Home › Privacy

Privacy policy

Last updated September 2026. In short: there is no account, nothing you type ever leaves your phone, and the anonymous usage counts can be switched off in the app.

Who we are

bleep oncall is an independent medical education app made by Hugo Creeth, a doctor. There is no company behind it and no investor. Questions go to hugocreeth@gmail.com.

What is stored on your device

Held locally on your phone and never sent anywhere:

• Your grade or training level — F1, F2, SHO and so on
• Your quiz scores and progress for each condition
• Your streak and any achievements
• Your favourites, your logbook entries and your ARCP checklist
• Whether you have accepted the disclaimer

Deleting the app deletes all of it. There is no backup, because there is nowhere for it to be backed up to.

What is sent when you generate a case

When you tap New Case, three things are sent to the service that generates it:

• The clinical category, for example "Sepsis"
• Your grade level
• A hint describing the kind of variation to write

That is the whole request. It carries no name, no email, no identifier, no location and no patient information — there is no patient information in the app to send. The parameters are passed to Anthropic, whose model writes the scenario, and the result comes back to your phone.

Generated cases are stored so the same request does not have to be paid for twice. They contain only the scenario text and the category it came from, and cannot be traced back to whoever triggered them.

Anonymous usage counts

The app records a small number of events so we can tell which parts of it are used and which are broken — for example that a screen was opened, or that generating a case failed.

Each event carries a random identifier created when you installed the app, together with your device model, operating system version, app version, language, time zone and screen size. The identifier is not your name, not your Apple ID and not an advertising identifier. It exists so that ten events from one phone are not counted as ten different people, and deleting the app discards it. We cannot use it to work out who you are, and it is not joined up with anything else.

We do not use your IP address to work out where you are: location lookup is switched off.

They never include anything you have typed. Not a logbook entry, not a note, not a search term, and not which condition you looked up while with a particular patient. Only the structure — which feature, which screen, whether it worked.

Screen recording is switched off and will stay off. Recording a doctor's screen could capture patient detail, and no amount of product insight is worth that.

This is handled by PostHog on servers inside the EU, so the events do not leave the EEA.

You can switch this off. In the app, open the menu, choose Privacy under Progress, and turn off “Anonymous usage counts”. Nothing further is sent from that moment. There is no account to close and nothing to ask us for.

What we do not collect

No name. No email address, unless you have chosen to give one for launch updates on this website. No location, no advertising identifiers, no contacts, no health data and no patient data. Nothing you type, ever. Nothing is sold or shared with advertisers, because there is nothing to sell and no advertisers.

If that ever changes, it changes here first and in an app update — not quietly.

Others involved

• Anthropic — generates scenario text from the anonymous parameters above. Their policy.
• Our hosting provider — runs the small service that forwards those requests, and may log request metadata such as an IP address and timestamp, as any web server does.
• Expo — builds and distributes the app. Their policy.
• Apple — distributes it and reports anonymous download counts to us. We cannot see who you are from those.

The browser version

The version at bleeponcall.com/app stores the same things in your browser rather than on your phone. Clearing your browser data clears them. It is not synced to anything.

Children

bleep oncall is for medical students and healthcare professionals aged 18 and over. We do not knowingly collect anything from anyone under 18.

Your rights

Under UK GDPR you have rights to access, correct and delete personal data held about you. In practice there is none to access, correct or delete: your data is on your device and deleting the app removes it. If you have given an email address for updates, reply to any message or write to the address above and it will be removed.

Changes

Material changes update the date at the top of this page.

bleeponcall.com/privacy is the canonical location of this policy.