How GlioBridge handles your data

Your vault is stored on a server in Germany.

• Hosted by Hetzner in a data centre in Germany. The database and uploaded documents are stored on this server.
• Every connection is encrypted via HTTPS (HSTS). A Content Security Policy only allows content from our own domain.
• Encrypted backups (AES-256) are created daily. An automatic test checks every month whether a backup can be restored. An encrypted backup copy is also kept at a second location of the operator.
• If you write to us by email, the message is stored in an email mailbox at Apple (iCloud).

In principle only you — and people you explicitly invite.

• Every vault is strictly separated from all others. The separation is checked on the server with every access and is secured by automated tests.
• Family members only get access through an invitation from you: either read-only or read and edit. Anyone who can edit can also delete entries.
• An invitation can have an expiry date and can be revoked at any time. Revocation takes effect immediately.
• Sharing currently always covers the whole vault. Individual areas cannot yet be shared separately.
• There is no sharing with doctors. For appointments you create a PDF report and decide yourself who you give it to.
• The data is not additionally encrypted on the server. The operator (see legal notice) could technically access it. The operator view shows key figures and an activity list without content, no health data.

Your data belongs to you. You can take it with you and delete it.

• Under “Meine Daten exportieren” (Export my data) you can download your data as a health record (PDF), as spreadsheets (Excel/CSV) or as a complete data archive with documents and a machine-readable file. Export files are deleted automatically after 24 hours.
• You can delete your vault yourself. This removes your entries and uploaded documents from the server.
• Deleted data remains in the encrypted backups for a while: on the server for up to about 15 days, in the backup copy at the second location for up to 90 days.
• We do not sell data and do not pass it on for advertising.

Your vault and the research area are separate.

• GlioBridge has an internal research area. It works only with publicly available data, for example from trial registries and scientific literature.
• The research area has its own database and no access to vaults. There is currently no connection between the two.
• Should this ever change, it would only be with your explicit and revocable consent.
• The trial radar in the app searches a public registry (ClinicalTrials.gov, USA). The request is sent from the server, without your IP address, and contains only the search terms, no data from your vault. Please do not enter any personal details there.

In the vault, no AI analyses your health data.

• Your entries are not sent to AI models and are not interpreted automatically.
• Lab values are only compared arithmetically with the stated reference range. This is not an assessment.
• The knowledge articles are written with AI assistance and checked against our medical language rules before publication. They have not yet been reviewed by a doctor; this is stated on every article.
• On the public pages we measure reach with Umami, self-hosted and without cookies. In the vault there is no tracking and no advertising.

Signing in protects your vault.

• You can sign in with a link by email or with a password (at least 12 characters).
• Two-factor sign-in with an authenticator app is available and can be switched on in the settings.
• Repeated sign-in attempts are limited to make attacks harder.
• One cookie keeps you signed in. A second one remembers the website language.