Where your information is kept, and who can read it

Your records are kept on your account so they're backed up and the same on every device. The most sensitive parts are locked before they leave your phone or browser, and we can't read them.

Locked with your own key

Your bank details, National Insurance number, date of birth, GMC number, NHS Pension membership number and signature are locked with a key that only your own devices hold. They travel and are stored locked, so nobody else can read them, including us.

That is what your recovery code is for: it is a copy of the key. See My bank details are locked on the website.

Kept on your account

Your sessions, practices, invoices and expenses are kept on your account, so they're backed up as you go and the website shows the same as your phone.

Without an account

You can use the phone app without signing in. Everything then stays on that phone only, so save a copy now and then with More > Save a backup file.

The full details are in our privacy policy.