Privacy policy

Who we are

Gingivally is an oral-care service being built in Zagreb, Croatia. Gingivally decides how and why your data is used (the data controller).

Gingivally is not yet a registered company. As soon as it is, its legal name, address and OIB will be added here. Until then, write to us at gingivally@gmail.com about anything to do with your data.

What we collect

Only what you give us in the quiz and check-ins, and an email if you choose to add one.

• Your quiz answers: age, what you notice in your mouth, your teeth, your health (for example diabetes, pregnancy, medicines), your routine and habits. Many of these are health information.
• Your check-in answers, if you do check-ins.
• Your email, only if you add it, and the exact consent wording you agreed to, with the date.
• Whether you want news and offers, only if you tick that separate box.
• Your email for the boxes waiting list, only if you join it. We use it for one thing: to tell you when boxes can be ordered.

Two ways your answers are kept

With your email. If you add your email and tick the consent box, your answers are stored together with your email, so you can come back to your result and get check-ins, and so we can contact you about your result. Your result is then tied to your account: only you, signed in with that email, can open it. We rely on your explicit consent (GDPR Article 9(2)(a)).

Without an email. If you continue without an email, your answers are kept as an anonymous sample: no name, no email, no IP address and no browser details are stored with them. They're used only to improve the quiz and for research in grouped form. Your result is available through a private link that only you have; anyone with that link can open it, so keep it to yourself.

What we use it for

• To show your result, routine, box and when to see a dentist or doctor.
• To run your check-ins and show your progress.
• To improve the quiz and for research, only in grouped or anonymous form.
• To contact you about your result, if you gave your email.
• To send news and offers, only if you ticked that box. Your health answers are never used for advertising.

Who can see it

The Gingivally team, only where needed to run the service. We use these providers, who process data only on our instructions:

• Supabase: the database where answers and emails are stored, in Frankfurt (EU).
• Vercel: hosts the website; our server functions run in Frankfurt (EU). Its security logs may briefly hold your IP address.
• Resend: sends our emails (sign-in links and check-ins) from its EU region in Ireland. It sees your email address and the content of the email we send you.
• Sanity: holds the site's articles, videos and pages. No personal data.

What we never do

We don't sell your data, we don't share your answers with advertisers, and we don't use tracking or advertising cookies.

Cookies and your browser

We set one small cookie to remember your language. Your quiz progress, and your result if the database is unavailable, are kept in your browser's storage on your device. None of this tracks you across other sites, so we don't ask for cookie consent.

We count page visits with Vercel Web Analytics, which uses no cookies and doesn't identify you: it sees which page was opened, the country and the type of device. The private part of result links is removed before anything is counted.

Some videos are hosted on YouTube or Vimeo. Nothing loads from them until you press play; once you do, that service may set its own cookies. We use YouTube's privacy-enhanced mode and ask Vimeo not to track you.

How long we keep it

Answers tied to your email are kept until you withdraw your consent or delete them. Anonymous samples can't be linked back to you and are kept to improve the quiz.

Your rights

You can at any time:

• see what we hold about you and get a copy of it,
• correct it,
• delete it: use “Delete this run” on your result page, or write to us,
• withdraw your consent, which deletes your email and the answers tied to it,
• stop news and offers,
• complain to the Croatian data protection authority (AZOP, azop.hr).

Children

The children's path is filled in by a parent or carer, who gives consent on the child's behalf. We don't knowingly collect data directly from children under 16.

Not a diagnosis

Gingivally suggests a home routine and tells you when to see a dentist or doctor. It does not diagnose anything.

Changes

If this policy changes, we'll update the date above. If you gave your email, we'll tell you about important changes before they apply.