Privacy Policy

What we collect

Questionnaire answers— your trip (cities, dates, times), and sleep & lifestyle habits. Health information (e.g. sleep conditions, relevant medications, pregnancy, or medical conditions) is collected only if you give explicit consentat the health step; if you don’t, we simply don’t collect it.

Account & contact — your email address. Payment — handled by Stripe; we receive a confirmation and limited billing details, never your full card number. Technical — IP address and basic log data from our hosting provider, to run and secure the service.

Why we use it, and our legal basis

To generate and deliver your report — performance of our contract with you. To process your health information — your explicit consent (GDPR Art. 9); you can withdraw it at any time, though without it we can only produce a more limited report. To take payment — contract and legal obligation. To keep the service secure and working — our legitimate interests.

Who we share it with

We don’t sell your data. We use these providers to run the service:

• Supabase — database & account hosting ([OWNER: hosting region, e.g. EU]).
• Anthropic (“Claude”) — generates the written report from your questionnaire answers, including any health information you consented to share. Anthropic processes data in the United States.
• Stripe — payment processing (merchant of record via Stripe Link).
• Resend — sends your report to you by email.
• Vercel — website hosting and content delivery.
• Google — only if you choose “Sign in with Google” (your email and basic profile).

International transfers

Some providers (notably Anthropic, in the US) process data outside Switzerland and the EEA. Where they do, the transfer is covered by appropriate safeguards such as the EU Standard Contractual Clauses. [OWNER/lawyer: confirm the transfer mechanism for each processor.]

How long we keep it

[OWNER: retention periods — e.g. submissions & reports kept for X months; account data while your account is active; payment records for the period required by law.]

Your rights

You can request access to, correction, deletion, or a copy of your data, restrict or object to processing, and withdraw consent at any time. To exercise any right, email support@arrivesharp.ch. You may also complain to a data protection authority — in Switzerland the FDPIC, or [OWNER: your EU lead supervisory authority].

Cookies

We use only strictly necessary cookies to keep you signed in. We do not use advertising or analytics cookies, so no cookie-consent banner is required. If that changes, we’ll update this notice and ask for your consent first.

Changes

We may update this notice; the “last updated” date above shows the current version.