Privatarztpraxis R. Janušas OREME, Hauptstrasse 2, CH-9053 Teufen AR, Switzerland, represented by Rolandas Janušas, MD. Contact for data protection enquiries: info@lucerna.care.
Lucerna is an AI-assisted initial orientation for health complaints. You describe your complaints, optionally supplemented by photos or scanned medical reports. An artificial intelligence assesses this information and produces a structured overview. This overview is not a medical diagnosis and does not replace a personal consultation.
| Category | Data |
|---|---|
| Health data | Complaints, medication, sleep, digestion, activity, chosen perspective, where applicable photos of face/tongue, where applicable photos or PDFs of medical reports |
| Contact details (only if provided voluntarily) | First name, surname, address, telephone, e-mail |
| Technical data | IP address (only briefly, to prevent abuse, see section 8) |
Health data are a special category of personal data. They are processed only if you expressly consent to this during the process (separate checkbox before entering data, a further separate checkbox before uploading photos or reports).
Legal basis for health data: We process your health data on the basis of your explicit consent pursuant to Art. 9(2)(a) GDPR, which you give by ticking the checkbox in step 1. You may withdraw this consent at any time with effect for the future, informally by e-mail to info@lucerna.care. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Contact details are voluntary. You can use Lucerna without entering your name or contact details. Your health data are then processed without your name. Please note: free text you type, photos of your face or tongue and medical reports may nevertheless allow a link to your person. When you pay, Stripe receives the data required for this (see section 10). Your description of your symptoms is sent to our server while you are still typing, without your name or contact details, so that suitable follow-up questions can be suggested.
When you upload a medical report (photo or PDF), the following process runs entirely on your own device before anything at all is sent to our server or to an AI:
Important limitation: This automatic redaction applies only to uploaded photos/PDFs, not to photos of the face/tongue (which by their nature contain no text to redact). The complaint text you type freely into the form is not searched automatically — please avoid entering names, addresses or other identifying information there.
To produce the assessment, your data (without contact details) are transmitted to the following processors:
These providers may retain the transmitted information for a limited period for security and abuse detection, usually up to 30 days, and longer if misuse is suspected.
Your contact details (if provided voluntarily) are not transmitted to Anthropic or xAI — they remain in your browser and are used only locally for the printable overview and the optional booking.
The providers named have their registered offices in the USA. Data are transferred there only on the basis of appropriate safeguards (e.g. standard data protection clauses). With Anthropic PBC and xAI Corp., their data processing agreements (Data Processing Addendum) apply, which automatically form part of their respective terms of use: anthropic.com/legal/data-processing-addendum and x.ai/legal/data-processing-addendum respectively.
The assessment function does not store your health data, photos, reports or results permanently. They are processed when the request is made and are not kept on our servers once the response has been generated. To protect against misuse (automated mass requests), the requesting IP address is briefly counted for technical purposes (up to 15 minutes) and then automatically discarded; this count serves solely to prevent misuse, not for profiling.
Only purchase and invoice data are retained permanently (see sections 10 and 10a). We keep them for as long as the law requires, as a rule 10 years (bookkeeping obligation, Art. 958f of the Swiss Code of Obligations).
If you click “End session & delete all data”, all data stored in your browser (text, photos, contact details) are removed immediately.
If you wish to book an online consultation, you will be redirected to our external booking system (Acuity Scheduling). The provider’s data protection terms applicable there apply in addition. There you may optionally attach the PDF overview you saved earlier yourself — this is done actively by you, not automatically by Lucerna.
Payment is processed by the payment service provider Stripe (Stripe Payments Europe, Ltd., Ireland, or Stripe, Inc., USA). To pay, you are redirected to a secure payment page hosted by Stripe. You enter your payment data (e.g. card number) directly with Stripe — they never reach our server and are not stored by us. We learn whether and in what amount a payment has been made, as well as the details you enter at Stripe for the receipt (e.g. e-mail address) and the country of your payment method. Stripe does not receive any health data. PayPal, Apple Pay, Google Pay and TWINT are offered and processed exclusively via Stripe. We have no direct connection to these providers and receive no payment data from them. If you come to us via a link with a source identifier (e.g. from a particular advertisement), this identifier is stored with Stripe together with the payment. It contains only a short campaign name, no health data and no information about the perspective you chose. Stripe’s privacy policy also applies: stripe.com/de/privacy. Stripe’s data processing agreement automatically forms part of the Stripe Services Agreement: stripe.com/legal/dpa, supplemented by the data transfer addendum for transfers from Switzerland/EEA/UK to the USA: stripe.com/legal/dta.
If you buy a family or company package, we collect your e-mail address, your billing address and, where applicable, the company name via Stripe. For this purpose, Stripe creates a customer account and an invoice and stores the associated voucher codes together with purchase details (e.g. billing country and card country). We send you the codes and the purchase confirmation by e-mail (sent via United Domains, see section 6).
The legal basis is the performance of the purchase contract (Art. 6(1)(b) GDPR) and the statutory retention obligation (Art. 6(1)(c) GDPR). We keep purchase and invoice data for 10 years.
So that we can show you the price in the appropriate currency (CHF, EUR or USD), the country is determined from your IP address when you visit the site. The legal basis is our legitimate interest in a clear price display (Art. 6(1)(f) GDPR).
Without your consent, this website does not use cookies for advertising purposes.
For audience measurement we use Vercel Web Analytics (Vercel Inc., USA; certified under the EU-U.S. Data Privacy Framework). No cookies are set and no data are stored on your device. Only aggregated information is recorded, such as pages viewed, individual steps (e.g. starting the questionnaire or clicking “Start AI overview”), the selected language, the country and the identifier of the advertisement through which you came. Your IP address is used only briefly to create an identifier that changes daily and is not stored. Questionnaire entries and medical reports are never recorded. The legal basis is our legitimate interest in improving our service (Art. 6(1)(f) GDPR). You may object at any time: info@lucerna.care.
Only if you select “Accept” in the notice window do we use the Meta Pixel and the Meta Conversions API of Meta Platforms Ireland Ltd. (Ireland). Purpose: to measure whether our advertisements on Facebook and Instagram lead to page views and purchases, and to target the advertisements accordingly.
_fbp, _fbc).Never transmitted: your questionnaire entries, uploaded reports or photos, results of the overview, name, e-mail, telephone or address.
The legal basis is your consent. Data are transferred to Meta Platforms, Inc. in the USA only with your consent. Meta Platforms, Inc. is certified under the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework (see dataprivacyframework.gov). You may withdraw your consent at any time via “Cookie settings” at the bottom of the page.
You have the right of access, rectification, erasure and restriction of processing of your data, and the right to withdraw consent given with effect for the future. We do not store your health data permanently; for these, you exercise these rights mainly by deleting the data in your browser immediately. For purchase and invoice data you can request access; erasure is only possible after the statutory retention period has expired. If you have any questions, please contact info@lucerna.care. You also have the right to lodge a complaint with a data protection supervisory authority: in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC/EDÖB, www.edoeb.admin.ch), in the EU with the supervisory authority of your country of residence. In Lithuania, this is the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, vdai.lrv.lt).
Lucerna is intended for persons aged 14 and over. Younger persons may use Lucerna only with the consent and under the supervision of a parent or legal guardian.
We will amend this policy as soon as the actual data processing changes (e.g. in the event of changes to payment processing). The version published at the time of your use always applies.