Privacy policy

Intervention Logbook is a personal logbook for recording the interventional radiology procedures you perform during training and practice. It is made by Dr Azhar Ali (“I”, “me”), who is responsible for the information described here. This policy explains what happens to your information when you use the app or its website, join the mailing list, or contact me.

The short version

• Your logbook stays on your device. Everything you enter is saved only on your phone or computer. I never receive it and can’t see it.
• The app doesn’t track you. There are no accounts, adverts, analytics or tracking tools.
• Never enter patient details. The app is designed so you don’t need to. Don’t type names, dates of birth, NHS, hospital or accession numbers, or anything else that could identify a patient.
• I see very little: emails you choose to send me, your email address if you join the mailing list, counts of website visits that don’t identify anyone, and what Apple, Google or my hosting provider pass on to run the app, as explained below.

What stays on your device

Everything you put in the logbook is stored only in the app’s storage on your device. That includes your details (such as your name, GMC number and stage), your posts and targets, your cases, results, reflections, and your supervisors’ names, sign-offs and feedback. None of it is sent to me or anyone else.

• Deleting. If you delete the app, or clear your browser’s data for the web version, your logbook is deleted with it. Back up regularly.
• Backups. Back up now makes a file locked with a password you choose, using strong encryption (AES-256). You save it wherever you like, such as Files or iCloud Drive. I never see the file or its password, and if the password is lost, nobody can open the backup.
• Exports. When you export your logbook, for example for your portfolio or appraisal, the app makes the file on your device and hands it to your device’s share options. Where it goes is up to you.
• Weekly reminder. The results reminder is an event you add to your own calendar. It never names a case.
• Send feedback opens your own email app with a message ready to write. The app adds only its version number and the type of device, such as “iPhone, iOS 18.2”. Nothing from your logbook is added.

If you’re a supervisor

When you sign off cases on a trainee’s device, the app keeps your name, your GMC, HCPC or NMC number if you add it, a scrambled check of your PIN (never the PIN itself), the cases you sign off and any feedback you write.

All of this stays on the trainee’s device and in their backups. Your name, registration number and sign-offs also appear in exports the trainee makes for their portfolio; your feedback doesn’t. I never receive any of it, so to have your details changed or removed, ask the trainee.

Information I do receive

When you email me. If you send feedback or write to [email protected], I receive your email address, your message and anything you attach, plus the version and device type that Send feedback adds. Emails to that address pass through Cloudflare’s email service to an inbox hosted by Google (Gmail).

When you download or update the app. Apple (App Store and TestFlight) and Google (Google Play) handle downloads and updates under their own privacy policies. If you’ve agreed in your device’s settings to share analytics with app developers, they may pass me crash reports and usage statistics that don’t identify you. If you test early versions through TestFlight, I also see the name and email address you were invited with, and any feedback or screenshots you send through it.

When you visit the website or use the web app. interventionlogbook.com and the web app are hosted by Cloudflare. Like any web host, Cloudflare records basic technical details when your device loads pages or updates, such as your IP address, device or browser type and the time. These records are used to deliver the site and protect it from attack; I don’t use them to identify you. The iPhone app also opens the website when you add the weekly reminder to your calendar.

Visit counts on the website. The website counts visits with Cloudflare Web Analytics, so I can see how many people visit, which pages they look at, which site or link brought them there, their country and type of device, and how quickly pages load. I use these counts only to improve the website. They use no cookies, and they don’t identify you or follow you to other sites. Your visits aren’t counted if you choose Don’t count my visits at the bottom of any page of the website, which your browser then remembers, or if your browser sends a Global Privacy Control or Do Not Track signal. The app itself, including the web version, counts nothing.

When you join the mailing list. You join by emailing [email protected], and I keep your email address and that email, as a record that you asked to join. I then email you when the app launches, and with occasional news about it. Everyone on the list gets these emails as a blind copy, so nobody sees anyone else’s address. To leave, reply to any of them or email me, and I’ll take you off. The emails have no tracking, so I can’t see whether you open them or click their links. I never sell the list or use it for anything else.

Cookies and device storage. The website and app use no cookies for advertising, analytics or tracking. The app keeps your logbook in your device’s own storage because that is how it works, which is essential to the service you’ve asked for. The website keeps a note in your browser only if you choose Don’t count my visits, to remember that choice.

Why I use it, and the legal basis

I use the information above to answer your messages, fix problems, improve the app and website, and keep them running securely. The legal basis is my legitimate interests in running a safe, working app and responding to the people who use it. For the mailing list, the legal basis is your consent, which you can withdraw at any time by replying to any of its emails or by emailing [email protected]. I don’t sell your information, add you to the mailing list unless you join it yourself, or make automated decisions about you.

Who else handles it

• Cloudflare hosts the website and web app, routes email and counts website visits.
• Google hosts the email inbox, which also holds the mailing list, and runs Google Play once the app is there.
• Apple runs the App Store and TestFlight.

These companies may handle information outside the UK. Where they do, they rely on safeguards recognised in UK law, such as the UK–US data bridge or approved contract terms for international transfers.

How long I keep it

• Feedback emails: deleted within 12 months, unless you ask me to delete them sooner or I need them to resolve an ongoing problem.
• Mailing list: until you ask to leave or I close the list. After you leave, I keep just your address on a do-not-email list, so you aren’t emailed again.
• TestFlight invitations: until you leave the testing group or testing ends.
• Hosting records: kept by Cloudflare for its own short periods, under its privacy policy.
• Website visit counts: I can see them for six months, and Cloudflare keeps them under its privacy policy.

Your rights

Under UK data protection law, you can ask to see the information I hold about you, have it corrected or deleted, restrict or object to how I use it, or receive a copy. Email [email protected] and I’ll reply within one month.

Your logbook isn’t covered by these requests, because I never hold it. You can view, change, export or delete it yourself in the app.

If you’re unhappy with how I’ve handled your information, please tell me first. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Children

The app is for healthcare professionals and isn’t intended for anyone under 18.

Who is responsible

Dr Azhar Ali is the data controller for the information described above, and is registered with the Information Commissioner’s Office. Contact: [email protected].

Changes

If this policy changes, I’ll update the date at the top. For important changes, I’ll tell you in the app, or by email if you’re on the mailing list, before they take effect.