PRIVACY POLICY
Version 1.1 • Effective September 15, 2026
Your privacy is important to us. This policy explains how we collect, use, and protect your personal information.
Owner and Data Controller
UIZ.CARE
Eindhoven
The Netherlands
Owner contact email: eHuisarts@uiz.care
Types of Data Collected
Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or by specific explanation texts displayed prior to Data collection within the app.
Personal Data may be freely provided by the User, or, in the case of Usage Data, collected automatically when using the Application.
Unless specified otherwise, all Data requested by the Application is mandatory and failure to provide this Data may make it impossible for the Application to provide its services. Where the Application specifically states some Data is optional, Users are free not to provide it without consequences.
Users are responsible for any third-party Personal Data obtained, published, or shared through the Application.
The Application collects the following categories of Personal Data: personal information (name, surname, email address, date of birth, gender, and password stored securely hashed); health data provided by the User through the in-app assessments, check-ins, and symptom tracking features; consent records created when the User shares a report with a General Practitioner; and technical data collected automatically (device model, operating system version, IP address, and app usage logs).
Where the Application is connected to Health Connect, the Application accesses the following health data types, with the User's explicit permission: steps, distance, total calories burned, heart rate, blood pressure, blood glucose, oxygen saturation, respiratory rate, body temperature, weight, height, and sleep duration. This data is used solely to display the User's own wellness dashboard within the Application, and is shared with the User's General Practitioner (GP) only if the User explicitly grants that GP access. This data is never shared with any other third party.
Mode and Place of Processing the Data
Methods of processing
The Owner takes appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data. In addition to the Owner, in some cases the Data may be accessible to persons involved with the operation of the Application (administration, system administration) or external Data Processors (technical service providers, hosting providers, IT companies) appointed by the Owner. The updated list of these parties may be requested from the Owner at any time.
Place
The Data is processed at the Owner's operating offices and in any other places where the parties involved in the processing are located.
Retention time
Personal Data shall be processed and stored for as long as required by the purpose it was collected for, and may be retained longer where required by applicable legal obligation or based on the User's consent.
The Rights of Users Based on the GDPR
Object to processing of their Data
Access their Data
Verify and seek rectification
Restrict the processing of their Data
Have their Personal Data deleted or otherwise removed
Receive their Data and have it transferred to another controller
Lodge a complaint with a supervisory authority
Additional Information
System logs and maintenance
For operation and maintenance purposes, the Application and any third-party services may collect files that record interaction with the Application (System logs) or use other Personal Data (such as IP Address) for this purpose.
Changes to this privacy policy
The Owner reserves the right to make changes to this privacy policy at any time. It is recommended to check this page periodically, referring to the effective date above. Where changes affect processing based on consent, the Owner will collect new consent where required.
Contact
For any questions about this Privacy Policy or your personal data:
