Last updated on October 16, 2026
Privacy Policy
360Me Privacy Policy
DocMe Technologies Ltd, trading as 360Me, is committed to protecting your personal data and explaining how we collect, use and protect it
This Privacy Policy applies when you visit join360.me, use the 360Me iOS app, connect a third-party service, contact us or use any associated 360Me service.
1. Who We Are
360Me is operated by DocMe Technologies Ltd, a company registered in England and Wales.
| Detail | Information |
|---|---|
| Company number | 13475088 |
| Registered office | Salisbury House, Station Road, Cambridge, CB1 2LA, United Kingdom |
| UK VAT registration | GB399070263 |
| Data Protection registration | ZB197766 |
| General enquiries | hello@the360.me |
| Privacy requests | DPO@join360.me |
DocMe Technologies Ltd is the Data Controller for personal data processed through the 360Me website and app.
2. Information We Collect
We collect information you provide, information generated through your use of 360Me and information from services you choose to connect.
| Category | Examples | Source |
|---|---|---|
| Account and identity | Name, email address, Apple ID identifier, date of birth, age, biological sex, profile photo and authentication information | You and Sign in with Apple |
| Goals and preferences | Goals, subgoals, weight goals, dietary preferences, cultural food preferences, allergies, injuries and health or routine information, any other information you choose to provide | You |
| Questionnaire data | Onboarding, plan-generation and progress questionnaire responses | You |
| Food and activity data | Food diary entries, meal photographs, estimated nutrition, workouts, steps, active energy, weight and manually entered measurements | You and connected services |
| Wearable and health data | Sleep, HRV, resting heart rate, respiratory rate, oxygen saturation, recovery/readiness, strain, stress, steps, distance, calories, workouts, exercise heart rate, VO2 max, mindfulness, breathwork, nutrition, hydration, blood pressure, glucose and cycle-related information | Apple Health, Oura and WHOOP |
| Calendar data (coming soon) | Event titles, start and end times, calendar name, busy/free status and confirmed/tentative status | Outlook Calendar and Google Calendar |
| Plan and progress data | Plan actions, completions, check-ins, feedback, progress, insights, reports and recommendations | Your use of 360Me |
| Technical data | IP address, device type, operating system, app version, session data, feature usage, crash reports and error data | Automatically |
| Communications | Emails, support messages and related contact information, and consent for data processing and usage | You |
Some information listed above may constitute health data or special-category personal data under applicable law.
3. How We Use Your Information
| Purpose | How we use your information |
|---|---|
| Provide the Services | Create your account, operate the app and provide features you request |
| Generate insights | Analyse your goals, questionnaire responses, activity and connected data to generate personalised insights |
| Generate and adapt plans | Create and adapt daily actions, nutrition guidance, fitness guidance and other recommendations |
| Personalise around your schedule | Use calendar availability to schedule or adjust plan actions |
| Track progress | Show relevant metrics, actions, completions, check-ins, reports and progress summaries |
| Meal analysis | Analyse Snap & Go photographs to identify meals and estimate nutrition and macronutrients |
| Communications | Send account, security, service and progress-related notifications |
| Support and security | Respond to support requests, prevent misuse, troubleshoot errors and protect the Services |
| Legal compliance | Comply with legal obligations and respond to lawful requests |
| Service improvement | Improve the reliability, quality and performance of 360Me using appropriate analytics, testing and, where permitted, anonymised data |
Food-image analysis is probabilistic and may not always be accurate. You should independently verify ingredient, allergen and nutritional information where necessary.
360Me provides informational wellness and lifestyle guidance. It is not a substitute for medical diagnosis, treatment or professional medical advice.
4. Wearable and Connected Health Data
Connecting Apple Health, Oura or WHOOP is optional. You can disconnect anytime through settings.
Oura and WHOOP connections are facilitated through Terra. Apple Health is accessed through a separate Apple Health integration.
We use connected health and wearable data to:
- Generate onboarding insights
- Generate personalised plans
- Adapt plans over time
- Personalise daily actions and recommendations
- Support progress and learning experiences
- Populate relevant metrics, charts and reports
Where multiple sources provide the same metric, we may apply source-priority rules to select the most appropriate source.
We do not use health or wearable data for advertising, targeted marketing or sale to third parties.
Any use of identifiable health or wearable data for research, model development or unrelated product improvement will require a separate and specific consent where required by applicable law. Where possible, we use aggregated or genuinely anonymised data for these purposes.
5. Calendar Integrations
360Me may support Outlook Calendar and Google Calendar when available. User will be able to disconnect calendars through profile & settings.
Calendar access is optional and read-only. In the 1st version whenever available, 360Me does not create, edit, move or delete calendar events.
| Calendar information | How it is used |
|---|---|
| Event start and end times | Identify availability and busy periods |
| Event titles | Help understand the type of scheduling conflict where required |
| Calendar name | Identify the connected calendar |
| Busy/free status | Avoid placing actions during busy periods |
| Confirmed/tentative status | Help determine how firmly a time should be treated as unavailable |
We use calendar information to schedule or adapt plan actions and send related Move or Keep suggestions.
We do not use calendar data for advertising or targeted marketing. Calendar data is not used to make decisions that produce legal or similarly significant effects.
6. Connecting and Disconnecting Services
You can connect or disconnect supported services at any time through the relevant app or provider settings.
| Action | What happens |
|---|---|
| Connect Apple Health, Oura or WHOOP | 360Me may begin receiving permitted health and activity data |
| Disconnect a wearable | We stop syncing and using new data from that source |
| Connect Outlook or Google Calendar | 360Me may read permitted calendar information on a read-only basis |
| Disconnect a calendar | We stop reading future events from that calendar |
| Provider access expires | We stop receiving new data until you reconnect the service |
| Remove access through provider settings | The provider may stop making data available to 360Me |
Disconnecting a service may limit or prevent some features from operating. Your existing plans and plan history may remain available unless you delete your account or request deletion of the relevant data.
Disconnecting 360Me within the app may not automatically revoke permissions held by the third-party provider. Where available, you should also remove 360Me’s access through the provider’s own settings.
7. Legal Bases and Health Data
Where the UK GDPR applies, our legal bases may include:
| Processing activity | Legal basis |
|---|---|
| Account management and service delivery | Performance of a contract |
| Generating and adapting your plan | Performance of a contract and an applicable condition for processing health data |
| Processing health, wearable and Apple Health data | Explicit consent or another applicable legal condition |
| Connecting Oura, WHOOP or Apple Health | Consent and, where required, explicit consent |
| Connecting Outlook or Google Calendar | Consent for the optional integration |
| Security and fraud prevention | Legitimate interests and, where applicable, legal obligation |
| Legal compliance | Legal obligation |
| Service improvement | Legitimate interests, consent or anonymised-data processing, depending on the activity |
| Marketing communications | Consent, where required |
Health information, medical information, injuries, allergies and certain Apple Health, Oura and WHOOP data may constitute special-category data.
Where required, we obtain explicit consent before processing this information. You may withdraw consent by disconnecting the relevant integration or contacting DPO@join360.me. Withdrawal may affect your ability to use certain features.
8. AI-Assisted Personalisation
360Me may use automated processing and profiling to analyse:
- Your goals and preferences
- Questionnaire responses
- Health and wearable data
- Apple Health data
- Activity, sleep and recovery information
- Calendar-derived availability
- Your use of the Services
This processing helps generate and adapt personalised insights, plans, recommendations and daily actions.
These outputs are intended to support your wellness and lifestyle goals. They do not constitute medical advice and are not intended to produce legal or similarly significant effects.
9. Data Sharing
We do not sell your personal data or share health, wearable or calendar data for advertising or targeted marketing.
We may share personal data with trusted service providers that process it on our behalf, including:
| Provider category | Purpose |
|---|---|
| Cloud hosting and storage providers | Operate and store data for the Services |
| AI and large-language-model providers | Generate requested insights and personalised plans |
| Wearable integration providers, including Terra | Establish connections and deliver permitted wearable data |
| Authentication providers | Support account creation and login |
| Analytics and crash-reporting providers | Monitor performance and fix errors |
| Customer-support providers | Respond to support requests |
| Email and notification providers | Send service communications |
| Payment providers | Process payments if paid features are introduced |
| Security and monitoring providers | Protect the Services and prevent misuse |
Service providers are required to process personal data only for authorised purposes and to apply appropriate security measures.
Oura, WHOOP, Apple, Microsoft, Google and other connected providers may process information under their own privacy policies and terms.
We may also disclose personal data:
- Where required by law or lawful request
- To protect the rights, safety or security of 360Me or others
- In connection with a merger, acquisition, financing, restructuring or sale of assets
10. Retention and Deletion
We retain personal data only for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, enforce agreements and protect security.
| Data category | Retention approach |
|---|---|
| Account and profile data | Deleted when your account is deleted, subject to legal exceptions |
| Apple Health data | Deleted when your account is deleted, subject to legal exceptions |
| Oura and WHOOP connections, consents, readings and raw deliveries | 360Me may retain information derived from Oura and WHOOP after account deletion only where the information has been irreversibly anonymised and can no longer be linked to the individual. Any identifiable or pseudonymised wearable data, identifiers, account linkages, and access credentials will be deleted in accordance with the applicable retention and deletion policy. |
| Calendar connection tokens | Deleted and relevant provider access revoked when your account is deleted |
| Calendar event data | Deleted when your account is deleted. Limited calendar history may be retained for the approved operational period in the anonymised form. |
| Plan-generation inputs | A limited pseudonymous record may be retained for |
| Plans, actions, completions and check-ins | Deleted when your account is deleted, subject to legal exceptions |
| Plan-generation diagnostics | Retained for up to seven days only where they do not contain health data |
| Security audit logs | Retained in pseudonymous form for the approved security-retention period |
| Operational logs | Retained for the approved operational period and then deleted |
| Rate-limit and abuse-prevention signals | Retained only as long as necessary and then automatically deleted |
| Deletion records | A limited pseudonymous record may be retained for legal, security and compliance purposes |
| Backups | Retained until the normal backup-expiry cycle. Deleted accounts will not be restored from backup |
| Support and communication records | Deleted according to applicable provider-retention periods and legal requirements |
| Aggregated or anonymised data | May be retained indefinitely only where it is genuinely anonymised and cannot reasonably be linked back to you |
Account Deletion
You may request account deletion by contacting DPO@join360.me or using any account-deletion option made available in the Services.
When your account is deleted, we will take reasonable steps to:
- Delete your account and profile data
- Delete Apple Health data held by 360Me
- Delete Oura and WHOOP connection records, consent records, readings and raw data deliveries
- Revoke relevant Terra access
- Delete Outlook and Google Calendar connection tokens
- Revoke relevant calendar-provider access where technically available
- Delete calendar event data held by 360Me
- Delete plan-generation inputs, plans, actions, completions and check-ins
- Delete food diary, meal, notification and progress data
- Remove your data from relevant communications and marketing systems
Some limited information may be retained where required for legal compliance, security, fraud prevention, dispute resolution, accounting or legal claims. We may also retain genuinely anonymised or aggregated information that cannot reasonably be linked back to you.
Third-party providers may retain limited information under their own privacy policies and retention schedules. We will take reasonable steps to request deletion or revoke access where applicable.
11. Security
We use appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, loss or destruction.
These measures may include:
- Encryption in transit and at rest where appropriate
- Access controls
- Authentication controls
- Security monitoring
- Provider due diligence
- Backup and recovery controls
- Regular reviews of our safeguards
No system is completely secure. You are responsible for keeping your account credentials confidential and maintaining the security of your devices.
If you suspect unauthorised access to your account or personal data, contact DPO@join360.me.
12. International Data Transfers
Your personal data may be stored or processed in the United Kingdom, European Economic Area, United States and other countries where 360Me or our service providers operate.
Where required, we use appropriate safeguards for international transfers, including:
- UK International Data Transfer Agreements
- UK International Data Transfer Addendums
- Standard Contractual Clauses
- Adequacy decisions
- Other lawful transfer mechanisms
For further information, contact DPO@join360.me.
13. Cookies and Tracking
The 360Me website may use cookies and similar technologies to:
- Remember preferences and session information
- Support website security
- Understand anonymised website usage
- Improve website performance
- Measure service effectiveness
You can manage cookie preferences through your browser settings or our cookie-consent tool. Disabling certain cookies may affect website functionality.
We do not use advertising cookies or serve targeted advertisements through the 360Me website or app.
14. Your Rights
Depending on the circumstances, you may have the right to:
| Right | What It Means |
|---|---|
| Access | Request a copy of the personal data we hold about you |
| Rectification | Ask us to correct inaccurate or incomplete data |
| Erasure | Request deletion where there is no lawful reason to retain it |
| Restriction | Ask us to restrict processing in certain circumstances |
| Portability | Receive certain data in a structured, commonly used and machine-readable format |
| Object | Object to processing based on legitimate interests or direct marketing |
| Withdraw consent | Withdraw consent where processing is based on consent |
| Automated processing | Request information or raise an objection where applicable |
| Complain | Lodge a complaint with the Information Commissioner’s Office |
To exercise your rights, contact DPO@join360.me.
We may ask you to verify your identity. We will respond without undue delay and, in most cases, within one month of receiving your request and any information required to verify your identity. This period may be extended where permitted for complex or numerous requests.
You can contact the Information Commissioner’s Office at ico.org.uk if you believe your personal data has been handled unlawfully.
15. Children
The Services are not intended for children under 18.
We do not knowingly collect personal data from children in violation of applicable law. If you believe a child has provided personal data to us, contact DPO@join360.me so that we can review and delete it where required.
16. Changes to This Privacy Policy
We may update this Privacy Policy when:
- The Services or integrations change
- Our data-processing practices change
- Legal or regulatory requirements change
- We introduce new features or providers
We will publish the updated policy and, where required, provide additional notice before material changes take effect.
The “Last updated” date at the beginning of this Privacy Policy shows when the current version became effective.
17. Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or your personal data:
360Me
8 Devonshire Square, London, EC2M 4PL, United Kingdom
General: hello@the360.me
Data Protection Officer: DPO@the360.me
VAT Reg: GB399070263 | Data Protection Reg: ZB197766
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.
By using the 360Me website or app, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your data as described.
