Privacy Policy

How we handle your data

Last updated: March 2026

1. Controller

The controller within the meaning of the GDPR and the Swiss Data Protection Act (nDSG) is:

Evida Life AG
[Address], Zurich, Switzerland
Email: datenschutz@evidalife.com

2. Data we collect

User account

During registration we collect your email address and a password. Additional profile details (e.g. name, date of birth) can be added voluntarily. The legal basis is contract performance (Art. 6(1)(b) GDPR).

Health data

[Placeholder: Description of lab values, biomarkers and Daily Dozen data that users can upload or enter. Legal basis: explicit consent pursuant to Art. 9(2)(a) GDPR.]

Automatically collected data

When you visit our website, technically necessary data (IP address, browser, referrer) are stored in server logs for a very short time. This data is not linked to other data.

3. Analytics (Plausible)

We use Plausible Analytics, a privacy-friendly, cookieless analytics solution based in the EU. Plausible sets no cookies, stores no personal data, and is fully GDPR-compliant. No data is shared with third parties.

4. Data storage (Supabase)

Your data is stored in Supabase infrastructure. Our database server is located in the EU (Zurich) region. Supabase processes data according to its privacy policy and acts as a data processor.

5. Cookies & Local Storage

We use strictly necessary cookies to maintain your login session after you sign in. These cookies are essential for the authentication service to function and do not require consent under EU law (Art. 5(3) ePrivacy Directive). We do not use any tracking, advertising, or third-party cookies. Our website analytics are provided by Plausible Analytics, which is fully cookieless and does not collect personal data.

6. Your rights

You have the right to:

Access your stored data (Art. 15 GDPR / Art. 25 nDSG)
Correction of inaccurate data (Art. 16 GDPR)
Deletion of your data (Art. 17 GDPR / Art. 32 nDSG)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Withdrawal of consent at any time without giving reasons
Lodge a complaint with a supervisory authority (FDPIC, Switzerland)

Send requests to: datenschutz@evidalife.com

7. Third parties and data sharing

[Placeholder: Partner labs, payment providers, and other processors will be listed here once partnerships are established.]

8. Changes to this policy

We reserve the right to update this privacy policy as needed. The current version is always available on this page. For material changes, registered users will be notified by email.

9. Contact

For privacy-related questions, reach us at datenschutz@evidalife.com.