Privacy commitment
We process personal data in accordance with the GDPR: lawfulness, fairness, transparency, purpose limitation, minimization, accuracy, storage limitation, integrity and confidentiality. This policy describes the processing related to the website and application; any substantial update will be reflected on this page (last updated: August 2026).
Data controller
The data controller for personal data collected via the website and the "Metrics Lab" application is MYQUITZONE, SARL, 69 rue Saint-Simon, 42000 Saint-Étienne, France, registered under SIREN number 999 359 888. Contact for exercising your rights and questions about this policy: metricslab.app@gmail.com.
Data collected
We collect data necessary for creating the account (email, name, professional information), as well as the data entered as part of your activity (patients, assessments, reports). Health data is processed in strict compliance with professional confidentiality and the applicable regulatory framework.
Purposes and legal basis
Processing aims to provide the service, manage accounts, support, onboarding assistance (including an occasional invitation to a demo or walkthrough), and improve the platform. It is based on contract performance and, where applicable, on your consent or our legitimate interest. These communications do not include promotional offers; you may object at any time (other than messages strictly required for the account) by contacting metricslab.app@gmail.com.
Security and hosting
Personal health data (assessments, patients, examination results, clinical reports, etc.) is hosted on Scalingo, a certified health data hosting platform (HDS), in France. This infrastructure is designed for sensitive processing: restricted access, security measures and backups in line with HDS requirements.
Other data needed for the service to operate (authentication, professional profile, clinic settings, billing where applicable, etc.) is hosted in France on the Supabase platform, with environment separation, encryption, access control and security rules as close as possible to the data when the technology allows.
Subcontractors who process personal data do so on the basis of documented instructions and, where applicable, a processing contract compliant with Article 28 of the GDPR.
Your rights (GDPR)
You have the right to access, rectify, erase, restrict processing and to data portability. You may lodge a complaint with the CNIL. To exercise your rights: metricslab.app@gmail.com.