Privacy policy
As of 13 October 2026. Applies to the weforme app at weforme.app.
This translation is provided only to make it easier to read. Only the German version is legally binding, including technical terms.
1Controller
Degeler Consulting e.U., Wien, Austria. Contact for all data protection requests: privacy@degeler.consulting. General support requests: weforme@degeler.consulting (reply within 5 business days).
2What weforme is and what it is not
weforme is a free initiative for shared care documentation for relatives and carers of people with ME/CFS. The app has no scientific or medical significance, is not a medical device, and does not replace medical, therapeutic, or nursing advice. The app does not give any recommendations, forecasts, or reminders; it only documents and describes, in hindsight, what you have entered yourself.
3Which data we process
Account
email address, a freely chosen display name, password (stored solely as an argon2id hash), the time of email confirmation and of consent to this privacy policy.
Care circle
first name or nickname of the person being cared for, optional severity rating (Bell scale, level according to the NICE guideline), care profile (sensitivities to stimuli, known triggers, routines, communication signs, emergency plan, emergency contacts, personal details, notes), diary entries with freely definable categories, wellbeing & symptoms, crash documentation, medication plan (dosage, usual intake, note on personal tolerance/reaction; the actual intake is documented via diary entries), noticeboard entries, recorded positive moments, and pacing data (cycles, attention times, next-day markers, timer settings). This care data is health data within the meaning of Art. 9 GDPR and concerns both the person being cared for and, indirectly, the carers doing the documentation.
Evaluations
From this data the app calculates purely descriptive, retrospective statistics (e.g. averages, frequencies, previous-day/next-day comparisons in the pacing module). These evaluations happen solely on our server with your own data, serve only for display within your care circle, and are not used for forecasts, recommendations, profiling, or any other purposes.
Communication board
If the person being cared for taps a picture symbol, a normal diary entry is created from it with the time, the category and the name of the symbol. We additionally store the fact that the entry was created via the board. It is the same kind of care data as an entry written by hand, only captured faster.
Tasks in the care circle
Task texts within the care circle, who they are assigned to, an optional date and who ticked them off. Like all care content, the texts are stored encrypted.
Notifications (voluntary, switched off by default)
If you switch notifications on in your profile, we store the technical address of your device subscription and the associated keys, so that your device can receive a message. All that is sent is the note that a task is waiting for you, never any content, no task text and no name. Delivery runs technically via the push service of your browser or operating system (e.g. Google, Apple, Mozilla); no care data therefore reaches it. If you switch the notifications off again, we delete the subscription immediately. The legal basis is your consent (Art. 6 para. 1 lit. a GDPR).
Invitation by email and login link
If you invite someone to your care circle by email, we store that person’s email address encrypted until they accept the invitation, for at most 72 hours; after that it is deleted. The email names only your display name, never the person being cared for. Anyone who joins via the link gets an account without a password; the link confirms the address. The legal basis for this one email to a person who has not yet consented is the legitimate interest in a simple invitation (Art. 6(1)(f) GDPR); on joining, consent applies as with any registration. Instead of a password you can also log in with a link by email: for this we store only a non-reversible check value of the link, valid for 15 minutes and usable once.
Calendar file
For tasks in the support circle you can download a calendar file (.ics). It contains only the kind of task, the time and a link to weforme, no free text. The file is created on request and is not stored; what you do with it in your calendar is up to you and your calendar provider.
Email about new versions (voluntary, switched off by default)
If you agree at registration or later in your profile, we additionally use your email address to inform you about new versions of the app. For this we store your consent with the time, your language and the version last sent, so that you do not get an email twice. You get at most one email per version, no advertising and no passing on to third parties. You can withdraw your consent in your profile at any time, without giving reasons. The legal basis is your consent (Art. 6 para. 1 lit. a GDPR).
Feedback function (voluntary)
When you send a message via the feedback button, we store your message, the page you were on, technical error messages from your browser (if any), browser type, optionally a screenshot you attach, and, if you are logged in, the link to your account. You can optionally record your feedback as a voice note: the recording is transmitted to our own server in the EU solely to be turned into text, is transcribed there automatically, and is deleted immediately afterwards. We only store the text, which you can still change before sending. We only access the microphone if you start a recording yourself. The purpose is solely to improve and fix the app (Art. 6 para. 1 lit. a GDPR). Please do not attach screenshots with sensitive content that does not belong to the message. Your report stays stored together with its processing status so that you can follow under “My feedback” what came of it. We delete it after 12 months at the latest, or earlier if you ask us to.
4Cookies and server logs
weforme uses two technically necessary cookies: the session cookie (httpOnly, only for weforme.app) that keeps you logged in after signing in (lifetime 30 days), and a cookie for the language you have chosen (lifetime 12 months). There are no marketing or statistics cookies, and therefore no cookie banner. For delivery, the web server necessarily processes IP addresses for technical reasons; no permanent access logs with IP addresses are stored.
5Legal basis and consents
The basis for the processing is your explicit consent at registration (Art. 6 para. 1 lit. a and Art. 9 para. 2 lit. a GDPR). When creating a care circle, you additionally confirm as a requirement that the person being cared for or their legal representative agrees to the shared documentation; this point in time is stored.
You can withdraw your consent at any time with effect for the future by requesting the deletion of your account or of the care circle (privacy@degeler.consulting) or by using the app's deletion functions, once available. The lawfulness of the processing carried out up to the withdrawal remains unaffected.
6Who sees the data
The care data of a care circle is seen solely by the members of that circle. New members only join via an invitation link that the main carer generates (valid for 72 hours, usable once). Alternatively, they send the invitation by email to an address; the link in it is likewise valid for 72 hours and usable once. Degeler Consulting does not access care data; it is held in the database in encrypted form only (see section 7). We do not pass on any data to third parties, not even to research institutions, and we do not sell any data.
7How we protect the data
All care data content is stored encrypted on the application side with AES-256-GCM; the database contains only ciphertext. Passwords are hashed with argon2id. Transmission takes place solely over HTTPS/TLS. The server is located in Germany (Hetzner, Falkenstein) and is used solely for weforme, separate from other systems. Daily backups are created encrypted and deleted automatically after 30 days.
8Processors
Hosting
Hetzner Online GmbH, Gunzenhausen, Germany (server location Falkenstein, Germany).
Email sending
Sendinblue GmbH / Brevo, Berlin, Germany (EU processing), only for service emails about your account, such as confirmation, password reset and important notices about the app. This also includes invitations to a care circle and login links.
Both providers process solely on our behalf on the basis of data processing agreements under Art. 28 GDPR. No transfer to third countries outside the EU takes place.
9Storage period and deletion
Account and care data remain stored for as long as the account or the care circle exists. If the care circle or the account is deleted, all associated care data is removed from the database immediately and permanently; encrypted backups expire after 30 days at the latest. You can delete your account and care circle directly in the app (under Profile and Care circle respectively). Unconfirmed accounts are removed automatically after 14 days, expired invitation links and sessions daily.
10Export
Using the export function, you can download all data of your care circle as a CSV at any time (Art. 20 GDPR, data portability) and use it freely yourself, for example for doctor's appointments.
11Your rights
You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to withdraw your consent (Art. 7 para. 3 GDPR). To do so, contact privacy@degeler.consulting. You can also lodge a complaint with the Austrian data protection authority (dsb.gv.at).
Reach measurement (on this website only)
So that we can see how often weforme.eu is visited, we count page views anonymously and without cookies: no cookie is set, no IP address is stored and no profile is created. The figures are purely aggregated, no conclusions about individual people are possible. The app itself (weforme.app) measures nothing and stays completely tracking-free. If you scan a QR code on our printed materials, we additionally count, as a daily total only, the type of device (phone, tablet, computer), operating system, browser, language and hour of the visit. For this, the browser identifier is evaluated at the moment of the visit but not stored.