Last updated: June 2026
Norfolk Diabetes Support (norfolkdiabetessupport.co.uk) is a membership platform providing AI-powered clinical support for people living with type 2 diabetes. This service is operated as a sole trader, registered with the Information Commissioner's Office (ICO).
When you register, we collect your email address and a password (stored securely as a hash, never in plain text).
When you complete your member profile, we collect: years since diagnosis, weight, height, waist measurement, sleep hours, eating window, exercise habits, liver health information, energy patterns, blood sugar spike patterns, current medications, your main health goal, and a username of your choosing.
When you use the AI chat feature, we store the full conversation history associated with your account, so that you can return to previous conversations.
When you post in the community forum, your post and reply content is stored and visible to other members under your chosen username. Your real email address is never shown to other members, but is retained in our system in connection with your posts.
If you cancel your subscription, we may ask for and store your reason for cancelling and any feedback you provide.
When you use the Glucose Log & Interpretation tool or the Letter & Report Translator, the information you submit is sent for AI processing to generate a response for you. We may store glucose readings you submit in order to show you trends over time as part of the service; if so, this is held under the same security and access protections as your other account data.
We use your information to provide and personalise the service, including tailoring AI responses to your circumstances, maintaining your conversation history, processing payments, sending you service-related emails, and moderating the community forum.
We do not use your health information for advertising purposes, and we do not sell your data to third parties.
We use the following third party services to operate Norfolk Diabetes Support, each of which processes data on our behalf under their own data protection terms:
Supabase — database hosting (stores your account, profile, chat history, and forum data)
Anthropic — AI processing (processes your messages, profile, and submitted content to generate responses)
Stripe — payment processing (processes your payment details; we do not store your card information ourselves)
Resend — transactional email (sends account-related emails such as password resets)
Railway — application hosting
We do not share your information with any other third parties except where required by law.
We retain your account information and chat history for as long as your account remains active. If you cancel your subscription, we retain your information for a reasonable period in case you wish to reactivate, after which it may be deleted. You can request deletion of your account and associated data at any time by contacting us.
Under UK data protection law, you have the right to access the information we hold about you, request correction of inaccurate information, request deletion of your information, and object to or restrict certain processing. To exercise any of these rights, contact us at info@norfolkdiabetessupport.co.uk.
We take reasonable technical measures to protect your information, including password hashing, encrypted connections, and authentication checks on all account-specific data. No system can be guaranteed completely secure, but we take your privacy seriously and act promptly to address any concerns.
We may update this policy from time to time. The "last updated" date at the top of this page reflects the most recent revision.
If you have any questions about this policy or how your information is handled, contact us at info@norfolkdiabetessupport.co.uk.