Privacy Policy

Last Updated: May 2026

Oxiah (“we,” “our,” or “the Platform”) is committed to protecting the privacy and security of your personal data. This Privacy Policy outlines how we collect, process, and protect your information in strict compliance with the Swiss Federal Act on Data Protection (FADP) and regional healthcare data standards.

1. Data Controller

The data controller responsible for processing your data is:
Eden Conseil SA, Route des Acacias 54 bis, 1227 Carouge GE, Switzerland.
For data protection inquiries, contact: privacy@oxiah.com.

2. Nature of Data Collection & Ephemeral Processing

To preserve absolute user privacy, Oxiah operates an ephemeral processing architecture that intentionally isolates personal identification metadata from symptom intake metrics, preventing the creation of a permanent medical history database:

• Patient Identification Metadata: Name, contact details (email or mobile number), year of birth, and language preference are collected exclusively for session routing and to allow the receiving medical professional to contact you.
• Triage Intake Data: Symptoms, duration, pain scales, and medical context provided during the dynamic algorithmic intake loop are processed temporarily via isolated session tokens solely to construct your clinical summary file.

3. Purpose of Processing and Strict Data Erasure Policy

Your data is processed solely to compile a standardized clinical intake summary document (“Clinical PDF”) to facilitate medical routing and regional urgent care intake workflows.

Immediate Clinical Purge: Upon successful completion of the triage session and generation of the secure Clinical PDF, all structural symptom interaction data is instantly and permanently purged from Oxiah’s active application memory.

Temporary Contact Retention: Your name, year of birth, and contact details are retained within a highly secure, isolated tier exclusively for the short window required for the designated doctor, clinic, or regional urgent care network to establish direct clinical communication with you. Once this handoff is complete, this metadata is securely deleted.

4. Data Transfer to Third Parties (The Medical Referral)

Your generated clinical report and temporary contact information are securely transmitted to licensed healthcare professionals, clinics, or your integrated health insurer network solely upon your explicit request to submit your case. We do not sell, lease, or distribute any user data to commercial third parties, advertising entities, or marketing platforms.

5. Data Security and Hosting Location

All infrastructure and data routing processed by Oxiah are hosted exclusively within Switzerland on secure, managed cloud infrastructure provided by Infomaniak Network SA. Data transmissions are encrypted end-to-end using industry-standard TLS 1.3 encryption protocols.

6. Your Rights

Under Swiss data protection legislation, you retain the right to access, rectify, or request the immediate deletion of your temporary records held by the Platform. Because we enforce a strict immediate-purge policy on clinical intake text, our administrators hold no permanent health history logs to review or alter. Administrative requests regarding your temporary routing contact data can be submitted directly to privacy@oxiah.com.