Privacy Policy

MASK-air

Terms of Use for the MASK-air mobile app

Version 6 of the Terms of Use – 01/2026

Introduction

The MASK-air mobile app (“the App”) is owned and distributed by MASK-air SAS, located at 273 avenue d’Occitanie, 34090 Montpellier, France. The App was developed by Peercode BV, Oudenhof 4C, 4191 NW Geldermalsen, Netherlands.

Use of the App

The App is designed for use on a mobile phone. It is not suitable for tablets or computers. By installing and using the App, you acknowledge that you are responsible for:

• keeping your operating system and the App up to date (you must not disable automatic updates);

• ensuring that you are always using the latest version of the App available in the App Store;

• keeping your device in good working order, including ensuring it has sufficient battery charge and that the required features (such as a camera) are available;

• protecting your device against unauthorised access through appropriate security measures.

Neither MASK-air SAS nor Peercode BV can be held liable for any malfunctions or damage caused to your device by the installation or use of the App. If you encounter any problems when downloading or updating the App via the App Store, you may contact MASK-air SAS.

The App may contain links to third-party websites or information sources. These are provided solely for your convenience. MASK-air SAS has no control over their content and accepts no liability for their use.

Legal Framework

These Terms of Use are governed by and construed in accordance with the laws of France. Any disputes arising from these Terms of Use shall be submitted to the competent courts of Montpellier, France, without prejudice to mandatory protections under applicable European and local law.

Purpose of the App

The App is designed to help you monitor allergic rhinitis and asthma by recording symptoms, medication use and their impact on daily life. It is intended to serve as an administrative support tool and does not replace medical advice. You must not alter or discontinue your treatment without consulting a qualified healthcare professional.

Privacy and Data Protection

Your personal data, including your health data, will be processed by MASK-air SAS, the data controller, in accordance with Regulation (EU) 2016/679 (GDPR). The processing of your personal data is based on your consent, which may be withdrawn at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal. The App does not carry out automated decision-making or profiling within the meaning of Article 22 of the GDPR; all information provided is intended to serve as a tool to assist you and your healthcare professional.

The categories of data collected via the App include:

• Profile information (gender, year of birth, country of residence and general characteristics of the allergy).

• Symptom records (intensity via a visual analogue scale, recorded at most once a day).

• Impact on daily life (via yes/no/don’t know questions).

• Medication records (from a predefined list or via free text entry). For your information, the list of medical treatments is based on the official lists provided by the health authority in your country of residence.

• Supplementary questionnaires (based on validated scientific tools).

• Optional geolocation data (recorded no more than once a day, if enabled on your device).

If you choose to create an account using an email address and password, these credentials are stored in a database separate from your health data and protected by irreversible encryption. They are used solely to restore your history if necessary.

All information you enter is self-reported. It may be used by healthcare professionals for information purposes only, but its accuracy and completeness cannot be guaranteed.

The data may also be made available to research partners, as described in the ‘Reuse of data’ section.

Retention period

• Your personal data will be retained for as long as you use the App and until you request its deletion.

• If you uninstall the App or delete your account, your personal data will be deleted within thirty (30) days, unless a longer period is required by law.

• For scientific research purposes, pseudonymised data may be retained for a maximum period of fifteen (15) years.

You may exercise your GDPR rights – including access, rectification, erasure, portability (including in a standard format such as CSV) and restriction of processing – by contacting the Data Protection Officer (DPO) to oversee compliance. The DPO can be contacted at dpo@maskair.com

Use by minors

This App is not intended for use by persons under the age of 18. If you are a parent or guardian and learn that your child has provided personal information via the App, please contact MASK-air SAS via the contact details above so that appropriate measures can be taken.

Security

MASK-air SAS and its subcontractors take measures to protect your data, including encryption and secure hosting. The database is hosted by OVH, a certified health data host (HDS) based in France, and all transfers are protected by HTTPS.

A secure mechanism is provided for sharing information with a healthcare professional during a consultation: the user can scan a QR code from the MASK-air website, which temporarily transfers the relevant data to the professional’s computer. This transfer process involves inherent risks. .

Your data is stored securely and encrypted in transit (TLS). The hosting provider, TransIP, is ISO/IEC 27001 and NEN 7510 certified and is based in the Netherlands. Data will not be shared with third parties, unless required by law or at your explicit request (e.g. data portability).

In the event of a personal data breach, MASK-air SAS will notify the relevant supervisory authority as soon as possible and, where feasible, within 72 hours of becoming aware of it, unless the breach is unlikely to result in a risk to the rights and freedoms of natural persons.

You are responsible for securing your device, including protecting it against unauthorised access.

Cookies

The App uses only temporary “session cookies” for connectivity purposes. These cookies are secure, cannot be used to identify you personally and are automatically deleted when you close the App. Their use is subject to your consent.

For more information on cookies, please visit https://allaboutcookies.org/ and https://europa.eu/youreurope/business/dealing-with-customers/data-protection/online-privacy/index_en.htm

Your rights

As a user, you have the right to access, rectify and erase your data, as well as to restrict its processing or object to it. You also have the right to data portability and to lodge a complaint with a supervisory authority.

Requests can be sent to the contact details provided above. MASK-air SAS will respond within one month.

Reuse of data

Unless objectyou , the pseudonymised data collected via the App may be reused by MASK-air SAS or made available to researchers (academic or industrial) for scientific purposes. All research partners must comply with equivalent data protection safeguards.

You may object to this at any time via . In this case, your data will no longer be used for research, but may be archived at .

Information on studies using MASK-air data may be made available via the MASK-air website.

Continuity of services

In the event of an acquisition, merger or transfer of assets involving MASK-air SAS, you will be informed of the impact on the ownership and control of your personal data.

Updates and changes

MASK-air SAS reserves the right to update the App, modify its features or revise these Terms of Use to reflect technological, regulatory or commercial developments. All information essential for medical purposes will be made available in your language. The updated Terms will be available on the official MASK-air website.

Intellectual property

All rights, including copyright and database rights relating to the App, are the property of MASK-air SAS. You are authorised to view the App and to save or print information for your personal use. Any reproduction, redistribution or linking to the App or its content for other purposes requires the prior written consent of MASK-air SAS.

Version Control

This version of the Terms of Use (Version 6 – 01/2026) supersedes all previous versions. The latest version will always be available in the MASK-air app.