Privacy Policy

This Privacy Policy explains how Eonamel Wellness handles information when you use the Eonamel Wellness application and related services.

1. Who we are

Data Controller: Anastasia Karanastasi, operating Eonamel Wellness in Greece.

For privacy questions, requests or complaints, contact eonamel.wellness@gmail.com .

2. Information we process

Depending on how you use the application, we may process:

• Account information, including the account identifier and technical account metadata generated by the authentication service. The current release uses anonymous Firebase Authentication and does not require an email address, display name or phone number to create the application account.
• Profile and preference information you provide during onboarding or while configuring the application.
• Wellness and oral-care-related application data, including routines, plans, progress, care events, protection activity, exposure-related activity and other information you choose to record.
• Consent and privacy records, such as the privacy notice version acknowledged and the date of acknowledgement.
• Technical and security information, including IP address, device and operating-system metadata, authentication security information, application identifiers and App Check information.
• Performance information, such as app start time, network latency, CPU or memory usage and related technical diagnostics used to improve reliability and performance.

3. How we use information

We use information to:

• provide and maintain your account and Eonamel features;
• save your preferences, routines and progress;
• authenticate users and protect accounts and backend services;
• provide data export and account deletion functionality;
• diagnose technical problems and improve performance and reliability;
• prevent abuse, fraud and unauthorized access;
• comply with applicable legal obligations.

Legal bases under GDPR

Where the General Data Protection Regulation (GDPR) applies, the legal basis depends on the purpose of the processing.

• Performance of a contract — Article 6(1)(b): to create and maintain your account, authenticate you, provide the Eonamel features you request, save your settings and progress, and provide account export or deletion functions.
• Legitimate interests — Article 6(1)(f): to protect Eonamel and its backend against abuse and unauthorized access, maintain service security, diagnose technical failures and improve reliability and performance.
• Legal obligations — Article 6(1)(c): where processing or retention is necessary to comply with an applicable legal obligation.
• Consent — Article 6(1)(a): where we specifically request consent for an optional processing activity. Where processing is based on consent, you may withdraw it at any time.

If information processed through an Eonamel feature qualifies as special-category personal data under Article 9 GDPR, it will only be processed where an applicable Article 9 condition is available.

4. Service providers

Eonamel uses third-party infrastructure where necessary to operate the service. These providers process information on our behalf or as part of their authentication/content-delivery services.

• Google Firebase — Firebase Authentication, Cloud Firestore, Cloud Functions, Firebase App Check and Firebase Performance Monitoring.
• Dreamflow Cloud — the current application build may retrieve limited static visual assets over the network.

When network resources are requested, the receiving service may necessarily receive technical network information such as an IP address.

5. Advertising and tracking

The current Eonamel release does not include advertising SDKs, advertising identifiers, behavioral advertising, or third-party behavioral analytics SDKs. Eonamel does not sell personal information.

6. Device permissions

The current Android release requires Internet access to communicate with the Eonamel backend and required online services. It does not currently request access to contacts, precise location, camera, microphone, SMS or call history.

7. Data storage and security

Application data is stored using Firebase services. Data is transmitted using encrypted network connections where supported by the relevant services. We apply access controls, authentication, Firebase Security Rules and application integrity protections to reduce unauthorized access.

8. Retention and deletion

We retain account and application data while your account is active and for as long as reasonably necessary to provide the service. You can permanently delete your Eonamel account and associated active application data from within the application.

If you cannot access the application, you can also submit a deletion request through our Delete Account page.

Limited information may be retained where necessary for security, fraud-prevention, legal compliance, dispute resolution or the ordinary lifecycle of protected backups, where applicable.

9. Your choices and rights

Where the GDPR applies, and subject to the conditions provided by law, you may have the right to request access to your personal data, rectification, erasure, restriction of processing, data portability and objection to certain processing.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Eonamel also provides functionality to export user data and permanently delete an account and associated active application data.

To exercise a privacy right, contact eonamel.wellness@gmail.com .

You also have the right to lodge a complaint with a competent supervisory authority. In Greece, the supervisory authority is the Hellenic Data Protection Authority (HDPA) .

The current Eonamel release does not use solely automated decision-making that produces legal effects or similarly significant effects concerning users.

10. International processing

Service providers may process information in countries other than the country where you live. Where required, processing is subject to the safeguards and contractual mechanisms provided by the relevant service providers and applicable law.

11. Children

Eonamel Wellness is not designed as a service directed specifically to children. Users who are not legally able to consent to the processing of their information in their jurisdiction should use the service only with appropriate parent or guardian involvement.

12. Health and professional advice

Eonamel is a wellness and self-care application. It is not a medical device, emergency service, diagnostic tool, or substitute for advice, diagnosis or treatment from a qualified medical, dental or other healthcare professional.

13. Changes to this policy

We may update this Privacy Policy when the application, legal requirements or service providers change. The current version and effective date will always be published on this page.

14. Contact

Data Controller: Anastasia Karanastasi
Operating as: Eonamel Wellness
Country: Greece
Email: eonamel.wellness@gmail.com