Privacy Policy

Who we are

Digital Doctor Ltd is a private limited company registered in England and Wales (Company No. 12127450), with a registered office at Suite A, 82 James Carter Road, Mildenhall, IP28 7DE. We build iOS applications, including inkoo, Car Identifier, Cellar Ledger, Rep Counter, Movie Picker, FocusTimer, Expense Tracker, ISS Tracker, and Bramblewick.

If you have any questions about this policy, contact us at hello@digitaldoctorltd.com.

What data we collect

Our apps are designed to collect as little data as possible. Here is what each one processes:

inkoo: text you submit for polishing. When you tap Polish, the text you have entered is sent to our secure backend proxy, which forwards it to Anthropic's Claude AI for processing. This text is not stored by Digital Doctor Ltd. Anthropic's data handling is governed by their own privacy policy at anthropic.com/privacy.

inkoo: writing scores. The four scores generated after polishing (Vocabulary, Tone, Clarity, Structure) are stored locally on your device only, within the Drafts feature. They are not transmitted to or stored by Digital Doctor Ltd.

inkoo: your name. If you enter your name in Settings, it is stored locally on your device using iOS UserDefaults. It is not sent to any server.

Cellar Ledger: your cellar. The wines you add, along with their details, purchase prices, locations, ratings, and your tasting notes, are stored locally on your device only. They are not transmitted to or stored by Digital Doctor Ltd.

Cellar Ledger: wine details you request. When you ask for details about a wine (region, grape, food pairings, drinking window, estimated value), the wine's name, producer, and vintage are sent to our secure backend proxy, which forwards them to Anthropic's Claude AI to generate the response. This is not stored by Digital Doctor Ltd. Anthropic's data handling is governed by their own privacy policy at anthropic.com/privacy.

Car Identifier: photos you capture. When you take or choose a photo to identify, it is sent to our secure backend proxy, which forwards it to Google Cloud Vision and, where needed, OpenAI's GPT-4o for identification. The photo is not stored by Digital Doctor Ltd once a result is returned. It exists only in memory for the duration of the request.

Car Identifier: identification history. The makes, models, and photos you've identified are stored locally on your device only, within the History feature. They are not transmitted to or stored by Digital Doctor Ltd.

Car Identifier: usage limits. To keep the service fair for everyone, our backend records a daily identification count against a random, non-identifying account ID generated by our subscription provider, RevenueCat. This count resets every day and is not linked to your name, email, or Apple ID.

Rep Counter: workout data. Exercise names, set and rep counts, targets, rest durations, and session timestamps are stored locally on your device, in a shared container that also allows the app's home screen widget to display your most recent session. This data is not transmitted to or stored by Digital Doctor Ltd, and it is not synced to iCloud.

Rep Counter: settings. App preferences, such as your default rest duration, are stored locally on your device using iOS UserDefaults. They are not sent to any server.

Movie Picker: your swipes and watchlist. The films you swipe on, your "Yes Pile," and your watchlist are stored locally on your device as film ID references only. The associated titles, posters, and details are fetched fresh from The Movie Database (TMDB) each time they're shown and are not stored by Digital Doctor Ltd.

Movie Picker: searches and filters. The genre, decade, rating, and streaming-service filters you apply are sent to TMDB's API to retrieve matching films. No personal information is included in these requests.

Movie Picker: Group Sessions. If you start or join a Group Session, a session code, a randomly generated device ID, the display name you choose, and the films selected by each participant are stored in Apple's iCloud (CloudKit) so that other participants' devices can retrieve them. This data is not linked to your Apple ID or iCloud account. You're identified only by the display name you choose. However, this data is held in a shared database rather than one restricted to your group, so anyone who has your 4-digit session code could look up the display names and film selections associated with that session. We recommend not using your full name as your display name. Using a Group Session requires your device to be signed into iCloud, but Digital Doctor Ltd does not receive or store your Apple ID. The app stops showing a session 24 hours after it's created, though the underlying record may not be deleted from Apple's servers immediately.

FocusTimer: sessions, streaks, and your task history. The tasks you write down, your focus sessions, and your streak are stored locally on your device, in a shared container that also allows the app's Lock Screen and Home Screen widgets to display your current session. This data is not transmitted to or stored by Digital Doctor Ltd, and it is not synced to iCloud.

FocusTimer: sound preferences. Your choice of room tone and end chime, and their volumes, are stored locally on your device using iOS UserDefaults. They are not sent to any server.

Expense Tracker: your expenses. The expenses you log, along with their amounts, categories, and dates, are stored locally on your device, in a shared container that also allows the app's home screen widget to display your data. This data is not transmitted to or stored by Digital Doctor Ltd, and it is not synced to iCloud. Expense Tracker does not use AI to read, categorise, or process your entries. If you use the Pro CSV export, the file is created on your device and shared only where you choose to send it; Digital Doctor Ltd never receives a copy.

ISS Tracker: satellite data you view. To show you the current position of the ISS and other satellites, the app fetches public orbital data (two-line element sets) from CelesTrak, a public satellite-tracking service. These requests send only a satellite catalogue number. No personal information is included. This data is cached locally on your device and is not stored by Digital Doctor Ltd.

ISS Tracker: your location. If you grant location access, your approximate location is used on your device to calculate when satellites are visible from where you are. Location is requested only while using the app, is used solely for this on-device calculation, and is never transmitted to CelesTrak, to Digital Doctor Ltd, or to any other party.

First Pressing: your Discogs account. If you choose to connect your Discogs account, you sign in on Discogs' own website. Digital Doctor Ltd never sees or receives your Discogs password. Discogs returns an access token which is stored in your device's Keychain and used only to sign requests to Discogs on your behalf. You can disconnect at any time in the app, which deletes the token from your device.

First Pressing: your collection. The records you add, along with their pressing details, condition grades, personal notes, listening history, and any purchase prices or valuations you enter, are stored locally on your device, in a shared container that also allows the app's home screen widget to display your collection. This data is not transmitted to or stored by Digital Doctor Ltd, and it is not synced to iCloud.

First Pressing: searches and imports. When you search for a record, scan a barcode, or import your collection, the search text or barcode number and your Discogs authorisation are sent to Discogs' API to retrieve matching releases. No other personal information is included in these requests.

First Pressing: barcode scanning. Barcode scanning uses your device's camera and Apple's on-device VisionKit framework. The camera image is processed entirely on your device and is never uploaded, stored, or transmitted anywhere. Only the resulting barcode number is used to search Discogs.

Houseplant SOS: photos you submit for diagnosis. When you photograph a plant for diagnosis, the photo is sent to our secure backend proxy, which forwards it to Kindwise's plant.health API for pest and disease identification. The photo is not stored by Digital Doctor Ltd once a result is returned. It exists only in memory for the duration of the request.

Houseplant SOS: your cases, treatment schedule, and photos. The plant cases you track, along with their diagnosis history, treatment schedule, re-treatment photos, and cured/not-cured trend, are stored locally on your device only. They are not transmitted to or stored by Digital Doctor Ltd, and they are not synced to iCloud.

Houseplant SOS: usage limits. To keep the diagnosis service fair for everyone, our backend records a monthly diagnosis count against a random, non-identifying account ID generated by our subscription provider, RevenueCat. This count resets every month and is not linked to your name, email, or Apple ID.

Puffball: your save data. Your high scores, run count, unlocked cosmetics, and settings (sound, music, vibrate) are stored locally on your device only. They are not transmitted to or stored by Digital Doctor Ltd, and are not synced to iCloud. Puffball has no backend server, shows no ads, and includes no analytics or tracking SDKs.

Deep Sea Salvage: your save data. Your salvage balance, generators, upgrades, and settings (sound, music, haptics) are stored locally on your device only, in this app's own storage. They are not transmitted to or stored by Digital Doctor Ltd, and are not synced to iCloud or any account. Deep Sea Salvage is fully offline except for two things: an optional rewarded-video ad, shown only if you choose to watch one, which uses Google's AdMob SDK, and two optional one-time purchases (Remove Ads, Permanent Idle Boost) processed directly by Apple. Digital Doctor Ltd does not receive or store any data from the ad or the purchases. See "Google AdMob" and "Purchase information", below.

Dusk Chorus: your save data. Your level progress, daily Roost results and attempts, quality and reduce-motion settings, and whether you own Quiet Skies are stored locally on your device only, in this app's own storage. They are not transmitted to or stored by Digital Doctor Ltd, and are not synced to iCloud or any account. Dusk Chorus has no accounts, no leaderboards, and no backend server. It is fully offline except for two things: optional ads, which use Google's AdMob SDK, and one optional one-time purchase (Quiet Skies) processed directly by Apple or Google. Digital Doctor Ltd does not receive or store any data from the ads or the purchase. See "Google AdMob" and "Purchase information", below.

Cairn: your debts. The debts you add, along with their balances, interest rates, payment terms, and your chosen payoff order, are stored locally on your device only, using SwiftData. Cairn has no backend server, no user accounts, and no bank connection. Nothing is linked to an external account, and there is no data to sync. Digital Doctor Ltd does not receive or store any of this data.

Verglas: your save data. Your board progress, the crystals you have kept, your daily streak, and your settings are stored locally on your device only, in this app's own storage. They are not transmitted to or stored by Digital Doctor Ltd, and are not synced to iCloud or any account. Verglas has no accounts, no leaderboards, and no backend server. It is fully offline except for ads, which use Google's AdMob SDK. Verglas sells nothing: there are no in-app purchases in this version. See "Google AdMob", below.

Bramblewick: your gardens and stats. Your daily and practice puzzle progress, streak, attempt history, and settings are stored locally on your device only, using localStorage. Bramblewick has no backend server, no user accounts, and makes no network calls of any kind. Nothing is linked to an external account, and there is no data to sync. Digital Doctor Ltd does not receive or store any of this data.

Purchase information. In-app purchases in inkoo, Car Identifier, Cellar Ledger, Rep Counter, FocusTimer, Expense Tracker, First Pressing, Houseplant SOS, Cairn, and ISS Tracker are handled by Apple through StoreKit, with purchase and subscription status verified via RevenueCat. Deep Sea Salvage offers two one-time purchases (Remove Ads, Permanent Idle Boost) handled directly by Apple through StoreKit, without RevenueCat. Dusk Chorus offers one one-time purchase (Quiet Skies, which removes ads) handled directly by Apple through StoreKit on iOS and by Google Play Billing on Android, also without RevenueCat. Digital Doctor Ltd does not receive or store your payment details in any case. Apple's and RevenueCat's own privacy policies govern this data. Movie Picker, Puffball, Bramblewick, and Verglas are currently free to use and do not offer any in-app purchases.

No analytics or tracking. Our apps do not include any third-party analytics or tracking frameworks. We do not track your usage or behaviour. The only advertising SDK across our apps is Google AdMob, used in Deep Sea Salvage, Dusk Chorus, and Verglas, described above. The only app that requests location is ISS Tracker, described above. It is used purely on-device and is never sent anywhere.

How we use your data

In inkoo, the text you submit is used solely to generate a polished version and writing scores. In Car Identifier, the photo you submit is used solely to identify the vehicle. Your content submitted to either app is not used to train AI models, is not shared with third parties beyond the processing described above, and is not retained after the response is returned to your device.

In Cellar Ledger, the wine details you request are used solely to return information about that wine to your device. In Rep Counter, your workout data is used solely to show you your own session history and widget, on your own device. In Movie Picker, your filters and searches are used solely to retrieve matching films from TMDB, and any data you share in a Group Session is used solely to run that session for its participants. In FocusTimer, your tasks, sessions, and sound preferences are used solely to run your own timer and show your own history, on your own device. In Expense Tracker, your expenses are used solely to show you your own spending, on your own device. In ISS Tracker, satellite data is used solely to show you satellite positions, and your location (if granted) is used solely, on your own device, to calculate when they're visible from where you are. In Houseplant SOS, the photo you submit is used solely to generate a diagnosis, and your cases, treatment schedule, and photos are used solely to show you your own plant history, on your own device. In Puffball, your save data is used solely to show you your own high scores, run count, and cosmetic collection, on your own device. In Deep Sea Salvage, your save data is used solely to show you your own progress, on your own device. In Cairn, your debts are used solely to compute your own payoff plan, debt-free date, and progress, on your own device. In Bramblewick, your puzzle progress and stats are used solely to show you your own history and streak, on your own device. In Dusk Chorus, your save data is used solely to show you your own level progress and daily Roost history, on your own device. In Verglas, your save data is used solely to show you your own board progress, kept crystals, and daily streak, on your own device.

Third parties

Anthropic. Text submitted to inkoo for polishing, and wine details requested in Cellar Ledger, are processed by Anthropic's Claude AI via our backend proxy. Please review Anthropic's privacy policy at anthropic.com/privacy for details on how they handle input data.

Google Cloud Vision and OpenAI. Photos submitted to Car Identifier are processed by Google Cloud Vision and, where needed, OpenAI's GPT-4o via our backend proxy, to identify the vehicle shown. Review their privacy policies at cloud.google.com/terms/cloud-privacy-notice and openai.com/privacy.

Kindwise. Photos submitted to Houseplant SOS for diagnosis are processed by Kindwise's plant.health API via our backend proxy, to identify plant pests and diseases. Review Kindwise's privacy policy at kindwise.com/privacy.

RevenueCat. inkoo, Car Identifier, Rep Counter, FocusTimer, Expense Tracker, First Pressing, Houseplant SOS, Cairn, and ISS Tracker use RevenueCat to verify subscription status and, for Car Identifier and Houseplant SOS, to identify your account for usage limits via a randomly generated ID. Movie Picker does not currently use RevenueCat. Review RevenueCat's privacy policy at revenuecat.com/privacy.

The Movie Database (TMDB). Movie Picker sends search and filter parameters to TMDB's API to retrieve film information, and displays streaming availability data sourced from JustWatch via TMDB. No personal information is sent to TMDB. This product uses the TMDB API but is not endorsed or certified by TMDB. Review TMDB's privacy policy at themoviedb.org/privacy-policy.

CelesTrak. ISS Tracker fetches public satellite orbital data from CelesTrak's API. Requests include only a satellite catalogue number. No personal information is sent. Review CelesTrak's site for their data practices at celestrak.org.

Discogs. First Pressing uses the Discogs API to search for records, retrieve pressing details and cover art, and, if you connect your account, to import and sync your Discogs collection. Requests are signed with an access token held on your device. This application uses Discogs' API but is not affiliated with, sponsored or endorsed by Discogs. "Discogs" is a trademark of Zink Media, LLC. Review Discogs' privacy policy at discogs.com.

Google AdMob. Deep Sea Salvage uses Google's AdMob SDK for one optional rewarded-video ad, shown only if you choose to watch one. Dusk Chorus uses the same SDK for optional rewarded-video ads, which you start yourself and which never interrupt a run, and for occasional full-screen ads shown only between chapters, never after a loss. On iOS, Dusk Chorus asks for your permission through Apple's App Tracking Transparency prompt before the ad SDK starts, and declining changes nothing else about the game. Verglas uses the same SDK for an optional rewarded-video ad, offered only after a board you did not solve and only if you choose to watch it, and for a full-screen ad after every fifth board you complete, never after a failure and never on the daily board. On iOS, Verglas asks for your permission through Apple's App Tracking Transparency prompt before serving an ad, and declining changes nothing else about the game. AdMob may use an advertising identifier to select and measure these ads; we do not receive or store any data from them. Review Google's privacy policy at policies.google.com/privacy.

Apple. Our apps are distributed through the Apple App Store. Apple may collect certain diagnostic and usage data as described in Apple's privacy policy. Movie Picker's Group Sessions also use Apple's iCloud (CloudKit) service to store and sync session data between participants' devices, which requires your device to be signed into iCloud. See Apple's privacy policy for how iCloud handles this data.

Cloudflare and Google Cloud. inkoo's and Houseplant SOS's backend proxies run on Cloudflare Workers; Car Identifier's backend proxy runs on Google Cloud Run. Both may process request metadata such as IP addresses in accordance with their own privacy policies at cloudflare.com/privacypolicy and cloud.google.com/terms/cloud-privacy-notice.

Your rights

Under UK GDPR, you have the right to access, correct, or request deletion of any personal data we hold about you. As our apps store virtually no personal data on our servers, there is typically nothing for us to provide or delete beyond what is held locally on your device, which you can clear at any time by deleting the app.

To exercise any rights or raise a concern, contact us at hello@digitaldoctorltd.com. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Children

Our apps are not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has submitted personal data through one of our apps, contact us at hello@digitaldoctorltd.com and we will take appropriate steps.

Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted at this URL with an updated date at the top. Continued use of our apps after changes are posted constitutes acceptance of the updated policy.