Privacy notice

Last updated 30 October 2026

In short: your records are yours. We only use your information to run Legends Health for you. We never sell it, there are no adverts, and only you (and anyone you choose to share with) can see your records. You can download or delete everything at any time.

Who we are

Legends Health is a personal health record app, part of the Family of Stars group of apps. We are responsible for the information you put into it (the “data controller”). You can contact us at hello@legends-health.com.

Legends Health is not part of the NHS and does not give medical advice.

What information we keep

Your account: your name, email address and a scrambled version of your password (we never store the password itself).
What you add: medicines, doses you tick off, stock levels, appointments and notes, your daily diary (how you felt, symptoms and notes), documents and photos you upload, and your health summary (such as allergies, conditions, GP and emergency contact).
Settings: your chosen colour theme, your time zone (so reminders arrive at the right time) and, if you turn on reminders, a code for each device so we can send it notifications.
Family links: who you share with, who shares with you, and what each person is allowed to see.
Basic usage: when you joined and when you last used the app, and counts (for example how many medicines you have added) so we can see the app is working. We do not look at the content of anyone's records to do this.

Health information is a special type of personal data under UK data protection law. We only use it because you choose to give it to us so that the app can keep your records for you (your explicit consent). You can withdraw that consent at any time by deleting your records or your account.

How we use it

To show you your records and work out reminders, “can take again” times and low-stock warnings.
To send you notifications you have turned on, and emails you ask for, such as a password reset link.
To share records with the family members or carers you have chosen, and only the parts you have chosen.
To keep the service secure, for example by limiting repeated wrong passwords.

We do not use your information for advertising, we do not sell it, and we do not use it to make decisions about you.

Where it is kept

Your records are stored with Cloudflare, which runs the servers for Legends Health, and the website is delivered by Netlify. Cloudflare encrypts stored data and is set up to keep it in Europe where possible. Notifications are passed through your phone or browser's own notification service (for example Apple or Google), which receives only the reminder text. Emails are sent using Cloudflare's email service.

Medicine names come from the NHS Dictionary of Medicines and Devices, and GP surgeries, hospitals and pharmacies come from the NHS Organisation Data Service. Searching these lists does not send your records anywhere.

Who can see your records

Only you, and the people you invite through the Family section, see your records. Each person only sees what you allow, and you can change or remove their access at any time. We will only access your records if you ask us to help you, or if the law requires us to.

On your device

Legends Health stores a login code on your device so you stay logged in, and remembers settings such as larger text and screen lock. It does not use advertising or tracking cookies.

How long we keep it

We keep your records for as long as you have an account. If you delete your account, your records, documents and photos are deleted straight away from the live service. Backups that Cloudflare keeps for safety are removed in the normal course of their backup cycle.

Your rights

Under UK data protection law you can ask to see, correct, download or delete your information, and object to how it is used. You can do most of this yourself in the app (Settings → Download all my data, or Delete my account). For anything else, email hello@legends-health.com.

If you are unhappy with how we have handled your information, please tell us. You can also complain to the Information Commissioner's Office at ico.org.uk.

Children

Legends Health accounts are for adults. A parent or carer can add their children and keep their records in their own account. The parent who adds a child can give another parent or carer access to that child's records, and can remove that access or delete the child's records at any time. Children cannot log in themselves.

Changes

If we change this notice we will update the date at the top, and tell you in the app if the change is important.

← Back to Legends Health