Privacy Policy

Who we are

AI Health Guide is published by Kulik Media UG. We operate ai-health-apps.com, an editorial site publishing independent reviews of AI health platforms for consumers and clinicians.

Editorial contact: [email protected]. For legal notices and the company address, see our imprint.

What data we collect

Usage analytics (Google Analytics 4)

With your consent, we use Google Analytics 4 to understand how visitors use the site — which pages are read, how long visits last, and which links are clicked. This helps us improve our content. GA4 stores session and event data including:

• Page views and time on page
• Scroll depth events
• Outbound link clicks (including affiliate links)
• Approximate location (country / region only — not precise location)
• Device / browser type
• Referrer (the previous page that brought you here)

GA4 does not store directly-identifying personal data unless you provide it to us (e.g., by emailing). IP addresses are truncated by Google before storage. We do not use Google Signals, cross-device tracking, or remarketing.

If you reject the consent banner, GA4 fires no events and stores no data for your visit.

Affiliate-link clicks

When you click an affiliate link marked with ↗, we record the click event in GA4 (if consented). The affiliate network (e.g. Impact, CJ Affiliate, FlexOffers) sets its own cookies on the partner's domain to attribute any subsequent purchase or signup. Those cookies are governed by the partner's privacy policy, not ours.

Newsletter / contact email

If you email us, we receive your email address and the contents of your message. We use this only to respond to you. We do not run a newsletter service at this time; if we add one in future, we will update this policy.

Server logs

Our hosting provider (Cloudflare Pages) keeps standard server access logs including IP addresses, user agents, and request timestamps. These are retained briefly for security and abuse-prevention purposes. We do not access these logs for analytics purposes.

How we use cookies

Cookies are small data files stored in your browser. We use:

• Strictly-necessary cookies: a small cookie-consent entry in localStorage that remembers your consent choice so we don't re-prompt you on every visit. This is set even if you reject other cookies.
• Analytics cookies (with consent): GA4 sets _ga, _ga_* cookies for session continuity and visitor identification. These are set only after you click "Accept" on the consent banner and expire after 2 years.
• UI-state cookies: top-bar-dismissed and mobile-bar-dismissed in sessionStorage remember if you dismissed the featured-product banner in the current session. These are not tracking cookies.

Affiliate-network cookies (Impact, CJ, FlexOffers, etc.) may be set on the partner's domain after you click an affiliate link. Those cookies are first-party for the partner, not for us, and are governed by the partner's privacy policy.

Legal basis (GDPR / UK GDPR)

We rely on the following legal bases for processing personal data:

• Consent (GDPR Art. 6(1)(a)): for analytics cookies and any optional tracking. You can withdraw consent at any time by clearing your browser's cookie-consent entry or visiting this page and clicking "Manage cookie preferences" below (if implemented).
• Legitimate interests (GDPR Art. 6(1)(f)): for hosting infrastructure access logs and basic security monitoring.
• Contract / pre-contract (GDPR Art. 6(1)(b)): for responding to your email if you contact us.

Your rights

Depending on where you live, you have rights under GDPR, UK GDPR, the California Consumer Privacy Act / California Privacy Rights Act (CCPA / CPRA), Washington's My Health My Data Act, or other applicable privacy laws. These rights typically include:

• Access: request a copy of personal data we hold about you
• Rectification: ask us to correct inaccurate data
• Erasure: ask us to delete your data ("right to be forgotten")
• Restriction: ask us to limit how we process your data
• Portability: receive your data in a machine-readable format
• Objection: object to processing based on legitimate interests
• Withdraw consent: revoke consent for analytics at any time
• Lodge a complaint: with your local data-protection authority

To exercise any of these rights, email [email protected]. We respond within 30 days.

Data we do NOT collect

For clarity:

• We do not set advertising cookies or run ads on this site.
• We do not sell, rent, or share your personal data with third parties for marketing.
• We do not use cross-site / cross-device tracking, remarketing, or ad-personalization.
• We do not collect health information you input on this site (we don't run forms that solicit health data).
• We do not use chat widgets, heatmap tools, or session-replay tools.

Third-party services

We use the following third-party services that may process limited visitor data:

• Cloudflare Pages (hosting) — receives IP addresses and request metadata for serving content and basic security. Cloudflare privacy policy ↗
• Google Analytics 4 (analytics, with consent) — Google privacy policy ↗
• Google Fonts (typography) — fonts are loaded from Google's CDN. Google privacy policy ↗
• Affiliate networks (when you click an affiliate link) — Impact, CJ Affiliate, FlexOffers, Acceleration Partners, and partner-direct programs. Each network has its own privacy policy linked from its homepage.

Data retention

• GA4 analytics data: retained for 14 months by default, then automatically deleted by Google.
• Email correspondence: retained for as long as needed to respond and meet legal record-keeping obligations (typically up to 2 years).
• Server access logs: retained per Cloudflare's standard log-retention windows (typically days, not months).

International data transfers

Some of our service providers (Google, Cloudflare) operate globally and may transfer data outside your country. We rely on Standard Contractual Clauses (SCCs) and the EU-US Data Privacy Framework, where applicable, for these transfers.

Children's privacy

Our content covers AI health platforms, some of which are targeted at adults (online therapy, telehealth, prescription medications). The site is not directed at children under 16. We do not knowingly collect data from children under 16. If you believe a child has provided personal information to us, please contact us so we can delete it.

Changes to this policy

We may update this policy as our practices change or as the law requires. The "Last updated" date at the top of this page reflects the latest revision. Material changes will be flagged on the homepage for at least 30 days.

Contact

Questions about this policy or your data: [email protected].

Operator note: this template policy was generated as part of the site's GDPR consent-banner implementation. Before relying on it for legal compliance, the operator should have it reviewed by counsel familiar with the relevant jurisdictions (Germany, EU, UK, US/California/Washington if you target users there). Replace this template with reviewed legal copy.