Legal

Privacy Notice

Effective date: 2 September 2026 · NeuroPath Clinical Services Ltd

Who we are

NeuroPath Clinical Services Ltd, trading as "NeuroPath", is the data controller for personal data processed through ADHD Wingman. This means we decide how and why your data is used. You can reach us at privacy@neuropath.app.

What data we collect

• • Account data: your email address, display name and sign-in credentials (we never see your password in plain text).
• • Content you create: brain-dump items, tasks, planner slots, focus goals and the messages you exchange with the Neuron assistant.
• • Usage data: which tabs and features you use, focus session counts and momentum statistics, used to show your progress and improve the product.
• • Subscription data: your plan, billing period and payment status. Card details are collected and processed by Paddle — we never see or store your full card number.
• • Technical data: IP address, browser type and device identifiers, used to keep the service secure and working correctly.

Why we use your data

• • To create your account and provide the Service (contract performance);
• • To sync your tasks, plans and progress across your devices (contract performance);
• • To generate AI coaching responses — your messages are sent to an AI provider to produce replies (contract performance);
• • To keep the Service secure, prevent fraud and abuse, and enforce usage limits (legitimate interests);
• • To improve the Service and understand which features help (legitimate interests);
• • To process payments, subscriptions, tax and refunds — handled by Paddle as Merchant of Record (contract performance and legal obligation).

Who we share data with

We only share data with companies that help us run the Service:

• • Hosting and database providers that store app data and serve the app;
• • AI providers that process Neuron chat messages to generate coaching responses;
• • Paddle.com, our Merchant of Record, which handles checkout, subscription management, payments, tax compliance and invoicing;
• • Professional advisers (legal, accounting) where needed;
• • Authorities where required by law.

We never sell your personal data.

International transfers

Some providers process data outside the UK and EEA. Where that happens, we rely on recognised safeguards such as the UK International Data Transfer Addendum or the EU Standard Contractual Clauses, or on adequacy decisions, to protect your data.

How long we keep data

We keep your account and content data for as long as your account is active. If you delete your account, we delete your personal data (including tasks, messages and profile) within 30 days, except where we must keep records longer for legal, tax or security reasons. Subscription records are kept as required for tax and accounting purposes.

Your rights

Under UK GDPR and, where applicable, the EU GDPR, you have the right to: access your data; have inaccurate data rectified; have your data erased; restrict or object to processing; data portability; and withdraw consent where processing is based on consent. You can also complain to the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority.

To exercise any right, email privacy@neuropath.app — you can also view, edit and delete most of your data directly in Account settings. We respond to requests within one month.

How we protect your data

We use appropriate technical and organisational measures, including encryption in transit, access controls and least-privilege database rules, to protect your data against unauthorised access, loss or misuse.

Cookies

The app uses only essential cookies and browser storage needed to keep you signed in and remember your preferences. We do not use advertising or cross-site tracking cookies.

← Back to ADHD Wingman