Privacy Policy

ONU Health Inc.

Europe Location:
Chausseestrasse 37, 10115, Berlin, Germany

USA Location:
220 E 23rd St, New York, NY 10010, United States

support@onuhealth.com

1. Introduction

We at ONU Health Inc. (“ONU Health”, “we”, “us”) are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information in compliance with the EU General Data Protection Regulation (GDPR).

2. Data Controller

The data controller responsible for data processing on this Platform is:

ONU Health Inc.
2093 Philadelphia Pike, #2188 Claymont, DE 19703, USA
Email: support@onuhealth.com

3. What Data We Process
We process the following types of data, depending on your use of our services:
- Contact data (e.g. email, name)
- Device and usage data (e.g. IP address, access logs)
- Health-related data (lab results, prescriptions, diagnoses, symptoms, notes)
- AI usage metadata (e.g. interactions with generated suggestions)
- Integration data from third-party sources (e.g. Apple Health, wearables)

4. Purpose and Legal Basis

We process your data:

Purpose	Legal Basis
Provide platform functionality	Art. 6(1)(b) GDPR – Contractual necessity
Store medical documents securely	Art. 9(2)(a) GDPR – Explicit user consent
Generate summaries and suggestions via AI	Art. 6(1)(b) & Art. 9(2)(a) GDPR
Improve platform and AI models	Art. 6(1)(f) GDPR – Legitimate interest
Ensure security and prevent abuse	Art. 6(1)(f) GDPR

5. Your Responsibility

You are solely responsible for ensuring the accuracy, completeness, and legality of the medical data you upload to the platform.

6. Data Hosting and Transfers

All data is hosted on Amazon Web Services (AWS) data centers located in the European Union (EU).
We do not transfer your health data outside the EU without appropriate safeguards under GDPR (e.g. SCCs or adequacy decisions).

7. Data Retention

We store your data for as long as your account is active. Upon deletion of your account, your data will be deleted within 30 days, unless legal obligations require longer retention.

8. Your Rights
You have the following rights under GDPR:
- Access to your personal data (Art. 15)
- Rectification (Art. 16)
- Erasure ("right to be forgotten", Art. 17)
- Restriction of processing (Art. 18)
- Data portability (Art. 20)
- Withdrawal of consent (Art. 7(3))
Right to lodge a complaint with a supervisory authority (Art. 77)

9. Data Security

We implement state-of-the-art encryption and security protocols. Access is protected via authentication technologies, and sensitive data is stored securely within AWS infrastructure.

10. Changes

We may update this Privacy Policy from time to time. We will notify users in-app or via email before changes take effect.

ACTION

Know it before it happens

ONU provides you with tools to build your healthy future; now it's your time to use them!