Privacy Policy

Last updated: 7 October 2026

Who we are

Vigil (vigilhealth.co.uk) is run by Vigil Health Ltd, a company registered in England and Wales (company number 17385739), registered office 71-75 Shelton Street, London, WC2H 9JQ, UK. We are the controller of the personal data described in this policy. Our registration with the Information Commissioner's Office (ICO) is pending; we will publish the registration number here once it is issued.

Vigil helps adults understand blood test results they already hold. Because those results are health data, this policy explains plainly what we collect, why, and the choices you have.

What we collect and why

Data	Why we use it	Lawful basis
Your blood test report and the values extracted from it, which you confirm	To produce your results view and report	Your explicit consent to processing health data (UK GDPR Article 9(2)(a)), and performance of our contract with you (Article 6(1)(b))
Your answers to the eligibility questions: that you are 18 or over, and whether you are on treatment for a diagnosed condition	To check Vigil is suitable for you and to show a caveat on your report if you are on treatment	Explicit consent (Article 9(2)(a)) and contract
Sex recorded at birth	Sex recorded at birth is used to choose the ranges some markers are compared against. Without it, those markers are compared only with your laboratory's range.	Contract
Email address	To give you access to your results, send your report and service messages	Contract
Account details, if you create an account: email, date of birth, sex at birth	To run your account; date of birth confirms you are 18 or over; sex at birth chooses the ranges some markers are compared against	Contract; explicit consent for health-related details
Payment details	To take payment for a report. Card details go directly to our payment provider, Stripe; we never see or store them	Contract; legal obligation to keep accounting records
Your agreement to immediate delivery of your report, with the version of these terms you agreed to	To record that you asked for your report straight away (which affects your right to cancel)	Legal obligation and contract
Waitlist and marketing emails, if you sign up	To tell you about Vigil	Your consent, which you can withdraw at any time using the link in every email
Usage data from our website (pages viewed, device type, approximate location from your IP address)	To understand how Vigil is used and improve it	Your consent, given through our cookie banner
Technical data such as IP address and request logs	To keep the service secure, prevent abuse and limit repeated uploads	Our legitimate interest in running a secure service

You can withdraw consent to health-data processing at any time by contacting us. We will then delete your health data, and we will no longer be able to provide your report.

How we use AI

We use an AI model (Anthropic's Claude, provided through Amazon Web Services in the EU) for two tasks: reading the values from your uploaded report, and writing the explanatory text in your paid report.

Before the text of your report goes to the AI model, we automatically remove the patient-details section and common identifiers: labelled names, dates of birth, postcodes, NHS numbers and email addresses. This is automatic and may not catch every detail.
If you upload images (screenshots or photos), they are first read by Amazon Textract, which sees the whole image, including any personal details on it. Only the de-identified text then goes to the AI model.
The paid report is written from your confirmed marker values only, not from your uploaded report.
The AI model is accessed through Amazon Bedrock. Your data is not used to train AI models by Amazon Bedrock or Amazon Textract, and it is not shared with Anthropic.
The AI does not make decisions about you. Every range position, value and urgent-value check is calculated by our own software, and AI-written text is checked automatically before you see it. There is no automated decision-making that has legal or similarly significant effects on you.

Your uploaded file

Your file is read in memory to extract your values and is not stored. We keep the values you confirm and a one-way fingerprint of the de-identified text.

What we deliberately don't keep

If you answer yes to the questions about pregnancy or being currently unwell, we stop and store nothing about your answer.
Our analytics tool is set not to record your clicks or answers on the eligibility questions or your sex at birth.
Events our servers send to our analytics tool are anonymous: they carry no email address, account or report identifier.
We do not sell your data, use it for advertising, or share it with insurers or employers.

Who we share data with

We use these service providers to run Vigil. Each acts only on our instructions under a data processing agreement.

Provider	What they do	Where data is processed
Supabase	Database, account sign-in and sign-in emails	EU (Ireland)
Amazon Web Services (Bedrock, Textract)	AI processing of reports; reading text from images	UK and EU
Vercel	Website hosting and running our servers	EU (Ireland), with possible US access for support
Stripe	Payments	UK, EU and US
PostHog	Website analytics, only with your consent	EU
Loops	Service emails (your results link, report ready, retest reminders) and, if you opt in, marketing emails	US

We may also disclose data where the law requires it.

International transfers. Most processing happens in the UK or the European Economic Area, which the UK recognises as providing adequate protection. Where a provider may process data in the US, we rely on the UK International Data Transfer Addendum or the UK–US data bridge, as applicable.

How long we keep data

Data	Kept for
Free results created without an account	30 days from upload, then deleted automatically
Paid reports created without an account	12 months from purchase, then deleted automatically
Results and reports in an account	Until you close your account, which you can do from your account page, or ask us to delete a panel
Transaction records	Stripe keeps transaction records for 6 years to meet accounting obligations; our link between a payment and your report is deleted with the report
Waitlist and marketing details	Until you unsubscribe, or 24 months after we were last in contact
An email address given before an upload, without marketing consent	90 days
Retest reminders	Your email address and the reminder date, until the reminder is sent
Analytics data	[POSTHOG RETENTION]
Server logs	[VERCEL LOG RETENTION]
IP address used to limit repeated uploads	Held in server memory for up to 24 hours; it is not stored

Security

Data is encrypted in transit and at rest. Access to results without an account requires a private link or token. Identifying details are removed before AI processing. Access to production data is limited to the founder.

Cookies

Strictly necessary: these don't need consent.
- Supabase sign-in cookie: keeps you signed in to your account.
- vigil_anon_token: lets you return to results created without an account, for as long as they are kept (30 days, or 12 months for a paid report).
- vigil_lead_id and vigil_lead_email: connect the email you gave to the upload that follows; they expire after 90 minutes.
- vigil_cookie_consent (stored in your browser, not a cookie): remembers your cookie choice.
Analytics (optional): PostHog cookies and browser storage that help us understand how the site is used. We set these only if you accept them in the cookie banner. You can change your choice at any time with , also in the footer.

Your rights

Under UK data protection law you can ask us to:

give you a copy of your data;
correct data that is wrong;
delete your data;
restrict or object to how we use it;
give you your data in a portable format;
stop processing based on your consent, at any time.

If you have an account, you can download a copy of your data and close your account from your account page. To use any of these rights, email privacy@vigilhealth.co.uk. For results created without an account, include the email address you used so we can find them. We will respond within one month and won't charge you.

Age

Vigil is for adults aged 18 and over. We do not knowingly process data about anyone under 18; if we learn we have, we delete it.

Complaints

If you're unhappy with how we've handled your data, please contact us first. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Changes to this policy

We will update this page when our practices change, and tell you by email about any change that significantly affects how we use your health data.