Privacy Policy

Last updated: January 2026

1. Introduction

Kysana (operated by Dinnova AG, Bahnhofplatz 1, 8001 Zurich, Switzerland) takes the protection of your personal data very seriously. This Privacy Policy informs you about how we collect, process, and protect personal data when you use our website, app, or services. As a telemedicine platform for metabolic psychiatry, we process particularly sensitive health data. We are committed to treating this data with the utmost care and in accordance with the Swiss Data Protection Act (DSG), the EU General Data Protection Regulation (GDPR), and applicable health data regulations.

2. Data Controller

Responsible for data processing:

Kysana AG
Hammerstrasse 150
4057 Basel
Email: contact@kysana.health
Phone: +41 76 573 00 49

3. Data We Collect

3.1 Registration Data

When creating an account, we collect: name, email address, phone number, date of birth, gender, and residential address.

3.2 Health Data

To provide our services, we process the following health data: height, weight, dietary habits and preferences, blood sugar and ketone levels, mood logs, laboratory results (if provided by you), medical history and current diagnoses (e.g., type 2 diabetes, mental health conditions), medication intake, and treatment progress.

3.3 Usage Data

We automatically collect: IP address, device type and operating system, app usage behavior, access times, and interactions with our services.

3.4 Communication Data

Content of messages via WhatsApp support, emails, and consultation notes from sessions with psychiatrists and nutritionists.

4. Purpose of Data Processing

We process your data for the following purposes: providing personalized nutrition plans, conducting psychiatric consultations and nutrition counseling, tracking your health values and progress, communication via WhatsApp and other channels, billing and payment processing, improving our services, and fulfilling legal retention obligations.

5. Legal Basis

Processing is based on: contract performance (Art. 6(1)(b) GDPR) for providing our services, explicit consent (Art. 9(2)(a) GDPR) for processing health data, legitimate interests (Art. 6(1)(f) GDPR) for service improvement analytics, and legal obligations (Art. 6(1)(c) GDPR) for retention requirements.

6. Data Sharing

Your data will only be shared with the following recipients: treating psychiatrists and nutritionists (necessary for treatment), technical service providers (hosting, app infrastructure) under strict data protection agreements, payment service providers for billing, and authorities when legally required. We do not share your data with third parties for advertising purposes. We never sell your data.

7. Data Storage and Security

Your data is stored on servers in Switzerland. We implement the following security measures: encryption of all data transfers (TLS/SSL), encrypted storage of sensitive health data, access control and logging, regular security audits, and two-factor authentication for user accounts.

8. Retention Periods

Health data is retained according to legal retention periods for medical documentation (10 years). Account data is deleted after termination of the business relationship and expiration of legal deadlines. Billing data is retained for 10 years (commercial law requirement).

9. Your Rights

You have the following rights: access to your stored data, rectification of inaccurate data, erasure of your data (subject to legal retention obligations), restriction of processing, data portability, objection to processing, and withdrawal of given consent. To exercise your rights, contact us at: contact@kysana.health

10. Cookies and Tracking

Our website uses: necessary cookies for functionality, analytics cookies (only with your consent) to improve our services. You can manage cookies in your browser settings.

11. Changes to This Privacy Policy

We may update this Privacy Policy at any time. For significant changes, we will inform you by email or through our app.

12. Contact and Complaints

For questions about data protection, contact: contact@kysana.health You have the right to file a complaint with the competent data protection authority: Federal Data Protection and Information Commissioner (FDPIC) Feldeggweg 1, 3003 Bern, Switzerland