Privacy Policy

This Privacy Policy explains what personal data Klinikleitlinien collects, why we collect it, and the rights you have over it. It applies to our website, the chat assistant, and your account.

1. Data We Collect

We collect your email address for account authentication, health profile information you choose to provide (age, conditions, medications, etc.), your conversation history with our AI assistant, and basic usage analytics you've consented to. We only collect data that is necessary to provide our service. You control what health information you share with us.

2. How We Use Your Data

Your health profile is used to personalize AI responses to your specific situation. Conversation history is stored to maintain context across sessions. We do not use your personal data to train AI models. We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. Cookies & Analytics

We use strictly necessary cookies to keep you signed in, remember your language, and secure the admin panel — these are always active and don't require consent. With your permission, we also use PostHog to understand how the product is used (page views, feature usage, conversion funnels). No analytics cookies are set, and no usage data is captured, until you accept them in the cookie banner. You can change your choice at any time by clearing your browser cookies, which will show the banner again.

4. Data Security and Storage

All data is encrypted in transit (HTTPS) and at rest. Your data is stored securely in Frankfurt, Germany, within the European Union. We use Supabase for database hosting with enterprise-grade security. Access to your data is protected by Row-Level Security policies, ensuring only you can access your information.

5. Your Rights (GDPR & Swiss FADP)

Klinikleitlinien GmbH is domiciled in Switzerland; we process your data in line with both the EU General Data Protection Regulation (GDPR) and the revised Swiss Federal Act on Data Protection (FADP), whichever gives you stronger protection. You have the right to access, correct, or delete your personal data at any time. You can export all your data through your account settings. You can delete your entire account and all associated data permanently. We process health data under GDPR Article 9 / FADP Art. 5 with your explicit consent. To exercise your rights, contact us at hello@klinikleitlinien.de.