The Alchemy of You The Alchemy of You
The App
F.L.A.M.E Moonlit Pathway
Moon Sign Calculator BMR & TDEE Calculator A Guide to Finding Balance Timer
Our Story Lisa Picton Ian Crocker
Blog Try the App Free
← Back to Home

Privacy Policy

Last updated: March 2026

The Alchemy of You ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website at thealchemyofyou.co.uk and our mobile/web application at app.thealchemyofyou.co.uk (together, "our services").

This policy covers two distinct environments: our marketing website and our wellness application. The application collects significantly more personal information, including special category health data under UK GDPR. Please read the app-specific sections carefully if you are an app subscriber.

1. Who We Are

The Alchemy of You is a trading name of Plaskett International College, providing holistic health and wellness coaching services operated by Lisa Picton.

Data Controller: Plaskett International College

Contact: lisa@thealchemyofyou.co.uk

Plaskett International College is registered with the Information Commissioner's Office (ICO). You can verify our registration at ico.org.uk.

For any data protection queries, Lisa Picton acts as the responsible person for data protection matters at Plaskett International College. Contact: lisa@thealchemyofyou.co.uk

2. Information We Collect

2a. Website (thealchemyofyou.co.uk)

Information you provide directly:

  • Contact information: Name, email address, phone number
  • Account information: When you sign up for programmes or services
  • Payment information: Processed securely by Stripe (we do not store card details)
  • Communications: Messages you send us via email or contact forms

Information collected automatically:

  • Device information: Browser type, operating system
  • Usage data: Pages visited, time spent on site
  • IP address: For security and consent logging purposes

2b. The Alchemy of You App (app.thealchemyofyou.co.uk)

The application collects the following categories of personal data when you actively log or track information. You are in control of what you choose to enter. We do not collect any of this data passively without your action.

Nutrition and health tracking data (special category health data):

  • Meal photos: Images of food you photograph within the app, which are analysed by AI to identify nutritional content
  • Nutritional intake logs: Records of foods consumed and calculated nutrient values
  • Movement and exercise logs: Physical activity data you enter manually or sync from Garmin (see Section 5 on third parties)
  • Sleep data: Sleep duration and quality information you log
  • Menstrual cycle data: Cycle tracking information you choose to record
  • Mood tracking entries: Emotional and mood data you log

The data categories listed above constitute special category personal data under Article 9 of the UK GDPR. We process this data only with your explicit consent, which you provide when you create an account and begin using these features. You may withdraw consent for any category at any time – see Section 7 for details.

Wellness and personal reflection data:

  • Dream journal entries: Free-text descriptions of dreams you choose to record
  • Journal entries: Free-text personal reflections and notes
  • Gratitude entries: Gratitude log entries
  • Guided prompt responses: Your written responses to in-app prompts
  • Chakra check-ins: Your self-assessed chakra alignment entries
  • Moon phase alignment data: Your logged moon phase observations and reflections

Astrological and numerological profile data:

  • Birth chart data: Date, time, and place of birth, used to generate your astrological profile within the app
  • Numerology data: Name and date of birth derived calculations

Birth chart and numerology data are not special category data under UK GDPR but are treated with the same level of care as sensitive personal data given their highly personal nature.

AI-generated data:

The app uses artificial intelligence to generate cross-pillar insights and personalised wellness observations by combining data from the categories above. These insights are stored in your account alongside your logged data. See Section 3b for full details of AI processing.

Important: your consent to process special category health data in the app

Because the app processes special category health data (nutrition, movement, sleep, menstrual cycle, and mood data), UK GDPR requires us to obtain your explicit consent before we process this data. This consent is separate from your agreement to our Terms of Service.

You give explicit consent by:

  • Actively enabling health tracking features within the app (for example, enabling cycle tracking or connecting your Garmin account)
  • Submitting a meal photo for AI nutritional analysis
  • Confirming consent via the in-app consent prompt presented when you first use each health data feature

You may withdraw your consent for any or all of these features at any time without closing your account. To withdraw consent for a specific data category, contact us at lisa@thealchemyofyou.co.uk or manage your data preferences within the app settings. Withdrawing consent will prevent future collection of that data category but will not automatically delete previously collected data (you can request deletion separately under your right to erasure).

The app does not use your health data for any purpose other than providing the service to you. We do not share your health data with insurers, employers, or any other third party except the app hosting provider and AI processing provider as described in Section 5.

3. How We Use Your Information

3a. Website data

Purpose Legal Basis (UK GDPR)
To provide our services and programmes Contract performance (Article 6(1)(b))
To process payments Contract performance (Article 6(1)(b))
To send programme-related communications Contract performance (Article 6(1)(b))
To send marketing emails (newsletters, offers) Consent (Article 6(1)(a))
To respond to your enquiries Legitimate interest (Article 6(1)(f)) – our legitimate interest is responding to people who have contacted us
To improve our website and services Legitimate interest (Article 6(1)(f))
To comply with legal obligations Legal obligation (Article 6(1)(c))

3b. App data – general processing

Purpose Data Category Legal Basis (UK GDPR)
To operate your app account and store your logged entries All app data Contract performance (Article 6(1)(b))
To process and analyse meal photos to identify nutritional content Meal photos, nutrition data (special category) Explicit consent (Article 6(1)(a) and Article 9(2)(a))
To store and display movement, sleep, and cycle data Exercise, sleep, menstrual data (special category) Explicit consent (Article 6(1)(a) and Article 9(2)(a))
To store and display mood, journal, dream, gratitude, and prompt entries Wellness and personal reflection data Contract performance (Article 6(1)(b))
To generate your astrological and numerological profile Birth chart, numerology data Contract performance (Article 6(1)(b))
To improve the app and its features Aggregated, anonymised usage data Legitimate interest (Article 6(1)(f))

3c. App data – AI processing and automated insights

The app uses artificial intelligence to analyse your data and generate personalised wellness observations and cross-pillar insights. This is a core feature of the subscription service.

What the AI does:

  • Analyses meal photos you submit to identify food items and calculate nutritional content
  • Combines data from multiple pillars (nutrition, movement, sleep, mood, cycle, and reflective entries) to generate cross-pillar insights
  • Generates personalised wellness observations based on patterns in your logged data

How AI processing works technically:

  • When you submit a meal photo or request an insight, relevant data from your account is sent to our AI service provider (see Section 5) for processing
  • The AI service provider processes this data as a data processor on our behalf, under a Data Processing Agreement
  • AI-generated outputs are returned to us and stored in your account
  • We do not use your personal data to train external AI models

Automated decision-making: The AI-generated insights and observations are informational and educational in nature. They do not constitute automated decisions that produce legal or similarly significant effects on you. However, you may always request human review of any AI-generated content by contacting us at lisa@thealchemyofyou.co.uk.

Profiling: By combining data across multiple wellness pillars, the app creates a holistic profile of your wellness patterns. This constitutes profiling under Article 4(4) of the UK GDPR. This profiling is carried out only with your explicit consent and forms part of the core service you have signed up for. You have the right to object to profiling at any time – see Section 7.

Legal basis for AI processing of special category data: Explicit consent (Article 6(1)(a) and Article 9(2)(a) UK GDPR). You provide this consent when you activate AI features within the app. You may withdraw this consent at any time without affecting your ability to use the basic logging features of the app.

4. Marketing Communications

We will only send you marketing communications if you have given your explicit consent. You can opt out at any time by:

  • Clicking the "unsubscribe" link in any marketing email
  • Emailing us at lisa@thealchemyofyou.co.uk

Please note that opting out of marketing will not affect service-related communications about programmes you have purchased.

5. How We Share Your Information

We do not sell your personal information. We share your data with third-party processors only where necessary to provide our services, and only under written Data Processing Agreements.

Website and payment processors:

  • Stripe: For secure payment processing. Stripe processes your payment card details directly and we do not store card information. Stripe is PCI-DSS compliant. Data may be processed in the US under Standard Contractual Clauses.
  • Brevo (formerly Sendinblue): For transactional and marketing email communications. Brevo processes your name and email address. Data may be processed within the EU/EEA.
  • Website hosting provider: For hosting thealchemyofyou.co.uk. Only standard web server logs are processed.

App processors:

  • App hosting provider: The app and all app data (including your health and wellness logs) are hosted on secure servers. Only authorised personnel can access your data.
  • AI service providers (Google Vertex AI, OpenAI, Anthropic): When you use AI-powered features (meal photo analysis, cross-pillar insights), data from your account that is relevant to the requested analysis is transmitted to one or more of our AI service providers for processing. This includes meal photos and may include excerpts of your logged wellness data. Our AI service providers act as data processors under Data Processing Agreements and are contractually prohibited from using your data for purposes other than providing the service to us. Data may be processed in the United States. We rely on Standard Contractual Clauses as the lawful transfer mechanism. We do not send our AI service providers your full name or contact details – data is transmitted using account identifiers only.

Important note on AI provider identity: We are committed to transparency. If our AI service provider changes, we will update this policy and notify app subscribers by email in advance of the change taking effect.

Third-party integrations you choose to connect:

  • Garmin: If you choose to connect your Garmin account, your movement, exercise, and activity data will be shared from Garmin's platform to our app. You authorise this data sharing when you connect the integration. Garmin's own privacy policy governs how Garmin collects and processes your data on its platform. You may disconnect the Garmin integration at any time from within your app account settings, which will stop future data transfers.

We will not share your personal data with any other third party without your explicit consent, except where required to do so by law.

6. Data Retention

Website and account data:

Data Type Retention Period Reason
Name, email address, account details Duration of your account, plus 12 months after closure Service delivery and dispute resolution
Payment records and invoices 7 years from the relevant transaction Legal obligation (HMRC tax records)
Marketing consent records 3 years after you unsubscribe or withdraw consent Audit trail to demonstrate compliance
Enquiry and support communications 2 years from the date of the communication Legitimate interest in resolving any follow-up queries

App data (health and wellness tracking data):

Data Type During Active Subscription After Account Deletion
Meal photos Retained until you delete them or close your account Deleted within 30 days
Nutritional logs, sleep data, movement data, mood tracking, cycle data Retained for the full history of your account Deleted within 30 days
Journal entries, dream journal, gratitude entries, prompt responses Retained until you delete them or close your account Deleted within 30 days
Birth chart and numerology data Retained for the life of your account Deleted within 30 days
AI-generated insights and observations Retained in your account history Deleted within 30 days

Account deletion: When you request account deletion, we will delete all app data as described above within 30 days. Deletion is irreversible. We strongly recommend you export your data before deleting your account (see Section 7 on data portability). We may retain anonymised, aggregated statistical data (which cannot identify you) indefinitely for the purpose of improving the service.

Subscription lapse: If your subscription lapses, we will retain your app data for 90 days to allow you to reactivate without losing your history. After 90 days of non-payment, your account will be scheduled for deletion and you will be notified by email before deletion occurs.

7. Your Rights (UK GDPR)

Under the UK GDPR and the Data Protection Act 2018, you have the following rights. These rights apply to all personal data we hold about you, including data collected through the app.

  • Access (Article 15): Request a copy of all personal data we hold about you. For app data, this includes all logged entries, AI-generated insights, and your profile data.
  • Rectification (Article 16): Request correction of inaccurate or incomplete data. Most app data can be edited directly within the app.
  • Erasure (Article 17): Request deletion of your data ("right to be forgotten"). You may delete individual entries within the app, or request full account deletion. Note: payment records must be retained for 7 years for tax purposes.
  • Restrict processing (Article 18): Request that we limit how we use your data. For example, you may request that your data is stored but not used for AI analysis.
  • Data portability (Article 20): Receive a copy of your data in a structured, machine-readable format. You may request an export of your app data (nutrition logs, journal entries, health tracking data, AI insights) in JSON or CSV format. Please allow up to 30 days for us to prepare your data export.
  • Object to processing (Article 21): Object to processing based on legitimate interests, including profiling. You may object to the AI-powered profiling that generates cross-pillar insights. If you object, we will stop combining your data to generate insights, though you may continue to use the individual logging features.
  • Withdraw consent (Articles 7, 9): Withdraw any consent you have given at any time, without affecting the lawfulness of processing before withdrawal. You may withdraw consent for AI processing of health data, or for individual categories of health data (e.g. cycle tracking, sleep data) without closing your account.
  • Automated decision-making (Article 22): Our AI-generated insights are informational only and are not used to make decisions that produce legal or similarly significant effects. You may always request human review of AI-generated content.

To exercise any of these rights, contact us at lisa@thealchemyofyou.co.uk with the subject line "Data Rights Request". We will acknowledge your request within 5 working days and respond in full within one calendar month (30 days).

8. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

  • SSL/TLS encryption for data in transit
  • Secure password-protected access to systems
  • Regular security reviews
  • Limited staff access to personal data

9. Cookies

Our website uses essential cookies for functionality. We use localStorage to remember your access preferences for programmes you have purchased.

We use Google Analytics to understand how visitors interact with our website. Google Analytics uses cookies to collect anonymised data such as pages visited, time on site, and referring sources. This data helps us improve your experience. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

We do not use advertising cookies.

10. Children's Privacy

Our services are not directed at individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

11. International Data Transfers

Some of our third-party processors operate outside the United Kingdom. Where your personal data is transferred outside the UK, we ensure that appropriate safeguards are in place in accordance with UK GDPR Chapter V.

Processor Country Data Transferred Transfer Mechanism
Stripe United States Payment information Standard Contractual Clauses
Google (Vertex AI) United States / EU Meal photos and wellness data submitted for AI analysis Standard Contractual Clauses
OpenAI United States Meal photos and wellness data submitted for AI analysis Standard Contractual Clauses
Anthropic United States Meal photos and wellness data submitted for AI analysis Standard Contractual Clauses
Brevo European Union Name and email address EU adequacy decision (UK-EU)

You may request a copy of the relevant Standard Contractual Clauses by contacting lisa@thealchemyofyou.co.uk.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. For significant changes, we will notify you by email.

13. Complaints

If you have concerns about how we handle your data, please contact us first at lisa@thealchemyofyou.co.uk.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk
Phone: 0303 123 1113

14. Contact Us

For any questions about this Privacy Policy or your personal data:

Email: lisa@thealchemyofyou.co.uk

Website: thealchemyofyou.co.uk

The Alchemy of You

Guiding you back to yourself.

Blog Our Story Energy Healing Contact
Email Instagram Facebook
Privacy Policy · Terms & Conditions · © 2026 The Alchemy of You

Disclaimer: The information and services provided by The Alchemy of You are for educational and informational purposes only and are not intended as a substitute for professional medical advice, diagnosis, or treatment. Always seek the advice of your physician or other qualified health provider with any questions you may have regarding a medical condition. Individual results may vary and are not guaranteed. Lisa Picton is a weight management coach, fitness trainer, and wellness mentor, not a registered dietitian or medical practitioner.