Privacy policy

Without an account: search terms, place, radius and filters, technical access data (IP address, browser, time) and, only with your consent, anonymous usage statistics.

With an account: name, email address, language, password (stored only as a hash), an authenticator app for two-factor sign-in if you choose, saved therapists, notification settings, and the time and version of the terms and privacy policy you accepted.

Appointment requests: preferred appointments, type of session, your message to the practice, phone number, details of the doctor's prescription, an uploaded prescription, the message history with the practice, and your consent (time and version of the text).

Waiting list: which practice you are watching and when we notified you. Reviews: stars, text and the treatment concerned.

Therapists: profile details, photos, register numbers, diplomas and verification documents, services and prices, opening and booking hours, subscription and payment details (via Stripe), team members and invitations, and profile statistics (views and clicks on contact details per day, not linked to individual visitors).

Messages, details of the doctor's prescription and uploaded prescriptions may contain health data, which is sensitive personal data. We only process it with your express consent, which you give when you send a request, and only to pass it on to the practice you contact.

Only the practice you contact can see it (the owner and the team members the practice has invited). Emails about a request contain no health details, only a link.

With every booking we ask how you are insured: health insurer or “I pay myself” (“Prefer not to say” is also possible), and whether you have supplementary insurance. Only the booked practice sees this, so it knows in advance how to bill. We do not store insurance numbers; the information is deleted together with the message 180 days after the request is closed.

180 days after a request is closed, we automatically delete the message, phone number, message history and prescription. We delete the request itself (practice, appointment, status) 2 years after it is closed.

Reviews are published without names after a check. Please do not include health details you would not want to share publicly.

Based on a description in your own words, the assistant suggests suitable methods and practices. To do so, we send your text and, if given, the place to the AI service of Anthropic PBC (USA). Your name, email address and account are not sent.

We do not store or log what you type. Anthropic processes it on our behalf, under its terms does not use it to train its models, and keeps it only for a limited time, for example to detect misuse.

We base the transfer to the USA on standard contractual clauses with Anthropic. Only enter what is needed for the search; the assistant does not need names or contact details.

If there are signs of an emergency, the assistant shows emergency numbers instead of suggestions. It does not make a diagnosis.

Texts that practices write themselves for their profile (e.g. "About me", services, notes) are translated automatically into the site's other languages; for this, only these profile texts are sent to Anthropic PBC (USA) or DeepL SE (Germany), never patient data, messages or reviews.

For registration, password resets, sign-in links and the contact form, Cloudflare Turnstile (Cloudflare, Inc., USA) checks whether a human is filling in the form. In doing so, Cloudflare receives your IP address and technical characteristics of your browser; no advertising cookies are set.

We check new passwords against known data breaches (haveibeenpwned.com). Only the first five characters of a hash of the password leave our server, never the password itself.

Signed-in sessions store the IP address and browser until they expire. To protect against misuse, we count requests per IP address; we delete these counters after 48 hours at the latest.

Practice owners can invite other people to their team. For this, we store the invited person's email address, their role and who invited them. Team members can see the practice's requests.

Anyone who connects their Google or Microsoft calendar allows us to read busy times and add confirmed appointments (Google LLC or Microsoft Corporation, USA). We store the access keys in encrypted form. Added appointments contain the name and time, but no message and no health details.

The calendar subscription (ICS link) is a secret link through which a personal calendar fetches the practice's appointments. Anyone who knows the link can see these appointments; the practice can renew it at any time. We read imported ICS calendars only to take busy times into account.

Profile statistics count views and clicks on contact details per profile and day, without cookies and not linked to individual visitors.

We create many profiles from publicly accessible registers, such as EMR, ASCA, EGK and professional registers. They contain only details published there: name, method, practice address, register number and contact details. The purpose is a complete directory in which patients can find all recognised therapists (overriding legitimate interest).

Therapists concerned can claim and edit their profile free of charge, object to the processing at any time or request its removal: via the contact form (topic “Correct or remove details”) or at [LEGAL_EMAIL]. We then hide the profile immediately and delete the details, except where we need them to document the objection.

We send emails that are part of the service, such as confirmations, requests, reminders and payment receipts. You can unsubscribe from reminders and notices under “Account › Notifications”.

You only receive the newsletter with news if you switch it on there. Every issue contains an unsubscribe link.

We store messages sent via the contact form in order to answer them and delete them after 12 months.

We only share data where the service requires it: with the practice you contact and with service providers that work on our behalf and are contractually bound to protect data.

Payments for therapist subscriptions: Stripe Payments Europe Ltd. (Ireland); we do not collect card details ourselves. AI assistant: Anthropic PBC (USA). Spam protection: Cloudflare, Inc. (USA). Calendar connection, only at the practice's request: Google LLC and Microsoft Corporation (USA). Anonymous statistics, only with your consent: Plausible Insights OÜ (Estonia).

Your browser loads maps directly from the Federal Office of Topography swisstopo (Switzerland); this transmits your IP address.

For transfers to countries without adequate data protection, such as the USA, we rely on the European Commission's standard contractual clauses as recognised by the FDPIC or, where available, on the provider's certification under the Swiss-U.S. Data Privacy Framework.

Account: until you delete it. The data is then removed from the database immediately and from backups after 30 days at the latest.

Message, phone number, message history and prescription of a request: 180 days after the request is closed. The request itself: 2 years after it is closed.

Waiting list: 180 days after the notification. Contact form: 12 months. Documents for verifying recognitions: 90 days after the decision; the decision itself remains stored.

Log of admin actions: 2 years. Counters to protect against misuse (IP address): 48 hours at most. Server logs contain no request content and are continuously overwritten. We keep subscription accounting records as long as the law requires (usually 10 years).

You can ask what data we hold about you, receive a copy in a common format, have it corrected or deleted, and object to its processing. You can withdraw consent at any time with effect for the future.

Much of this can be done directly in your account: download your data and delete your account under “Account › Settings”, notifications and newsletter under “Account › Notifications”. Otherwise, an email to [LEGAL_EMAIL] is enough; we reply within 30 days.

You can lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) and, in the EU, also with the supervisory authority of your country of residence.

We only use necessary cookies, for example for signing in and your language setting. Some settings, for example your health insurer for the filter or therapists remembered on the device, are stored only in your browser.

We only collect anonymous usage statistics (without cookies, without profiling) if you agree in the notice. You can withdraw your consent at any time by deleting the site data in your browser.

DL Life GmbH, Privacy, Neue Aarburgerstrasse 20, 4852 Rothrist, [LEGAL_EMAIL].

We may update this policy. The version published here applies; we inform account holders of significant changes by email.