Privacy Policy

Last Updated: April 28, 2026 (v1.0)

1. Introduction and Legal Basis

The protection of your data is key to us. We process your personal data in accordance with the GDPR. The operator of the Tenzio application and the person responsible for processing your data is Roman Padych, located at Podzávoz 423, 022 01 Čadca, Slovakia, ID: 53880048. The legal basis for processing your health data is your explicit consent granted during registration.

2. Scope of Data

We process identification data (email, name) and a special category – health data (blood pressure, heart rate measurements, body parameters, and notes) that you voluntarily enter.

3. Purpose of Processing

We process data for visualization of measurements in charts, calculation of health statistics, generation of reports, and sending system notifications. The Application does not perform automated individual decision-making or profiling according to Art. 22 GDPR. AI analysis of values serves exclusively as a supportive informational tool; the final assessment of health status and treatment decisions are always made by the user or their doctor.

4. Security and Encryption

We use modern security standards including SSL/TLS encryption in transit and AES-256 data encryption at rest. No one has access to your health data except you (except administrators solely for technical support purposes at your request).

5. Sub-processors

We use only essential partners: Supabase (data storage in the EU region), Google Gemini (Google LLC - AI technology for content generation and analysis), Lemon Squeezy (payment processing and billing), and Resend (sending system emails). No personal user data is shared during the automated article generation process.

6. Sharing with Third Parties

We do not sell or provide your data for marketing purposes. Data is shared only with your doctor, solely based on an access code generated by you.

7. Retention and Deletion

We keep data for the duration of your account existence. After account deletion, all your personal data and measurements are irreversibly removed from our live database and within 30 days from backup systems.

8. Your Rights

You have the right to access, correction, portability, and deletion of data. You can withdraw your consent at any time by deleting your account or requesting our support.

9. Supervision and Contact

If you have questions, contact us at [email protected]. Your data protection rights are guaranteed in accordance with applicable legislation.