorltd.com.

What data we collect

Our apps are designed to collect as little data as possible. Here is what each one processes:

inkoo — text you submit for polishing. When you tap Polish, the text you have entered is sent to our secure backend proxy, which forwards it to Anthropic's Claude AI for processing. This text is not stored by Digital Doctor Ltd. Anthropic's data handling is governed by their own privacy policy at anthropic.com/privacy.

inkoo — writing scores. The four scores generated after polishing (Vocabulary, Tone, Clarity, Structure) are stored locally on your device only, within the Drafts feature. They are not transmitted to or stored by Digital Doctor Ltd.

inkoo — your name. If you enter your name in Settings, it is stored locally on your device using iOS UserDefaults. It is not sent to any server.

Cellar Ledger — your cellar. The wines you add, along with their details, purchase prices, locations, ratings, and your tasting notes, are stored locally on your device only. They are not transmitted to or stored by Digital Doctor Ltd.

Cellar Ledger — wine details you request. When you ask for details about a wine (region, grape, food pairings, drinking window, estimated value), the wine's name, producer, and vintage are sent to our secure backend proxy, which forwards them to Anthropic's Claude AI to generate the response. This is not stored by Digital Doctor Ltd. Anthropic's data handling is governed by their own privacy policy at anthropic.com/privacy.

Car Identifier — photos you capture. When you take or choose a photo to identify, it is sent to our secure backend proxy, which forwards it to Google Cloud Vision and, where needed, OpenAI's GPT-4o for identification. The photo is not stored by Digital Doctor Ltd once a result is returned — it exists only in memory for the duration of the request.

Car Identifier — identification history. The makes, models, and photos you've identified are stored locally on your device only, within the History feature. They are not transmitted to or stored by Digital Doctor Ltd.

Car Identifier — usage limits. To keep the service fair for everyone, our backend records a daily identification count against a random, non-identifying account ID generated by our subscription provider, RevenueCat. This count resets every day and is not linked to your name, email, or Apple ID.

Rep Counter — workout data. Exercise names, set and rep counts, targets, rest durations, and session timestamps are stored locally on your device, in a shared container that also allows the app's home screen widget to display your most recent session. This data is not transmitted to or stored by Digital Doctor Ltd, and it is not synced to iCloud.

Rep Counter — settings. App preferences, such as your default rest duration, are stored locally on your device using iOS UserDefaults. They are not sent to any server.

Movie Picker — your swipes and watchlist. The films you swipe on, your "Yes Pile," and your watchlist are stored locally on your device as film ID references only. The associated titles, posters, and details are fetched fresh from The Movie Database (TMDB) each time they're shown and are not stored by Digital Doctor Ltd.

Movie Picker — searches and filters. The genre, decade, rating, and streaming-service filters you apply are sent to TMDB's API to retrieve matching films. No personal information is included in these requests.

Movie Picker — Group Sessions. If you start or join a Group Session, a session code, a randomly generated device ID, the display name you choose, and the films selected by each participant are stored in Apple's iCloud (CloudKit) so that other participants' devices can retrieve them. This data is not linked to your Apple ID or iCloud account. You're identified only by the display name you choose. However, this data is held in a shared database rather than one restricted to your group, so anyone who has your 4-digit session code could look up the display names and film selections associated with that session. We recommend not using your full name as your display name. Using a Group Session requires your device to be signed into iCloud, but Digital Doctor Ltd does not receive or store your Apple ID. The app stops showing a session 24 hours after it's created, though the underlying record may not be deleted from Apple's servers immediately.

FocusTimer — sessions, streaks, and your task history. The tasks you write down, your focus sessions, and your streak are stored locally on your device, in a shared container that also allows the app's Lock Screen and Home Screen widgets to display your current session. This data is not transmitted to or stored by Digital Doctor Ltd, and it is not synced to iCloud.

FocusTimer — sound preferences. Your choice of room tone and end chime, and their volumes, are stored locally on your device using iOS UserDefaults. They are not sent to any server.

Expense Tracker — your expenses. The expenses you log, along with their amounts, categories, and dates, are stored locally on your device, in a shared container that also allows the app's home screen widget to display your data. This data is not transmitted to or stored by Digital Doctor Ltd, and it is not synced to iCloud. Expense Tracker does not use AI to read, categorise, or process your entries. If you use the Pro CSV export, the file is created on your device and shared only where you choose to send it; Digital Doctor Ltd never receives a copy.

ISS Tracker — satellite data you view. To show you the current position of the ISS and other satellites, the app fetches public orbital data (two-line element sets) from CelesTrak, a public satellite-tracking service. These requests send only a satellite catalogue number — no personal information is included. This data is cached locally on your device and is not stored by Digital Doctor Ltd.

ISS Tracker — your location. If you grant location access, your approximate location is used on your device to calculate when satellites are visible from where you are. Location is requested only while using the app, is used solely for this on-device calculation, and is never transmitted to CelesTrak, to Digital Doctor Ltd, or to any other party.

First Pressing — your Discogs account. If you choose to connect your Discogs account, you sign in on Discogs' own website — Digital Doctor Ltd never sees or receives your Discogs password. Discogs returns an access token which is stored in your device's Keychain and used only to sign requests to Discogs on your behalf. You can disconnect at any time in the app, which deletes the token from your device.

First Pressing — your collection. The records you add, along with their pressing details, condition grades, personal notes, listening history, and any purchase prices or valuations you enter, are stored locally on your device, in a shared container that also allows the app's home screen widget to display your collection. This data is not transmitted to or stored by Digital Doctor Ltd, and it is not synced to iCloud.

First Pressing — searches and imports. When you search for a record, scan a barcode, or import your collection, the search text or barcode number and your Discogs authorisation are sent to Discogs' API to retrieve matching releases. No other personal information is included in these requests.

First Pressing — barcode scanning. Barcode scanning uses your device's camera and Apple's on-device VisionKit framework. The camera image is processed entirely on your device and is never uploaded, stored, or transmitted anywhere — only the resulting barcode number is used to search Discogs.

Purchase information. In-app purchases in inkoo, Car Identifier, Cellar Ledger, Rep Counter, FocusTimer, Expense Tracker, and First Pressing are handled by Apple through StoreKit, with subscription status verified via RevenueCat. Digital Doctor Ltd does not receive or store your payment details. Apple's and RevenueCat's own privacy policies govern this data. Movie Picker and ISS Tracker are currently free to use and do not offer any in-app purchases.

No analytics or tracking. Our apps do not include any third-party analytics, advertising SDKs, or tracking frameworks. We do not track your usage or behaviour. The only app that requests location is ISS Tracker, described above — it is used purely on-device and is never sent anywhere.

How we use your data

In inkoo, the text you submit is used solely to generate a polished version and writing scores. In Car Identifier, the photo you submit is used solely to identify the vehicle. Your content submitted to either app is not used to train AI models, is not shared with third parties beyond the processing described above, and is not retained after the response is returned to your device.

In Cellar Ledger, the wine details you request are used solely to return information about that wine to your device. In Rep Counter, your workout data is used solely to show you your own session history and widget, on your own device. In Movie Picker, your filters and searches are used solely to retrieve matching films from TMDB, and any data you share in a Group Session is used solely to run that session for its participants. In FocusTimer, your tasks, sessions, and sound preferences are used solely to run your own timer and show your own history, on your own device. In Expense Tracker, your expenses are used solely to show you your own spending, on your own device. In ISS Tracker, satellite data is used solely to show you satellite positions, and your location (if granted) is used solely, on your own device, to calculate when they're visible from where you are.

Third parties

Anthropic. Text submitted to inkoo for polishing, and wine details requested in Cellar Ledger, are processed by Anthropic's Claude AI via our backend proxy. Please review Anthropic's privacy policy at anthropic.com/privacy for details on how they handle input data.

Google Cloud Vision and OpenAI. Photos submitted to Car Identifier are processed by Google Cloud Vision and, where needed, OpenAI's GPT-4o via our backend proxy, to identify the vehicle shown. Review their privacy policies at cloud.google.com/terms/cloud-privacy-notice and openai.com/privacy.

RevenueCat. inkoo, Car Identifier, Rep Counter, FocusTimer, Expense Tracker, and First Pressing use RevenueCat to verify subscription status and, for Car Identifier, to identify your account for daily usage limits via a randomly generated ID. Movie Picker and ISS Tracker do not currently use RevenueCat. Review RevenueCat's privacy policy at revenuecat.com/privacy.

The Movie Database (TMDB). Movie Picker sends search and filter parameters to TMDB's API to retrieve film information, and displays streaming availability data sourced from JustWatch via TMDB. No personal information is sent to TMDB. This product uses the TMDB API but is not endorsed or certified by TMDB. Review TMDB's privacy policy at themoviedb.org/privacy-policy.

CelesTrak. ISS Tracker fetches public satellite orbital data from CelesTrak's API. Requests include only a satellite catalogue number — no personal information is sent. Review CelesTrak's site for their data practices at celestrak.org.

Discogs. First Pressing uses the Discogs API to search for records, retrieve pressing details and cover art, and — if you connect your account — to import and sync your Discogs collection. Requests are signed with an access token held on your device. This application uses Discogs' API but is not affiliated with, sponsored or endorsed by Discogs. "Discogs" is a trademark of Zink Media, LLC. Review Discogs' privacy policy at discogs.com.

Apple. Our apps are distributed through the Apple App Store. Apple may collect certain diagnostic and usage data as described in Apple's privacy policy. Movie Picker's Group Sessions also use Apple's iCloud (CloudKit) service to store and sync session data between participants' devices, which requires your device to be signed into iCloud. See Apple's privacy policy for how iCloud handles this data.

Cloudflare and Google Cloud. inkoo's backend proxy runs on Cloudflare Workers; Car Identifier's backend proxy runs on Google Cloud Run. Both may process request metadata such as IP addresses in accordance with their own privacy policies at cloudflare.com/privacypolicy and cloud.google.com/terms/cloud-privacy-notice.

Your rights

Under UK GDPR, you have the right to access, correct, or request deletion of any personal data we hold about you. As our apps store virtually no personal data on our servers, there is typically nothing for us to provide or delete beyond what is held locally on your device — which you can clear at any time by deleting the app.

To exercise any rights or raise a concern, contact us at hello@digitaldoctorltd.com. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Children

Our apps are not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has submitted personal data through one of our apps, contact us at hello@digitaldoctorltd.com and we will take appropriate steps.

Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted at this URL with an updated date at the top. Continued use of our apps after changes are posted constitutes acceptance of the updated policy.