Privacy Policy
This English translation is provided for convenience only. The German version is the legally binding one.
Protecting your data is very important to us. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). This policy applies to the sentiga app and the website sentiga.ai.
1. Controller
GAIA AG, Hans-Henny-Jahnn-Weg 53, 22085 Hamburg, Germany. Contact for data protection matters: privacy@gaia-group.com. Full provider details can be found in the imprint.
2. General data when visiting the site
When you visit the website or use the app interfaces, technically necessary data is processed (including IP address, date/time, requested resource, browser/device information). This data is used to deliver the service and ensure its stability and security, and is only stored briefly in server logs.
3. Account and registration
An account is required to use the app. Registration and sign-in are handled by our authentication provider using an e-mail address, a password, and a display name. We use a double-opt-in procedure (one-time code via e-mail) to confirm your e-mail address; a "forgot password" process is available. Legal basis: Art. 6(1)(b) GDPR (terms of use / contract).
4. Chat input and AI
sentiga is an interactive, AI-powered tool. Your chat input is processed by machines to generate contextual responses. sentiga is not a medical device; please do not enter sensitive personal data (e.g. full name, address, contact details) into the chat field. Your chat input is not used to train the AI models we use.
5. Diary
When you use the diary feature, we process the content you voluntarily provide: texts, photos, audio recordings, optional location details, and mood/emotion entries. This content serves your personal reflection only. Legal basis: your consent (Art. 6(1)(a) GDPR).
6. Health data (optional)
At your explicit request, sentiga can read health and fitness data from Apple Health or Health Connect (e.g. steps, sleep, heart rate, heart rate variability) to personalize your experience. This constitutes special categories of personal data (Art. 9 GDPR). Processing takes place only with your explicit consent (Art. 9(2)(a) GDPR), which you can withdraw at any time.
7. Push notifications
If you allow notifications, we process a device token to send you reminders and notices. You can disable notifications at any time in your device's system settings.
8. Recipients / processors
To provide the service, we use carefully selected service providers as processors who act only on our instructions and are contractually bound to confidentiality:
- authentication and account management (e-mail, display name, password)
- hosting and database (data centers in the EU/Frankfurt)
- push notifications and pseudonymous usage and crash analytics (Google Firebase)
- service providers for AI-powered chat processing
Additionally on the website sentiga.ai:
- a CRM service for managing Early Access sign-ups
- a spam/bot protection service (Cloudflare Turnstile)
- consent-based statistics and marketing services (see "Cookies & tracking")
9. Transfers to third countries
Individual service providers (in particular authentication, Firebase, and possibly AI processing) may process data outside the EU/EEA. In these cases we ensure an adequate level of data protection through appropriate safeguards (EU Standard Contractual Clauses or an adequacy decision / EU-US Data Privacy Framework).
10. Cookies & tracking
The app does not use advertising cookies. On the website sentiga.ai, optional statistics and marketing cookies are set only with your consent (consent banner); technically necessary functions run without consent. You can withdraw your consent at any time via the privacy settings.
11. Early Access sign-up on the website
When you sign up for Early Access, we process the data you provide (first name, e-mail address) to include you in the Early Access process and send you the next steps. The data is transferred to our CRM provider (HubSpot). Legal basis: Art. 6(1)(a)/(b) GDPR.
12. Retention period
We store personal data only for as long as necessary for the stated purposes or due to statutory retention obligations. When you delete your account, your personal app data is deleted; for details see delete account.
13. No automated individual decision-making
Although sentiga uses AI, there is no solely automated decision-making with legal effect or comparably significant impact (including profiling).
14. Your rights
You have the rights to access, rectification, erasure, restriction of processing, data portability, and objection. You can withdraw any consent you have given at any time with effect for the future. Contact privacy@gaia-group.com. You also have the right to lodge a complaint with a data protection supervisory authority. Deleting your app account: delete account.