At emmunity, protecting your health data is our first priority. This policy explains what data we process, why, and the rights you have.
Data controller
MYD Advisory SRL (BE 1021.410.394), operating under the emmunity brand.
For any question about your data: info@emmunity.app.
Data we process
Account data: first name, email address, language.
Health data: vaccines, dates, doses, statuses, and the health profile (e.g. pregnancy, conditions, allergies) you choose to provide. This is sensitive data (special category under Art. 9 GDPR).
Technical data: device information and logs strictly necessary for the service to work and stay secure.
Audience measurement: we use a privacy-friendly analytics tool (PostHog, hosted in the EU) without cookies or persistent identifiers. Your browser keeps a few functional preferences locally (chosen language, waitlist confirmation); they never leave your device.
Legal basis
Your health data is processed on the basis of your explicit consent (Art. 9.2.a GDPR), which you can withdraw at any time.
Account and technical data are processed to perform the contract and for our legitimate interest in securing the service.
Purposes
To centralise your vaccination record, send you reminders, prepare your trips and offer recommendations tailored to your profile. We never sell your data and never use it for advertising.
Retention and hosting
Your data is hosted within the European Union (data centre located in Frankfurt).
It is encrypted in transit (TLS) and at rest (AES-256). We keep it while your account is active, then delete it after closure (see “Account deletion”).
Sharing
Your information is shared with a health professional, relative or family member only if you explicitly allow it.
Our technical processors (hosting, notifications) are bound by GDPR-compliant agreements and act only on our instructions.
Your rights
You have the rights of access, rectification, erasure, restriction, portability and objection, as well as the right to withdraw consent at any time.
To exercise them: info@emmunity.app. You may also lodge a complaint with the Belgian Data Protection Authority (Rue de la Presse 35, 1000 Brussels).
Account deletion
You can delete your account and all your data directly in the app, or request it via our “Account deletion” page.
Updates
We may update this policy; any material change will be notified to you in the app.