Privacy policy

Version 2026-10 · in accordance with the Swiss Federal Act on Data Protection (FADP)

Passages in square brackets must be completed by the operator before going live. In case of discrepancy, the French version prevails.

1. Who is responsible for your data?

Satio is operated by [company name], [address], [postcode, town], Switzerland. Data protection contact: [e-mail address].

2. What data do we process?

• Account: name, e-mail address, password (never stored in plain text, only a hash), role.
• Health data (patients): weight, waist size, side effects, treatment and doses taken, dose schedule, meals, goals, foods avoided, type of diet and preferences chosen for the personal menu, generated menu.
• Organisation: contents of your fridge and cupboards, shopping lists, reminders.
• Billing (if you buy requests): orders, invoices with name, address, amount and payment reference.
• Contact details you choose to enter (phone, address…).
• Messages exchanged between patient and doctor.
• Technical: session cookie required to stay signed in, error logs. No advertising or analytics cookies.

3. Why?

Only to provide Satio to you: helping you eat enough protein, follow your treatment and, if you wish, share this follow-up with your doctor. Health data is processed on the basis of your explicit consent, given at sign-up and withdrawable at any time by deleting your account.

Your data is never sold, never used for advertising and never used to train artificial intelligence models.

4. How is it protected?

• Personal and health data is encrypted in the database (AES-256): even if the database were accessed, it would remain unreadable.
• Encrypted connection (HTTPS), two-factor authentication available for every account.
• Hosted in Switzerland by Infomaniak.

5. Who can see it?

• Your doctor, only if you chose them or gave them a sharing code. You can remove this access at any time. They only see your contact details if you share them, field by field.
• Satio's administrator sees your name, e-mail address and role to manage accounts, never your health data.
• The AI assistant (Infomaniak, Switzerland), only if you turn it on: it receives anonymised data (no name, no e-mail). It is off by default. To create your personal menu, it receives only your protein goal, the foods you avoid, the type of diet you chose (vegetarian, lactose-free…) and your written preferences; do not enter anything there that could identify you.
• Notifications go through your phone's services (Google, Apple, Mozilla) with no content at all: your phone then reads the reminder directly from Satio.
• E-mails (confirmation, password, reminders if you choose them) are sent through Infomaniak's mail service.

6. How long?

As long as your account exists. When you delete it, all your data is immediately removed from the database. Backups are overwritten within [30] days at the latest. The only exception: invoices (number, amount, billing name and address, with no health data) are kept for 10 years, as required by law (art. 958f of the Swiss Code of Obligations).

7. Your rights

From the Security and data page of your account, you can at any time:

• download all your data (right of access and portability);
• correct it in your profile;
• delete your account and all your data.

For any other request, write to [e-mail address]. You may also contact the Federal Data Protection and Information Commissioner (FDPIC).

8. Changes

If this policy changes significantly, Satio will ask for your consent again the next time you sign in.