Privacy Policy

1. Introduction

Nova Ventures GmbH ("we," "us," or "our,") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our applications Capy (the "iPad App"), Nexus (the "Web App") or visit our internet locations at the domain https://novaventures.ch including all subdomains (the "Websites") (for example https://docs.novaventures.ch, https://api.novaventures.ch and alike). It also outlines your rights under applicable data protection laws, including the General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP).

By using our iPadApp, Web app and or Websites, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Data We Collect

2.1 iPad App

Capy application captures user's self-reported emotional feedback, session metadata (date and time of use, selected user interface language), optionally personal and general customer satisfaction information. The following is the breakdown of all collected information:

2.1.1 Usage data

• Anonymised session ID
• Session start and end dates/times
• Language used
• Web App associated data
  • Device id (not any Apple device ID)
  • Location (city/location name)
  • Placement (client's logical subdivision of location—for example "Oncology department")

2.1.2 Emotional data

User's pre- and post-exercise self-reported and perceived emotional state.

2.1.3 Personal and/or data

The following information is not collected without prior user's explicit consent before each use of the iPad App:

• Phone number - collected if user is requesting a professional help
• Patient ID - collected if medical staff on behalf of patient provides such information

2.1.4 Customer satisfaction data

• Sex
• Year of birth
• Application rating
• Written feedback
• Likelihood of recommending the app to others

2.2 Web App

Nexus web application captures necessary user and account information in order to deliver promised value and ensures security and compliance with the applicable laws.

• Account details
  • Organisation's name
  • Primary contact details
    • Name
    • Phone/mobile number
    • Email
  • Devices, locations and placements of devices to be associated with this account
• User details
  • First and last name
  • Email
  • Mobile phone number
  • Role within the client's organisation
• Reports and analytics generated from Capy collected encrypted and anonymised information
• Usage logs
  • Authorisation type (token or key)
  • IP address
  • Login times

2.3 Websites

We may collect and process the following types of personal information.

2.3.1 Information you provide to us

• Name, email address, and contact details—when contacting us through the Websites
• Any information you submit via forms or surveys.

2.3.2 Information collected automatically

• Log information: IP address, client type (internet browser, API platform, etc.), device information, pages visited, and timestamps (date and time)
• Cookies and tracking technologies: information about browsing behaviour (see Section X on Cookies)

2.3.3 Third-party information

We may collect limited data from third parties such as analytics providers (Google Analytics) and advertising networks.

3. The Legal Basis for Data Processing

• Consent: we obtain your explicit consent for data collection where required
• Legitimate interest: to improve the functionality and performance of our applications and systems
• Compliance with legal obligations: when necessary to meet regulatory requirements

4. How We Use Your Data

• To provide and improve our services
• To generate aggregated reports for clients
• Provide, operate, and maintain our Websites
• Improve user experience and functionality of iPad App, Web App and Websites
• Respond to inquiries and provide support
• To comply with legal obligations
• To prevent unauthorised access and ensure data security

5. Data Sharing and Disclosure

We do not sell your personal data, we only share data when necessary:

5.1 Service Providers

We may share limited data with **trusted third-party providers under strict confidentiality agreements** (e.g., hosting, analytics) to operate our iPad App, Web App and Websites.

5.2 Legal Compliance

We may disclose information if required by law, court order, or legal process.

5.3 Business Transfers

In the case of a merger, acquisition, or asset sale, personal data may be transferred.

5.4 Authorised Personnel at Nova Ventures GmbH

Nova Ventures GmbH as the service provider has access to all infrastructure and data in order to ensure quality and stability of service provided to its clients. All authorised personnel with access to critical information is operating under strict non-disclosure and service agreements.

6. Automated Decision-Making and Profiling

We do not engage in automated decision-making or profiling that significantly affects you. If this changes in the future, we will update this policy and notify you.

7. How We Protect Your Data

We implement technical and organisational measures, including:

• End-to-end encryption (AES-256)
• Anonymisation and pseudonymisation of data
• Role-based access control for authorised personnel
• Regular security audits and updates

8. Data Transfers to Third Countries

If data is transferred outside Switzerland or the EU, we ensure compliance with adequacy decisions or implement Standard Contractual Clauses (SCCs) to safeguard your data.

9. Data Retention

• Usage and state data are retained as long as necessary to provide services and meet legal obligations.
• Data collected at our Websites is retained for a maximum of 5 years or until the user withdraws consent.
• Anonymised data may be retained indefinitely for research purposes.

10. Your Rights

You have the following rights under applicable data protection laws:

• Access: Request a copy of your data
• Correction: Correct inaccurate or incomplete data
• Deletion: Request deletion of your data, subject to legal obligations
• Restriction: Restrict processing of your data under certain conditions
• Objection: Object to processing based on legitimate interests
• Data Portability: Receive a copy of your data in a structured, machine-readable format

To exercise your rights, contact us.

11. Consent Withdrawal

You can withdraw your consent at any time for Websites data collection. Contact us to make this request.

12. Updates to This Policy

We may update this Privacy Policy from time to time. Changes will be communicated through the iPad App, Web App or Websites. Please review this policy periodically.

13. Contact Information

For questions or concerns about this Privacy Policy, reach out to:
Nova Ventures GmbH
Via Trevano 78A
6900 Lugano
Switzerland