1. The short version

We collect what we need to run your Eclipse sessions, keep your continuity, make your reports and take your payment. We do not sell your information, and we do not advertise to you unless you have asked us to. Your session material is kept for 90 days after your last visit, then deleted, and we email you before that happens. You can ask for a copy of everything, or ask us to delete it sooner, at any time. Eclipse is not a medical record.


2. What we collect

We do not ask for anything we do not need, and you are always free to leave out anything we have not asked for.


3. Why we hold it

Offers, if you ask for them

We only tell you about offers if you have asked us to. That is a separate tick box, separate from the permission you give us for your health information, and separate from agreeing to these terms. It reads:

Yes, email me about offers and services that might help me, chosen using what Eclipse knows about me.

Nothing depends on that tick. You get the whole service whether you tick it or not, and if you leave it clear you will never receive an offer from us.

You can stop at any time. Every offer email has an unsubscribe link, and one word to us does the same thing. It stops straight away.

What an offer looks like. It is a specific suggestion, not a mailing list. Eclipse holds your chart and your history, so we can tell you about something that fits you — a device for a skin problem, or a service that helps with anxiety — instead of sending the same email to everybody. That is the whole point of it, and it is why what we suggest is better than a generic newsletter.

What we never do. We do not sell your information. We do not pass your details to the company whose product we mention — if an offer interests you, you deal with them yourself. And you will never get an offer you did not ask for.


4. The lawful bases, in plain English

Data protection law asks us to name the reason we hold each kind of information. Two of them apply here, and one extra rule for health.

Which law we follow. We are a UK company and we follow the UK GDPR. We apply that same standard to the information of every client, wherever you live, and we never sell it. If you live outside the United Kingdom, you can also raise a complaint with the data protection authority in your own country — see section 10.


5. Where your information lives, and who else touches it

Your information is held on our own server, and your uploaded files are held with it, kept under your client record with us. The companies below process it so that Eclipse can work:

Who What they do
Stripe Takes payments and manages subscriptions. They hold your card and payment details; we never see them.
Gradium The voice. Turns your speech into text and Eclipse's reply into speech.
Mistral AI The language model that writes Eclipse's words. What is said in a session is sent to it so Eclipse can answer. Held in the European Union, and configured never to train on your data.
Oracle Cloud Infrastructure The server Eclipse runs on.
Our email host Namecheap Private Email carries Eclipse's email. What you see is Eclipse eclipse@howcaniheal.org, and if you reply it comes back to the same address — which is also the address to write to about anything in this policy. Please keep health details out of email and write them in the app or bring them to a session; our older richardflook.com addresses are for ordinary correspondence only.

We share your information with no one else, unless the law requires it, or unless it is necessary to protect someone from serious harm.

Building and improving Eclipse

Research, teaching and product improvement

Where your information is held

Almost all of it stays in the European Union. The server Eclipse runs on is in Paris, the language model and the voice service are in France, and our payments are handled through Stripe's European entity in Ireland. Our email is different: it is carried by Namecheap Private Email, whose servers are in the United States.

Where information is transferred outside the United Kingdom, the transfer is covered by the provider's data processing agreement and the safeguards the law requires. You can ask us for a copy at any time.


6. How long we keep it

This is Richard's own client-facing wording, and it is the rule:

Your sessions, transcripts and notes are kept for 90 days after your last visit, so you can come back and carry on where you left off. We will email you before we delete anything, and you can download everything or ask us to delete it sooner, whenever you like.

We act on that with a reminder ladder by email:

Download everything, or delete everything. The account page gives you two choices: Download everything — one file with everything we hold about you, for your own records — or Delete everything. Deleting asks you first — “Are you sure you want to delete everything?” — and then confirms with a code sent to your email before it happens: a code will be sent to you, and nothing is deleted until you type it in. That way no one can end your account by accident and no one else can end it for you. Both buttons are live: you can do either yourself, at any time. If you would rather have us do it, reply to any email from Eclipse and we will send you everything, or delete everything, by hand.

Backups after you delete. If a copy of your record is still in a backup when you delete your account, it is kept a further ten days, just in case, and then it goes — once someone deletes an account we have no right to store their information any longer.


7. Your rights, and how to use them

You can:

How to ask today: reply to any email from Eclipse, or message us on WhatsApp at +33781442540, and say what you want. Richard actions it personally. We will confirm to you when it is done. We answer a data request within 30 days.

On the account page you can do both yourself — download everything we hold about you, and delete everything. Deleting asks you first — “Are you sure you want to delete everything?” — and confirms with a code sent to your email before it happens: a code will be sent to you, and nothing is deleted until you type it in. That way no one else can end your account. Both buttons are live; the routes above always work too.

Privacy requests go to eclipse@howcaniheal.org (live and monitored), or the WhatsApp number.


8. Security, in plain terms

No system is perfect. If anything ever goes wrong, we will tell you.

If you ever need to report a security problem, write to eclipse@howcaniheal.org.


9. Minors and guardians

Where a young person uses Eclipse, their parent or guardian is recorded on their record and holds access to that young person's space, including their transcripts. The young person does not need a separate login. A young person's information is held under the same 90-day rule as anyone else's.

The minimum age is 18. Below that, the only way in is an Eclipse Junior account held by a parent or guardian. The free sessions for a young person are offered through their guardian, inside the guardian's own account. The wording a guardian agrees to is in section 4 of the Terms of Service, and the guardian can see everything in the young person's space and can delete the account.


10. How to complain

If you are unhappy with how we have handled your information, tell us first — reply to any email from Eclipse or message +33781442540 and we will put it right.

You can also complain to the UK Information Commissioner's Office (ICO), the authority that supervises data protection in the United Kingdom. If you live outside the United Kingdom, you can also complain to the data protection authority in the country where you live. You can go to them at any time; we would only ask that you let us try to put it right first.


11. What Eclipse is not

Eclipse is not a medical record, and it is not your doctor's file. It holds your words, your sessions and what you have chosen to send us, so that we can work with you. It is not a clinical record of care, it is not shared with your doctor, and it does not replace anything your doctor holds.

Some of what we hold is sensitive by nature: your birth date, time and place; what you say about your body, your feelings and your health; and the photos, letters and medical images you upload. We treat it that way, we use it only for the purposes in section 3, and we delete it on the 90-day rule in section 6 unless you ask us to delete it sooner.


12. Changes to this policy

If this policy changes, we will email you and say what changed and when it takes effect. The current version is always the one in the app.

This version: 6 October 2026 · Version 2.0.