Privacy Policy platoniq App

1. Introduction

Welcome to the Privacy Policy of the platoniq App.

Social Health Solutions UG (limited liability), in formation (“we”, “us”, “Platoniq”), respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains which data we process when you use our app, for what purposes, on which legal bases, and what rights you have.

Our app is a preventive health tool intended only for adults (18+). It is not designed for minors and is not a medical device.

Please read this Privacy Policy carefully before using the app.

2. Controller & Contact

The data controller under the GDPR is:

Social Health Solutions UG (limited liability), in formation
Luisenstraße 53
10117 Berlin, Germany

📧 kontakt@platoniq.health

For any questions regarding data protection, you can always contact us at the email above.
Once a Data Protection Officer is appointed, we will publish their contact details here.

3. What Data We Process

We only process personal data that is necessary to provide and improve our app. This includes:

• Login data: Email address (for account creation, authentication, and, if you consent, for marketing communication).
• Age group: Selection of an age category (e.g., 18–25, 26–35 etc., not your exact date of birth).
• App usage data: Information about which units you start or complete, which topics you use, whether and how you use the Garden feature (e.g., if plants are created or maintained, and whether you rated an interaction as positive or negative).
• Social competence questions: Your answers to questionnaires about social skills (comparable to established instruments such as ICQ-15). These responses may reveal aspects of your psychological and social health and are therefore treated as health data under Art. 9 GDPR.
• Device information: Device type, operating system version, technical identifiers, and IP address (full IP currently processed by PostHog).
• Push notifications: If you enable push notifications, an anonymous push token is processed to deliver reminders and updates.
• Email communication: If you contact us or subscribe to marketing emails, we process the corresponding communication data.

4. Purposes & Legal Bases

We process your data for the following purposes:

1. Providing the app
   • Account creation, login, access to app features
   • Legal basis: Contract performance (Art. 6(1)(b) GDPR)
2. Personalization & usage analysis
   • Improving app features and understanding how the app is used
   • Legal basis: Legitimate interest (Art. 6(1)(f) GDPR), consent where required (Art. 6(1)(a) GDPR)
3. Processing special categories of data (health data)
   • Processing your responses to social competence and self-reflection questions
   • Legal basis: Your explicit consent (Art. 9(2)(a) GDPR)
4. Push notifications
   • Technical delivery of reminders and notifications (without health content)
   • Legal basis: Consent (Art. 6(1)(a) GDPR)
5. Email communication & marketing
   • Sending information about our app and, if applicable, offers
   • Legal basis: Consent (Art. 6(1)(a) GDPR; Sec. 7(3) UWG, German law)
6. Security & stability
   • Hosting, server operation, protection against misuse and attacks
   • Legal basis: Legitimate interest (Art. 6(1)(f) GDPR)

5. Data Sharing

We do not share your data with medical professionals or third parties for commercial marketing purposes.
Data is only shared with selected processors under GDPR:

• Amazon Web Services (AWS) – Hosting of the app, database, and mail servers. Storage location: EU (Germany).
• PostHog – Analytics to evaluate app usage. Processing takes place on EU servers, currently including full IP addresses.

All processors are contractually bound to GDPR compliance (Art. 28 GDPR).

6. International Data Transfers

In general, your data is stored in the EU (AWS, PostHog EU region).
If service providers transfer data to third countries (e.g., the USA), this is done only under appropriate safeguards such as EU Standard Contractual Clauses (Art. 46 GDPR).

7. Data Security

We apply technical and organizational measures to protect your data against unauthorized access, loss, or misuse. These include:

• End-to-end encryption of Garden feature content
• Transport encryption (TLS)
• Access restrictions (need-to-know principle)
• Hosting in secure EU-based data centers

8. Retention & Deletion

• Data is deleted once the purpose no longer applies or if you withdraw your consent.
• Uninstalling the app does not automatically delete your account; you can request deletion at any time.
• Certain data (e.g., from email communication or contractual obligations) may be retained for up to 10 years due to legal requirements.

9. Your Rights

Under the GDPR, you have the following rights:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR)
• Withdrawal of consent (Art. 7(3) GDPR)
• Complaint (Art. 77 GDPR) – with the competent supervisory authority

To exercise your rights, simply contact:
📧 kontakt@platoniq.health

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, for example if new features are added to the app.
The latest version will always be available in the app and on our website.

Last updated: August 28, 2025

‍

‍

‍