Privacy Policy

1. Introduction & Data Controller Information

AION sense Kft. built the mobile app as a Freemium app (free to download, with certain features available for free, and other features, subscriptions, or third-party services available through in-app purchases). This service is provided by AION sense Kft. This page is used to inform users regarding our policies with the collection, use, and disclosure of personal and health-related data.

Data Controller Information:

• Company Name: AION sense Kft.
• Registered Seat: 1114 Budapest, Bartók Béla út 76. 1. em. 2. ajtó, Hungary
• Company Registration No.: 01-09-448295
• Tax No.: 32895850-1-43
• Email (Contact & Support): info@aionsense.ai

2. Information Collection and Use

For a better experience and to provide our service, while using our app, we collect the following data:

• Personal & Contact Information: Name, date of birth, email address, phone number.
• Financial Data: Payment and billing data (for in-app and third-party purchases).
• Health & Medical Data: Height, weight, chronic conditions, medications, medical contact, allergies, sensitivities, diets, medical records (e.g., blood tests, screenings).
• Lifestyle & Daily Log Data: Daily activity level, sleep habits, food consumed (including camera images), sports and activity data. Daily log info (including, but not limited to): stress level, morning readiness, mood, brain fog, gratitude, sense of purpose, blue light exposure, sleep quality, meditation/relaxation, meal quality, hydration, bloating, caffeine, alcohol, workouts, travel, late work, stressful events, medication intake, injury or pain, illness symptoms, allergy symptoms, free notes.
• Sensor Data: Data measured via biosensor bracelet (using PPG sensor and 3-axis accelerometer).

3. Purpose of Data Processing

We use the data to provide the app's functionalities, generate personalized health and lifestyle analytics using Artificial Intelligence (e.g., analyzing vitality metrics and blood tests), facilitate bookings with third parties (e.g., medical providers), and improve the overall user experience.

4. Data Sharing with Third Parties

To operate the service, we share your data with the following data processors and third parties:

• Supabase, Inc. (USA): The cloud hosting provider for our main database (utilizing reliable global cloud infrastructure such as Amazon Web Services /AWS/ for data storage).
• OpenRouter, Inc. (USA): The gateway used for AI integration (utilizing various AI models for analyzing medical records, vitality metrics, AI-chat, and food scans).
• DigitalOcean, LLC (USA): Hosting provider for our backend admin database.
• Amplitude, Inc. (USA): Analytics tool for monitoring app usage.
• Functional Software, Inc. d/b/a Sentry (USA): Application performance monitoring and error tracking service.
• Healthcare Providers (e.g., Doktor24 Medicina Zrt.): If you book a service with a third party via the app, the necessary data for the booking is transmitted to the respective provider.
• Stripe Payments Europe, Ltd. (Ireland): Online card payment provider (subscriptions and web shop orders).
• Resend, Inc. (USA): Delivery of transactional emails (order confirmation, shipping notification, support messages).
• KBOSS.hu Kft. (szamlazz.hu, Hungary): Invoicing system operator; issuing and sending the electronic invoices for web shop orders.
• Magyar Posta Zrt. (MPL, Hungary): Home delivery of web shop parcels.
• GLS General Logistics Systems Hungary Kft. (Hungary): Home delivery of web shop parcels.
• FOXPOST Zrt. (Hungary): Parcel locker delivery of web shop parcels.

5. Data Retention Period

Personal and health data are retained as long as the user has an active account or until data deletion is requested. Upon account deletion, data is permanently erased, except for billing and financial records which we are legally obligated to retain: invoices and accounting documents are retained for 8 years from issuance under Section 169 of Act C of 2000 on Accounting. Retention of web shop order data is set out in Section 8.

6. Data Deletion and Account Termination

You have the right to request the deletion of your account and all associated personal and health data at any time. You can initiate data deletion through the following methods:

1. Directly within the app using the "Delete Account" feature in the profile settings.
2. By sending an email request to info@aionsense.ai.
3. Without logging in, via our Support page on the website.

We will process and execute your deletion request within 30 days of receipt.

7. User Rights (GDPR)

Under the European Union's General Data Protection Regulation (GDPR), you have the following rights: right to access, right to rectification, right to erasure ("right to be forgotten"), right to restriction of processing, right to data portability, and right to object. In case of a complaint, you have the right to lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH).

8. Processing of Web Shop Orders

If you place an order in our web shop, AION sense Kft. as data controller processes the data necessary to fulfil your order for the purposes and on the legal bases set out below. We neither request nor process health data for web shop purchases. Placing an order requires an AION user account (email address and password); the order is linked to that account and its email address. If you order a subscription in the web shop, your payment card is stored by Stripe Payments Europe, Ltd. for the later recurring charges; we do not receive your card details in this case either. The MAC address (unique device identifier) of the wristband is linked to your order when it is packed, and to your user account when it is first paired in the app.

Purposes, data processed and legal bases:

• Fulfilment of the order (conclusion and performance of the contract): name, email address, phone number, ordered products and quantities, order total, order number, customer note and the time of acceptance of the Terms and Conditions. Legal basis: Article 6(1)(b) GDPR – performance of a contract.
• Delivery: name, phone number, email address, delivery address (postal code, city, street, house number) or the identifier and name of the selected parcel locker, and the tracking number. These data are transferred to the selected delivery provider (Magyar Posta Zrt. – MPL, GLS General Logistics Systems Hungary Kft. or FOXPOST Zrt.). Legal basis: Article 6(1)(b) GDPR – performance of a contract.
• Invoicing and compliance with accounting obligations: billing name and address, tax number for business purchases, invoice line items and amounts, invoice number, method and date of payment. Legal basis: Article 6(1)(c) GDPR – compliance with a legal obligation (Act CXXVII of 2007 on VAT and Act C of 2000 on Accounting).
• Processing the payment: the identifiers of the payment transaction in the case of card payment. We never receive or store your card details; these are processed by Stripe Payments Europe, Ltd. Legal basis: Article 6(1)(b) GDPR.
• Handling withdrawals, warranty and guarantee claims and complaints: the order data, the content of your notification and – in the case of a refund – your bank account number. Legal basis: Article 6(1)(c) GDPR – legal obligation (Government Decree 45/2014 (II. 26.), Government Decree 151/2003 (IX. 22.), Act CLV of 1997 on Consumer Protection).
• Fraud prevention and enforcement of legal claims: technical data and logs related to the order. Legal basis: Article 6(1)(f) GDPR – our legitimate interest in preventing fraud and enforcing our claims.

Providing these data is a precondition of entering into the contract: without them we cannot fulfil your order. Web shop order data are retained until the claims arising from the contract become time-barred (generally 5 years under the Hungarian Civil Code), invoices and accounting documents for 8 years from issuance, and the record of a consumer complaint together with our reply for 5 years. The full list of data processors is set out in Section 4, and your rights are described in Section 7.