We care for information as carefully as we care for people.
Talking about mental health takes trust. That is why we protect data by design, and explain how without any fine print.
Our commitments
What we do with data. And what we never do.
Hosted in Europe
Data is stored on servers located in the European Union, protected by the GDPR. AI inference is also processed within the EU with zero data retention (ZDR): model providers never store or reuse any conversation.
Protected identity
We keep clinical data separate from each person's identity, so the information cannot be linked to anyone outside its context.
Nothing without your consent
No data is reused to improve our models without the person's explicit consent, and it is always unlinked from their identity.
Confidential in municipal projects
In municipal projects, participation is confidential: the city council never sees who responds, only aggregated results.
The data isn't ours
It belongs to the people and to the organization we work with. Nexi never sells it or shares it with third parties.
Medical device rigor
We develop under a quality management system and in line with the EU Medical Device Regulation (MDR), the path toward Bruna's certification.
Who sees what
Pick a role and see which information it can access.
Every access level is defined and agreed in writing with each organization before we start.
- What they do
- Talks to Bruna by voice or text and, if the project includes follow-up, records how they feel in their mood journal.
- What they can access
- Their own conversation and whatever they choose to share. They always know they are talking to an AI.
- Their safeguards
- They can access, correct, delete or object to the use of their data at any time.
- What they do
- Reviews the information before the visit and during follow-up, and factors it into their assessment.
- What they can access
- Only the information about the patients they treat within the project: suspected diagnosis, recommendations and follow-up.
- What they decide
- The assessment, diagnosis and treatment. Bruna does not make clinical decisions.
- What they do
- Uses the project's results to guide emotional wellbeing initiatives.
- What they can access
- Aggregated results from participants, without identifying them, plus the final report.
- What they can't access
- Conversations, individual answers or residents' identities.
- What they do
- Coordinates the support program for its members.
- What they can access
- The information that matches its role and the purpose agreed in writing.
- What they can't access
- Individual clinical information, which belongs to the relationship between patients and their professional.
What Bruna does. And what she doesn't.
She does
- Talk naturally, by voice or text.
- Gather and organize the relevant information.
- Rely on official clinical guidelines (DSM-5, ICD-11).
- Make it clear at all times that she is an AI.
She doesn't
- Diagnose or prescribe treatments.
- Replace the professional or the therapeutic relationship.
- Handle emergencies.
Your rights
Your data is still yours.
You can exercise your rights by writing to info@nexi-health.com. If you believe they have not been respected, you can file a complaint with the Spanish Data Protection Agency (AEPD).
Access
Find out which of your data we process.
Rectification
Correct any data that is inaccurate.
Erasure
Ask for it to be deleted.
Objection
Object to a specific use of your data.
Restriction
Limit its use in certain cases.
Portability
Receive it in a structured format.
Legal information
Data controller
- Entity
- Nexi Health, S.L.
- Address
- San Sebastián (Gipuzkoa, Spain)
- Contact
- info@nexi-health.com