Privacy Policy

Datenschutzerklärung, Reviewed November 2026

1. Who we are

This website is operated by Synaptik GmbH, Frankfurt am Main, Germany, the data controller. Calibra is a product of Synaptik GmbH. Contact: calibra@synaptik.life

This policy covers the calibra.health website and the Calibra Pro waitlist. The Calibra Pro mobile app processes data separately and is covered by its own policy at calibra.health/app-privacy.

2. Data Protection Officer

We have appointed an external Data Protection Officer:

Katrin Dahmen
exkulpa gmbh
Waldfeuchter Str. 266
52525 Heinsberg
Germany
Email: dahmen@exkulpa.de
Phone: +49 2452 99 33 11

You may contact our Data Protection Officer directly on any matter relating to the processing of your personal data and the exercise of your rights under the GDPR.

Our Data Protection Officer is provided by exkulpa gmbh, Waldfeuchter Str. 266, 52525 Heinsberg, Germany. www.exkulpa.de

3. What data we collect

We collect personal data in the following cases:

• Android launch notification: If you ask us to tell you when Calibra opens on Android, we store your email address, the platform you chose, when you signed up and confirmed, and the version of the consent text you agreed to. We use this only to confirm your address and to send you one email when Calibra opens on Android. Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time via the unsubscribe link in any email or by writing to calibra@synaptik.life. We delete your data one day after that email, or earlier if you withdraw. If you also agreed to receive updates about Calibra, we keep your email address for those updates until you unsubscribe. Your data is stored in the EU.
• Earlier sign-ups: If you joined the Calibra Pro first group on this site before November 2026, we will email you once to tell you Calibra Pro is open, and delete your data one day after that email, unless you agreed to receive updates.
• Enquiries: any data you choose to include when you email us.
• Analytics: if you consent, we use Google Analytics to understand how visitors use this site, for example which pages are viewed, how visitors arrive, and which actions they complete such as joining the waitlist. This sets cookies and collects usage data such as a randomised identifier, pages visited, approximate location derived from a truncated IP address, browser, and device type. Analytics cookies are set only after you accept analytics in our consent banner. If you do not consent, no analytics cookies are set and no randomised identifier is created; a limited cookieless signal is still sent to Google recording that a page was viewed or an action such as joining the waitlist was completed, together with your browser type and an approximate location derived from a truncated IP address. That signal is not used to identify you, is not linked to your waitlist entry, and is not used to build a profile.

4. Why we use it

• Enquiries: to respond to your message.

5. Legal basis

• Waitlist sign-up and related emails: your consent, Article 6(1)(a) GDPR, given when you submit the form. You can withdraw it at any time (see section 8), for example via the unsubscribe link in any email or by writing to us. Withdrawal does not affect processing already carried out.
• Analytics: your consent, Article 6(1)(a) GDPR, given when you accept analytics in our consent banner. You can withdraw it at any time by changing your choice in the banner or by contacting us. Withdrawal does not affect processing already carried out. The limited cookieless signal described in section 3, which involves no storage on or access to your device, rests on our legitimate interest in basic audience measurement, Article 6(1)(f) GDPR.
• Responding to enquiries: our legitimate interest in business correspondence, Article 6(1)(f) GDPR.

6. Where your data is stored and who processes it

Your waitlist data and the hosting of this site are held on EU infrastructure. We use Cloudflare as our processor for the waitlist database and site hosting, processing your data under a GDPR data processing agreement on EU-based infrastructure.

If you consent to analytics, we use Google Analytics, provided by Google Ireland Limited (Dublin, Ireland) as our processor. Google may process analytics data on servers in the United States. Where that happens, the transfer is covered by the EU Standard Contractual Clauses and Google's additional safeguards. We have configured Google Analytics to truncate IP addresses, and we do not use it for advertising or to combine your data across other Google services. Information on Google's data practices is available at policies.google.com/privacy.

We do not sell your data or share it with third parties for their own purposes.

Data you give the Calibra Pro app is covered by its own policy at calibra.health/app-privacy, which sets out where that data is processed and the limited cases in which it is accessed from outside the EU.

7. Retention

• Analytics data: retained by Google Analytics for 2 months, after which it is automatically deleted. Aggregated, non-identifying reports may be retained longer.
• Enquiries: as long as necessary for the purpose and no longer than the law requires.

8. Your rights

Under GDPR you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to processing
• Withdraw consent at any time
• Request data portability
• Lodge a complaint with the supervisory authority (Hessischer Beauftragter für Datenschutz und Informationsfreiheit, Wiesbaden)

To exercise any of these, contact calibra@synaptik.life

9. No automated decision-making

We do not use your data for automated decision-making or profiling.

10. Embedded videos (YouTube)

On some pages we show videos hosted on YouTube, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The video only loads when you click play. When you do, your browser connects to YouTube and transmits your IP address, information about your device and browser, and the address of the page you are on. YouTube may also store information on your device. We use the privacy-enhanced mode (youtube-nocookie.com). The legal basis is your consent, given by clicking play (Art. 6(1)(a) GDPR and §25(1) TDDDG). Data may be transferred to Google LLC in the United States, which is certified under the EU-US Data Privacy Framework. For details see Google's privacy policy: https://policies.google.com/privacy

11. Changes to this policy

As Calibra develops and additional features are introduced, this policy will be updated accordingly. The current version of this website policy is always available at calibra.health/privacy, and the Calibra Pro app policy at calibra.health/app-privacy.