Your record. Your rules. Kept in Switzerland.
The short version: your health data lives in Switzerland, only you and the clinicians you choose can see it, we never sell it, and you can take it with you or delete it whenever you like.
Where we are. LongerHealth is in active development with a partner practice in Zürich. The demonstration you may have seen keeps everything in your own browser and holds no real patient data. This page describes how the live service is being built and how it will operate; the binding policy will be published before any real record is accepted.
Who we are
LongerHealth is a Swiss preventive-health platform operated by Ciel HealthTech. When LongerHealth is used inside a medical practice, the practice remains in charge of the clinical record and we act on its instructions. The parts you create yourself — check-ins, lifestyle answers, connected devices — are yours, and you are in charge of them.
Where your data lives
In Switzerland. Storage, backups and processing are planned on Google Cloud's Zürich region, so your record stays inside Swiss borders and under Swiss law. Everything is encrypted in transit and at rest.
If any part of the service ever needs to run elsewhere, we will say so here before it happens.
What we collect
Only what the product needs to do its job:
- Who you are — name, date of birth, sex, contact details, so a record belongs to the right person.
- Your clinical record — conditions, medications, allergies, vaccinations, examinations, results and consultation notes, entered by you or your clinician.
- What you tell us — check-ins, symptoms, lifestyle answers and goals.
- What your devices tell us, if you connect one — sleep, heart-rate variability, resting heart rate, steps.
- The minimum technical data needed to keep the service secure and available, with no health content in logs or error reports.
There are no advertising identifiers, trackers or advertising pixels anywhere in the product.
Who can see it
You, and the clinicians at the practice you have chosen. Nobody else.
- Sharing is granular and consent-based — you can see who has access and withdraw it.
- Every access to a record is written to an audit log you can read.
- We never give data to insurers, employers, advertisers or data brokers. Not for a fee, not for a partnership, not at all.
- Research use needs your separate, specific and revocable consent — never a buried checkbox.
Where AI is involved
In two narrow places, both optional: a scribe that drafts a consultation note from a consented recording, and a summariser that rephrases trends already computed from your record. Audio is transcribed and then discarded. Nothing an AI produces enters your record on its own — a clinician reviews, edits and signs it.
The scores and projections themselves are not AI-generated. They are deterministic and explainable: every number shows its inputs, its confidence, and what would move it.
Your rights
Under Swiss and, where it applies, EU data-protection law you can see everything we hold, export the whole record in a standard format at any time, correct anything wrong, withdraw consent, and delete your account and its data. Requests are answered within 30 days. Clinical entries are amended rather than overwritten, so the history stays honest.
If you think we have got something wrong you can complain to the Swiss Federal Data Protection and Information Commissioner, or your local supervisory authority in the EU.
Talk to us
Privacy questions, access requests and deletion requests go to info@longerhealth.com. A named data-protection contact and a Swiss postal address will be published with the binding version of this policy.