Valid from January 1, 2025 · Updated: March 11, 2026 ·aidX AG, Pfäffikon ZH, Switzerland
The entity responsible for data processing within the meaning of the Swiss Federal Act on Data Protection (FADP) and the EU General Data Protection Regulation (GDPR) is:
aidX AG
Bachtelstrasse 57
8330 Pfäffikon ZH
Switzerland
Email: hello@aidx.ch
Phone: +41 (0)44 950 31 31
We only process personal data to the extent that this is necessary for a specific purpose and there is a legal basis for doing so. Processing is carried out in accordance with the principles of lawfulness, proportionality, purpose limitation, and data minimization.
The mentalhealthGPT app mentalhealthGPT app.mentalhealth-gpt.ch) is subject to separate privacy notices, which are provided during registration. mentalhealthGPT technically designed according to the zero-knowledge principle; details are explained in the product-specific privacy notices.
This privacy policy primarily describes the data processing that takes place when visiting and using the aidx.ch website and when taking out a subscription via the website.
When you visit our website, technical access data is stored (IP address, time stamp, URL accessed, browser type). This data is used exclusively for security and error analysis purposes and is deleted after 30 days.
When you contact us (via form, email, telephone), we process the data you provide in order to respond to your inquiry. Legal basis: contract initiation or legitimate interest (Art. 6(1)(b)/(f) GDPR; Art. 31(2)(a) DSG).
We use Stripe, Inc. (stripe.com), a PCI DSS Level 1 certified payment service provider, to process subscriptions. As part of the checkout and billing process, Stripe processes identification, contact, billing, and payment data in accordance with its own privacy policy (stripe.com/privacy). We receive only the subscription status from Stripe—no complete payment data. The contractual partner for your subscription is aidX AG. Legal basis: Contract performance (Art. 6(1)(b) GDPR; Art. 31(2)(a) DSG).
Before clinical content is transmitted, personal information (names, locations, dates, and other identifiers) is automatically detected in the browser and replaced with neutral placeholders. This ensures that client data is never sent to our servers or the AI in an identifiable form. All clinical content is then encrypted on the client side—our servers have no access to the plain text of your sessions.
We use Weglot (Weglot SAS, 138 rue Pierre Joigneaux, 92270 Bois-Colombes, France) to provide multilingual support for this website. This may involve processing website content and technical usage and device information to the extent necessary to provide translations. Weglot may use subprocessors outside the EU in the course of providing its services. Further information: weglot.com/privacy. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
Our core application data is generally stored on infrastructure located in Switzerland. We use external service providers for certain functions and services—in particular for payment processing and website translation (Weglot). This may result in data processing outside of Switzerland or the EEA. Such transfers are carried out on the basis of the applicable safeguards and protection mechanisms, in particular standard contractual clauses or recognized adequacy decisions. Payment data is processed exclusively by the payment service provider and is not stored on our servers. Subcontractors are carefully selected and contractually bound to comply with data protection standards.
We do not use marketing or advertising trackers such as Google Analytics or Meta Pixel. However, technically necessary cookies or comparable technologies from integrated services may be used—in particular for multilingualism (Weglot) and session functionality.
According to the DSG and GDPR, you have the following rights:
To exercise your rights, please contact: hello@aidx.ch
You have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) or, if you are resident in the EU, with the competent data protection authority.
We reserve the right to amend this privacy policy as necessary. The current version is available on this page. The date of the last update at the top of the page is always authoritative.