Effective January 1, 2025 · Updated: July 1, 2026 ·aidX AG, Pfäffikon ZH, Switzerland
The entity responsible for data processing within the meaning of the Swiss Federal Act on Data Protection (FADP) and the EU General Data Protection Regulation (GDPR) is:
aidX AG
Bachtelstrasse 57
8330 Pfäffikon ZH
Switzerland
Email: hello@aidx.ch
Phone: +41 (0)44 950 31 31
We only process personal data to the extent that this is necessary for a specific purpose and there is a legal basis for doing so. Processing is carried out in accordance with the principles of lawfulness, proportionality, purpose limitation, and data minimization.
The mentalhealthGPT app mentalhealthGPT app.mentalhealth-gpt.ch) is subject to additional, product-specific privacy notices, which are provided during registration. mentalhealthGPT technically designed according to the zero-knowledge principle. The following paragraphs summarize the key data flows.
Before clinical content is transmitted, a process in the browser identifies personal information (names, locations, dates, and other identifiers) and replaces it with neutral placeholders. Typed and uploaded content is then encrypted on the client side; our servers do not permanently store any unencrypted session content. Directly identifying patient data is not sent to the AI in an identifiable form.
Transcription takes place in Switzerland (Infomaniak). Clinical text analysis is performed exclusively on Google Cloud Vertex AI in data centers located within the EU. Only pseudonymized content is processed. This content is not used to Training . Clinical data is stored in Switzerland. Analysis in the EU takes place exclusively in RAM and without any permanent storage of the processed content.
When you connect a Zoom account, we only access what is necessary to record and transcribe the meetings you start or host. During a live session, we receive the meeting audio stream via Zoom Real-Time Media Streams (RTMS) after the host has started the session and the data sharing notices provided by Zoom have been displayed. This audio stream is processed exclusively in memory, converted to text, and never stored as raw audio — only the encrypted transcript is saved. Your Zoom OAuth tokens are stored in encrypted form, are never sent to the browser, and are immediately revoked and deleted when the connection is terminated. We operate exclusively on meetings that are created, started, or hosted via your own Zoom account. Zoom’s Privacy Policy applies to Zoom’s own data processing.
This privacy policy primarily describes the data processing that takes place when visiting and using the aidx.ch website and when taking out a subscription via the website.
When you visit our website, technical access data is stored (IP address, time stamp, URL accessed, browser type). This data is used exclusively for security and error analysis purposes and is deleted after 30 days.
When you contact us (via form, email, telephone), we process the data you provide in order to respond to your inquiry. Legal basis: contract initiation or legitimate interest (Art. 6(1)(b)/(f) GDPR; Art. 31(2)(a) DSG).
We use Stripe, Inc. (stripe.com), a PCI DSS Level 1 certified payment service provider, to process subscriptions. As part of the checkout and billing process, Stripe processes identification, contact, billing, and payment data in accordance with its own privacy policy (stripe.com/privacy). We receive only the subscription status from Stripe — no complete payment data. The contractual partner for your subscription is aidX AG. Legal basis: Performance of a contract (Art. 6(1)(b) GDPR; Art. 31(2)(a) DSG).
We use Weglot (Weglot SAS, 138 rue Pierre Joigneaux, 92270 Bois-Colombes, France) to provide multilingual support for this website. This may involve processing website content and technical usage and device information to the extent necessary to provide translations. Weglot may use subprocessors outside the EU in the course of providing its services. Further information: weglot.com/privacy. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
Core application data and stored transcripts are stored on infrastructure in Switzerland (Infomaniak). For certain processing steps, we use key sub-processors, each of which is contractually bound to comply with data protection standards and is only involved where they actually receive personal data:
Clinical AI analysis is performed exclusively in memory in data centers within the EU, without any permanent storage of the processed data. Clinical data is stored exclusively in Switzerland. Payment data is processed exclusively by the payment service provider and is not stored on our servers.
Transfers outside Switzerland are made on the basis of appropriate safeguards, in particular standard contractual clauses or recognized adequacy decisions.
We do not use marketing or advertising trackers such as Google Analytics or Meta Pixel. However, technically necessary cookies or similar technologies from integrated services may be used — particularly for multilingual support (Weglot) and session functionality.
According to the DSG and GDPR, you have the following rights:
To exercise your rights, please contact: hello@aidx.ch
You have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) or, if you are resident in the EU, with the competent data protection authority.
We reserve the right to amend this privacy policy as necessary. The current version is available on this page. The date of the last update at the top of the page is always authoritative.