Sign in Subscribe

Privacy Policy

Naked iOS app, business portal and website

Effective date: 23 October 2026

Naked is a self-help wellbeing service. You can choose to save predefined symptoms and triggers and receive an AI-generated anxiety profile insight. Because those choices can reveal information about your health, we treat them with particular care. This notice explains what we collect, why we use it, who handles it and the controls available to you.

1. Who is responsible

Naked Works Limited, company number 14678706, registered at 4 Counters Close, Hemel Hempstead, HP1 1SE, England ("Naked", "we" or "us") is the controller of the personal information described in this policy. Contact support@naked.health for privacy questions or requests.

This policy covers the Naked iOS app, the business portal at business.naked.health and the website at naked.health. The initial public app release and business offering are for the United Kingdom. A participating organisation separately controls the information it uses to decide who is eligible for its funded benefit; its own staff privacy notice may also apply.

2. Information we collect

App accounts

  • Your email address, the preferred name you enter, account and authentication identifiers, and records needed to create, confirm and secure your account. You can use any preferred name.
  • Your confirmation that you are at least 16, the version of the Terms you accepted, the privacy notice shown to you, and the date and time of those events.
  • Sign-in and security events, IP address, device and app version, and short-lived server diagnostic records generated when the service operates.

We do not collect your date of birth or country at launch. Account email is required to use the app.

Optional health-data features

  • Symptoms and triggers that you choose to save from Naked's predefined lists while the relevant tracking control is enabled. There is no free-text symptom or trigger entry.
  • The current AI-generated anxiety profile insight produced from your saved symptoms and triggers while profile insights are enabled.
  • Consent records showing the wording and version presented, the choice you made, when you made it, and later withdrawals or re-enablement.

You can use Naked without saving symptoms or triggers and without AI profile insights. Under Settings > Health Data, you can control symptom tracking, trigger tracking, AI profile insights and Help Me Now processing separately.

Help Me Now

During a Help Me Now session, Naked uses the symptom, trigger and intensity choices you make to tailor that session. If tracking is enabled, the feature can show your saved selections; otherwise it presents generic options. Session choices, session progress and completion are not added to your profile and are discarded when the session ends. If you have not consented to this temporary processing, the app asks first. You may withdraw that consent using the Help Me Now processing control under Settings > Health Data; the app will ask again before processing choices in a later session.

Other app information

  • Techniques and sessions you mark as favourites.
  • Your progress through learning pathways and lessons.
  • Messages you send to support, including the message contents and contact details needed to respond.

Naked does not currently store ordinary session history, ordinary session completion, Help Me Now history, search terms, journal entries, open-ended AI chat, user uploads, advertising identifiers or marketing preferences. We do not use an external advertising or product-analytics SDK in the app.

Purchases and Premium access

If you start a subscription, Apple processes the payment and RevenueCat helps us verify the purchase and provide Premium access. We receive and store the information needed to administer that access, which may include your Naked account identifier, an Apple or RevenueCat customer identifier, the subscription product and pricing cohort (Founders or Premium), whether it is monthly or annual, transaction or original-transaction identifiers, entitlement status, purchase and renewal dates, expiry or cancellation status, and any applicable billing-grace-period status. We do not receive your full payment-card details from Apple.

Founders and Premium subscriptions unlock the same Premium entitlement. The pricing cohort and billing period affect the price, not the health information processed or the features made available. We do not send saved symptoms, triggers, profile insights or Help Me Now choices to Apple or RevenueCat for subscription administration.

Business access

For a UK organisation using the business portal, we collect its name, address and work domains, and the names, email addresses, account identifiers and security records of its administrators. Administrators use a separate Amazon Cognito user pool. For a person linked to an organisation, we record their name, email address, link status and the organisation funding access.

An organisation administrator can see a linked person's name, email address and access status for seat administration. The organisation cannot see that person's saved symptoms or triggers, AI profile insight, Help Me Now choices, favourites, learning progress or other wellbeing activity. A person can detach from the organisation at any time and keep their individual account.

Website

The website and blog run on Ghost and are separate from the app infrastructure. Member email sign-up and newsletters are disabled at launch. Ghost's first-party, cookie-free web analytics may record page views, referral source and approximate country within short measurement windows so we can understand which content is useful. Ghost states that its native web analytics does not use cookies or persistent browser storage to identify visitors across sessions. We have not added third-party advertising or analytics scripts. Standard hosting and security logs may include IP address, browser information and request details.

3. How and why we use information

Providing Naked

We use account, favourites, learning-progress, purchase-entitlement and organisation-access information to create and secure accounts, provide requested features, remember choices, verify subscriptions and administer individual or business-funded access. Our UK GDPR basis is performance of our contract with you, or steps you ask us to take before entering that contract. For organisation administration, we also rely on our legitimate interests in delivering and managing the service and the organisation's agreement.

Optional health information

Saved symptoms and triggers, AI profile insights and temporary Help Me Now choices may be health information. We process them only after a separate affirmative choice. For UK users, we rely on consent under Article 6(1)(a) and explicit consent under Article 9(2)(a) of the UK GDPR. Health-data consent is not bundled with the Terms and is not required to keep an account or use the non-personalised parts of Naked.

During onboarding, a single choice can enable symptom tracking, trigger tracking and AI profile insights. You can then control each feature separately under Settings > Health Data. Re-enabling a feature after withdrawal requires a new affirmative confirmation. Withdrawal does not affect processing that was lawful before it.

Security, support and website measurement

We use short-lived technical records to secure Naked, prevent misuse, diagnose faults and maintain availability. We use support correspondence to respond to you and resolve problems. We use limited, first-party website measurement to understand content performance. We rely on our legitimate interests in operating a secure, reliable and useful service, balanced against your rights, or on our contract where the processing is necessary to answer a service request. We may also process limited records where needed to comply with law or establish, exercise or defend legal claims.

We do not use health information for advertising, marketing or data brokerage, and we do not send marketing emails at launch.

4. How the profile AI works

When AI profile insights are enabled and you add or remove a saved symptom or trigger, Naked sends the saved symptom and trigger selections that remain to an Anthropic Claude model through Amazon Bedrock in the AWS London region. We do not send your name, email address, country or Help Me Now session choices to the profile model.

Naked stores the resulting insight in your account. A new insight replaces the previous insight. Turning off AI profile insights deletes every stored insight and stops generation until you choose to re-enable it. Turning off symptom or trigger tracking deletes the saved selections in that category and prevents new ones being saved until you re-enable it.

The insight is generated content for self-help and reflection. It may be incomplete or inaccurate and is not a diagnosis, clinical assessment or decision with legal or similarly significant effect. Naked does not use your prompts or outputs to train an AI model. Amazon states that Bedrock customer data is not shared with model providers or used to improve base models.

5. Who handles information

We use service providers only for the functions described below and require appropriate confidentiality, security and data-protection commitments:

  • Amazon Web Services: account authentication, app hosting, storage, email delivery, security logs and Amazon Bedrock AI processing.
  • Anthropic Claude through Amazon Bedrock: generation of the optional profile insight. The model provider does not receive direct access to our AWS account or Bedrock logs.
  • Google Workspace: support email.
  • Ghost and its hosting/analytics infrastructure: the public website and cookie-free first-party traffic measurement.
  • Apple: distribution of the iOS app and processing of App Store subscriptions, purchases, cancellations and refunds under Apple's own terms and privacy notice.
  • RevenueCat: validation of App Store purchases and management of subscription status and Premium entitlements.

We may disclose information where required by law, to protect users or the service, or as part of a reorganisation or sale with appropriate protections. We do not sell personal information and do not give an organisation access to an individual's wellbeing profile or app activity.

6. Where information is processed

The core app, account database and Amazon Bedrock deployment use AWS's London region. Ghost's native analytics for Ghost(Pro) sites is stored in EU regions. Google, Apple and other providers may process information in the United Kingdom and other countries. Authorised Naked personnel may securely administer the service from the United Kingdom and the United Arab Emirates.

Where a restricted transfer requires a safeguard, we use an applicable UK adequacy regulation, the UK International Data Transfer Agreement or UK Addendum to approved standard contractual clauses, together with a transfer risk assessment where required. Contact support@naked.health for information about safeguards relevant to your information.

7. Retention and deletion

  • Account information, favourites and learning-pathway progress are kept while your account remains open, unless a longer period is required for a specific legal reason.
  • Saved symptoms and triggers remain only while their respective tracking controls are enabled or until you remove them. Turning a tracking category off deletes its saved selections.
  • Only the current AI profile insight is kept. A replacement overwrites the previous insight. Turning profile insights off deletes every stored insight.
  • Help Me Now choices, progress and completion are discarded when the session ends and are not retained as session history.
  • Naked application and security logs are kept for seven days.
  • Support emails are deleted 30 days after the support request is closed, unless we need a limited record for a legal claim, safeguarding matter or legal obligation.
  • Subscription and entitlement records are kept while needed to provide Premium access, resolve purchase issues and meet legal, tax, accounting or fraud-prevention obligations. Apple and RevenueCat may retain their own transaction records under their respective policies and legal duties.
  • Business contract, invoice and accounting records are kept for the period required by applicable law. Operational administrator and linkage records are removed when no longer needed for access administration or the agreement.
  • Cookie-free website analytics are kept according to the configured Ghost analytics retention period and are not used to recognise a visitor across separate 24-hour measurement windows.

Using Settings > Account > Delete Account removes your AWS account and associated active app data, including saved health information, favourites, learning progress and business links. It does not cancel an Apple subscription, which you must cancel through Apple. We remove or de-identify the link between the deleted account and our active RevenueCat entitlement record where technically and legally appropriate, but Apple, RevenueCat or Naked may retain limited transaction records where required for purchase administration, fraud prevention or law. Detaching through Settings > Naked Through Work removes the organisation link but does not delete your personal account. Some minimal records may also remain where law requires retention or where deletion from a provider's short-lived disaster-recovery copy takes additional time.

8. Your choices and rights

  • Edit individual saved symptoms and triggers from the Anxiety Profile screen.
  • Turn symptom tracking, trigger tracking, AI profile insights and Help Me Now processing on or off separately under Settings > Health Data.
  • Manage favourites, detach from an organisation under Settings > Naked Through Work, or delete your account under Settings > Account.
  • Ask for access, correction, deletion, restriction or portability, or object to processing, where the relevant UK data-protection right applies.
  • Withdraw consent at any time without losing access to your account or the non-personalised parts of Naked.

Contact support@naked.health. We may need to verify your identity. You may complain to the Information Commissioner's Office at ico.org.uk, although we would welcome the opportunity to address your concern first.

9. Security

We use access controls, encryption in transit and at rest, logging and other technical and organisational measures designed for the nature of the information. Access is limited to authorised personnel who need it to operate or support Naked. No online service can guarantee absolute security. If you believe your account or information may be at risk, contact support@naked.health promptly.

10. Age

Naked is intended for people aged 16 and over. We do not ask for your date of birth, but you must confirm at account creation that you are at least 16. We do not knowingly provide app accounts to children under 16. If you believe an under-16 has created an account, contact support@naked.health. We will investigate and take appropriate steps, which may include closing the account and deleting its information, subject to any legal obligation to retain it.

11. Changes and contact

We may update this policy when the service, law or our providers change. We will show the current effective date and provide appropriate notice of material changes. Contact support@naked.health or write to Naked Works Limited, 4 Counters Close, Hemel Hempstead, HP1 1SE, England.