How AIdan handles your information

Public AIdan and client AIdan

They work differently and keep different things. It's worth knowing which one you're using.

What happens to your messages

Your message travels over an encrypted connection to a small program run by Detective Health on Cloudflare, which passes it to Anthropic's AI service and returns the reply.

Nothing is saved by Detective Health. There is no database behind the public version and no record of who asked what. When you close the page the conversation is gone.

Anthropic processes your message to write the reply. Under its commercial terms it acts as a processor, and by default it does not use your messages to train its models. Anthropic may keep messages for a limited time under its own policies, for example for safety monitoring.

Because nothing is tied to you, please don't put your full name together with health details into the public version.

What is kept, and who can see it

Your access code. Stephen issues you a personal code and emails it to you. It is a random code, and it is your key: anyone who has it can open your AIdan and see what it remembers. Keep it private, and tell Stephen straight away if you think someone else has it; he will switch it off and issue a new one.

What is stored. In a database run by Supabase, on servers in Frankfurt, Germany:

• your name and email address, and the code you were given;
• a summary Stephen writes from your records, such as your test findings, programme, supplements and intake summary;
• your conversations with AIdan, message by message;
• if you share a test report as a PDF, the main findings AIdan reads from it (not the file itself);
• key dates Stephen adds, such as when a test or supplement started.

Photos and documents. AIdan can read a photo or PDF only on the turn you send it. The picture itself isn't kept; the conversation notes that one was sent.

Stephen reads your conversations. Each day the system emails Stephen the full text of the past day's conversations, so he can follow up and correct anything. Those emails sit in his practice email account.

Your browser remembers your code until you close the tab, so you don't have to retype it. Nothing else about you is kept in your browser.

The companies involved

Stephen Duncan, trading as Detective Health, decides how your information is used (the “controller”). These companies process it on his behalf, under their own data protection terms:

Some of these companies are based in, or process data in, the USA. Where that happens, the transfer relies on the safeguards in each company's data protection terms.

What to share and what to hold back

AIdan is most useful when you're specific about symptoms, history and what you've tried.

AIdan is not a clinician and not an emergency service. It doesn't diagnose or change your plan. If you have chest pain, trouble breathing, signs of a stroke or another emergency, call 999. For urgent advice, call NHS 111 or your GP.

If you're invited to an AIdan update

Past clients may be offered a short AIdan update: a time-limited code that lets AIdan ask what has changed since your last results and send Stephen a summary. It is optional and only starts after you agree on a separate consent form, which explains exactly what Stephen would load. The code expires, AIdan won't recommend anything new or change doses, and you can withdraw at any time.

AI help with your written reports

Stephen may use the same AI service to help draft parts of your written reports, such as the summary in a Clinical Summary Report. He sends your symptoms, findings and his notes without your name or date of birth, and he reads and edits everything before you receive it. This goes through a separate connection that only Stephen can use, and nothing is stored on the way.

Seeing, correcting and deleting your information

Health information is special category data under UK data protection law. Client AIdan relies on your explicit consent, which you can withdraw at any time without affecting your care.

You can ask for a copy of what is held about you, ask for it to be corrected, or ask for your AIdan profile and conversations to be deleted. Email stephen@detective-health.com. Stephen will switch off your code and do it within one month at the latest, and confirm by email. Clinical records that Stephen must keep are covered by the main privacy notice, including how long they are kept.

If you are unhappy with how your information is handled, please tell Stephen first. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).