Privacy Policy
This policy explains what personal data we collect on proactiva.app, why we collect it, and what rights you have. It is written in line with the General Data Protection Regulation (EU) 2016/679 (GDPR).
1. Data controller
The data controller is the Proactiva project team. Contact for data protection matters: info@proactiva.app. The official legal entity details will be published on this page before the platform launches.
2. What we collect before launch
The platform is still in preparation, so we currently collect only waitlist data: your email address, your chosen site language and, if you decide to share it, a free-form comment. The site uses only essential cookies for language selection and sign-in sessions — we use no advertising or tracking cookies.
3. Why and on what basis
We use your email address for a single purpose — to announce the platform launch and activate the promised 2 months of free access. The legal basis is your consent (GDPR Art. 6(1)(a)), which you can withdraw at any time.
4. Health data after launch
Once the platform launches, it will process health data (GDPR Art. 9) — laboratory test results and related information. It will be collected only with explicit separate consent, and we will publish a detailed policy for this data before launch. AI interpretation does not make diagnoses — assessments are confirmed by a doctor.
5. Where we store data
Data is stored on Supabase infrastructure in the European Union (Frankfurt region, Germany). Access is restricted by technical measures; waitlist data cannot be reached through the public API.
6. How long we keep it
We will keep waitlist data until the launch announcement and no longer than 12 months after it, unless you withdraw your consent earlier — in that case we delete the data without delay.
7. Your rights
You have the right to access your data, correct it, delete it, restrict processing, receive a portable copy, and withdraw consent at any time. Contact info@proactiva.app — we will reply within 30 days. You also have the right to lodge a complaint with your supervisory authority (in Lithuania: vdai.lrv.lt).
8. Data recipients
We do not sell your data or pass it to third parties for marketing. Data is processed only by our service providers (hosting and database infrastructure) operating in the EU and bound by data processing agreements.
9. Changes
When we update this policy, we will publish the new version on this page with the updated date.