Terms of Use of the mobile App MASK-air

ToU Version 6 - 01/2026

Presentation

The MASK-air mobile application (“the App”) is owned and distributed by MASK-air SAS, located at 273 avenue d’Occitanie, 34090 Montpellier, France. The App has been produced by Peercode BV, Oudenhof 4C, 4191 NW Geldermalsen, The Netherlands.

Use of the App

The App is designed for use on a mobile phone. It is not suitable for tablets or computers. By installing and using the App, you acknowledge that you are responsible for:

• keeping your operating system and the App updated (you should not disable automatic updates);
• ensuring you are always using the latest version of the App as available in the App Store;
• maintaining your device in proper working order, including sufficient charging and availability of required features (such as a camera);
• protecting your device against unauthorised access through appropriate security measures.

Neither MASK-air SAS nor Peercode BV can be held responsible for malfunctions or damage to your device caused by installation or use of the App. If you encounter issues with downloading or updating the App through the App Store, you may contact MASK-air SAS.

The App may contain links to third-party websites or information sources. These are provided for your convenience only. MASK-air SAS has no control over their content and assumes no responsibility for their use.

Legal framework

These Terms of Use are governed by and shall be interpreted in accordance with the laws of France. Disputes arising from these Terms of Use will be submitted to the competent courts of Montpellier, France, without prejudice to mandatory protections under applicable European and local law.

Purpose of the App

The App is designed to help you monitor allergic rhinitis and asthma by recording symptoms, medication use, and their impact on daily life. It is intended as an administrative support tool and does not replace medical advice. You should not alter or discontinue treatment without consulting a qualified healthcare professional.

Privacy and Data Protection

Your personal data, including health data, will be processed in accordance with Regulation (EU) 2016/679 (GDPR). The processing of your personal data is based on your consent, which may be withdrawn at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal. The App does not carry out automated decision-making or profiling within the meaning of Article 22 of the GDPR; all information provided is intended as an advisory support tool for you and your healthcare professional.

Categories of data collected through the App include:

• Profile information (gender, year of birth, country of residence, and general allergy characteristics).
• Symptom records (intensity via a visual analogue scale, recorded at most once per day).
• Impact on daily life (via yes/no/don't know questions).
• Medication records (from a predefined list or free-text entry). For information, the list of medicinal treatments is based on the official lists provided by the health authority in your country of residence.
• Complementary questionnaires (based on validated scientific tools).
• Optional geolocation data (recorded at most once per day, if enabled on your device).

If you choose to create an account using an email address and password, these credentials are stored in a separate database from your health data and protected by irreversible encryption. They are used only to restore your history if required.

All information you enter is self-reported. It may be used by healthcare professionals for information purposes only, but accuracy and completeness cannot be guaranteed.

Your data is stored securely and encrypted in transit (TLS). Our hosting provider, TransIP, is ISO/IEC 27001 and NEN 7510 certified and is based in the Netherlands. Data will not be shared with third parties except where required by law or at your explicit request (e.g. portability). Data may also be made available to research partners, but only with your explicit consent as described in the section “Data Reuse”.

Retention period

• Your personal data will be kept as long as you use the App and until you request deletion.
• If you uninstall the App or delete your account, your personal data will be deleted within thirty (30) days, unless a longer period is required by law.
• For scientific research purposes, pseudonymised data may be retained for a maximum of fifteen (15) years.

You may exercise your GDPR rights – including access, rectification, deletion, portability (including in a standard format such as CSV), and restriction of processing – by contacting the Data Protection Officer (DPO) to oversee compliance. The DPO can be reached at dpo@maskair.com

Use by Minors

This App is not intended for use by individuals under the age of 18. If you are a parent or guardian and become aware that your child has provided personal information through the App, please contact MASK-air SAS via the above contact so that appropriate action can be taken.

Security

MASK-air SAS and its subcontractors take measures to protect your data, including encryption and secure hosting. The database is hosted by OVH, a certified health data host (HDS) located in France, and all transfers are protected by HTTPS.

A secure mechanism is provided for sharing information with a healthcare professional during a consultation: the user may flash a QR code from the MASK-air website, which temporarily transfers relevant data to the professional’s computer. This transfer process carries inherent risks. OVH is responsible for infrastructure-level security, while MASK-air SAS and Peercode BV oversee the overall security of the App, including regular checks of the QR code transfer function.

In the event of a personal data breach, MASK-air SAS will notify the competent supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of the breach, unless the breach is unlikely to result in a risk to individuals’ rights and freedoms.

You are also responsible for securing your device, including protecting it against unauthorised access.

Cookies

The App uses only temporary “session cookies” for connectivity purposes. These cookies are secure, cannot be used to identify you personally, and are deleted automatically when you close the App. Their use is subject to your consent.

For more information about cookies, you may consult https://allaboutcookies.org/ and https://europa.eu/youreurope/business/dealing-with-customers/data-protection/online-privacy/index_en.htm

Your Rights

As a user, you have the right to access, rectify, and delete your data, as well as to restrict or object to its processing. You also have the right to portability of your data and to lodge a complaint with a supervisory authority.

Requests may be sent to the contact listed above. MASK-air SAS will respond within one month.

Data Reuse

With your explicit consent, pseudonymised data collected via the App may be reused by MASK-air SAS or made available to researchers (academic or industrial) for scientific purposes. All research partners must comply with equivalent data protection safeguards.

You may withdraw your consent at any time. In this case, your data will no longer be used for research, though it may be retained where required for legal or statistical purposes.

Information on studies using MASK-air data may be made available through the MASK-air website.

Continuity of Services

In the event of an acquisition, merger, or transfer of assets involving MASK-air SAS, you will be informed of the impact on the ownership and control of your personal data.

Updates and Changes

MASK-air SAS reserves the right to update the App, modify its functionalities, or revise these Terms of Use to reflect technological, regulatory, or business developments. All essential information for medical purposes will be made available in your language. Updated Terms will be made available on the official MASK-air website.

Intellectual Property

All rights, including copyright and database rights relating to the App, are owned by MASK-air SAS. You are authorised to consult the App and save or print information for personal use. Any reproduction, redistribution, or linking of the App or its content for other purposes requires prior written permission from MASK-air SAS.

Version Control

This version of the Terms of Use (Version 6 - 01/2026) supersedes all previous versions. The latest version will always be made available in the MASK-air application.