privacy

Who we are

ADHDer (adhder.co.uk) is run by [Legal name to be added], [Postal address to be added]. We are the "data controller" for the personal information described in this notice, which means we decide how it is used and we are responsible for looking after it.

If you have any questions about your information, email us at hello@adhder.co.uk.

What we collect

We only collect what we need to run the website, the app and the members' area.

• Your account. When you register: your name, email address, a securely scrambled (hashed) version of your password, your account type and the date you joined. We never store your password itself.
• Things you save. Articles you save to your account.
• Your app records. If you use the ADHDer app, whatever you choose to record in it, such as tasks, notes, diary entries, moods, sleep, medication names and when you took them, reminders and, if you take part, your pattern-analysis check-ins. Some of this is information about your health.
• Messages you send us. If you use the contact form or "Ask a question": your name, email address, subject, category, message and the date. If you suggest a video channel: the name, link, your email address (if you give it) and any notes.
• AI Assistant. If you switch it on: your messages and its replies, and a count of how many messages you have sent each day.
• Gmail and Google Calendar. Only if you choose to connect them. See Gmail and Google Calendar below for exactly what this covers.
• Notifications. If you turn on app notifications, the technical address your browser gives us to deliver them.
• Security records. When someone tries to log in, we briefly record the IP address and email address used, to block repeated guessing of passwords. These records are deleted after about a day.

Please don't send us medical records, prescriptions or detailed health histories through the contact form or "Ask a question". ADHDer can't give medical advice.

Why we use it

• To provide the service you signed up for: your account, saved articles, the app, AI Assistant and reminders. In data protection terms, this is to perform our agreement with you.
• Health information you record in the app or share with AI Assistant is used only to provide those features to you, because you have chosen to give it to us for that purpose (your explicit consent). You can delete it at any time.
• To answer your messages and look into anything you report.
• To keep the website secure and stop misuse, such as blocking repeated login attempts. This is in our legitimate interests and yours.
• To meet legal obligations where the law requires it.

We don't sell your information, we don't use it for advertising and we don't make decisions about you by automated means that have legal or similarly significant effects.

AI Assistant

AI Assistant is an optional helper in the members' area. It can help you plan your day, break things into steps and talk things through. You switch it on and off in Account settings.

• When you send a message, it and recent messages from the same chat are sent to our AI provider, xAI, through its Grok API, so it can write a reply. We send a scrambled reference number with each request, not your name or email address.
• Replies are written by AI and can be wrong. It's not a doctor and doesn't give medical advice.
• Your chat is visible only to you in your account. You can delete your chat history at any time, and it's deleted if you delete your account.

Connecting Gmail and Google Calendar (optional)

AI Assistant can work with your Gmail and Google Calendar, but only if you choose to connect them. Connecting is entirely optional. Everything else on ADHDer works the same without it. This section explains, in plain terms, what we can see, what we do with it and how to switch it off.

What we can see, and why

You connect Gmail and Google Calendar separately, so connecting one never gives us the other. Before anything is connected, we show you a short "Before you connect" screen, and Google then shows you exactly what you're agreeing to.

Google Calendar. If you connect it, AI Assistant can:

• look at the events on your main calendar for the days you ask about (the event name, start and end times, and location), so it can tell you what's coming up; and
• add a new event, but only after it shows you the details and you tap Yes. Events it adds say "Added by AI Assistant on ADHDer, after you tapped Yes."

It does not change, move or delete events you already have, even though Google's permission screen says the access would allow editing.

Gmail. If you connect it, AI Assistant can:

• list recent emails in your inbox (who they're from, the subject, the date and a short preview), up to 10 at a time, when you ask about your email;
• open and read one email you pick, so it can summarise it or help you reply (it reads the text of the email, not attachments); and
• if you tick the box to allow it, save a reply as a draft in your own Gmail Drafts folder, for you to check, change and send yourself.

It never sends, forwards, deletes or moves email. Google's permission screen describes the drafts permission as "Manage drafts and send emails", because Google doesn't offer a drafts-only option, but ADHDer never sends anything. If you'd rather not allow drafts, leave that box unticked and AI Assistant will only read.

We also note the email address of the Google account you connected, so we can show "Connected as …" in your settings.

AI Assistant only looks at your email or calendar when you ask it something that needs them. It doesn't scan your inbox or calendar in the background.

How we use it

We use your Google information only to give you the AI Assistant features you ask for: telling you what's in your calendar, adding events you've approved, summarising or explaining emails, and saving reply drafts. We don't use it for anything else.

To answer you, the relevant parts (for example an email's sender, subject and text, or your events for that day) are sent, along with your question, to our AI provider, xAI, through its Grok API. xAI processes it only to produce the reply. We don't send xAI your name or email address with it; we use a scrambled reference number instead. xAI says it does not train its models on information sent through its API, and keeps requests for up to 30 days to check for abuse before deleting them automatically.

What we keep, and how we protect it

• Your connection keys. When you connect, Google gives us keys (called tokens) that let AI Assistant reach your Gmail or Calendar. We store these encrypted, using strong industry-standard encryption, with a key held separately from the database. We also store which permissions you gave and the Google address you connected.
• No copies of your mailbox or calendar. We don't save your emails or events in our database. We fetch what's needed when you ask, and use it to answer.
• Your chat with AI Assistant. The assistant's replies (which may mention or summarise an email or event you asked about) stay in your chat history so you can scroll back. The same goes for the short notes under a reply, such as "Draft saved" (with the recipient and subject) or a suggested event (its title, time and place). You can delete your chat history at any time from the AI Assistant page, and it's all deleted if you delete your account.
• A short list of the last emails you looked at. So you can say things like "reply to the one from Sam", we remember the sender and subject of the emails in the most recent list (up to 10), along with Google's reference numbers for them. This list is replaced each time you ask about your email, and deleted when you disconnect, delete your chat history or delete your account.

Information travels between ADHDer, Google and xAI over encrypted (HTTPS) connections.

What we never do

• We never sell your Google information.
• We never use it for advertising, and we never share it with advertisers, data brokers or anyone else, except xAI as described above, to answer your questions.
• We never use it to create, train or improve general AI models, ours or anyone else's.
• We never use it to judge credit-worthiness or for lending.

Who can see it

No person at ADHDer reads your emails or calendar. The only exceptions are:

• if you ask us to and give us your clear permission to look at a specific email or event (for example, when you're asking us for help with a problem);
• if it's needed for security, such as investigating abuse or a fault; or
• if the law requires it.

Disconnecting and deleting

• Disconnect at any time in Account settings > Connections. When you tap Disconnect, we tell Google to cancel ADHDer's access and delete your connection keys straight away. Google cancels Gmail and Calendar access together, so disconnecting one disconnects both. You can reconnect the one you still want afterwards.
• You can also remove ADHDer from your Google account yourself at myaccount.google.com/permissions. If you do, AI Assistant simply stops being able to reach your Gmail or Calendar, and we delete the keys we held the next time it tries.
• Delete your chat history at any time from the AI Assistant page.
• Delete your ADHDer account in Account settings. We cancel Google's access, then delete your connection keys, your chat history and everything else described above.

Disconnecting doesn't undo things you've already chosen to do: drafts saved in your Gmail and events added to your calendar stay there until you remove them in Gmail or Google Calendar.

If you have any questions about this, or want us to delete something, email us at hello@adhder.co.uk.

Google's rules

ADHDer's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Cookies

We only use cookies that are needed for the website to work. We don't use advertising or analytics cookies.

• adhder_session keeps you logged in while you use the site and protects forms from being misused. It's deleted when you close your browser or log out.
• adhder_app_remember keeps you signed in to the app for up to 30 days, so you don't have to log in every time. It's removed when you log out.

Some pages show videos from YouTube (using its privacy-enhanced mode) or Vimeo. When you play one, that service may set its own cookies and receive your IP address under its own privacy policy. Our pages may also ask your browser to load fonts from Google Fonts, which means Google receives your IP address.

Who we share it with

We only share information with the services that help us run ADHDer, and only what they need:

• IONOS, our hosting provider, which stores the website and database.
• xAI, our AI provider for AI Assistant, as described above.
• Google, only if you connect Gmail or Google Calendar, to fetch or save what you ask for.
• Your browser's notification service (for example Google, Apple or Mozilla), only if you turn on app notifications, to deliver them.

Some of these providers, including xAI, may process information outside the UK, for example in the United States. Where that happens, we rely on the safeguards that UK data protection law requires.

We may also share information if the law requires it, or to protect someone's safety.

Keeping it safe

The website uses encrypted (HTTPS) connections. Passwords are stored only as one-way hashes, and Google connection keys are encrypted. Only authorised administrators can access the admin area. No online service can promise perfect security, but we take sensible steps to protect your information and will act quickly if something goes wrong.

How long we keep it

• Your account, saved articles, app records and AI Assistant chats: until you delete them or delete your account. You can delete individual app records yourself, and you can delete your whole account in Account settings.
• Messages you send while logged in: until we delete them, or until you delete your account.
• Messages sent without an account, and video channel suggestions: until we have dealt with them and delete them. Email us if you'd like one deleted sooner.
• Login security records: about a day.
• Google connection keys and the list of recent emails: as explained in Gmail and Google Calendar.

Our hosting provider may keep backups for a short time after something is deleted, before they are overwritten.

Your rights

Under UK data protection law, you have the right to ask for a copy of your information, to have it corrected or deleted, to restrict or object to how we use it, and to receive it in a format you can take elsewhere. Where we rely on your consent, you can withdraw it at any time. To use any of these rights, email hello@adhder.co.uk. We'll reply within one month.

If you're unhappy with how we've handled your information, please tell us first so we can try to put it right. You can also complain to the Information Commissioner's Office (ICO).

ADHDer accounts are for adults aged 18 or over.

Changes and contact

If we change how we use your information, we'll update this notice and change the date below. If a change is significant, we'll let members know.

Contact: [Legal name to be added], [Postal address to be added], hello@adhder.co.uk.

Last updated: 28 October 2026.