Last updated on August 25, 2026
Privacy Policy
The 360Me App Privacy Policy
DocMe Technologies Ltd (trading as 360Me) is committed to protecting your personal data and being transparent about how we use it. This Privacy Policy explains what data we collect, why we collect it, how we use and share it, and what rights you have under applicable data protection law.
Please read this policy carefully. By using the 360Me website (join360.me), the 360Me iOS app, or any associated services, you acknowledge that you have read and understood this policy.
1. Who We Are
360Me is operated by DocMe Technologies Ltd, a company registered in England and Wales.
- Company Number: 13475088
- Registered Office: Salisbury House, Station Road, Cambridge, CB1 2LA, United Kingdom
- UK VAT Registration: GB399070263
- Data Protection Registration: ZB197766
- General enquiries: hello@the360.me
- Data Protection Officer / privacy requests: DPO@the360.me
DocMe Technologies Ltd is the Data Controller for personal data processed through the 360Me website and app.
2. Scope of This Policy
This Privacy Policy applies to all personal data we process when you:
- Visit or use the 360Me website (join360.me)
- Download, install, or use the 360Me iOS application
- Contact us by any means
It does not apply to third-party websites, services, or apps that may be linked from our platforms. Those services are governed by their own privacy policies.
3. Data We Collect
3.1. Account and Identity Information
When you register for an account, we collect:
- Your Apple ID identifier (via Sign in with Apple)
- Demographic information (e.g., age, biological sex) used to personalize your programme
Should we introduce paid features in future, we will also collect payment and billing details at that time — processed by Apple’s In-App Purchase system; we do not handle or store your card details directly.
3.2. Health, Wellness, and Programme Data
To generate and personalize your Plan, we collect:
- Your selected goal, dietary and cultural food preferences, and any medical conditions, injuries or allergies you declare
- Meal photographs and estimated nutritional data submitted via the Snap & Go feature
- Fitness and activity data (workouts, steps, active energy) synced from Apple Health
- Sleep and heart-related metrics (e.g., resting heart rate, heart-rate variability, VO2 max, respiratory rate) synced from Apple Health
- Body weight, where you choose to log it in Apple Health, or entered manually in the app
- Your answers to the onboarding questionnaires
3.3. Device and Integration Data
If you connect third-party devices or services, we may receive:
- Apple Health / HealthKit: step counts, heart rate, sleep data, body weight (if you log it there), and other metrics you authorise, used to generate your insights and Plan and, in aggregated or de-identified form (or identifiable form where you have opted in), for internal research and development. We do not use HealthKit-sourced data for advertising or marketing, and we do not sell it.
- Other connected services you authorize: data types and scope depend on your permissions and the service’s own policies
You can revoke any integration at any time via your device or app settings. Some features will cease to function without these connections.
3.4. Usage and Technical Data
We automatically collect:
- IP address, device type, operating system version, and app version
- Session data including features used, screens visited, and interaction timestamps
- Crash and error reports to help us identify and fix technical issues
3.5. Communications
If you contact us via email, in-app messaging, or any other channel, we retain the content of those communications and any associated contact information.
4. How We Use Your Data
4.1. Delivering and Personalizing Your Programme
- Generate your 360Me health profile and insights from your Apple Health data and questionnaire answers
- Generate, and help you track and adapt, your personalized Plan of daily actions
- Provide meal-logging estimates and workout tracking
- Send factual nudges, notifications and summaries based on your own activity in the app
4.2. Snap&Go Meal Analysis
- Process food photographs you submit to identify meals, estimate macronutrient content, and suggest food swaps. Image analysis is probabilistic; we recommend verifying allergen and ingredient information independently.
4.3. Account Management and Communications
- Manage your account and app access
- Send transactional communications (e.g., account and security notifications)
- Send in-app notifications, nudges and summaries
- Respond to support enquiries
4.4. Safety, Compliance, and Legal Obligations
- Monitor for and prevent fraudulent, harmful, or unlawful activity
- Enforce our EULA and Terms and Conditions
- Comply with legal obligations, court orders, or regulatory requirements
- Respond to lawful requests from authorities
4.5. Service Improvement and Research
- Conduct internal research, analytics, and testing to improve our Plan generation, algorithms, and platform
- Create aggregated or de-identified datasets for product development. We will only use identifiable data for model training or improvement where required by law or where you have opted in within the app.
5. Legal Basis for Processing
We process your personal data under the following legal bases under UK GDPR:
| Purpose | Legal Basis |
|---|---|
| Generating your Plan and managing your account | Performance of a contract (Article 6(1)(b)) |
| Processing health, medical, injury and allergy information you provide (special category data) | Explicit consent (Article 9(2)(a)) |
| Connecting Apple Health | Explicit consent (Article 6(1)(a) / 9(2)(a)) |
| Sending transactional communications | Performance of a contract |
| Security monitoring, fraud prevention, legal compliance | Legal obligation (Article 6(1)(c)) and legitimate interests (Article 6(1)(f)) |
| Analytics and platform improvement | Legitimate interests (Article 6(1)(f)), balanced against your rights |
| Marketing communications (where applicable) | Consent (Article 6(1)(a)); you may withdraw at any time |
For any processing based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
6. Special Category Health Data
Health and medical questionnaire responses (including declared medical conditions, injuries and allergies) and related Apple Health metrics constitute special category data under UK GDPR (Article 9). We process this data only:
- On the basis of your explicit consent, obtained in-app before processing begins
- Where necessary for the performance of our services under our contract with you
- In accordance with our obligations under the Data Protection Act 2018
You may withdraw consent at any time by contacting DPO@the360.me. Withdrawal may prevent us from generating or continuing to adapt your Plan.
7. Data Sharing
We do not sell your personal data. We do not share it for advertising purposes.
7.1. Service Providers (Processors)
We share data with trusted third-party providers who process data on our behalf under contractual data processing agreements, including providers of:
- Cloud hosting and storage
- AI/LLM processing (to generate your insights and personalized Plan)
- Payment processing (once any paid features are introduced)
- Analytics and crash reporting
- Communications and notifications (e.g., email, push)
7.2. Legal Disclosure
We may disclose personal data to government or law enforcement agencies where required by law, court order, or to protect our rights or the safety of others.
7.3. Business Transfers
In the event of a merger, acquisition, or asset sale, personal data may be transferred to the successor entity. We will ensure appropriate data protection safeguards remain in place and will notify you of any material change in controller.
8. Third-Party Integrations
8.1. Apple Health / HealthKit
If you grant permission, we access HealthKit data to enrich your Plan and insights (e.g., step counts, heart rate, sleep). In accordance with Apple’s guidelines and our own policy:
- HealthKit data may be used for internal research and development as described in Section 4.5
- We do not use HealthKit-sourced data for advertising, marketing, or sale to third parties
- We do not share HealthKit data with any other third party without your explicit authorization
- You can revoke access at any time via iOS Settings → Privacy & Security → Health
8.2. Revoking Integrations
You can disconnect any third-party integration at any time via app Settings or your device settings. Disconnecting may limit certain features.
9. International Data Transfers
Your personal data is primarily stored and processed within the United Kingdom and European Economic Area. Where we transfer data outside the UK to countries that do not provide equivalent levels of data protection, we use appropriate safeguards such as:
- UK International Data Transfer Agreements (IDTAs)
- Standard Contractual Clauses (SCCs) approved by the ICO
- Transfers to countries with UK adequacy decisions
For details of specific transfer safeguards, contact DPO@the360.me.
10. Data Retention
We retain personal data only for as long as necessary for the purposes described in this policy, or as required by law.
| Data Type | Retention Period |
|---|---|
| Account and profile data | Duration of account + 2 years post-closure |
| Health and Plan data | Duration of programme + 3 years |
| Consent records | 7 years from date of consent |
| Payment records (once applicable) | 7 years (financial/tax obligations) |
| Usage and technical logs | 12 months rolling |
| Support communications | 3 years from last interaction |
When data is no longer required, we securely delete or irreversibly anonymise it.
11. Security
We implement commercially reasonable and appropriate technical and organisational measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These include encryption in transit and at rest, access controls, and regular security reviews.
No system is entirely secure. You are responsible for maintaining the confidentiality of your login credentials and the security of your devices. If you suspect unauthorised access to your account, contact us at DPO@the360.me immediately.
12. Cookies and Tracking
Our website (join360.me) uses cookies and similar technologies to:
- Remember your preferences and session state
- Gather anonymised usage analytics to improve the site
- Support security and fraud prevention
You can manage cookie preferences through your browser settings or our cookie consent tool on the site. Note that disabling certain cookies may affect site functionality.
We do not use advertising cookies or serve targeted ads on our platform.
13. Your Rights Under UK GDPR
You have the following rights in relation to your personal data:
| Right | What It Means |
|---|---|
| Access | Request a copy of the personal data we hold about you |
| Rectification | Ask us to correct inaccurate or incomplete data |
| Erasure | Request deletion of your data where there is no longer a lawful basis to retain it |
| Restriction | Ask us to pause processing in certain circumstances |
| Portability | Receive your data in a structured, machine-readable format |
| Object | Object to processing based on legitimate interests or for direct marketing |
| Withdraw consent | Withdraw consent at any time for consent-based processing |
| Lodge a complaint | Complain to the ICO (ico.org.uk) if you believe we have handled your data unlawfully |
To exercise any of these rights, contact us at DPO@the360.me. We will respond within 30 days in accordance with UK GDPR. We may ask you to verify your identity before processing your request.
Account and data deletion:
You can request deletion of your account and associated personal data at any time via the in-app deletion flow or by emailing DPO@the360.me. We will retain data we are legally obligated to keep (e.g., consent records, financial records) for the periods listed in Section 10.
14. Age Restriction
The 360Me platform and all associated services are intended for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected data from a minor, please contact us at DPO@the360.me and we will delete it promptly.
15. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices, services, or applicable law. Where changes are material, we will notify you via the app, by email, or by prominent notice on the site. The date at the top of this page always reflects when the policy was last revised.
Your continued use of the Services after notification of a material change constitutes acceptance of the updated policy.
16. Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or your personal data:
DocMe Technologies Ltd
Salisbury House, Station Road, Cambridge, CB1 2LA, United Kingdom
General: hello@the360.me
Data Protection Officer: DPO@the360.me
VAT Reg: GB399070263 | Data Protection Reg: ZB197766
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.
By using the 360Me website or app, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your data as described.
