Privacy Policy

1. Who is responsible?

Data controller under GDPR is Aimedis. A complete imprint with full address will be provided before public launch. Contact for privacy enquiries: datenschutz@aimedis.app

2. What data do we process?

We only process data you provide yourself or that is necessary to deliver the medical service: • Account: name, email, password hash, role • Profile: date of birth, gender, address, phone, medical data (blood type, height, weight, insurance), emergency contact, avatar • Consultation: symptoms, vitals, uploaded attachments, clinician notes, triage decision, prescription drafts • AI conversations: every AVA turn (question + answer) with speaker, language, model version, timestamp • Audit log: access to sensitive actions with actor and target

3. On what legal basis?

Processing medical data is based on your explicit consent under Art. 9(2)(a) GDPR. For contract performance (e.g. consultation) also Art. 6(1)(b). Audit log on the basis of legitimate interests (Art. 6(1)(f)) to ensure platform security.

4. Where is the data stored?

Database and storage buckets run on Supabase in the EU region (Germany / Netherlands). Encryption in transit (TLS 1.3) and at-rest (AES). Service-role access is server-only; the browser only sees the anonymous public key.

5. Who has access?

Strict row-level security (RLS) on every table: • Patient sees only their own data • Clinicians see consultations of their patients • Admin has full read access for regulatory and support purposes (every action audited) • No third parties have access apart from the processors named in section 7.

6. How long is the data kept?

Default retention: 10 years per §10 MBO-Ä (German medical retention duty). On request under Art. 17 GDPR you may demand earlier erasure, unless a legal retention duty applies. Push subscriptions are deleted immediately upon opt-out.

7. Subprocessors

We share data with the processors below only as needed to deliver the service. Before production use with real data a Data Processing Agreement and, where applicable, a Business Associate Agreement must be in place.

Most providers process data in the USA; these third-country transfers are safeguarded by EU Standard Contractual Clauses (Art. 46 GDPR). Supabase runs in the EU region (Frankfurt). ElevenLabs read-aloud is opt-in: until an Enterprise agreement with Zero-Retention mode and a BAA is in place, the answer text sent for synthesis may be logged server-side — please do not read out sensitive health data until then.

8. Your rights

You have at any time the right to: • Information (Art. 15): JSON export of all data stored about you • Rectification (Art. 16): correct wrong data directly in the profile • Erasure (Art. 17): complete deletion of your account and all linked data • Data portability (Art. 20) • Withdrawal of consent (Art. 7) • Complaint to a supervisory authority

9. Cookies and tracking

The platform sets only functional cookies (session, language preference, auth token). No third-party tracking, no advertising pixel, no analytics tool without explicit consent. Web push and email notifications are explicitly opt-in.