Privacy Policy

Closed beta · Last updated 25 October 2026

This policy explains how Pandu Health handles personal information when you use the website, send feedback or subscribe to emails.

1. Who is responsible

The individual operator identified in the Legal Notice is the controller responsible for the processing described here. Contact hello@panduhealth.com with questions or requests about your information.

2. Visiting the website

Your browser sends technical information needed to deliver the website, including your IP address, the requested page, request time and browser information. Our hosting provider, Vercel, processes this information to deliver the website and investigate errors or security incidents. Forms and beta access also use a value derived from your IP address to limit repeated requests and reduce abuse.

Vercel Speed Insights measures page loading and responsiveness, together with technical information about the visit, to help us find slow pages. We rely on our legitimate interest in operating a secure, functioning website and improving its performance under Article 6(1)(f) GDPR. Technical records are retained for the applicable service retention period and, where needed, until an error or security incident has been investigated.

3. Beta access and browser preferences

An invitation link or tester password unlocks the closed beta. A cookie remembers that your browser has access for up to 30 days. Browser storage also remembers your privacy choices and certain actions within the current tab, such as your last directory search and map view. The Cookie Policy lists these items and their lifetimes.

4. Maps and your location

Choosing “Use my location” asks your browser for permission to share your position. We use it to show nearby providers. The coordinates are held in session storage in your browser and are not saved to Pandu’s database. Switching the feature off removes the saved coordinates.

Maps load from OpenFreeMap, operated by Hyperknot Software Kft. in Hungary. Your browser sends requests to that service, including your IP address and requests for the map area being displayed. These requests can indicate the area you are viewing. We rely on our legitimate interest in displaying provider locations under Article 6(1)(f) GDPR. Your device location is used after you choose to share it. See the OpenFreeMap Privacy Policy.

5. Usage statistics without cookies

Until you enable optional analytics in the cookie settings, PostHog counts visits and selected website interactions without setting cookies and without using browser storage. In this mode PostHog derives a daily identifier on its servers from your IP address, browser information, the website address and a secret value that changes every day and is deleted afterwards. The identifier cannot be traced back to you and is not linked across days. No approximate location is derived in this mode. The measurement sends page addresses, which may include search parameters, page titles, referrers, language and screen size.

We also count actions such as opening a guide or tab, reaching a warning section, clicking a provider contact link and submitting a feedback or newsletter form. Events may include the guide, tab, provider and contact method involved. Feedback messages, attachments and reply email addresses are not included in these event properties. Avoid entering personal information in the directory search.

We use these statistics to understand which information people use and where the website needs improvement. We rely on our legitimate interest in evaluating and improving the website under Article 6(1)(f) GDPR. Records remain subject to the analytics service’s retention settings. We review retained data for continued relevance and remove information no longer needed for these purposes. You can contact us to object to processing based on legitimate interests.

6. Optional PostHog analytics and session replay

If you enable optional analytics, PostHog measures page visits, selected interactions, heatmaps and technical errors, and can record how pages are displayed and used. Session replay shows scrolling, taps and clicks. Form inputs are masked in recordings. Because this website contains health guides, activity records may reveal an interest in particular health conditions or services.

PostHog uses its EU cloud service and stores visitor and session identifiers in cookies and local storage. We use the information to improve the website. On-site surveys, where shown, also help us assess usability. Please keep medical details out of these surveys. Feedback-form messages and attachments are not sent to PostHog as analytics events. PostHog’s service providers are described in its data processing terms.

We rely on your consent under Article 6(1)(a) GDPR and § 25 TDDDG where applicable. Where the activity constitutes health data, the consent also covers its processing under Article 9(2)(a) GDPR. Records and recordings are retained according to the project’s configured retention settings and deleted when no longer needed to investigate usability issues or errors.

You can use Pandu without PostHog. Change or withdraw this consent at any time through Cookie settings. Turning the option off stops further PostHog collection in your browser. Withdrawal does not affect processing that was lawful before you withdrew consent.

7. Feedback and correspondence

When you send feedback, we process your message, any provider or rating you specify, your optional reply email and any attachments. The form asks for explicit consent because your submission may contain health information. We record the time and version of that consent. The legal bases are Article 6(1)(a) GDPR and, for health information, Article 9(2)(a) GDPR.

Messages are stored in our Neon database and sent to our mailbox through Resend. Attachments are sent by email and retained with the message. Our mailbox is hosted by Hostinger, which processes correspondence and attachments to provide the email service. We use feedback privately to review the issue, make relevant corrections and reply where appropriate. Your message and attachments are not published, and your reply address is not added to our mailing list.

We review feedback after the issue has been resolved and delete personal information no longer needed to handle it. Records needed for legal obligations or claims are retained until those requirements end. You can withdraw consent or request deletion at hello@panduhealth.com. Ordinary email enquiries are handled on the basis of our legitimate interest in responding under Article 6(1)(f) GDPR, or Article 6(1)(b) where they concern an agreement with you.

8. Launch notification and newsletter

A launch-notification request is used to confirm your email address and send the launch email. A newsletter subscription is used to send the travel-health emails described at sign-up. Both requests are confirmed through an email link. We retain the address, subscription source, relevant timestamps, consent version and technical abuse-prevention information.

Subscription records are held in Neon. Confirmed contacts are also held in Resend, operated by Plus Five Five, Inc., for delivery and subscription management. We rely on consent under Article 6(1)(a) GDPR. Unsubscribe through a newsletter’s link or write to hello@panduhealth.com. Unsubscribing stops further subscription emails. A limited suppression record may remain to respect your choice, along with records needed to demonstrate consent or handle legal claims.

We retain active subscriptions until they end. Unconfirmed requests and completed launch-notification records are reviewed and removed when no longer needed. Email delivery and subscription-status information is processed to operate the mailing list.

9. Information about listed professionals

Some directory information identifies individual healthcare professionals. It may include names, professional roles, business contact details, practice locations and publicly available service information. Sources include public business listings, official registers, provider publications and published reviews. We rely on our legitimate interest in helping travellers find healthcare services and maintaining an accurate directory under Article 6(1)(f) GDPR.

We retain relevant professional information while the listing remains current. Professionals can contact hello@panduhealth.com to request access, corrections or removal, or to object to processing. We assess requests against the applicable legal requirements.

10. Service providers and international transfers

We use Vercel for hosting and performance measurements, Neon for database storage, Resend for email delivery, Hostinger for our mailbox, PostHog for usage statistics and for optional analytics and replay, and OpenFreeMap for maps. Our database is configured in Singapore, and PostHog uses its EU cloud service. Some providers and their service partners operate outside the European Economic Area, including in the United States.

International processing is subject to the safeguards required by applicable data-protection law, including EU standard contractual clauses where relevant. Contact hello@panduhealth.com for information about the providers, processing locations and applicable safeguards, or to request a copy of relevant transfer safeguards.

11. External services and accounts

Provider links may open WhatsApp, Google Maps or a provider’s own website. These services receive information when you use them and handle it under their own privacy policies. WhatsApp messages are exchanged directly with the provider through that service. User accounts and saved-provider features are disabled during this beta.

12. Your rights

Depending on the applicable law and circumstances, you can request access, correction, deletion, restriction of processing or a portable copy of your information. You can object to processing based on legitimate interests and withdraw consent with effect for the future. Write to hello@panduhealth.com.

You can complain to a data-protection authority. For the operator in Berlin, the authority is the Berlin Commissioner for Data Protection and Freedom of Information. Where Indonesian data-protection law applies, you may also contact us to exercise the rights it provides. Health information receives special protection under Indonesia’s Personal Data Protection Law, Law 27/2022.

13. Updates

We update this policy when processing changes. The date above identifies the latest version. Where a change requires new consent or a separate notice, we will provide it.