Privacy Policy

1. Data Controller

The controller responsible for data processing under the Swiss Data Protection Act (DSG) and the EU General Data Protection Regulation (GDPR) is:

DeepGrow AG
Altenrhein (SG), Switzerland
Email: privacy@deepgrow.ai
Website: https://deepgrow.ai

2. Overview of Data Processing

DeepGrow is a workplace mental fitness app. We only process personal data to the extent necessary to provide our services. Protecting your data is our highest priority.

This Privacy Policy applies to the use of our website (b2b.deepgrow.ai) and our mobile application.

3. Data We Collect

3.1 Website Visits

When you access our website, the following data is automatically collected:

• IP address (anonymized)

• Date and time of access

• Pages visited

• Browser type and version

• Operating system

3.2 Contact Inquiries

When you contact us via the contact form or email, we process:

• First and last name

• Email address

• Company (if provided)

• Content of your message

3.3 App Usage

When using the DeepGrow app, we process:

• Registration data (email, name)

• Usage data (completed sessions, time of use)

• Self-assessments (sleep quality, stress level, focus – on a scale of 1-10)

• Feedback and mood data

• Technical device information

4. Purpose and Legal Basis

We process your data for the following purposes:

• Providing and improving our services (contract performance, Art. 6(1)(b) GDPR)

• Personalizing audio sessions through AI (legitimate interest, Art. 6(1)(f) GDPR)

• Creating anonymized, aggregated reports for HR departments (legitimate interest)

• Responding to inquiries (pre-contractual measures)

• Compliance with legal obligations (Art. 6(1)(c) GDPR)

5. Data Sharing

5.1 With Employers

Important: Your employer never receives access to your personal data, individual usage history, or self-assessments. HR departments only receive anonymized and aggregated statistics (e.g., average usage rate of the pilot group, sleep quality trends at group level). Tracing back to individual employees is technically impossible.

5.2 With Third Parties

We only share your data with third parties in the following cases:

• Hosting providers (servers in Switzerland/EU)

• Technical service providers for app delivery

• Authorities, if legally required

We do not sell or commercially share your data with third parties.

6. Artificial Intelligence and Personalization

DeepGrow uses AI technology to personalize audio sessions. The AI analyzes:

• Your chosen focus topics (sleep, stress, focus)

• Your self-assessments and feedback

• Usage patterns and progress

This processing is solely to improve your personal experience. No automated decisions with legal effect are made (Art. 22 GDPR).

7. Data Retention

• App usage data: During active use and up to 12 months after termination

• Contact inquiries: 2 years after completion of communication

• Server logs: 30 days

• Aggregated, anonymized data: Indefinitely (no personal reference)

8. Your Rights

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)

• Right to rectification (Art. 16 GDPR)

• Right to erasure (Art. 17 GDPR)

• Right to restriction of processing (Art. 18 GDPR)

• Right to data portability (Art. 20 GDPR)

• Right to object (Art. 21 GDPR)

To exercise your rights, contact us at: privacy@deepgrow.ai

9. Data Security

We implement comprehensive technical and organizational measures to protect your data:

• SSL/TLS encryption for all data transfers

• Encrypted storage of sensitive data

• Regular security audits

• Access restrictions based on need-to-know principle

• Server location in Switzerland or EEA

10. Cookies and Tracking

Our website uses:

• Technically necessary cookies (for website functionality)

• Analytics cookies (only with your consent)

You can adjust your cookie settings at any time via the cookie banner. Technically necessary cookies cannot be disabled.

11. International Data Transfers

Your data is primarily processed in Switzerland and the European Economic Area (EEA). If transfer to third countries becomes necessary, we ensure an adequate level of data protection through appropriate safeguards (e.g., Standard Contractual Clauses).

12. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority:

• Switzerland: Federal Data Protection and Information Commissioner (FDPIC)

• EU: Competent data protection authority in your country of residence

13. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy as needed. The current version is always available on our website. In case of material changes, we will notify you via email or app notification.

14. Contact

For questions about data protection, please contact us at:

Email: privacy@deepgrow.ai
DeepGrow AG
Altenrhein (SG), Switzerland