Privacy Policy
This policy explicitly explains how the AgeVision app may access, collect, use, protect, retain and delete health, wellness, physical activity and wearable data when users enable the relevant features and permissions.
Data controller
The data controller is HCM System SA, Mendrisio, Switzerland. General contact: hello@hcms.ch. Privacy contact: privacy@hcms.ch.
Scope of this policy
This Privacy Policy applies to the AgeVision website and, where expressly indicated, to the AgeVision mobile app and connected digital services. The website does not use a contact form. If you contact us using an email button, we process the information contained in your message and the technical data required for communication. Servers may also record essential technical logs for security, availability and diagnostics.
Health and fitness data: access and collection
When a user uses the AgeVision app and grants the required permissions, AgeVision may access and collect health and fitness data from compatible wearables, sensors, device health services and information entered directly by the user. Access only takes place after a user choice or permission and is limited to the categories required for user-facing app features.
Depending on the devices and features actually enabled, this information may include, for example: heart rate, heart-rate variability (HRV), peripheral oxygen saturation (SpO₂), skin temperature, sleep duration and stages, steps, activity and movement, distance and calories, recovery or stress indicators, blood pressure when made available by a compatible source or entered manually, nutrition and hydration information, sport and performance data and other wellness measurements made available by the user or compatible devices.
Android permissions and device health services
AgeVision only requests permissions required for the features the user chooses to use. If a feature uses Android health, fitness or body-sensor permissions, or a system service such as Health Connect, access only occurs after explicit user permission and within the selected data scope.
Users can view, change or revoke these permissions in Android settings and, when used, in Health Connect settings. Revoking a permission prevents future access to the relevant data but does not automatically erase data already synchronised with AgeVision; deletion is handled as described below.
How health and fitness data are used
Health and fitness data are used only to provide the AgeVision features requested by the user, for example to synchronise information from compatible devices, display current values and trends, build informational dashboards and summaries, support wellness, longevity and sport pathways, organise the user's pathway and make authorised information available within the AgeVision ecosystem.
AgeVision does not use this information for behavioural advertising, advertising profiling, sale to data brokers or advertising platforms, or for insurance, credit or employment purposes. The information is not used to make diagnoses, predict clinical events or make autonomous therapeutic decisions.
Artificial intelligence and the AI Act
AgeVision does not use artificial intelligence for the management or reprocessing of user data and does not use AI for user interaction. The platform is developed and operated in compliance with the applicable requirements of the AI Act. Any future AI functionality would be assessed, disclosed and governed separately before introduction.
Sharing and access by authorised organisations
We do not sell personal or health data. When a user uses AgeVision through a facility, centre, sports organisation or other professional entity providing the service, relevant data may be made available only to authorised users of that organisation according to roles, permissions and the purpose of the service.
Technical providers act on behalf of HCM System SA under contractual, security and confidentiality obligations. Health data are not shared with third parties for purposes unrelated to the service. Where applicable law or a feature requires explicit consent before sharing, consent is requested before the sharing takes place.
Security, transmission and data residency
AgeVision uses technical and organisational measures designed to protect data against unauthorised access, loss, misuse or disclosure. Communications are protected using encrypted protocols such as HTTPS/TLS, and access to the platform is managed through authentication and role-based permissions.
The AgeVision website and ecosystem are designed around Swiss infrastructure and operations. Core platform services, storage and data processing are organised on Swiss infrastructure under the governance of HCM System SA.
Retention of health and fitness data
Data are retained for as long as necessary to provide the requested service, maintain pathway continuity and meet applicable obligations. The actual retention period depends on the type of account, the relationship with the organisation providing the service and any applicable legal or regulatory requirements.
Managing, revoking and deleting data
Users can stop future access to data by revoking device permissions. To request access, rectification, export, deletion or restriction of personal and health data associated with an AgeVision account, contact privacy@hcms.ch.
When an account is deleted or a valid deletion request is accepted, associated data are deleted or irreversibly anonymised, except where retention is required for legal, security, documentation or other applicable obligations. Account deactivation or permission revocation does not necessarily result in automatic deletion of data already lawfully retained.
Website data, purposes and legal bases
For the website, data are used to answer enquiries, manage professional or commercial relationships, protect the service and comply with legal obligations. Processing follows Swiss data protection law and, where applicable, the GDPR.
AgeVision Radio
The AgeVision Radio player is loaded from radio.agevision.swiss only when the user chooses to open it. The radio service has its own legal information.
Data subject rights
Subject to applicable law, users may request information about processing, access, rectification, deletion, restriction, objection or portability where applicable. Requests can be sent to privacy@hcms.ch.
Updates to this Privacy Policy
We may update this policy when features, integrations, legal requirements or processing practices change. The last-updated date shown above identifies the current version.