Privacy Policy

This policy describes how TIK Ventures SRL (hereinafter «Aideo», «we») collects, uses and protects your personal data when you use the service accessible at aideo.be (hereinafter the «Service»).

• Data controller: TIK Ventures SRL
• Company number (BCE/KBO) / VAT: BE0781371523
• Registered office: Avenue Louise 231, 1050 Brussels, Belgium
• Data protection contact: privacy@aideo.be

We process your data in accordance with Regulation (EU) 2016/679 («GDPR») and the Belgian Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.

Aideo is a home care-monitoring journal connecting the family of an elderly person who remains at home (the «care recipient») with the caregivers who visit their home (nurse, physiotherapist, home help, doctor, relatives). Several categories of persons are concerned:

a) Family account data

• Data: name, email address, password (managed securely via our authentication processor).
• Purpose: to create and secure your account, and to enable you to access the Service.
• Legal basis: performance of the contract (Art. 6(1)(b) GDPR).

b) Care recipient data

• Data: surname, first name, and optionally date of birth, entered by the family.
• Purpose: to identify the person being monitored and enable caregivers to know whose home they are in.
• Legal basis: performance of the contract (Art. 6(1)(b) GDPR).

c) Health and well-being data (special category)

• Data: at each visit, the caregiver may record up to four indicators — mood, energy, appetite, pain — as well as a free-text note. This information constitutes data concerning health within the meaning of Art. 9 GDPR.
• Purpose: to enable the family to follow the development of their loved one’s well-being and to feel reassured remotely.
• Legal basis: explicit consent (Art. 9(2)(a) GDPR), obtained by the family from the care recipient or their legal representative (see § 4).

d) Payment data

• Data: managed entirely by our payment provider. Your bank details never pass through our servers.
• Legal basis: performance of the contract (Art. 6(1)(b)) and statutory accounting obligation (Art. 6(1)(c)).

e) Browsing data (landing page)

• Data: public pages visited, duration, traffic source, anonymised identifier, collected via Google Analytics 4 (Google Ireland Limited), Meta Pixel (Meta Platforms Ireland Limited) and Microsoft Clarity (Microsoft Ireland Operations Limited). With Microsoft Clarity, this also includes your interactions with those pages (clicks, scrolling, pointer movements), in the form of visit recordings and heatmaps; what you type into a form and email addresses are masked before anything is sent. The pages of your personal space — dashboard, your relatives’ records, scan page — are never sent to these services.
• Purpose: audience measurement on our public pages, measurement of our campaigns’ effectiveness (account creation, trial start, subscription), improvement of the Service — in particular by observing how our public pages are browsed — and advertising targeting on Google and on the Meta platforms (Facebook, Instagram). For those same conversion events, your email address may be sent to Meta in irreversibly encrypted form (SHA-256 hash), from our servers, and only if you have consented to it.
• Legal basis: consent (Art. 6(1)(a) GDPR), obtained via our cookie banner before any cookies are set.

f) Contact form data

• Data: name, email, message.
• Legal basis: legitimate interest in processing your request (Art. 6(1)(f)).

g) Delivery address for the QR code

• Data: recipient’s name and postal address, if you ask to receive the laminated QR code by post. This information is optional.
• Purpose: sending you the card. The address is passed on to the postal operator responsible for delivery, and to no one else.
• Legal basis: performance of the contract (Art. 6.1.b GDPR).

Aideo processes data concerning a person — the care recipient — who is generally not the user of the Service. This is why:

• When creating the care recipient’s profile, the account holder represents and warrants that they are authorised to set up this monitoring and to process the care recipient’s data, including their health data. This declaration is collected via a dedicated checkbox, which is not pre-ticked.
• It is the family’s responsibility to ensure the care recipient’s consent (or that of their legal representative) and to inform them of the existence of this monitoring.

The caregiver who scans the QR code and fills in the form does not have an account and does not install any application. They act as a one-off contributor: they provide an observation that is passed on to the family. The entry page informs them that their observations will be shared with the care recipient’s family.

Any deletion request should be sent to privacy@aideo.be. We respond within one month.

Note: in your care log, only visits from the last 7 days are displayed by default. This is simply a display filter; it does not correspond to the actual retention period of your data.

We never sell your data. We use technical processors that act on our instructions:

We may also disclose your data where required to do so by law (competent judicial or administrative authority).

In accordance with the GDPR, you have the following rights: access, rectification, erasure, restriction of processing, portability, and objection. Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before its withdrawal.

To exercise these rights, write to us at privacy@aideo.be. We respond within one month.

You also have the right to lodge a complaint with the Data Protection Authority (APD/GBA): Rue de la Presse 35, 1000 Brussels — contact@apd-gba.be — www.autoriteprotectiondonnees.be.

We implement appropriate technical and organisational measures: encrypted connections (HTTPS), secure authentication, confirmation of your email address when the account is created, hosting of the application and the database within the European Union, per-family access isolation (Row Level Security), and no storage of bank details on our servers.

This section covers cookies, but also the information the Service stores in your browser's memory (local storage): the law subjects both to the same rules.

Strictly necessary trackers

These make the Service work (authentication session, staying signed in). They do not require your prior consent because they are essential to the Service (art. 129 §1 of the Belgian law of 13 June 2005 on electronic communications). They are set by us alone, from our own domain.

Audience measurement trackers

We use Google Analytics 4 (Google Ireland Limited) to measure the audience of our public pages and improve our Service. This tool is only enabled with your prior consent, collected through our cookie banner. Audience measurement never applies to the pages of your personal area. Cookies set: _ga and _ga_MTEJKP8HP8, kept for 13 months.

We also use Microsoft Clarity (Microsoft Ireland Operations Limited) to understand how our public pages are browsed, by means of visit recordings and heatmaps. This tool is only enabled with your prior consent, collected through our cookie banner, and only on our public pages: it never records the pages of your personal area. What you type into a form and email addresses are masked before anything is sent. Cookies set: _clck, kept for 12 months, and _clsk, kept for 1 day.

Advertising and targeting trackers

If you have consented to them being set, these trackers make it possible to show you relevant adverts on third-party platforms, in particular Google and the Meta platforms (Facebook, Instagram), and to measure how effective our campaigns are. They are only enabled after acceptance through our cookie banner. Cookies set by Meta: _fbp and _fbc, kept for 3 months.

Two clarifications about how we measure our campaigns. First, when you take out a subscription, the _fbp and _fbc identifiers present in your browser are read by our servers and kept alongside your order details, so that the subscription can be linked to the campaign through which you discovered the Service. Second, we store a technical value in your browser's memory (aideo.tracking.trial.…) whose only role is to prevent the same subscription from being counted twice; it holds no data about you and is only written after your consent. The conversion measurement sent to Meta from our servers (Conversions API) is subject to the same consent, and withdrawing it stops the measurement immediately.

Collecting your consent

Our cookie banner is provided by Axeptio (France) and sets its own cookies (axeptio_cookies, axeptio_authorized_vendors, axeptio_all_vendors, kept for 12 months) for the sole purpose of remembering your choices. They are essential so that your decision is honoured from one visit to the next.

Managing your preferences

You can change your choices at any time by clicking Manage my cookies at the bottom of the page. Withdrawing consent does not affect the lawfulness of processing carried out before that withdrawal.

We may amend this policy. Any substantial amendment will be notified to you by email or via the Service.