Privacy principles we live by.
These aren't just policies — they're the values that guide every product decision we make.
You own your data
Your health records belong to you — always. You can export or delete everything at any time.
Never sold. Ever.
We will never sell, rent, or share your personal health data with advertisers, insurers, or third parties without your consent — under any circumstances.
Transparent by default
We tell you what we collect, why we collect it, and how long we keep it. No hidden clauses, no surprise uses of your data.
You control access
Only you decide who can view your records. Shared access can be granted — and revoked — at any moment, with full audit visibility.
Privacy by design
Every feature is built with security in mind from the start — never added as an afterthought. With minimal data collection, maximum protection, built-in two-factor authentication, and bank-grade identity verification standards from the outset.
Security that's credible, not just claimed.
Here's a plain-language overview of the technical and organisational measures we have in place to keep your health data safe.
Swiss-based infrastructure
Medical data is stored in Switzerland, hosted on infrastructure subject to Swiss federal data protection law (LPD) — among the most stringent in the world. Your data never leaves Switzerland without your consent.
Access control
Access to your data is strictly role-based. Only you determine who can view, share, or edit your records. Internal access by Agora Care staff is limited, logged, and audited.
Continuous monitoring
Our infrastructure is monitored 24/7 for threats and anomalies. We conduct regular vulnerability assessments and penetration testing to stay ahead of emerging risks.
Incident response
In the unlikely event of a security incident, we have a structured response procedure in place. Affected users are notified promptly and transparently, in compliance with applicable law.
Data minimisation
We only collect the data that is strictly necessary to provide the service. We do not build profiles beyond what is needed to help you manage your health information.
Built to meet the highest standards.
Compliance isn't a checkbox for us — it's a baseline. Here's what we adhere to, and what it means for you.
GDPR
General Data Protection Regulation
We are fully compliant with the EU GDPR. You have the right to access, correct, export, and delete your personal data at any time. We honour all data subject requests within the legally required timeframe.
LPD
Swiss Federal Data Protection Act
As a Swiss-based company, we comply with Switzerland's revised Federal Act on Data Protection (revFADP / LPD), which provides strong protections aligned with GDPR standards.
ISO 27001
Information Security Management
Our information security practices are certified with ISO/IEC 27001 standards. We maintain formal policies covering all aspects of data governance, access control, and incident management.
Privacy by Design
Built-in, not bolted-on
We follow the principle of Privacy by Design and by Default, ensuring that data protection is embedded into our product architecture and business processes from the ground up.
Common questions, plain answers.
Everything you want to know about how your data is handled — without the legal jargon.
