Effective date: 6 April 2026
Version: 1.3
Operator
SHEIQ by CRYPTIQ Ltd
Registered in England and Wales
Company registration number: 16012114
Registered office: 128, City Road, London, EC1V 2NX
This notice explains how personal and health‑related information is collected, used, stored, and protected when you use the SHEIQ mobile application, website, products, and related services.
This notice applies to all services operated under the SHEIQ brand.
1. Who operates SHEIQ
SHEIQ is operated by CRYPTIQ Ltd.
CRYPTIQ Ltd determines how personal information is processed and protected.
Data protection enquiries privacy: @sheiq.uk
General support support: @sheiq.uk
Legal correspondence legal: @cryptiq.uk
2. What information SHEIQ collects
SHEIQ collects only the information necessary to operate the service.
Account information
Name
Email address
Login credentials
Country or region
Subscription status
Health and wellbeing inputs
Symptoms logged by the user
Cycle or rhythm tracking inputs
Mood and wellbeing reflections
Energy or activity entries
Sleep and lifestyle entries
These inputs may include health‑related information voluntarily provided by the user.
App usage information
Feature usage
Session activity
Device information
Error diagnostics
AI interaction information
Messages sent to SHEIQ AI
Context signals used to generate responses
Support information
Messages sent to customer support
Feedback submissions
Commerce information
Orders for SHEIQ kits or other products
Delivery address
Payment confirmation from payment processors
SHEIQ does not store card details.
3. Why SHEIQ processes this information
Information is processed for the following purposes.
Operating the app and user account Providing personalised insights and wellbeing guidance Generating user‑requested reports such as GP‑ready notes.
Processing subscriptions and product orders Providing customer support Improving service quality and security Preventing misuse or fraud
4. Legal basis for processing
SHEIQ processes personal information under the following legal bases.
Contract performance
To operate the app and deliver services requested by the user.
Consent
Where users voluntarily provide health‑related information or enable certain features.
Legitimate interests To maintain service security, prevent misuse, and improve platform functionality.
Where health‑related information is processed, it is treated as special category data under UK data protection law. Processing of such information is based on the user's explicit consent when they voluntarily provide health‑related inputs within the service.
5. How SHEIQ AI uses information
SHEIQ AI analyses information provided by the user to generate supportive responses and insights.
AI responses are designed to support wellbeing and reflection.
SHEIQ AI does not provide medical diagnosis, treatment advice, or emergency services.
AI outputs may occasionally be inaccurate or incomplete.
Users should consult qualified healthcare professionals for medical concerns.
6. GP‑ready notes and exports
The app allows users to generate reports summarising their logged information.
These reports are generated from user‑provided data may not represent a complete medical history are shared only if the user chooses to share them
SHEIQ does not automatically send reports to healthcare providers.
7. Data sharing
SHEIQ does not sell personal information.
Information may be shared with trusted service providers that support operation of the service.
These may include
secure cloud hosting providers
email delivery services such as SendGrid
payment processors
analytics services
shipping or fulfilment providers for physical product orders
These providers process personal information only under contractual data-processing agreements.
8. International transfers
Where service providers operate outside the United Kingdom or European Economic Area, appropriate safeguards are applied to protect personal information.
These safeguards may include Standard Contractual Clauses or transfers to jurisdictions recognised as providing adequate protection under UK data protection law.
9. How long information is kept
Information is retained only for as long as necessary.
Typical retention periods include
Account information
Retained while the account remains active
Health logs and wellbeing inputs
Retained while the account remains active
Support communications
Retained for service improvement and legal purposes
Security logs
Retained for limited periods to detect misuse
Where an account is deleted, personal information is removed or securely anonymised in accordance with internal data retention policies. Certain information may be retained longer where required to comply with legal and accounting obligations, to resolve disputes, or to protect the security of the service.
Business records we may retain include:
Order records and fulfilment status.
Invoices and accounting records.
Refund, return, and chargeback history.
Shipping and delivery evidence.
Limited security and audit logs.
Deleted information may persist in encrypted backups for a limited period until those backups are rotated, after which it is removed.
See the Data export notice and the Account deactivation and deletion notice for more information.
10. Your rights
Users have the following rights under UK data protection law.
Access the information held about them Correct inaccurate information Request deletion of personal data Request a copy of their personal information in a portable format Restrict certain types of processing Object to certain types of processing Withdraw consent where processing is based on consent
Requests can be made through the app or by contacting
privacy@sheiq.uk
11. Data security
SHEIQ applies technical and organisational safeguards designed to protect personal information.
These include
encrypted connection
controlled access to systems
security monitoring and logging
vendor security assessments
Security measures are reviewed regularly.
12. Children
SHEIQ services are intended for adults.
The platform is not designed for use by children.
If information relating to a child is identified, it will be removed where possible.
13. Regulatory complaints
If you have concerns about how your information is handled, you may contact SHEIQ using the details above.
You also have the right to lodge a complaint with the UK Information Commissioner's Office.
Further information is available at www.ico.org.uk.
14. Cookies
Cookies used on the SHEIQ website are described in the SHEIQ Cookie Policy.
15. Updates to this notice
This notice may be updated periodically to reflect service improvements or legal requirements.
The latest version will always be available within the app and on the website.
16. Changes to the Service and these terms
We may change the Service to improve it, comply with legal requirements, or address safety and security risks.
We may update these terms from time to time. If changes are material, we will provide reasonable notice through the App or Website. Continued use after the effective date means you accept the updated terms.