Privacy

What we collect, why, and what we never collect.

Stoaa is operated by Stoaa Health, SIA (registration 40203751807), Riga, Latvia, acting as the data controller under GDPR. Contact: support@stoaa.app.

This site (stoaa.app)

On the marketing site, we collect what you submit through forms and the page-view counts our analytics tool returns. We use Plausible Analytics, which is cookieless and does not store personal identifiers, so you will not see a cookie banner here.

Waitlists, pilot applications, and investor requests

If you join a waitlist, apply for the therapist pilot, or request investor material, we store the contact information, consent time, and optional details you submit. We use that information only to manage and respond to your request. We do not persist your IP address or an IP-derived identifier.

Form records are stored in Cloudflare D1 with an EU jurisdiction. Resend processes the related confirmation, notification, and document-delivery emails. We retain a record only while it is needed to manage the request or meet applicable obligations. You can request deletion at any time by emailing the address above.

What we never collect on this site

  • No third-party advertising cookies.
  • No fingerprinting scripts.
  • No social-platform pixels.
  • No session replay.

The Stoaa app (separate document)

The Stoaa mobile application has its own privacy policy, with the stricter clinical-data rules required by GDPR Article 9. It will be published with the app's TestFlight release. In short: anonymous identity by default, five granular consents for clinical data, 15-year retention for clinical records (Latvian law), therapist-mediated FHIR export only, and a hard "we do not write directly to state health systems" rule.

Your rights under GDPR

You can request access, correction, deletion, restriction, and portability of your personal data. Email support@stoaa.app with the subject "GDPR request" and we will respond within 30 days. You can also complain to the Latvian Data State Inspectorate (Datu Valsts Inspekcija) if you believe we mishandled your data.

Changes

We will update this policy as the product evolves and post the change date here. Last updated: 27 August 2026.