Privacy Policy – Symptana

1. Controller

AIX HSG UG (haftungsbeschränkt)
Pfarrer-Gursky-Ring 11, 52499 Baesweiler
Email: apple@aix-hsg.de

2. Core principle: local processing

The app processes your health data on your own device by default. There is no server of its own, no backend, and no user account. The app does not, on its own, send any data to the publisher or any other third party. We do not receive, store, or process the contents of your pain diary.

The app contains no feature that sends your diary data to a cloud service — including no cloud-based AI analysis. Data only leaves your device when you share an export or report yourself (see section 6).

3. Categories of data processed

• Timestamp of an entry
• Pain intensity (0–10 scale)
• Optional: body region, radiation, pain quality, possible triggers, whether and which medication was taken, a free-text note
• Optional: blood pressure and pulse values (imported from CSV or read from Apple Health / Health Connect)
• Optional: profile details (profile name, first and last name and date of birth for the report header, a profile picture)
• Technically necessary: a random identifier (UUID) generated per entry, which allows no conclusions about your identity

No contact details, name, or account data are processed unless you voluntarily enter them into a free-text field.

4. Storage

You choose the storage location yourself: via Apple HealthKit (encrypted by iOS to Apple's own standards) or purely on-device, outside Apple Health. If you have enabled iCloud sync for "Health", iOS automatically synchronizes your entries — end-to-end encrypted per Apple's statements — across your own devices; this is entirely controlled by iOS, not by this app.

If you use the Apple Watch app, entries made on the watch are transferred directly to your paired iPhone via Apple's WatchConnectivity and stored there. Widgets and the watch complication only read a small local summary from a storage area shared by the app on the same device.

Android: The app stores your entries in a local database in the app's own storage area, which other apps cannot access. Cloud backups (Android Auto Backup) are disabled for the app. If you enable it in the app, it reads blood pressure, sleep and exercise data from Health Connect — read-only and only after your explicit permission in Health Connect; the app writes nothing to Health Connect and does not pass these values on. You can revoke the permission in Health Connect at any time. The Android app contains no analytics, advertising or crash-reporting SDK.

5. Legal basis

Health data is a special category of personal data (Art. 9(1) GDPR). Processing is based on your explicit consent (Art. 9(2)(a) in conjunction with Art. 6(1)(a) GDPR), which you give by actively entering your own data and by granting the relevant iOS or Android permission.

6. Exports and shares you trigger

A JSON/CSV export or a PDF medical report initially stays only on your device. It only leaves your device once you actively send, save, print, or hand it to another app via your operating system's share function (iOS or Android) — and only to the destination you choose yourself.

6a. Purchases and subscriptions

Paid features ("Symptana Pro") are handled exclusively through Apple (App Store) or Google (Google Play). We do not receive payment or account data; the app only stores locally whether Pro is unlocked. To process purchases (querying purchases, restoring purchases), the app or the store's billing library communicates with Apple or Google; no diary data is transmitted in the process. Apple's and Google's privacy terms apply.

6b. Help page and support form

Under Settings → Help the app opens our help page (aix-hsg.de/en/symptana/hilfe) in your browser. The app itself transmits no diary data; it only appends technical details to the address (platform, app version, system version, device model) so that the matching answers are shown. If you use the support form, we process the details you enter (name, email address, subject, message) and these technical details to handle your request and reply by email (Art. 6(1)(b) or (f) GDPR). To do so we create a support ticket in our ticket system. Use is voluntary; please do not write health data into the message that you do not want to share. We delete support tickets once they are resolved and no retention obligations apply.

7. Complete deletion and withdrawal

In the app's settings you can, at any time, irreversibly remove all stored entries. Withdrawal does not affect the lawfulness of processing carried out before it.

8. Your rights as a data subject

Access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20 — already directly implemented via the app's export function), and objection (Art. 21). Since all data resides exclusively on your device, you can exercise most of these rights directly within the app itself.

9. Right to complain

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence, place of work, or place of the alleged infringement — for Baesweiler: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.