Using this website
This public website does not use analytics, advertising pixels, cookies or browser storage. Fonts, images and scripts are served from the website itself.
Firebase Hosting delivers these pages. Hosting providers may process technical information, such as an IP address and a request timestamp, to deliver and protect the service. Read Firebase’s privacy information.
Links to the App Store, research publications and support organisations take you to services with their own privacy policies. Selecting an email link opens your email application; any message you choose to send is processed to respond to your enquiry.
The ACTvet app
The sections below reproduce the ACTvet app’s privacy policy, last reviewed on 28 July 2026. If you are taking part in a research study, also refer to your participant information.
Research sharing, app usage tracking, notifications, Apple Health access and AI personalisation have separate choices in the app. Review them in Settings. AI-personalised reminders require research sharing and notifications to be enabled, as well as separate AI consent.
Who we are
ACTvet is managed and developed by Dr Daniel Leightley at King’s College London (KCL), through the UK Military Research Group (UK MRG). The research underpinning the app was originally led by Professor Simon Dymond at Swansea University. The team operates independently of the UK Ministry of Defence (MoD), and our work aims to improve support for serving personnel, veterans, and their families.
Our research complies with King’s College London governance frameworks and the UK General Data Protection Regulation (UK GDPR), supporting high scientific, ethical, and legal standards.
Study background
ACTvet v4 was developed as part of the ACTIVATE study to support UK veterans experiencing gambling-related harm. The app applies Acceptance and Commitment Therapy (ACT), tailored to the lived experience of veterans. The research was originally led by Professor Simon Dymond at Swansea University and is now based at King’s College London through the UK Military Research Group.
Data controller
Dr Daniel Leightley, on behalf of King’s College London, acts as the data controller. We are responsible for safeguarding your data, keeping it secure, and ensuring it is used appropriately.
What we collect
We collect app analytics data using Firebase Analytics to understand how ACTvet is used. We do not collect unique device identifiers, location, or Wi-Fi data for this purpose.
You may also choose to provide self-reported information through in-app questionnaires. Providing this data is optional.
If you separately opt in to AI-personalised notifications, ACTvet prepares a pseudonymised 28-day summary using wellbeing trends, ACT step identifiers, goal status, questionnaire bands, sync activity, opted-in app-usage categories, and notification history. We do not send OpenAI your name, user UUID, free-text notes, goal text, raw questionnaire answers, Apple Health data, workouts, module titles, or raw app-log messages.
We follow data minimisation principles and aim to collect only what is needed to deliver the ACTvet service. We are not responsible for third-party services you may use alongside the app, and you should review their privacy policies separately.
How we use your data
Your data may be used for academic research, which requires appropriate ethical approvals. Findings may be published as anonymous, aggregated results and shared with relevant communities, Armed Forces organisations, and public health bodies.
We will not share your identifiable personal data with a third party without your explicit consent, unless we are required to do so by law.
For opted-in AI personalisation, OpenAI uses the pseudonymised summary to decide whether to create one brief, supportive notification and when it should be delivered. Generated messages are checked by automated moderation, privacy, language, length, and notification-frequency rules before they can enter the notification queue. The feature does not diagnose risk, make a clinical decision, or monitor for emergencies.
How long we keep data
Data are retained for 7 years after your last entry. After this period, if no further analysis is planned, data will be securely destroyed in line with our retention practices.
AI persona, run, and decision records follow the research-data retention period described above. OpenAI standard abuse-monitoring logs may retain submitted content for up to 30 days unless approved Modified Abuse Monitoring or Zero Data Retention controls apply.
How we keep data safe
Data are transmitted and stored using encrypted protocols. Access is restricted to authorised KCL / UK MRG research team members.
AI requests use a pseudonymised summary rather than your user UUID, disable API response storage, and contain only the minimised information described above. AI run and decision data are restricted to authorised ACTvet administrators.
We follow recognised security practices and governance frameworks, including alignment with the NHS Data Security and Protection Toolkit approach where applicable. Your data are used for research and service improvement and will not be used to make decisions about services such as insurance.
Legal basis
Under UK GDPR, the lawful basis for processing is Article 6(1)(e): processing is necessary for the performance of a task carried out in the public interest.
Where health-related information is processed, an additional condition may apply under Article 9(2)(j): processing is necessary for scientific or historical research purposes, subject to appropriate safeguards.
Your rights
You can request correction of inaccurate information and request access to your data by contacting the UK MRG team.
If you have opted out of data sharing, we may be unable to provide a copy of data that are stored only on your device.
To request deletion of your data, please contact the UK MRG team. We aim to remove app-held data within 24 hours of receiving your request.
To object to processing of your personal data, you can contact the KCL Data Protection Officer.
Complaints
If you have concerns about how your data have been handled, contact the KCL Data Protection Officer. If you remain dissatisfied, you can raise a concern with the Information Commissioner’s Office (ICO).
Updates
This policy is reviewed regularly. If we make material changes to how we process data, we will notify you via the app where appropriate.
Last reviewed and updated: 28/07/2026.
Questions about privacy?
For general ACTvet enquiries, contact [email protected]. For requests about your app data, use the research and data protection contacts above.