Privacy Policy
Last updated:4 July 2026
1. Who are we?
This policy describes how TIK Ventures SRL (hereinafter «Aideo», «we») collects, uses and protects your personal data when you use the service accessible at aideo.be (hereinafter the «Service»).
- Data controller: TIK Ventures SRL
- Company number (BCE/KBO) / VAT: BE0781371523
- Registered office: Avenue Louise 231, 1050 Brussels, Belgium
- Data protection contact: privacy@aideo.be
We process your data in accordance with Regulation (EU) 2016/679 («GDPR») and the Belgian Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.
2. What is Aideo, and who are the data subjects?
Aideo is a home care-monitoring journal connecting the family of an elderly person who remains at home (the «care recipient») with the caregivers who visit their home (nurse, physiotherapist, home help, doctor, relatives). Several categories of persons are concerned:
| Data subject | Role | Data processed |
|---|---|---|
| The family member (account holder) | Creates the account, manages the monitoring, pays the subscription | Identity, email, password, billing data |
| The care recipient (elderly person being monitored) | Person whose condition is observed | Identity, date of birth (optional), health/well-being data |
| The caregiver | Records their observations during a visit | Name, declared role, observations entered |
| The website visitor | Views the landing page or contacts Aideo | Browsing data (with consent), name, email, message |
3. What data do we collect and why?
a) Family account data
- Data: name, email address, password (managed securely via our authentication processor).
- Purpose: to create and secure your account, and to enable you to access the Service.
- Legal basis: performance of the contract (Art. 6(1)(b) GDPR).
b) Care recipient data
- Data: surname, first name, and optionally date of birth, entered by the family.
- Purpose: to identify the person being monitored and enable caregivers to know whose home they are in.
- Legal basis: performance of the contract (Art. 6(1)(b) GDPR).
c) Health and well-being data (special category)
- Data: at each visit, the caregiver may record up to four indicators — mood, energy, appetite, pain — as well as a free-text note. This information constitutes data concerning health within the meaning of Art. 9 GDPR.
- Purpose: to enable the family to follow the development of their loved one’s well-being and to feel reassured remotely.
- Legal basis: explicit consent (Art. 9(2)(a) GDPR), obtained by the family from the care recipient or their legal representative (see § 4).
d) Payment data
- Data: managed entirely by our payment provider. Your bank details never pass through our servers.
- Legal basis: performance of the contract (Art. 6(1)(b)) and statutory accounting obligation (Art. 6(1)(c)).
e) Browsing data (landing page)
- Data: pages visited, duration, traffic source, anonymised identifier, collected via Google Analytics 4, Meta Pixel (Meta Platforms Ireland Limited) and Microsoft Clarity (Microsoft Ireland Operations Limited).
- Purpose: audience measurement, analysis of browsing behaviour (heatmaps, session recordings), improvement of the Service, advertising targeting (retargeting) on Google and on the Meta platforms (Facebook, Instagram).
- Legal basis: consent (Art. 6(1)(a) GDPR), obtained via our cookie banner before any cookies are set.
f) Contact form data
- Data: name, email, message.
- Legal basis: legitimate interest in processing your request (Art. 6(1)(f)).
4. Consent for the care recipient: an essential point
Aideo processes data concerning a person — the care recipient — who is generally not the user of the Service. This is why:
- When creating the care recipient’s profile, the account holder represents and warrants that they are authorised to set up this monitoring and to process the care recipient’s data, including their health data. This declaration is collected via a dedicated checkbox, which is not pre-ticked.
- It is the family’s responsibility to ensure the care recipient’s consent (or that of their legal representative) and to inform them of the existence of this monitoring.
5. The caregiver’s status
The caregiver who scans the QR code and fills in the form does not have an account and does not install any application. They act as a one-off contributor: they provide an observation that is passed on to the family. The entry page informs them that their observations will be shared with the care recipient’s family.
6. How long do we keep your data?
| Data | Retention period |
|---|---|
| Visit observations (indicators + notes) | Kept for as long as necessary to monitor your loved one. Deleted on request within one month. |
| Family account | Kept until cancellation. Deleted on request within one month. |
| Care recipient profile and associated visits | Deleted on request within one month. |
| Billing data | 7 years (Belgian accounting obligation). |
| Contact form | 12 months maximum. |
| Browsing data (GA4, Meta Pixel, Clarity) | 26 months maximum. |
Any deletion request should be sent to privacy@aideo.be. We respond within one month.
Note: in your care log, only visits from the last 7 days are displayed by default. This is simply a display filter; it does not correspond to the actual retention period of your data.
7. Who is your data disclosed to?
We never sell your data. We use technical processors that act on our instructions:
| Processor | Role | Location |
|---|---|---|
| Supabase LTD. | Database and authentication | Singapore entity — data hosted in the EU (Frankfurt) |
| Vercel Inc. | Application hosting | Company established in the United States |
| Stripe | Payment processing | European entity (Ireland) |
| Resend | Email delivery | Company established in the United States |
| Google LLC | Audience measurement and retargeting (GA4) | Company established in the United States |
| Meta Platforms Ireland Ltd. | Advertising targeting (Meta Pixel — Facebook, Instagram) | European entity (Ireland) / transfers to Meta LLC (United States) |
| Microsoft Ireland Operations Ltd. | Behavioural analysis (Clarity — heatmaps, sessions) | European entity (Ireland) / transfers to Microsoft Corp. (United States) |
We may also disclose your data where required to do so by law (competent judicial or administrative authority).
8. What are your rights?
In accordance with the GDPR, you have the following rights: access, rectification, erasure, restriction of processing, portability, and objection. Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before its withdrawal.
To exercise these rights, write to us at privacy@aideo.be. We respond within one month.
You also have the right to lodge a complaint with the Data Protection Authority (APD/GBA): Rue de la Presse 35, 1000 Brussels — contact@apd-gba.be — www.autoriteprotectiondonnees.be.
9. Security
We implement appropriate technical and organisational measures: encryption of connections (HTTPS), secure authentication, hosting of the database within the European Union, access segregation by family (Row Level Security), and no storage of bank details on our servers.
10. Cookies
Strictly necessary cookies
These cookies ensure the operation of the Service (authentication session, staying logged in). They do not require your prior consent because they are essential to the Service (Article 129 §1 of the Belgian Act of 13 June 2005 on electronic communications).
Audience-measurement cookies
We use Google Analytics 4 (Google LLC, United States) to measure our site’s audience and improve our Service. We also use Microsoft Clarity (Microsoft Ireland Operations Limited) to analyse browsing behaviour (heatmaps, anonymised session recordings). These tools are only activated with your prior consent, collected via our cookie banner.
Advertising and targeting cookies
If you have consented to their use, these cookies allow us to show you relevant advertisements on third-party platforms, in particular Google and the Meta platforms (Facebook, Instagram). They are only activated after acceptance via our cookie banner.
Managing your preferences
You can change your choices at any time by clicking Manage my cookies at the bottom of the page. Withdrawing consent does not affect the lawfulness of processing carried out before that withdrawal.
11. Amendments
We may amend this policy. Any substantial amendment will be notified to you by email or via the Service.