🚧 My Cancer Journey is still in beta testing. You're very welcome to use it — just expect the odd rough edge while we iron things out. It will become chargeable at some point. We'd love your feedback any time at support@mycancerjourney.co.uk.

Your free trial has ended

Your data is safe and waiting.
Subscribe to pick up exactly where you left off.

Payments processed securely by Stripe. Cancel any time.

Help

Use these figures as a helpful guide, not a precise count. For specific dietary advice during your treatment, always speak to your dietitian or clinical nurse specialist.

To confirm, type DELETE in the box below:

Always follow the advice of your doctor, oncologist, or pharmacist. Never stop or change a medication without consulting your healthcare team first.

My Cancer Journey is operated by My Cancer Journey Limited, a company registered in England and Wales (company number 17318970). Contact us at support@mycancerjourney.co.uk.

When you use My Cancer Journey we collect and store:

• Your name and email address
• Health information you choose to enter — cancer type, diagnosis date, medications, food diary, journal entries, appointments and medical documents
• Age range (optional)
• Photos you upload to the app
• Session logs

This is special category health data under UK GDPR Article 9. We only process it because you have given explicit consent at sign-up.

Your data is used solely to provide the My Cancer Journey service. We do not sell your data, use it for advertising, or share it with third parties except as described below.

Supabase — our database and authentication provider. We have a Data Processing Agreement in place.

Resend — used to send transactional emails. Only your email address is shared.

People you invite — Viewers or Contributors will see the data sections you have chosen to share.

• Right of access — export all your data from Settings → Your Data → Export My Data.
• Right to erasure — delete your account from Settings → Your Data → Delete My Account.
• Right to rectification — update your profile from Settings at any time.
• Right to withdraw consent — delete your account at any time.
• Right to lodge a complaint — contact the ICO at ico.org.uk.

We retain your data for as long as your account is active. Items in Recently Deleted are permanently removed after 30 days. If you close your account, all personal data is deleted within 30 days.

All data is encrypted in transit (HTTPS) and at rest. Access is controlled by row-level security — only you and people you explicitly invite can access your information.

We use browser local storage to cache your data for offline use. We do not use tracking cookies or advertising cookies.

As a Data Controller processing personal data in the UK, we are registered with the Information Commissioner's Office (ICO). Our ICO registration number will be displayed here once confirmed. You can verify registration at ico.org.uk.

If you are unhappy with how we handle your data, you have the right to complain to the ICO at ico.org.uk/make-a-complaint or by calling 0303 123 1113.

In the event of a personal data breach we will: assess it within 24 hours; report to the ICO within 72 hours if required under UK GDPR Article 33; notify affected users without undue delay if there is high risk to their rights; and document all breaches in our internal register. To report a suspected breach, contact support@mycancerjourney.co.uk.

For privacy questions or to exercise your rights: support@mycancerjourney.co.uk

🗄️ Supabase — All user data stored in PostgreSQL on AWS EU West. SOC 2 Type II certified.

🌐 Netlify — App served via global CDN with automatic HTTPS. SOC 2 Type II certified.

✉️ Resend — Invitation emails sent via Resend. Email addresses used solely for delivery.

• In transit: All communication uses TLS 1.2+ (HTTPS).
• At rest: All data encrypted using AES-256.
• Passwords: Never stored in plain text — handled by Supabase Auth using bcrypt hashing.

Your data can only be seen by you and people you explicitly invite. We enforce this at the database level using Supabase Row-Level Security (RLS).

Sign in via Supabase Auth with short-lived JWTs and secure refresh token rotation. Password resets use the PKCE flow to prevent interception attacks.

All personal data is stored within the EU/UK region (AWS EU West). Data is not transferred outside this region except where explicitly noted.

We do not sell, rent, or share your data for advertising or commercial purposes. Your health information is never used to train AI models.

Permanently delete your account and all data at any time from Settings → Delete My Account. Records are removed immediately.

🔒 TLS 1.2+  ·  🔐 AES-256  ·  🛡️ Row-level security  ·  🇬🇧 UK/EU data  ·  🚫 No ads  ·  ✅ SOC 2 infrastructure

Contact us immediately at support@mycancerjourney.co.uk. We aim to respond within 24 hours.