Privacy Policy platoniq.health App

1. Introduction

Welcome to the platoniq.health privacy policy. platoniq.health respects your privacy and is committed to protecting your personal data. "Personal data" means any information relating to an identified or identifiable natural person.

This privacy policy informs you about how we collect and process your personal data when you use the services provided through the platoniq.health app (hereinafter referred to as "the app"), including all data you provide via the app. It also informs you about your privacy rights and how the law protects you.

You must be 18 years or older to use our services. It is strictly prohibited for anyone under the age of 18 to create, register, or use a platoniq.health account.

The information provided does not apply to other online websites, pages, or services that may be accessed through hyperlinks in the app, which link to external resources. Clicking on those hyperlinks may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy policies. When you leave our services, we encourage you to read the privacy policies of any website or mobile application you visit.

PLEASE READ THIS POLICY CAREFULLY BEFORE USING THE APP.

2. Important Information & Who We Are

platoniq.health is a preventive health service that aims to support the management of social relationships.

platoniq.health processes your data independently and acts as the data controller only as long as necessary to provide you with access to our app and its basic functions for the intended use (e.g. registering your account, tracking your relationships, and using course materials).

If you have any questions about this privacy policy or wish to exercise your legal rights, please contact us using the contact details below.

We have appointed Silvan Hornstein as our Data Protection Officer. He can be reached at: kontakt@platoniq.health

3. Scope of Personal Data Processing

We process your personal data only to the extent necessary to provide you with a functional service. Personal data is usually only processed with the consent of the data subject or based on other legal provisions that permit data processing (see "Legal Basis").

Your personal data is collected directly through the app.

We may collect, process, store, and transfer different kinds of personal data about you, which we group as follows:

Identification Data: Name, IP address, user ID, email address, date of birth
Personal Details: Gender
Personal Data: Information about relationships, interactions with contacts, notes
Usage Data: App sessions, settings data

3.1 Special Categories of Personal Data

We process special categories of personal data about you, which may include sensitive health-related information. We do not process information about criminal convictions and offences. Sensitive health data is stored in Germany.

3.2 Aggregated and Anonymous Data

We also collect, process, and share aggregated/anonymous data, such as statistical reports, with your consent. Anonymization constitutes a data processing activity and therefore requires a legal basis. We only anonymize data with your permission. Anonymous data is used for research and statistical purposes.

Once data is anonymized, it no longer falls under data protection laws as it no longer relates to an identifiable individual. For example, we may combine your data with that of other users to generate scientific insights or improve the service (e.g. developing algorithms).

Aggregated data resulting from this process is considered anonymous, as the individuals cannot be identified. However, if we combine or link aggregated data with personal data such that you can be directly or indirectly identified, we treat the combined data as personal data and process it accordingly.

3.3 Cookies

We use only so-called "technical cookies" in our app to recognize you as a user during each session. This data is not shared with third parties.

4. How Is Your Personal Data Collected?

We collect data from and about you in the following ways:

Direct interactions: You may provide us with your personal data (including sensitive data) by filling in forms/questionnaires or contacting us by post, phone, email, or otherwise. This includes:
- Using our products or services: we may receive and collect data about you, such as usage data.
- Creating an account: you must provide login credentials, such as a nickname and email address.
- Providing feedback or contacting us: including any information you provide through customer service or other communications.
Automated technologies or interactions: When you interact with our app, we automatically collect technical data about your device, browsing actions, and usage patterns using cookies and similar technologies. We may also receive technical data if you visit other websites using our cookies.
Third parties: We may receive personal data about you from third parties, such as healthcare professionals connected to your account.

5. Purposes and Legal Basis of Processing

The table below describes the ways we process your personal data and the legal bases for doing so. We may also share your data with other parties for these purposes (see section "Data Sharing").

PurposeData TypesLegal BasisProviding access to our app and its basic functions (e.g. creating an account, tracking social relationships)Identification data, personal details, usage data, other dataConsent (Art. 6(1)(a) GDPR), performance of contract (Art. 6(1)(b) GDPR), legitimate interests (Art. 6(1)(f) GDPR)Processing special categories of data (sensitive data)Health-related personal dataExplicit consent (Art. 9(2)(a) GDPR)

5.1 Other Processing Purposes

Security and Protection: We may process your personal data to ensure the security of our services and users, monitor operations, authenticate users, detect fraud, and enforce our terms. Legal basis: legitimate interest or legal obligation.
Managing and Defending Legal Claims: We may process data necessary to handle or defend legal claims. Legal basis: legitimate interest.
Compliance with Legal Obligations: We may process personal data to fulfill legal obligations (e.g. accounting, data protection). Legal basis: legal obligation.

5.2 Change of Purpose

We will only use your personal data for the purposes for which we collected it unless we reasonably believe we need to use it for another compatible purpose. For an explanation, contact us.

If we need to use your data for an unrelated purpose, we will notify you and explain the legal basis unless required or permitted by law.

6. Data Sharing

We only share your personal data:

As the data controller and in connection with the original purposes;
With your consent or as stated in this policy.

In specific situations, we may share your data:

With authorities, in response to lawful requests (e.g. national security or law enforcement);
As part of legal obligations or legal proceedings;
In good faith to protect rights or property;
During mergers, acquisitions, or asset sales (you will be notified);
With third-party service providers (e.g. hosting, development, analytics) acting on our behalf and under contractual confidentiality obligations.

All third parties must respect data security and process data in accordance with the law and our instructions. We do not allow third-party service providers to use your personal data for their own purposes.

Our employees may process your data under clear instructions and confidentiality.

We may share anonymized or aggregated data that does not identify you.

7. Data Security

We have implemented appropriate technical and organizational security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. Access is limited to employees, contractors, and agents on a need-to-know basis, who are subject to confidentiality obligations.

We use:

Encryption technologies during transfer and storage;
Strict access controls (e.g. no health data access for unrelated staff);
Industry-standard physical, electronic, and procedural safeguards.

Despite our efforts, no system can guarantee absolute security. However, we comply with the GDPR and the principle of data minimization by only collecting what is necessary for stated purposes.

‍

8. Data Retention

We delete your data when the purpose or legal basis for storage no longer applies—typically when you delete your account. Use of the app ends when the prescribed usage period expires (under § 33a SGB V), after which data is deleted unless we are required to retain it by law.

You can request deletion or revoke consent at any time. Uninstalling the app does not automatically delete your data—you can log in again later unless you delete your account.

With your explicit consent, we may retain data for 30 days beyond the usage period to ensure continuity of care or for user experience and development purposes.

Data may be retained beyond this if:

Legal disputes are pending;
We are subject to legal retention periods (e.g. under § 257 HGB, § 147 AO)

‍

10. Your rights

You have the following rights under the GDPR. To exercise them, email us at kontakt@platoniq.health:

Right to information: You have the right to be informed about how we use your data.
Right of access: You can request a copy of the personal data we hold about you.
Right to rectification: You can request correction of inaccurate or incomplete data.
Right to erasure: You can request deletion of your data or account. Legal retention obligations may apply.
Right to restrict processing: You can request that we restrict processing of your data in certain cases. This may impact your ability to use the app.
Right to object: You can object to processing based on legitimate interests, unless we demonstrate compelling reasons.
Right not to be subject to automated decisions: Unless legally permitted or with your consent, you can object to decisions made solely by automated processing.
Right to data portability: You can request your data in a structured, machine-readable format.
Right to withdraw consent: You can withdraw your consent at any time without affecting past processing. This may affect your ability to use certain features.
Right to lodge a complaint: You can contact your local supervisory authority if you believe your data protection rights have been violated. We recommend contacting us first.

We may need to verify your identity before processing your request. We will respond as soon as possible, usually within one month. Complex or multiple requests may take longer.

11. Contact Details

Controller: platoniq.health
Email (Data Protection): kontakt@platoniq.health
Data Protection Officer: Silvan Hornstein
Postal Address: Luisenstraße 53, 10117 Berlin

‍

12. Changes to this policy

We may update this policy from time to time. All changes will be published on this page and, where appropriate, notified by email or in-app notice. Please review this policy regularly to stay informed.

Last updated: July 8, 2025

‍