Privacy

Privacy Policy

CardiOX is a personal project, run privately. This page describes, plainly and completely, the data processed by the cardiox.ac website, the newsletter and the CardiOX ESV application (iOS and web versions), and your rights.

Last updated: 18 October 2026.

The cardiox.ac website

The site is hosted by Kinsta on Google Cloud infrastructure, in a data centre located in Frankfurt (European Union), and served exclusively over HTTPS.

It contains no advertising, no third-party audience analytics and no advertising trackers. The only cookies are technical: the login session of authorised accounts and the language preference.

Like any host, Kinsta briefly keeps technical logs (IP address, requested page, date) for security and operational purposes; they are not used for anything else.

Newsletter

The “Stay informed” subscription is voluntary and uses double opt-in: your e-mail address is only stored after you click the confirmation link. It is used solely to notify you of new publications on the site.

E-mails are sent through the MailPoet service (Automattic), which processes the address on our behalf. No open or click tracking is enabled. Every e-mail includes a one-click unsubscribe link; your address is then removed from the list.

CardiOX ESV application (iOS)

The CardiOX ESV application works entirely offline. It does not collect, store or transmit any personal data, health data or usage data. It contains no account, no advertising, no analytics and no third-party tracker.

Settings (language, display, favourites, quiz progress, acceptance of the disclaimer) are stored only on the device and deleted with the application. ECG photographs imported in the “From ECG to site” mode are displayed on screen, never saved or sent.

Any purchases are handled by Apple under its own terms; we receive no payment data.

CardiOX ESV application (web version, cardiox.ac/esv/)

Access is personal. When you register, we store your name, your e-mail address and your password (kept in encrypted form, never in clear text); access is opened after validation by the author.

A log of openings (account, date, time — the last thousand) is kept to trace access. This data is used only to manage access; it is neither shared nor used for commercial purposes.

E-mails are limited to the acknowledgement of your request and the confirmation that access has been opened. The web application itself transmits no usage data; its settings stay in your browser.

No patient data

The atlas ECG tracings are modelled from the literature; the anatomy comes from an anonymised examination. No patient data is processed by the application or the site.

External links and support

The site links to third-party services (Ko-fi to support the project, LinkedIn, Obsidian, Zotero, the Apple App Store). Their own privacy policies apply as soon as you visit them; we receive no payment data from Ko-fi.

Your rights

You may at any time request access to, rectification or deletion of your account, your newsletter subscription and the log entries concerning you, by writing to contact@cardiox.ac. You may also lodge a complaint with the Belgian Data Protection Authority.

Data controller: Olivier Xhaet, cardiologist-electrophysiologist — contact@cardiox.ac.