If you have ever filled in an online screener and then wondered where your answers actually go, you are not alone. It is a fair question, and one we think you deserve a straight answer to, especially when the questions you are answering touch on something as personal as attention, mood, or how your mind works.
This piece sets out, in plain language, what happens to your data when you complete a NeuroCheck Pro assessment: what we collect, where it is stored, who can see it, how long we keep it, and what your rights are if you want it changed or removed. It is written as a general transparency report, not a legal document, so if you need something more formal, our full privacy policy and the sources listed at the end are the place to go.
Key takeaways - Assessment answers are handled as special category personal data. Clinical and personal data is stored at rest in AWS London, with encryption in transit and at rest. - Only a small number of authorised staff can access identifiable assessment data, and only when there is a genuine operational reason to do so. - You can request access, correction, erasure, restriction, portability or objection under UK GDPR, subject to the circumstances and legal obligations that apply. - NeuroCheck Pro’s screener is a reflection tool, not a diagnostic service. It does not proactively send results to employers, schools or insurers. - This article is general informational guidance about our data practices, not legal advice, so check our full privacy policy for the definitive terms.
Why we are publishing this report
NeuroCheck Pro is a young, pre-revenue company, and we know that trust has to be earned rather than assumed. Because our screener asks about things like focus, routines, and emotional regulation, some of the most personal territory there is, we think it is reasonable that people want to know exactly what happens to their answers before they commit to sharing them. This report is our attempt to lay that out clearly, in ordinary language, rather than leaving it buried in a lengthy policy document that nobody reads.
We have tried to be honest about the limits of what we can promise, too. No system connected to the internet can be described as completely secure, and any company that tells you otherwise is not being straight with you. What we can tell you is what we actually do, in general terms, so you can make an informed choice about whether to use the screener.
What data we actually collect
When you use the NeuroCheck Pro screener, we collect your assessment responses, account details such as your email address, and technical information used for security and service reliability.
The screener is designed as a starting point for reflection, not a full clinical intake form. If you use an optional free-text field, avoid adding more personal information than is necessary. Free text is handled with the same care as structured answers.
Where your data is stored and how it is protected
Clinical and personal data is stored at rest in AWS London and protected with encryption in transit and at rest. Some service providers, including payment, video, notification or analytics providers, may process limited data outside the UK. The privacy notice explains the safeguards that apply.
We have put reasonable technical and organisational measures in place to protect your information, including access controls, encryption, and regular review of who has access to what. That said, we would rather be honest than reassuring: we cannot guarantee that any system is entirely immune to a security incident, and we would encourage you to use a strong, unique password on your account as an additional layer of protection.
Who can see your assessment data, and who cannot
Access to identifiable assessment data is limited to a small number of authorised NeuroCheck Pro staff who need it for specific operational reasons, such as responding to a support query you have raised or investigating a technical issue. Where we can, we work with anonymised or aggregated data for things like improving the screener itself, rather than looking at individual responses.
We do not sell assessment data. We may share personal data with carefully selected service providers where this is needed to run the service, deliver clinical care, meet a legal obligation or protect users and the business. The privacy notice sets out these circumstances. We do not proactively send screener results to employers, schools or insurers.
How long we keep your data
We keep data only for as long as needed for the relevant purpose and any legal or regulatory retention duty. Retention periods vary by category, for example clinical, contractual, tax or marketing records. The full privacy notice gives the current periods.
If you request account erasure, we follow the erasure process in the privacy notice. This may mean deleting or anonymising personal data, while retaining only what a legal or regulatory duty requires.
Your rights under UK GDPR
Under UK data protection law, you generally have the right to ask what personal data we hold about you, to ask us to correct anything inaccurate, to ask us to delete your data, and to ask for a portable copy of it. You may also have the right to object to certain types of processing or to ask us to restrict how we use your data in specific circumstances.
These rights are not unlimited and can depend on the specific circumstances and the legal basis for processing, so if you want to exercise any of them, the best starting point is to contact us directly, and we will do our best to respond within the timeframes set out in UK GDPR and the Data Protection Act 2018. You also have the right to raise a concern with the Information Commissioner’s Office if you feel we have not handled your data appropriately.
What happens if you ask us to delete your data
If you ask us to delete your data, we assess the request under the right to erasure. Where erasure applies, we delete or anonymise personal data. Some records may need to be retained or anonymised because of legal, tax, clinical or fraud-prevention duties. We will explain the outcome of your request.
Backups can take slightly longer to fully cycle out than live systems, which is standard practice across most software companies, so there may be a short window where residual copies exist in secure backup storage before they are automatically overwritten.
What we never do with your data
We do not sell assessment data or present screener results as a clinical diagnosis. Where anonymised data is used for service improvement, research or summary statistics, the aim is to prevent an individual being identified.
If our approach to data ever changes in a way that affects you, we would aim to communicate that clearly rather than making quiet changes to policy documents. Transparency is something we would rather be judged on over time, not just claimed in a single article.
If reading through all of this has made you curious about your own patterns of attention, mood, or routine, our free screener is there as a starting point for reflection, not a diagnosis. It produces a summary you can look at yourself or take to a GP or other qualified professional if you decide that is a useful next step.
Frequently asked questions
Is my assessment data shared with my employer or school? No. NeuroCheck Pro does not proactively send screener results to an employer or school. If you choose a clinical service, relevant information may be used and shared with clinicians and service providers as set out in the privacy notice.
Is the NeuroCheck Pro screener a substitute for a clinical assessment? No. It is designed as a reflection tool that can help you organise your thoughts before speaking to a professional, not as a diagnostic service, and only a qualified clinician can confirm a diagnosis.
Can I see exactly what data you hold about me? Yes, you can generally request a copy of the personal data we hold about you under UK GDPR, and we aim to respond within the statutory timeframe. Contact details for making this kind of request are set out in our privacy policy.
What happens to my data if I stop using NeuroCheck Pro? If you request account erasure, we assess the request under the privacy notice. Where erasure applies, personal data is deleted or anonymised, subject to any legal or regulatory retention duty.
Is my data completely secure? We take reasonable technical and organisational steps, including encryption and UK-based storage for clinical and personal data, to protect your data. Some service providers may process limited data internationally, as explained in the privacy notice. No online system can honestly be described as completely secure, so use a strong, unique password too.
Who do I contact if I have a concern about how my data is used? You can contact NeuroCheck Pro directly using the details in our privacy policy, and if you remain unsatisfied you have the right to raise a concern with the Information Commissioner’s Office, the UK’s independent data protection regulator.
Sources and references
- Information Commissioner’s Office. Guide to UK GDPR.
- UK Government (2018). UK GDPR and Data Protection Act 2018 overview.
- Information Commissioner’s Office. Individual rights under data protection law.
- National Institute for Health and Care Excellence (NICE) (2023). Guidance on recognising and referring possible neurodevelopmental conditions.
- NHS (2024). How the NHS uses and protects your data.
Disclaimer
This article is general informational guidance produced by NeuroCheck Pro to help readers understand our data practices in general terms, and it is not a substitute for legal advice. If you have specific concerns about your data or your legal rights, please seek independent advice, for example from the Information Commissioner’s Office. If you are concerned about your own or someone else’s health, please speak to your GP or contact NHS 111 for advice. If you or someone you know is struggling or in distress, the Samaritans are available free, any time, on 116 123.