Last updated: May 2026 · Version 1.2
This notice explains what personal data Serene processes, why, and on what legal basis — in plain English, as required by the UK General Data Protection Regulation (UK GDPR).
Serene is operated by Dr. Elif Coşkunçay MRCP MFPM ("we", "us", "the operator"). For data protection questions, please contact us via elifcoskuncay.com/Contact.
Serene is currently in early access. A formal UK GDPR Article 30 record of processing activities is maintained by the operator.
✅ On-device only (your browser localStorage):
🌐 Leaves your device (transmitted externally):
Health-related entries you make in Serene — including weight, symptoms, medications, GLP-1 logs, mood, and nutrition — are classified as special category personal data under UK GDPR Article 9. This type of data receives a higher level of legal protection.
Because all health data is stored exclusively on your device and never transmitted to Serene's systems or processed by us centrally, the practical risk of unauthorised access to your health data by the operator is minimal. However, we identify the applicable legal conditions below for full transparency.
Each row below maps a processing activity to its Article 6 lawful basis and — where health data is involved — its Article 9 condition.
① Creating and maintaining your local profile
We store your nickname, birth year, height, target weight, device preferences, and optional photo locally on your device so you can personalise the app experience. This data never leaves your device.
Where data goes: on-device only. Mandatory: no (all fields optional).
② Storing wellness and self-tracking entries
Your daily logs — water, steps, sleep, weight, mood, symptoms, workouts, bowel entries, skincare — are stored on-device only. This is the core purpose of the app. Health-related entries constitute special category data.
Where data goes: on-device only.
③ Medication and GLP-1 tracking
This is not a product promotion platform; it is a support and wellbeing programme for maintaining wellbeing in people receiving GLP-1 therapy. You may log your prescribed medications and GLP-1 injection history. This is stored on-device only as a scheduling and awareness tool. The app does not process this data centrally, and it is not accessible to the operator.
Where data goes: on-device only. Optional.
④ AI-powered nutrition search
When you search for a food item to log protein/calories, the text of your food query is sent to the Base44 platform, which uses the OpenAI API to estimate nutritional values. Only the food query text is transmitted — no profile data, health history, or identifying information is included in the request. The platform may retain query text briefly for abuse-monitoring purposes.
Where data goes: Base44 platform → OpenAI API (US). Transfer safeguard: Standard Contractual Clauses.
⑤ Medication reminders and notifications
If you enable medication reminders, the app stores your chosen reminder times locally and uses the browser Notifications API to trigger alerts. This processing is entirely on-device. No reminder data leaves your device.
Where data goes: on-device only. Requires browser notification permission.
⑥ PDF wellness report generation
You may generate a PDF summary of your wellness data to share with a healthcare professional. The PDF is generated locally on your device using the jsPDF library — it is never sent to or stored on Serene's servers. If you email the PDF, it passes directly from your email client to your chosen recipient.
Where data goes: on-device only. Optional — you choose if and to whom you share.
⑦ App hosting and infrastructure security
Serene's web app is hosted on the Base44 platform. Standard server-side logs (IP address, browser type, pages accessed, timestamps) are generated automatically for security, error monitoring, and abuse prevention. These logs do not contain your wellness data.
Where data goes: Base44 platform servers. Retention: up to 90 days per platform policy.
Base44
Role: App hosting, deployment infrastructure, and AI function routing.
Data shared: Server logs; food query text (for AI search only).
Location: EU / US. Transfer safeguard: Standard Contractual Clauses.
OpenAI
Role: AI language model used to estimate nutritional values from food query text.
Data shared: Food query text only. No health history or profile data.
Location: US. Transfer safeguard: Standard Contractual Clauses.
No other third parties receive your data. We do not use advertising networks, behavioural analytics, or social media tracking pixels.
UK GDPR's storage limitation principle requires that personal data is kept no longer than necessary for the purpose it was collected. The table below maps every data category Serene handles to its retention period, storage location, and deletion method.
⚕ Health-related data categories (Art. 9 special category)
Categories marked ⚕ below are health-related data under UK GDPR Article 9. They are subject to stricter review. They are stored exclusively on your device and are never transmitted to Serene's systems. Retention is therefore entirely your decision — there is no server-side copy the operator can access or delete on your behalf.
⚕ Wellness logs (water, steps, sleep, weight, body fat)
Purpose: Self-tracking and personal progress monitoring
Retention: Indefinite — until you delete. No automatic expiry.
Stored: Device only (browser localStorage)
How to delete: Immediate & permanent via Profile → Reset Local Data, or clear browser localStorage.
⚕ Mood entries and journal notes
Purpose: Personal reflection and wellbeing awareness
Retention: Indefinite — until you delete.
Stored: Device only
How to delete: Immediate & permanent via Profile → Reset Local Data.
⚕ Symptom and action logs
Purpose: Personal symptom journaling and self-awareness
Retention: Indefinite — until you delete.
Stored: Device only
How to delete: Immediate & permanent via Profile → Reset Local Data.
⚕ GLP-1 injection history
Purpose: Personal medication scheduling and dose awareness
Retention: Indefinite — until you delete.
Stored: Device only
How to delete: Immediate & permanent via Profile → Reset Local Data.
⚕ Medication list (profile field)
Purpose: Personal scheduling and reminder support
Retention: Until you edit or delete the profile.
Stored: Device only
How to delete: Edit or clear the medications field in your profile, or use Reset Local Data.
⚕ Protein and nutrition diary
Purpose: Nutrition tracking and protein goal monitoring
Retention: Indefinite — until you delete.
Stored: Device only
How to delete: Immediate & permanent via Profile → Reset Local Data.
Profile data (nickname, birth year, height, goals)
Purpose: App personalisation and goal setting
Retention: Until you edit or delete your profile.
Stored: Device only
How to delete: Edit individual fields, or use Profile → Reset Local Data.
Wearable / device preferences
Purpose: Recording which devices you use (display only — no data sync)
Retention: Until you edit or delete your profile.
Stored: Device only
How to delete: Edit the devices field in your profile, or use Reset Local Data.
App settings and language preferences
Purpose: App functionality and user experience
Retention: Until you change settings or clear data.
Stored: Device only (localStorage)
How to delete: Change settings in-app, or clear browser localStorage.
Medication reminder times
Purpose: Browser notification scheduling
Retention: Until you remove the reminder or clear data.
Stored: Device only
How to delete: Remove reminders in Profile, or use Reset Local Data.
Exported JSON backup (if you create one)
Purpose: Personal data portability and backup
Retention: Indefinite — stored wherever you save it. Serene has no copy.
Stored: Your chosen location (downloads folder, cloud drive, email, etc.)
How to delete: Delete the file from wherever you saved it. Serene cannot delete it for you.
⚕ PDF wellness report (if you generate one)
Purpose: Sharing a summary with a healthcare professional
Retention: Indefinite — stored wherever you save or send it. Serene has no copy.
Stored: Your chosen location or your email client's sent folder
How to delete: Delete the file or email from wherever you saved or sent it.
Food query text (AI nutrition search)
Purpose: AI-assisted nutritional value estimation
Retention: Query text transmitted to Base44 / OpenAI at time of search. Retained by those platforms for up to 30 days for abuse monitoring, per their policies.
Stored: Base44 platform → OpenAI (US)
How to delete: Governed by Base44 and OpenAI data retention policies. No action needed from you — no health data is included in these queries.
Infrastructure server logs (IP, browser, page, timestamp)
Purpose: Security, error monitoring, and abuse prevention
Retention: Up to 90 days, per Base44 platform policy.
Stored: Base44 platform servers
How to delete: Automatic deletion at 90 days per platform policy. Does not contain any wellness or health data.
What "delete" means in Serene
Retention schedule reviewed: May 2026. This schedule will be reviewed when new features are added, especially wearable sync, new health-tracking modules, or AI features.
Under UK GDPR, you have the following rights regarding your personal data:
Right of access
You can view all your data directly within the app at any time. You can also export a full JSON copy via Profile → Export My Data.
Right to rectification
You can edit or correct any data entry directly in the app.
Right to erasure
You can delete all your data via Profile → Reset Local Data, or by clearing your browser's localStorage.
Right to restriction
As data is processed locally on your device, you can stop using any feature at any time without restriction.
Right to data portability
You can export all your data as a structured JSON file via Profile → Export My Data.
Right to object
For the legitimate-interest processing (server logs by Base44), you may object by contacting us. Note this processing involves no special category data.
Right to withdraw consent
You can withdraw consent for any optional feature (e.g. notifications, AI nutrition search) by disabling that feature. Withdrawal does not affect prior processing.
Right to complain
You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
To exercise rights related to server-side processing, contact us at elifcoskuncay.com/Contact. We will respond within 30 days.
The primary legal basis for processing your wellness and health data is your explicit consent (UK GDPR Article 6(1)(a) and Article 9(2)(a)). Consent is given by actively choosing to use each feature of the app.
Serene is intended for adults aged 18 and over. We do not knowingly allow children under 18 to use the app. If you are under 18, please do not use Serene. If you believe a minor has used Serene, please contact us and we will provide guidance on deleting that data from the device.
We may update this Privacy Notice from time to time to reflect changes to the app, legal requirements, or our practices. The "Last updated" date at the top of this page shows when it was last changed. Material changes that affect how health data is processed will be highlighted within the app.
Privacy Notice · Version 1.2 · May 2026 · Operated by Dr. Elif Coşkunçay MRCP MFPM · elifcoskuncay.com