Legal
Privacy & health data
How OrsunTech OÜ handles your account data and your quiz answers about health, and how to withdraw consent.
Last updated
1. Who is responsible
ChairEase is operated by Orsun Tech OÜ, registry code 17418287, Sepapaja tn 6, Lasnamäe linnaosa, Tallinn, Harju maakond, 15551, Estonia. For privacy requests, contact [email protected] and identify your request as relating to ChairEase.
2. What we collect
Account details (email), subscription and payment status (payment details are handled by Stripe; we never see your card number), app usage (sessions completed), device settings (captions, voice).
3. Quiz answers about your health (Article 9 GDPR)
Answers about pregnancy, recent surgery, osteoporosis, heart condition or blood pressure are sensitive health information. The quiz keeps answers on your device by default. If you separately consent to save health answers to the service, they are stored separately from general quiz information for the requested programme experience. They are never sent to Google analytics or used for advertising audiences. You can contact us to request deletion; account deletion also removes saved health answers linked to that account.
4. Consent and how to withdraw it
Contact us to withdraw permission for saved health information or request its deletion. Analytics and advertising are separate optional choices in Cookie settings. Choosing Essential only withdraws both optional measurement permissions; you can also disable either choice separately. Withdrawal stops future collection and cannot recall data already sent.
5. Cookies and tracking
Essential storage supports account security, the requested checkout and your privacy settings. A validated privacy choice lasts up to 180 days. A missing, invalid or expired choice keeps optional Google measurement off.
After Analytics opt-in, Google Analytics and Google Tag Manager may measure a restricted list of neutral public pages, reading progress, approved navigation and real resource downloads. We remove arbitrary query strings and fragments before loading these tags, supply a blank page referrer, and do not use automatic form, site-search or browser-history capture. Quiz, sign-in, account, payment and sensitive medical or weight-related pages do not load analytics or advertising tags. We never send form values, names, email addresses, quiz answers, body measurements or health information to Google measurement.
Approved general campaign labels remain in memory before consent. After Analytics opt-in, Google-generated pseudonymous client and session identifiers may be kept in browser session storage to measure a requested checkout without loading tags on the payment page. Advertising click identifiers are not currently stored.
If configured and permitted by your current Analytics choice, our server can send a checkout event after the payment provider creates a checkout. A purchase event requires a signed receipt verification request and a provider-confirmed paid payment record. The event contains the pseudonymous Google identifiers, an opaque transaction identifier, currency and actual amount. It does not contain your account identity, payment-card details, quiz data, health answers or payment-page URL. Payment confirmation works even when you decline measurement.
Advertising personalization is a separate permission and also requires Analytics for this site’s Google audience features. Eligible audiences may use neutral public activity only. If Google signals is enabled and you choose both Analytics and Advertising personalization, Google may associate this session data with information from your signed-in Google account when you have also enabled ads personalization with Google. We receive aggregated reporting, not your Google account identity. You can manage or delete that Google activity at https://myactivity.google.com/ and change your site consent through Cookie settings. We do not send email addresses, hashed contact details or our own account User-ID to this integration. We do not use health, condition, injury, body measurement, weight or quiz information for advertising audiences. A verified payment or authenticated paid receipt can store a simple purchaser-suppression preference on your device; it contains no invoice or account details and prevents advertising personalization on that device. Clearing site data removes that local preference, so provider-side purchaser exclusions are also required.
Changing a loaded measurement permission stops collection, removes readable first-party measurement cookies and reloads the page. Where a checkout receipt is available, the browser also requests revocation of any pending server measurement associated with that choice. The server checks expiry and received revocations before retrying. A request already sent cannot be recalled, and a network outage can prevent immediate delivery of a revocation request. See Cookie settings for controls and storage details.
6. Who we share data with
Stripe and, where enabled, Revolut process payments. Google provides optional Analytics and Tag Manager measurement; optional server measurement uses Google’s EU collection endpoint. Choosing an EU endpoint does not by itself guarantee that all provider processing remains in the EU. No health answers or account contact details are sent to Google measurement.
Railway supplies application hosting and database infrastructure; Cloudflare supplies domain and network services. Resend handles requested account and service emails where email delivery is enabled. These providers receive information needed for their functions, such as request metadata or the recipient address and message. App-store or video services apply only where you choose a feature that actually uses them; reading our public guides does not require an app-store account.
Provider information is available from Google, Railway, Cloudflare, Resend, Stripe and Revolut. Providers may process information outside the European Economic Area. Transfers must use an applicable adequacy decision or appropriate safeguards, such as Standard Contractual Clauses, where required. Contact us for information about the safeguards relevant to your data.
Optional analytics and advertising use your consent. Requested account and service functions use the steps necessary for the service or contract; security and abuse prevention rely on our legitimate interest in protecting the service. Applicable accounting and legal obligations may require some records to be retained. Explicit health consent is separate from these bases and from cookie choices.
7. How long we keep data
Your privacy choice expires after 180 days. Pseudonymous identifiers used to associate a checkout with consented analytics are kept in session storage and cleared on Analytics withdrawal. Receipt verification tokens permit access for 24 hours; a correctly signed token can still withdraw pending measurement after that access period. The purchaser-suppression preference remains until site data is cleared.
Pending server measurement is eligible for delivery for no more than 24 hours and never beyond consent expiry or a received revocation. Scheduled cleanup discards expired pending payloads and removes all server measurement and revocation records after 60 days, including their pseudonymous identifiers. This cleanup continues even when measurement delivery is disabled. It applies specifically to optional Google measurement records.
Account and subscription records support your requested service and payment history. There is currently no automatic time-based deletion period for these account, payment and saved quiz records. Account deletion anonymises account contact fields and removes sign-in sessions, account-linked saved health answers, progress and settings; payment history is retained. Saved information that is not linked to an account is not removed by that account’s deletion. You can contact us about access or deletion. Quiz information kept only on your device remains there until it is cleared through the app or browser. Google Analytics event and user data retention is set to two months, with automatic extension on new activity switched off. Aggregated standard reports are not governed by that user-level retention control.
8. Your rights
Access, correction, deletion, portability, objection, and the right to complain to the Estonian Data Protection Inspectorate (AKI) or your local authority.