PelviQ Privacy Policy
Your health data—including symptom logs, pain scores, photos, and treatment records—is stored on your device. Veinly does not receive or store it except through the optional AI Insights flow you explicitly activate.
1. Overview & Controller
This Privacy Policy explains how Veinly Medical Innovation UG (haftungsbeschränkt) (“Veinly”, “we”, “us”) processes personal data in connection with the PelviQ application. We are committed to protecting your privacy in accordance with the GDPR and applicable German data-protection law.
Country: Germany
Privacy / data-protection contact: dr.barbati@gmail.com
App: PelviQ for iOS; macOS coming soon
2. Data We Collect
PelviQ processes two clearly separate categories of data: Account Data, handled by Supabase solely for authentication, and locally stored Health Data, which stays on your device except through the explicit, optional AI Insights flow described below.
2a. AI-Powered Insights (Third-Party Data Sharing)
PelviQ's optional AI Insights feature uses Google's Gemini AI service, operated by Google LLC and its affiliates, including Google Ireland Limited for EU users, to generate a written summary of your tracked health data.
What data is collected and how
The data below is entered directly by you into the App and stored locally on your device using PelviQ's core tracking features. It is not collected from any other source.
- Symptom and pain logs: pain scores, pain quality, associated symptoms, timing, and location details you record.
- Treatment and medication history: names, types, dates, and notes you add.
- Differential-diagnosis checklist answers: your responses to gynecological, gastrointestinal, musculoskeletal, and urological questionnaires.
When this data is shared, and with whom
None of the data above leaves your device unless and until you explicitly grant permission inside the AI Insights screen, on a feature you must actively choose to use. When you grant permission, the listed data is sent for that request only to Google's Gemini API (Google LLC) through a secure backend endpoint that we operate. We do not use advertising or analytics SDKs, and this data is never shared for advertising, sold, or used to build a marketing profile.
Purpose and use limitation
This data is used solely to generate the AI-written summary shown to you in the App. Data submitted through the Gemini API in this configuration is not used by Google to train its models and is not retained by Google beyond what is necessary to process the request. Google LLC, as our data processor for this feature, is contractually and technically required to protect this data to a standard equivalent to our own—it may not use it for any purpose other than fulfilling the API request.
Your control
You must explicitly agree before any data is sent for AI Insights whenever consent is not currently active. You can withdraw permission at any time from Profile → Privacy in the App; once withdrawn, no further data is sent to Gemini. Declining or withdrawing consent does not affect any other feature: core tracking, reports, and backups remain fully available and fully local.
Legal basis (GDPR)
Processing of this data by Google for AI Insights is based on your explicit, freely given, specific, and informed consent under Art. 6(1)(a) and, where applicable, Art. 9(2)(a) GDPR for health data. You may withdraw consent at any time without affecting the lawfulness of processing before its withdrawal.
3. Local-First Architecture
PelviQ stores symptom data, pain logs, treatment records, photos, checklists, and generated insights in on-device storage. Core tracking works offline. Veinly has no access to your local health database. You control any backup you create and where you store it.
4. How Data Is Collected
Account data is submitted when you register. Health data is entered manually by you and stored locally. Photos are captured only when you grant camera access. The AI Insights flow sends only the listed data, only after your explicit permission. Backups are created locally and exported only when you choose to share them.
5. How We Use Your Data
Account data is used only for authentication. Local health data is used only to provide tracking, reports, and related App features on your device. Optional AI data is used only to generate the requested written summary. We do not use health data for advertising, profiling, or commercial marketing.
6. AI Safeguards
The AI Insights feature is strictly opt-in, is not triggered automatically, and transmits data through encrypted HTTPS via a secure backend endpoint operated by Veinly. Google may use the submitted data only to fulfil the API request. You can use PelviQ's core tracking features without using AI Insights.
7. Supabase Authentication
PelviQ uses Supabase exclusively for account creation, login, password management, and session handling. Supabase does not have access to your health data.
8. Data Sharing & Third Parties
| Third party | Purpose | Data shared |
|---|---|---|
| Supabase | Authentication | Name (if provided), email, hashed password, user ID, session data |
| Google Gemini | Optional AI Insights | The listed health data, only with explicit consent and only for the request |
| Advertising / analytics providers | None | None |
9. Data Retention & Deletion
Account data is retained until you delete your account. Local health data is retained only on your device until you delete it. You can use the in-app Delete All Data feature to remove locally stored health data immediately, delete individual entries and photos, or uninstall the App. You can delete your account from Settings → Account → Delete Account. A separately exported backup remains in your chosen location until you delete that file.
10. Security
We use encrypted HTTPS communications, secure authentication controls, device keychain storage for session credentials, application isolation for local data, and explicit user action before optional health-data transmission.
11. Your GDPR Rights
Subject to applicable law, you may have rights of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. To exercise a right concerning account data or this policy, contact dr.barbati@gmail.com. You may control local health data directly in the App, through Delete All Data, and through your backup files.
14. Contact
Germany
Privacy / data-protection contact: dr.barbati@gmail.com