Privacy Notice

It is a placeholder for one. Nothing on this page describes how Vivente processes your personal data, and nothing on it may be relied on as a statement of processing.

No lawful basis, no purposes of processing, no categories of recipient, no retention period, no processor or sub-processor list, no international-transfer mechanism, no data-protection contact, and no procedure for exercising your rights. Each of those belongs in the real notice and none of them is stated here, in any form, by implication or otherwise.

Your health data is stored and processed inside the European Union, in Frankfurt, and this is an architectural property of the product rather than a preference it can change. Separately, the consent controls in your account are live: consent is recorded per data category with a timestamp, it can be withdrawn at any time, and withdrawing a category deletes the documents and derived values in it.

The notice comes at the end of a chain that has to run in order: a Data Protection Officer is appointed, a Data Protection Impact Assessment is carried out on an Art. 9 special-category product, the consent system is assessed against it, and the notice is drafted from the result. Writing the notice first would mean describing processing that the assessment has not examined.

No account outside the founding team exists, and none will be opened before the chain above completes and this page is replaced by the real notice.