Last updated 7 October 2026. Applies to the GerI app for Android and iOS (version 2.0 onwards, which contains the ACMI Scanner tool), to ACMI Scanner 1.2, and to the account pages on this site.
GerI never collects patient data. It asks you to create an account with your name, professional role and nhs.net email address so that only verified NHS staff use this evaluation release, and it records the date and time each time you accept the in-app disclaimer. That is all we hold. Photographs and recognised text stay on your phone.
MB Clinical Limited (company number 14381462, England and Wales) is the data controller. Contact: Dr Matthew Butler, Director, matthew.butler2@nhs.net.
| Data | Why |
|---|---|
| Full name and professional role | To know who is evaluating the app and to attribute feedback and disclaimer acceptances to a named professional. |
| nhs.net email address | To verify that you work in the NHS (only nhs.net addresses are accepted), to sign you in, and to send password emails. We do not send newsletters. |
| Disclaimer acceptances (date, time, platform, app version) | An audit record that you confirmed you are a registered healthcare professional prescriber and understood that the app is not medical advice, each time you open it. |
| Account timestamps (created, last used) | To apply the retention period below. |
Lawful basis: our legitimate interests in restricting a clinical decision-support evaluation to verified professionals and in keeping a record of disclaimer acceptance (UK GDPR Article 6(1)(f)). We do not use the data for any other purpose and we do not sell or share it.
Before any recognised text is shown, lines that look like patient identifiers (NHS number, date of birth, name, address, hospital number, telephone, age or sex) are removed automatically and never kept. Text recognition runs on the device (Google ML Kit on Android, Apple Vision on iOS). The photograph is processed in memory and discarded. The recognised text is shown so that you can correct it and is discarded when you scan again or close the app. Nothing is uploaded. The anonymous usage counters (numbers of lists scored, criteria shown and so on) also stay on the phone and are sent only if you choose to email them.
Account data is stored in the United Kingdom (London) by our hosting provider Supabase, under a data processing agreement. Verification and password emails are sent from accounts@mbclinical.co.uk through Resend (EU region), our email delivery provider. Passwords are stored only as salted hashes; sign-in tokens are kept in the secure storage of your phone (iOS Keychain or Android encrypted preferences). No analytics, advertising or crash-reporting services are included.
Until you delete your account, or 24 months after you last used the app, whichever is sooner. Deleting your account removes your profile and all disclaimer records immediately.
You can see and download everything we hold about you, change your password, or delete your account at any time on the account page or from the Account screen in the app. You also have the rights to rectification, to object and to complain to the Information Commissioner's Office (ico.org.uk). Email the contact above for anything else.
The optional report is a plain text file you create on demand, with no patient identifiers, handed to the system share sheet; where it goes after that is under your control and your organisation's policies. The feedback form opens your own email app; nothing is sent by the app itself. Please do not include patient details in feedback.
Camera, to photograph a medication list; photo library or picker, to choose an existing image; internet, to sign in and record disclaimer acceptances. Nothing else.