Privacy Policy Reducept App

1. Who are we?

2. What data do we process?

When using the Reducept App, we process the following data:

• Account data: name, email address, password, subscription information.
• Payment data: depending on the chosen payment method via Apple, Google, or directly via Reducept (e.g., iDEAL, credit card).
• Usage data: progress in the App, session duration, exercises that have been completed.
• Technical data: device type, operating system, IP address.
• Health-related information: only to the extent that the user enters this themselves in the App (e.g., pain scores or diary notes).

3. For what purposes do we use your data?

We process your data for the following purposes:

• Granting access to and enabling use of the App.
• Processing payments and subscriptions.
• Improving the App and user experience (statistics, analyses).
• Customer service and support.
• Compliance with legal obligations.

4. Legal basis for processing

We process personal data on the basis of:

• Performance of the agreement (use of the App).
• User consent (when entering health data).
• Legal obligation (for example, fiscal retention obligation).
• Legitimate interest (such as security and improvement of the App).

5. Sharing data with third parties

• Apple and Google: when paying via App Store or Google Play, payment data is processed by Apple/Google.
• Payment service providers: when paying directly via the Reducept website.
• IT service providers: hosting, maintenance, and support of the App.
• Legal authorities: only if this is required by law or regulation.

We never sell your data to third parties.

6. Retention period

• Account data: as long as you have an account and at most 12 months after termination.
• Payment data: in accordance with fiscal retention obligation (7 years).
• Health data: at most 12 months after termination of the account, unless you request deletion earlier.

7. Security

Reducept takes the protection of your personal data very seriously and takes appropriate technical and organizational measures to prevent misuse, loss, unauthorized access, unwanted disclosure, and unauthorized modification.

In doing so, Reducept applies internationally recognized standards for information security:

• Reducept is ISO 27001 certified (information security).
• In addition, Reducept meets the requirements of NEN 7510, the Dutch standard for information security in healthcare.

Examples of measures are:

• encrypted storage and transmission of data (encryption),
• access restrictions to systems and data (only authorized personnel),
• logging and monitoring of use,
• periodic penetration tests and security audits,
• training of employees in privacy and information security.

If you have the idea that your data is not properly secured or there are indications of misuse, please contact us immediately via info@reducept.com.

8. Your rights

You have the right to:

• Access your data.
• Request correction or deletion.
• Request restriction of processing.
• Withdraw your consent.
• Request data portability.
• File a complaint with the Data Protection Authority.

You can submit a request via info@reducept.com.

9. Minors

The App is intended for adults. If you are younger than 16 years, consent from a parent or guardian is required.

10. Changes

Reducept may adjust this privacy policy. The most current version is always available via www.reducept.com or in the App.