Privacy Policy
Last updated: 30 October 2026
Your health data is only used to care for you and support you. It is hosted in France by a certified health data host (HDS). It is never sold, never used for advertising and never shared with your employer or an insurer.
1. Who processes your data
Days of Confidence. Flora Ventures, S.L. ("Days of Confidence", "we"), Calle de la Hiedra, 74, 28109 Alcobendas (Madrid), Spain, tax ID B88362926, is the controller for processing linked to the platform: the website daysofconfidence.com, the ReConnect by Days of Confidence app (the "App"), your Account, ReConnect plans, coaching, care coordination, the symptom quiz, platform fees and the sale of Products.
Your Doctor. Each Doctor who sees you is the controller of the data in your medical file (questionnaire, reports, prescriptions, treatment plan, messages with medical content), under Part 2 of the Terms and Conditions. For this file, Days of Confidence acts as the Doctor's processor: we host it and make it available to you in the App, on the Doctor's instructions.
Contact. For any question or request: privacy@daysofconfidence.com, or by post to the address above.
Related documents. This policy completes the information and consent notice (daysofconfidence.com/pages/consent-notice), which you accept before any health data is processed, and the Terms and Conditions (Part 1 and Part 2).
2. Data we collect
Source | Data |
|---|---|
Browsing the website | IP address, device and browser type, pages visited, cookies (according to your choices) |
Symptom quiz | Quiz answers (health data), email address if you ask for your results |
Welcome call | Name, email, phone, chosen slot, reason for the call |
Account and App | First name, last name, date of birth, email, phone, address, language, login details, plan purchased |
Consents | Your acceptances and consents, with their date and the version of the text accepted |
Medical questionnaire and follow-up | Medical history, symptoms, cycles, current treatments, weight and height, test results you upload, symptom-tracking entries, messages with the team |
Booking and paying for a Consultation | Doctor chosen, time slot, amount, payment status, invoices. Your card details are processed by our payment provider; we never store the full number |
Teleconsultations | Date, Doctor, reports, prescriptions, treatment plan. Video calls are not recorded |
Coaching | Goals, session notes (nutrition, sleep, physical activity, stress) and, if you allow it, the outline of your treatment plan |
Product orders | Delivery address, order history, invoices |
Contacting us | Messages to customer service, complaints, published reviews, newsletter sign-up |
Access through your employer (ReConnect for Employers). If your employer funds your use of the App, we only know that your access is funded by them. Your employer never receives individual data: only anonymised statistics, never calculated on a group of fewer than 30 people.
3. Why we use it and on what legal basis
Purpose | Controller | Legal basis (GDPR) |
|---|---|---|
Create and manage your Account, provide the App and your ReConnect plan | Days of Confidence | Performance of the contract (art. 6.1.b) |
Organise your teleconsultations and pass your questionnaire and documents to your Doctor | Days of Confidence | Performance of the contract (art. 6.1.b) and explicit consent for health data (art. 9.2.a) |
Care for you: diagnosis, reports, prescriptions, treatment plan | Your Doctor | Performance of the contract (Part 2) and explicit consent (art. 9.2.a) |
Symptom tracking, messaging, care coordination, coaching | Days of Confidence | Performance of the contract and explicit consent (art. 9.2.a) |
Collect and invoice the Fees on behalf of your Doctor | Days of Confidence, for the Doctor | Performance of the contract (art. 6.1.b) and legal obligation (art. 6.1.c) |
Symptom quiz and sending results | Days of Confidence | Explicit consent (art. 9.2.a) |
Product orders, delivery, customer service | Days of Confidence | Performance of the contract (art. 6.1.b) |
Invoicing, accounting, contract records, proof of your consents | Days of Confidence | Legal obligation (art. 6.1.c and 7.1) |
Newsletter and offers | Days of Confidence | Consent (art. 6.1.a), which you can withdraw at any time |
Audience measurement on the website and in the App | Days of Confidence | Consent (art. 6.1.a) |
Service security, fraud prevention | Days of Confidence | Legitimate interest (art. 6.1.f) |
Anonymised statistics for employer clients of ReConnect for Employers | Days of Confidence | Legitimate interest; only anonymised data leaves our systems |
Handling complaints and defending our rights | Days of Confidence | Legitimate interest (art. 6.1.f) and, for health data, art. 9.2.f |
No decision about you is made by purely automated means. The App calculates no diagnosis or treatment recommendation: only your Doctor interprets your data.
4. Your health data
Consent. Before any health data is processed, we ask for your explicit consent through a separate tick box, after showing you the information and consent notice. You can withdraw it at any time in the App (Settings > Privacy) or by writing to us. Withdrawal does not affect processing already carried out. It prevents us from providing the services that depend on it. It does not lift the duty to keep your medical file, which rests with your Doctor.
Certified hosting. Your health data is hosted in France by Amazon Web Services (AWS), a certified Health Data Host (HDS) under article L.1111-8 of the French Public Health Code. You can object to this hosting for a legitimate reason by writing to privacy@daysofconfidence.com. As HDS hosting is a legal requirement, we can then no longer provide the services that rely on your health data.
Who can see it.
Your Doctor: your whole file, under medical confidentiality.
Another Days of Confidence Doctor: only if you change Doctor or a replacement is needed, and after you authorise it in the App.
Your Care Coordinator: what is needed to organise your appointments and what you write to them in the messaging. They cannot see reports or prescriptions.
Your Health Coach: your coaching notes and, only if you switch it on, the outline of your treatment plan.
Our technical teams and the HDS host's administrators: only for maintenance and security, bound by confidentiality, with logged access.
What we never do. We do not sell your data. We do not use it for advertising. We do not share it with your employer, an insurer or a laboratory.
5. Recipients, providers and transfers
Only people who need your data can access it: the Doctors, the Coach and the Care Coordinator within the limits of section 4, our authorised teams and our providers (processors). Each provider is bound by a contract that complies with article 28 of the GDPR.
Service | Provider | Location and safeguards |
|---|---|---|
Health data hosting | Amazon Web Services (AWS) | France, HDS certified |
Video teleconsultation | Amazon Chime SDK (AWS) | France (AWS Paris region), HDS certified |
Website and online shop | Shopify | Ireland; possible transfers to Canada (adequacy decision) and the United States (Data Privacy Framework or standard contractual clauses) |
Transactional emails | Resend | Servers in the EU (Ireland); US company (Data Privacy Framework or standard contractual clauses) |
Booking the welcome call | Calendly | United States (Data Privacy Framework or standard contractual clauses) |
Symptom quiz | Amazon Web Services (AWS) | France, HDS certified |
Paying for Plans, Products and Consultations | Stripe, PayPal; Klarna for payment in 3 instalments (independent controller) | EU; PCI-DSS certified providers |
Order preparation and delivery | E Logik (Toulouse), carriers | France, EU |
We may also share data with our advisers (lawyers, accountants), who are bound by professional secrecy, or with authorities where the law requires. No provider outside the care teams can access your health data unencrypted, except the HDS host, the teleconsultation tool and the symptom-quiz host, the last for quiz answers only.
Any transfer outside the European Economic Area relies on an adequacy decision or on the European Commission's standard contractual clauses. You can ask us for a copy.
6. How long we keep it
Data | Retention period |
|---|---|
Medical file (questionnaire, reports, prescriptions, treatment plan, messages with medical content) | 20 years after the last Consultation, on behalf of your Doctor |
Symptom tracking | While your Account exists, then added to the medical file if your Doctor used it |
Account, organisational messages, coaching notes | For the relationship, then 3 years after your last activity |
Proof of your consents and acceptances | While your Account exists, then 5 years |
Quiz answers without an Account | 12 months |
Prospects (welcome call, newsletter without purchase) | 3 years after your last contact |
Invoices and accounting records, including Fee invoices issued on behalf of Doctors | 6 years (article 30 of the Spanish Commercial Code) |
Contracts of €120 or more | 10 years |
Cookies and trackers | 13 months maximum; you are asked again after that |
Records of how we handled your rights requests | 1 year after our reply |
When these periods end, data is deleted or irreversibly anonymised. You can download your medical documents at any time, including after your plan ends.
7. Security, rights and practical information
Security. We encrypt data in transit and at rest. Access is individual, limited to what is strictly necessary and logged. App notifications never show health information on the lock screen. We apply a backup and incident-management policy. If a data breach is likely to put you at high risk, we tell you without undue delay.
Your rights. You have the following rights over your data:
access and a copy;
rectification;
erasure, except where the law requires us to keep it (in particular the medical file);
restriction of processing;
portability, in a machine-readable format;
objection to processing based on our legitimate interest and, at any time, to direct marketing;
objection, for a legitimate reason, to your health data being hosted by the HDS host (section 4);
withdrawal of your consent at any time;
instructions on what happens to your data after your death.
How to exercise them. In the App (Settings > Privacy), by writing to privacy@daysofconfidence.com, or directly with your Doctor for your medical file. We reply within one month. We may ask you to prove your identity if there is reasonable doubt. Requests about your medical file are passed to your Doctor, or handled on their behalf.
Complaints. You can complain to the supervisory authority of your choice: the Spanish Agencia Española de Protección de Datos (aepd.es), lead authority for Flora Ventures, S.L., the French CNIL (cnil.fr), or the authority of the EU country where you live.
Cookies and trackers. On the website, non-essential cookies (audience measurement, advertising) are only set with your consent, through the banner shown on your first visit; you can change your choices at any time from the "Cookie settings" link at the bottom of the page. In the App, non-essential trackers are only switched on with your consent, which you can change in Settings > Privacy. No health data is sent to any audience-measurement tool.
Minors. Our services are for adults only. We do not knowingly collect data about anyone under 18.
Changes. We may update this policy. The date of the last update is at the top of the page. We tell you about any significant change by email or in the App before it applies.