Privacy Policy

1. Controller

The controller for personal data on this website is Ingrid Health UG (haftungsbeschränkt), Fidicinstraße 36, 10965 Berlin, Germany. You can reach us at privacy@ingrid.health.

This Privacy Policy applies to the website ingrid.health. A separate privacy policy applies to the Ingrid app; you can find it in the app and at ingrid.health/app/privacy.

2. At a glance

• This website uses no cookies, no analytics or advertising services and no tracking technologies.
• When you visit the website, our hosting provider Google processes technical connection data such as your IP address to deliver the pages.
• If you join the waitlist, we store your email address to contact you about the Ingrid beta. You can ask us to delete it at any time.
• We do not sell your personal data, and we make no automated decisions within the meaning of Art. 22 GDPR.

3. Visiting the website

3.1 The website is delivered through Firebase Hosting by Google Cloud EMEA Limited. When you open a page, Google processes the data your browser technically sends with the request: your IP address, the date and time of the request, the address requested, the page you came from (referrer) and details of your browser and operating system.

3.2 This data is needed to deliver the website and to protect it against attacks and misuse. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is a secure and working website.

3.3 We do not analyse this data and keep no access logs of our own. Google processes it as our processor only to provide the service. Firebase Hosting delivers the pages through a worldwide network of servers, so data may also be processed outside the EU (section 8).

4. Waitlist

4.1 With the “Join Waitlist” form you can give us your email address. We store it together with the time you signed up and a note that it came from the website.

4.2 We use your email address only to contact you about the Ingrid beta, for example with an invitation. The legal basis is your consent (Art. 6(1)(a) GDPR), which you give by submitting the form. You can withdraw it at any time with effect for the future by writing to privacy@ingrid.health; we will then delete your email address.

4.3 Giving your email address is voluntary. Without it, we cannot add you to the waitlist.

4.4 We store the waitlist in Google Cloud Firestore in Frankfurt am Main. It cannot be read through the website; only we have access. We send our emails to you through Google Workspace. We delete your email address once we have invited you to the beta or when you ask us to, and at the latest 12 months after the launch of the Ingrid app.

5. Contacting us by email

5.1 When you write to us, for example at support@ingrid.health or privacy@ingrid.health, we process your email address, your name if you give it, and the content of your message to handle your request. Our mailboxes are run on Google Workspace.

5.2 The legal basis is Art. 6(1)(b) GDPR where your request concerns a contract with us or steps before entering into one, and otherwise Art. 6(1)(f) GDPR; our legitimate interest is answering requests. We handle requests about your data protection rights on the basis of Art. 6(1)(c) GDPR.

5.3 We keep requests for 3 years from the end of the year in which they were resolved.

6. Storage on your device

6.1 If you choose a language with the language switcher, the website stores your choice in your browser's local storage (localStorage, entry “ingrid-preferred-locale”) so that it opens in that language on your next visit. The entry stays on your device and is not sent to us. You can delete it at any time in your browser settings. Where German law applies, this is based on Section 25(2) No. 2 TDDDG, because the storage is strictly necessary for the language choice you asked for; in Austria, the corresponding national rules apply.

6.2 Beyond this, we use no cookies and store no other information on your device. Only our team's internal sign-in area at ingrid.health/dashboard uses Firebase Authentication and stores sign-in data in the browser for it; it is not intended for visitors to the website.

7. Recipients and service providers

We have data-processing agreements under Art. 28 GDPR with our processors. We pass your data to others only where the law requires us to.

8. International transfers

8.1 We store the waitlist in the EU (Germany). Firebase Hosting delivers the website from servers worldwide, and Google Workspace uses data centres worldwide; data may therefore be transferred to the United States and other third countries.

8.2 We base these transfers on the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR) and on the EU-US Data Privacy Framework, under which Google LLC is certified.

8.3 You can request a copy of the relevant safeguards at privacy@ingrid.health.

9. Retention

10. Security

The website is only delivered encrypted (HTTPS). We protect your data with technical and organisational measures under Art. 32 GDPR.

11. Your rights

• Access to your personal data and a copy (Art. 15 GDPR)
• Correction of inaccurate data (Art. 16 GDPR)
• Erasure where the requirements are met (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on legitimate interests on grounds relating to your particular situation (Art. 21 GDPR)
• Withdrawal of consent at any time with effect for the future (Art. 7(3) GDPR)

To exercise your rights, write to privacy@ingrid.health.

You also have the right to complain to a data protection supervisory authority. Ingrid’s lead authority is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit, BlnBDI), Alt-Moabit 59–61, 10555 Berlin. In Austria, you may contact the Datenschutzbehörde.

12. Changes to this Privacy Policy

We update this Privacy Policy when the website, our service providers or applicable law changes. The version published on this page applies.