Privacy policy

01Data Controller

The controller of the personal data collected through the coreod.ch website is COREOD LTD (company number 16185144, 128 City Road, London, EC1V 2NX, United Kingdom).

For any question relating to your data: contact@coreod.ch

01bEstablishment in the European Union and point of contact

This website is published by COREOD LTD (a company incorporated under the laws of England and Wales, company number 16185144, registered office 128 City Road, London EC1V 2NX, United Kingdom), acting as the data controller for the data collected through this website.

For the European Union, COREOD LTD acts through its establishment in the Union, Coreod Consulting (SIREN 750 531 469), based in France. This establishment serves as the point of contact for data subjects residing in the European Union and for supervisory authorities, including the French data protection authority (CNIL).

Data subjects may exercise their rights (access, rectification, erasure, restriction, objection and portability) and raise any question relating to the protection of their data at: privacy@coreod.ch.

Given this establishment in the European Union, COREOD LTD is not required to designate a representative under Article 27 of the GDPR.

02What data we process

The coreod.ch website is a static showcase website. It does not create accounts, does not offer any login form, and does not deploy any audience-measurement tool, advertising tracker or cookie (see the Cookie Policy). Practices specific to the Noaisis application are described in the "Noaisis application" section below. The only personal data we may process are:

• the data you send us voluntarily when you write to us at contact@coreod.ch (your email address, your name if you provide it, and the content of your message), used solely to respond to your request;
• the technical connection data processed automatically by our hosting provider for the sole purpose of the security and proper operation of the website (for example the IP address at the time of the request, in the server logs), which COREOD LTD does not use for tracking purposes nor cross-reference with your identity.

03Contact and enquiry form

The coreod.ch website offers a contact and enquiry form so that you can join the Noaisis waiting list, request a NeurAixplorer demonstration, or reach us about a partnership, a press matter or product information.

Controller. COREOD LTD (company number 16185144, 128 City Road, London, EC1V 2NX, United Kingdom) is the controller of the data collected through this form.

Data collected. Required: your email address. Optional: your first name, last name, company, telephone number and the content of your message, together with the subject you select. We also record the consent you give, the version of the consent text and the date and time of your submission. Please do not enter sensitive personal data in the message field.

Purposes. Your data is used solely to handle your request, to contact you about it and to follow up on our exchange.

Legal bases. Your consent, given by ticking the dedicated box (article 6(1)(a) of the GDPR), and, where your request forms part of a commercial relationship, the performance of pre-contractual measures taken at your request (article 6(1)(b) of the GDPR).

Recipients. Your data is sent to COREOD LTD's internal teams in charge of your request and is processed through our email provider acting as a processor within the meaning of article 28 of the GDPR. The submission is relayed by a serverless function operated in a European Union region. We do not sell or rent your data and pass it on to no third party for commercial or advertising purposes.

Transfer outside the European Union. COREOD LTD is established in the United Kingdom, a country recognised by the European Commission as offering an adequate level of protection (adequacy decision). Where a processor processes data outside the European Union, the transfer is framed by the appropriate safeguards provided for by the GDPR (standard contractual clauses).

Retention. The data submitted through the form is kept for the time needed to handle your request and, where it leads to a relationship, for a maximum of three years from our last contact, then deleted or archived within the limits of the applicable statutory periods.

Rights. You may at any time withdraw your consent and exercise your rights of access, rectification, erasure, restriction, objection and portability by writing to contact@coreod.ch. Withdrawing your consent does not affect the lawfulness of processing carried out before the withdrawal. You may also lodge a complaint with a supervisory authority, in particular the CNIL (France) or the ICO (United Kingdom).

04Legal bases

The processing of your contact message rests on our legitimate interest in responding to your enquiry (article 6(1)(f) of the GDPR), or on the performance of pre-contractual measures where your request forms part of a commercial relationship (article 6(1)(b)). The processing of data submitted through the contact form rests on your consent and, where relevant, on pre-contractual measures (see section 03). The processing of technical connection data rests on our legitimate interest in ensuring the security and availability of the website (article 6(1)(f) of the GDPR).

05Recipients and hosting

The website is hosted by Vercel Inc. (United States), through its European representative Vercel GmbH (Germany), acting as a processor within the meaning of article 28 of the GDPR. On this basis, technical connection data may be processed on infrastructure located outside the European Union. These transfers are framed by the appropriate safeguards provided for by the GDPR (standard contractual clauses of the European Commission).

The website is designed not to call upon any third-party service while you browse: the fonts and all resources are hosted directly with the website. No request is sent to a third-party server as a result of your mere visit.

We do not sell or rent your data. No data is passed on to third parties for commercial or advertising purposes.

06Noaisis application

This policy also covers the Noaisis mobile application. The sections below describe how the application processes data, in addition to the website practices described above.

Within the application, the content you exchange with the assistant is transmitted, in an ephemeral manner, to our technical processors in order to generate a response. We use Anthropic (the conversational model provider) and Tavily (web search). This content is transmitted without any identifier relating to you, and is not stored on Coreod servers.

Anthropic may retain transmitted content for approximately 30 days for security and abuse-prevention purposes, after which it is deleted. Tavily processes web search queries solely to return search results. Neither processor uses your content for advertising, and Coreod does not track you across applications or websites.

Anthropic and Tavily are located in the United States. These transfers are governed by the European Commission's standard contractual clauses.

By default, data from the Apple Health application is read locally on your device. It is never stored by Coreod.

If you give your explicit health consent in the app, a factual summary of your health data (Apple Health) and of your in-app journal (meals, supplements, logged sleep, blood glucose, fasting periods) may be included in your conversations with the assistant. This summary is then transmitted ephemerally to the same technical providers described above (see the Anthropic section), without any identifier linking it to you, and is never stored by Coreod. You can withdraw this consent at any time in the app settings. From that point on, no health data is included in your conversations.

Account. Where the app requires an account (currently the Android version, and the iOS version from a forthcoming release), Coreod collects and stores your email address, used to create and secure your account through a passwordless magic link. The legal basis is the performance of our contract with you (article 6(1)(b) GDPR). Your email is kept for the life of your account. You can delete your account, and the associated data, at any time from within the app or through a dedicated web page.

Abuse prevention. Only where a serious, objectively established abuse is detected, Coreod keeps an encrypted technical record (such as a time-stamped IP address and technical metadata), strictly to protect the service and defend its rights, on the basis of our legitimate interest (article 6(1)(f) GDPR). This record never contains your conversations with the assistant or any health data, its access is restricted and its retention is capped.

The application does not display advertising and does not track you across apps or websites. Apart from the account email described above and the limited abuse-prevention record, it does not collect identifiers, diagnostic data or usage analytics for its own purposes.

07Retention period

Messages received at contact@coreod.ch are kept for as long as is necessary to handle your request, then archived or deleted according to their nature, within the limits of the applicable statutory periods. The hosting provider's technical logs are kept for a limited period, in accordance with its security policy.

08Your rights

In accordance with the GDPR, you have the right of access, rectification, erasure, restriction, objection and portability over your personal data. You may exercise these rights by writing to contact@coreod.ch. You may also lodge a complaint with a supervisory authority, in particular the CNIL (France) or the ICO (United Kingdom).

09Updates

This policy may be updated to reflect changes to the website or to the applicable regulations. The applicable version is the one published on this page.