Understand how you feel. Take the next step.
TREATMEOUT helps you recognise rising stress, understand your recovery, build healthier habits and stay connected to your prescribed treatment routine, all in one simple app.
Understand how you feel, recognise what you need, and take the next step toward feeling better.
Three pillars of everyday well-being
TREATMEOUT connects measurement, self-care and continuity of care, so the data you collect turns into steps you can actually take.
Stress monitoring & recovery
Using PPG, heart-rate variability (HRV), resting heart rate, sleep and other available signals, the app estimates your physiological stress and recovery and shows how they change over time.
Personalised self-care
Respond to stress with guided breathing, grounding, mindfulness, relaxation sessions and restorative breaks, matched to your habits and preferences.
Treatment support
Medication reminders, daily check-ins, mood and symptom tracking and appointment preparation help you keep your routine and have better conversations with your healthcare professional.
More than a wellness tracker
Small, achievable actions that fit into real life, not pressure to be perfect.
TREATMEOUT Privacy Policy
TREATMEOUT handles information about your heart rate, stress, mood, symptoms and treatment routine. Under the EU General Data Protection Regulation (GDPR) this is health data. We process it only with your explicit consent and only to provide the app's features, and we never sell it.
1. Who we are
The data controller for the TREATMEOUT mobile application ("the App") and this website is:
ANONYMI ETAIREIA EREVNAS KAI ANAPTYXIS SYSTIMATON KAI YPIRESION A.E. (trade name SYSTSERV A.E.)
Votsi 12-14, Patras, Greece
VAT No.: 800166200
Email: privacy@systserv.com · Phone: +30 2611 813526
2. Wellness app, not a medical device
TREATMEOUT is a general wellness application. It is not a medical device under Regulation (EU) 2017/745. It does not diagnose, treat, cure or prevent any disease, and its stress and recovery indicators are not a medical assessment. Medication reminders only help you follow a routine your healthcare professional has already prescribed. The App does not recommend, change or dose any medicine. Always follow your doctor's advice. In an emergency, call 112.
3. Data we collect
We collect only what the App's features need.
| Category | Examples | Source |
|---|---|---|
| Account data | Email address, display name, password (stored hashed), language | You |
| Profile data (optional) | Year of birth, sex, height, weight, activity level, wellness goals | You |
| Physiological data | Heart rate, resting heart rate, inter-beat intervals, HRV metrics, sleep duration and quality, derived stress and recovery scores, time of measurement | Phone camera (PPG), connected wearable or Android Health Connect, with your permission |
| Wellbeing and journal data | Mood entries, daily check-ins, perceived stress, journal notes, completed breathing and relaxation sessions | You |
| Treatment-support data | Names and schedules of medicines you choose to add, reminder confirmations, symptoms you record, appointment notes | You |
| Device and technical data | Device model, operating system and app version, crash logs, pseudonymised usage events | Your device |
We do not collect your precise location, contacts, photos, files or payment card details. When you measure heart rate with the camera, the frames are analysed in real time on your phone and are never saved or sent to us. We do not use an advertising ID for targeting.
4. Why we use your data and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Measure stress and recovery, show trends, weekly summaries and personalised wellness suggestions | Your explicit consent (Art. 9(2)(a) and Art. 6(1)(a)) |
| Send medication and check-in reminders, keep your mood, symptom and appointment notes | Your explicit consent (Art. 9(2)(a) and Art. 6(1)(a)) |
| Create and run your account, sync across your devices, provide support | Performance of our contract with you (Art. 6(1)(b)) |
| Keep the App secure and stable, fix crashes, prevent misuse | Our legitimate interest (Art. 6(1)(f)); no health data is used |
| Improve the App with aggregated, de-identified statistics | Our legitimate interest (Art. 6(1)(f)); health data only if you opt in separately |
| Meet legal obligations, such as answering authorities and keeping records of rights requests | Legal obligation (Art. 6(1)(c)) |
We ask for your explicit consent on a separate screen before the App processes any health data. You can withdraw it at any time in Settings → Privacy or by deleting your account. Withdrawing does not affect processing already carried out.
Stress and recovery scores are calculated automatically, but they are wellness indicators only. They have no legal or similarly significant effect on you (Art. 22 GDPR). We do not sell, rent or trade your data, and we never use health data for advertising, marketing profiles, insurance, credit or employment decisions.
5. Permissions the app uses
- Camera: only during a heart-rate measurement, to read your pulse from your fingertip.
- Health Connect (optional): to read heart rate, heart rate variability and sleep data you allow. You choose each data type in the Health Connect permission screen and can revoke access at any time. Data from Health Connect is used only to provide the App's features and follows the Health Connect Permissions Policy, including its Limited Use requirements.
- Bluetooth (optional): to connect a compatible heart-rate wearable.
- Notifications: for medication, check-in and break reminders. You can turn these off.
- Internet: to sync your account and data.
6. Where data is stored and who receives it
Your data is stored on your device and, when you have an account, on secure servers in the European Union. Only these service providers process it on our behalf, under data processing agreements (Art. 28 GDPR):
| Provider | Purpose | Location |
|---|---|---|
| Hetzner | Hosting, database and encrypted backups | European Union |
| Firebase Crashlytics | Crash and stability reports (no health data) | EU / USA with safeguards (section 7) |
| Hetzner | Account emails and support replies | European Union |
We share data with no one else, except where the law, a court or a competent authority requires it, or to protect the safety of users. If SYSTSERV A.E. is merged or acquired, your data may pass to the successor, which must keep to this policy. Your data is never shared with your employer, insurer or doctor unless you choose to export or send it yourself.
7. International transfers
We keep health data in the EU/EEA. If a provider processes technical data outside the EEA, we rely on an EU adequacy decision (such as the EU-US Data Privacy Framework) or Standard Contractual Clauses (Art. 45–46 GDPR). You can ask us for a copy of these safeguards.
8. How long we keep data
- Health, wellbeing and treatment-support data: while your account is active; deleted within 30 days of account deletion or consent withdrawal.
- Account data: while your account is active. Accounts unused for 24 months are deleted after an email warning.
- Encrypted backups: overwritten within 35 days.
- Crash and security logs: up to 90 days.
- Support emails and records of rights requests: up to 2 years, to show we handled them correctly.
9. Security
We encrypt data in transit (TLS 1.2 or higher) and at rest (AES-256), protect keys on your phone with the Android Keystore, limit access to authorised staff, and review our security regularly. No system is completely secure. If a breach puts your data at risk, we will inform you and the Hellenic Data Protection Authority as the GDPR requires (Art. 33–34).
10. Children
TREATMEOUT is for people aged 16 and over. We do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.
11. Your rights
Under the GDPR you can, free of charge:
- access your data and get a copy (Art. 15);
- correct inaccurate data (Art. 16);
- have your data deleted (Art. 17);
- restrict how we use it (Art. 18);
- receive it in a portable format, for example to give to your doctor (Art. 20);
- object to processing based on our legitimate interest (Art. 21);
- withdraw your consent at any time (Art. 7(3)).
Email privacy@systserv.com. We reply within one month, or tell you within that month if we need up to two more months for a complex request. We may ask you to confirm your identity.
12. Deleting your account and data
You can delete your account in the App under Settings → Account → Delete account, or without the App by using the account deletion form on this page or emailing privacy@systserv.com. The deletion section lists exactly what is deleted and when. Uninstalling the App does not delete your account.
13. Complaints
You can complain to the Hellenic Data Protection Authority, Kifisias 1-3, 115 23 Athens, Greece (www.dpa.gr), or to the authority in your EU country of residence. We would welcome the chance to resolve your concern first.
14. Changes to this policy
We may update this policy when the App or the law changes. We will publish the new version here with a new effective date. For important changes, especially any new use of health data, we will tell you in the App and ask for your consent again where required.
15. Contact
SYSTSERV A.E., Votsi 12-14, Patras, Greece
Email: privacy@systserv.com · Phone: +30 2611 813526