Language Solutions s.r.o., Company ID 19590024, with its registered office at Nové sady 988/2, Staré Brno, 602 00 Brno, Czech Republic, operates Galenio Patient. It is the controller for its own account administration, platform operation, security, support and compliance processing. A healthcare provider may be a separate controller for data it processes in connection with care; where Galenio processes that data on the provider's documented instructions, Galenio acts as a processor.

Privacy questions and requests can be sent to tomaskroupa@galenio.app.

Depending on the features you use, data categories may include account and login data; contact and patient-profile data; date of birth, sex, identity-document details and language; height, weight, blood type, medication and other health information you enter; uploaded reports, results, photographs, audio, video and other documents; insurance information; messages, form answers, translations and voice input; sharing permissions and invitation records; and technical, traffic, activity, security and audit data such as IP address, endpoint, timestamps and response duration.

The public website also processes information you submit through contact and feedback forms. Please do not include health records, urgent medical information or other unnecessary sensitive data in those forms.

We process data to create and operate a Patient Account, provide requested organisation, translation, communication, document and sharing features, respond to enquiries and feedback, protect accounts and the service, prevent misuse, maintain necessary records and comply with applicable obligations.

Patient health data are not used for targeted advertising, advertising audiences or behavioural marketing.

The applicable legal basis depends on the purpose and feature. It may include steps requested before entering into a contract, performance of the service contract, compliance with legal obligations, legitimate interests in operating and securing the service, or consent where the law and the feature require it.

Acknowledging this Privacy Policy is not consent to all processing. Any consent required for a specific optional purpose, including marketing or an optional feature, is requested and recorded separately and can be withdrawn without affecting earlier lawful processing.

Health data receive additional protection. Galenio processes them only for identified Patient features and under the applicable condition for special-category data. The precise condition, required notices and any separate consent are configured for the relevant processing activity rather than assumed from acceptance of the Terms or acknowledgment of this policy.

A Patient Account is a long-term account. Account, profile, chat, form and document records are not automatically deleted after 24 hours and may remain available while needed for the account and service purpose, subject to the retention rules below and applicable law.

A temporary invitation to a provider session is separate from a Patient Account. An invitation is normally limited by its configured expiry and use count; expiry of the invitation does not itself delete the related chat, messages, answers or uploaded files.

You choose which available profile categories and documents to share with a healthcare provider. The platform stores the selected permissions and may create a random, limited-use invitation. Review the recipient and scope before sharing; expiry of an invitation does not erase the underlying records.

A healthcare provider remains responsible for their own professional assessment and official medical records.

Translations may be generated automatically using AI or machine translation. Automated translations may contain errors. Important medical information should be verified with a healthcare professional or qualified interpreter.

Translation and speech-processing requests are routed through api.galenio.app and processed within Galenio's Google Cloud environment. Only the content and technical metadata required for the requested function should be sent. Galenio may temporarily cache translation results in its own infrastructure to provide the feature efficiently.

We use providers only where needed to operate the relevant feature. The public website is hosted on Vercel and its contact and feedback forms are submitted to Formspree. The application uses Galenio-controlled database, cache and object-storage infrastructure; SendGrid for service email; Axiom where external log monitoring is enabled; Google Analytics and Plausible Analytics in the Doctor interface used for provider sessions; and api.galenio.app in Google Cloud for translation and speech processing.

Providers acting as processors are required to follow documented instructions and appropriate confidentiality, security and data-protection safeguards.

Some service providers may process data outside the European Economic Area. Where this occurs, we use an applicable transfer mechanism and supplementary safeguards as required. The current provider register records the relevant service, region and transfer mechanism.

Retention is set by data category and purpose, not by one global period. Registered account, profile, medication, insurance, chat, form and document records currently have no universal automatic expiry. A limited legacy cleanup removes specified legacy message and temporary identification data after approximately 24 hours, but this does not apply to all Patient data. Translation-cache entries in Galenio infrastructure may remain for up to 14 days. Password-reset tokens expire after one hour, authentication tokens normally after one day, and a sharing invitation normally after 24 hours or its permitted use.

Traffic, activity, application, security, backup, support and public-form data follow their applicable operational or contractual schedules; where a fixed production period has not yet been configured, the data remain until deletion or another applicable operational limit. Data may be retained longer where necessary for a legal obligation or the establishment, exercise or defence of legal claims.

We use technical and organisational safeguards appropriate to the risk, including encrypted transport, authentication, role and permission controls, generated storage keys and security logging. Application traffic records may include IP address, endpoint, method, user identifier, error information and duration. Users should not put unnecessary sensitive information in free-text support or feedback fields.

We do not describe the service as end-to-end encrypted unless the complete data flow and key architecture have been technically verified.

Subject to applicable law, you may request access, rectification, erasure, restriction or portability of your personal data, object to certain processing, and withdraw consent where processing is based on consent. You may also lodge a complaint with the Czech Data Protection Authority (Úřad pro ochranu osobních údajů).

The application does not currently provide a complete self-service Privacy & Data centre. Requests can be made by contacting tomaskroupa@galenio.app; we may need to verify your identity and the relevant controller relationship before acting.

The application does not currently provide a complete self-service account-deletion flow. You may request account or personal-data deletion at tomaskroupa@galenio.app. After identity and controller-role verification, the request is assessed under applicable law and must be applied to the relevant active database records, uploaded objects, permissions, sessions and caches; backups follow their separate lifecycle.

Deleting a document record or expiring a sharing link is not represented as deletion of every related storage object or log. Data that must be retained for security or legal reasons are restricted to that purpose and period.

The public website currently contains no analytics or marketing trackers and does not set optional advertising or analytics cookies. A consent banner is therefore not displayed. If optional tracking is introduced, it must remain disabled until any required consent is obtained, and this policy and the cookie inventory must be updated first.

A standalone Patient Account is intended for people aged 18 or older. The current registration flow collects date of birth but does not provide automated age verification; a person below that age must not create a standard standalone account. Any guardian-account mode requires separate product and legal implementation.

For privacy questions, rights requests or concerns about Galenio Patient, contact Language Solutions s.r.o. at tomaskroupa@galenio.app or at Nové sady 988/2, Staré Brno, 602 00 Brno, Czech Republic.

We may update this policy when the Patient service, its providers or applicable requirements change. Material changes may be communicated in the application and may require a new acknowledgment depending on their nature. The current version remains available at the canonical Privacy Policy URL.

Version 2.1. Effective from 13 August 2026. Source version 2.1. The English document is the current master version; reviewed translations must use the same source version.