Privacy Policy

Last modified: October 2, 2026

Aidlab, a brand operated under Aidmed Sp. z o.o. (“Aidmed”), is committed to protecting the privacy of individuals who visit the Aidlab website (“Visitors”) and individuals associated with organizations who register to use the Products as defined below (“Customers”). This Privacy Policy (the “Statement”) describes Aidlab's privacy practices in relation to the use of the Aidlab website (www.aidlab.com), other Aidlab websites made available from time to time, and applications and services offered by Aidlab (collectively, the “Products”) as logged-in users, mobile app users (“Users”), and individuals using Products without logging in (“Visitors”). The privacy policy pertaining specifically to products directly associated with Aidmed ("Aidmed Cloud", "Aidmed One", "Aidmed Health") can be found at www.aidmed.ai.

Guiding Principles for Data Processing

In processing Users' and Visitors' data, we are guided by the following principles:

Who we are

Aidmed Sp. z o.o., Oliwska 85, 80-542 Gdańsk, Poland, KRS: 0000721886, NIP: 5833290208, REGON: 369656602, e-mail address: contact@aidlab.com ("Aidmed"), which operates the Aidlab brand, is the controller of Users' and Visitors' personal data obtained in connection with Users' or Visitors' use of the Website or services provided through the Website.

What personal information do we collect from the people who visit our websites, use our devices, or interact with our apps?

When do we collect information?

We collect information from you when you register on our site or app, connect our devices, place an order, fill out a form, or enter information on our platforms. Information is also collected automatically when using our devices or apps, including health and wellness data, device status data, and activity logs.

How do we use your information?

We use the information we collect from you in various ways. This can be when you register, make a purchase, sign up for our newsletter, respond to a survey or marketing communication, surf the website, use our apps, or connect our devices. The ways we use this information include:

How do we protect your information?

Your data is encrypted in transit (HTTPS/TLS) and at rest, and only a limited number of people with a need to know can access it. They are bound by confidentiality. The code behind our app and platform is checked automatically, weekly and on every change, for known vulnerable dependencies and leaked secrets. Our Security page describes hosting, encryption and access control in more detail.

Payments are processed by Stripe. We never see or store your full card details.

Aidlab accepts good-faith security reports at security@aidlab.com. Reports should include the affected product, URL, endpoint, app version, or device context, reproduction steps, and expected impact. Aidlab also publishes a machine-readable security contact at /.well-known/security.txt.

Do we use cookies?

Yes. Cookies are small files that a site or its service provider transfers to your computer's hard drive through your Web browser (if you allow) that enables the site's or service provider's systems to recognize your browser and capture and remember certain information. For instance, we use cookies to help us remember and process the items in your shopping cart. They are also used to help us understand your preferences based on previous or current site activity, which enables us to provide you with improved services. We also use cookies to help us compile aggregate data about site traffic and site interaction so that we can offer better site experiences and tools in the future.

We use cookies to:

You can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies. You do this through your browser settings. Since every browser is a little different, look at your browser's Help Menu to learn the correct way to modify your cookies.

If you turn cookies off, some features may not function properly.

Website analytics, advertising, communications, and similar technologies

On our website, we and the providers listed below use cookies, pixels, scripts, and similar technologies. Depending on the service, these technologies may process your IP address, a pseudonymous identifier, browser and device details, approximate location, referring page, page URL, language, campaign parameters, and actions taken on the website, such as viewing a product, adding it to the cart, starting checkout, or completing a purchase. We do not intentionally send health measurements, medical records, payment card details, or the contents of chat messages to advertising or website analytics providers.

These providers may process data outside the EEA, including in the United States. Where required, such transfers are protected by an applicable adequacy decision, participation in the EU-U.S. Data Privacy Framework, Standard Contractual Clauses, or another transfer mechanism recognized by data-protection law. Provider retention periods and independent processing are governed by their policies and our account settings. Aidmed keeps data under its control only for as long as needed for the purposes described in this Statement or to meet legal obligations.

Third-party disclosure

Your personal data may be disclosed to third parties, including but not limited to IT service and system providers; which are used to provide the services, to payment processors for our services in order to process and fulfill payments for the services; to service providers necessary to send transactional and product information via email or SMS to the extent that disclosure is necessary to automate, simplify and analyze these processes; third party accounting and bookkeeping services to the extent that disclosure is necessary to provide these services to us; legal advisers and consultants to the extent that disclosure is necessary for the use of their services; and governmental, law enforcement and judicial authorities where required by law. In each case, we will endeavour to ensure that the representatives of the aforementioned authorities request disclosure of the data directly from you. If we are required to disclose your information, we will promptly notify you and provide you with a copy of the request, where the law permits us to do so. If you join an organisation's team in Aidlab Teams, that organisation sees the data you share with the team.

The subprocessors that process personal data for the Aidlab app, my.aidlab.com and Aidlab Teams, with their purpose and location, are listed on our Security page.

We store account data, measurements and files in the EU. Some of our providers are based outside the European Economic Area (EEA), mainly in the United States. We transfer data to them only under an adequacy decision (including the EU-U.S. Data Privacy Framework) or the EU Standard Contractual Clauses.

We will never sell the Personal Data you provide to us to any third party.

Third-party links

Occasionally, at our discretion, we may include or offer third-party products or services on our website. These third-party sites have separate and independent privacy policies. We therefore have no responsibility or liability for the content and activities of these linked sites. Nonetheless, we seek to protect the integrity of our site and welcome any feedback about these sites.

How does our site handle Do Not Track signals?

Our website does not currently respond to the Do Not Track (DNT) browser signal. Enabling DNT therefore does not by itself prevent the website from loading analytics or advertising technologies. You can limit cookies and similar technologies through your browser settings and the privacy controls offered by the providers listed above.

Do our site and apps allow third-party behavioral tracking?

Yes.

Children

We do not knowingly collect personal data from children under 16 without the consent of a parent or guardian.

Data breaches

Your rights

You have the right to access your data, correct it, delete it, restrict its processing, receive it in a portable format, and object to processing based on our legitimate interests. Where we rely on your consent, you can withdraw it at any time; this doesn't affect processing done before. To exercise any of these rights, write to contact@aidlab.com.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland).

How long do we keep your personal data

We keep your account data for as long as you have an account. Data we process based on our legitimate interests is kept until you object or we no longer need it. Specific periods:

We may keep data longer where needed to establish, pursue or defend legal claims.

Deleting the data

You can delete your account yourself in the app if:

You can request account deletion by opening Settings and selecting "Delete account". When the request is completed, access to the account is revoked and direct identifiers in the account record are removed or replaced so that the account can no longer be used to identify you directly. Some records may be retained in de-identified form where this is necessary to meet legal obligations, establish or defend claims, or maintain the integrity of the service. The retention periods described above continue to apply.

You can also ask us to delete your data at any time by writing to contact@aidlab.com.