Privacy & terms
Last updated 10 August 2026
Verda is a pilot wellness service by Adalyon Oy (Finland). For anything related to your data, write to privacy@adalyon.com.
Verda is not a medical service: it does not diagnose conditions or recommend treatments, and it does not replace your doctor. If you are unwell, contact a health professional.
What we collect, and why
- Your voice conversation — the audio and a transcript, with AI-generated summaries. This powers your session; our copy is deleted once your result is ready.
- Session details — time, language, the topic you chose, completion or error state, and a coarse device type (like “mobile / iOS”). Used to run the pilot and find where the product flow needs improvement.
- Your result — the result Verda shows you is kept and used only, in de-identified form, to evaluate and improve this pilot.
- Your email, only if you choose to leave it — stored together with a reference to your session so we can write to you about the pilot. Leaving it is always optional.
- Analytics details — the stage you reach, IP address, browser type and, if present, an advert click identifier. Used to understand the full funnel and measure advertising.
Nothing else. No analytics cookies or browser trackers. Measurement is sent by our server. Your session uses an anonymous code — we do not know who you are unless you leave your email.
Authorised members of the Adalyon team may review de-identified session details and results for this pilot's design analysis. Findings recorded in design documents are minimised and de-identified. Your conversation itself is not part of that review — it is deleted as promised above.
Legal basis: your explicit consent when you start the health-related conversation, and separate consent if you submit your email. Essential operations and minimised funnel measurement rest on our legitimate interests. You can withdraw consent or object at privacy@adalyon.com.
Who processes it
- Microsoft Ireland Operations Ltd — hosting and storage in EU data centres (Azure, SharePoint).
- Google Ireland Ltd — paid real-time speech AI; Google does not use this data to improve its products, but may keep limited security logs. Processing may occur inside and outside the EU under contractual safeguards.
- Meta Platforms Ireland Ltd — funnel and advertising measurement, as joint controller; see "Funnel analytics".
No one else. We never sell your data, and the only advertising use is the one below.
Funnel analytics
For every visit, our server tells Meta that the visit happened and how far it got. We share only the milestone, IP address, browser type and any advert click identifier — never your email or anything you told Verda. There is no Meta pixel or cookie. We are joint controllers with Meta; Meta may keep event data for up to two years and may process it outside the EU and UK under approved safeguards. You can object: privacy@adalyon.com.
How long we keep it
Our copy of your conversation is deleted once your result is ready. Session details and your email, if you leave it, are kept until the pilot analysis is complete and for at most 12 months. Google may keep limited security logs; Meta may keep analytics event data for up to two years.
Your rights
You can ask to see, correct, or delete your data, withdraw your consent, or object to advert measurement, at any time: privacy@adalyon.com. You can also complain to your local data protection authority — in Finland, the Office of the Data Protection Ombudsman (tietosuoja.fi); in the UK, the Information Commissioner's Office (ico.org.uk).