Privacy notice
Website and web demo
Last updated: 12 November 2026
This is a translation; the Italian version prevails in case of discrepancy.
How we process data when you visit sonable.app and use the web demo, under Regulation (EU) 2016/679 (GDPR).
1. Data controller
Dr. Pietro Bertini, medico chirurgo, P.IVA IT02044000491. Contatto per la privacy: [email protected]. No data protection officer (DPO) has been appointed, as it is not mandatory.
2. What data we process and why
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| IP address, browser type, date and time of requests | Technical operation and protection of the site against attacks and abuse | Legitimate interest (art. 6.1.f GDPR) | Cloudflare technical logs for the periods set by its service; the controller's server keeps no access logs |
| Content entered in the demo: report answers, photos, clips, PDFs | Showing you how the app works | — | Not collected: processed only in your browser's memory, never sent to us or anyone else, and deleted when the page is closed |
Do not enter real patient data in the demo. It is a demonstration tool: even though it saves nothing, use test data.
Until 11 November 2026 the demo required an account (email and password managed by Google's Firebase Authentication). Sign-in has been removed and previously created accounts are being deleted.
3. Providers and transfers
The site is hosted on a server of the controller in Italy and reaches the Internet through Cloudflare (content delivery and protection network), which receives the requests and the IP address as a data processor (data processing agreement; Cloudflare privacy policy). Data may be processed outside the European Union, in particular in the United States, under the EU-US Data Privacy Framework, to which Cloudflare adheres, and the European Commission's standard contractual clauses.
Fonts and the demo's graphics engine are served directly by sonable.app. If the demo must show a symbol not included in the app's fonts, the browser may download a fallback font from Google Fonts, which then receives the IP address.
4. Cookies and local storage
The site uses no profiling, advertising or analytics cookies. Cloudflare may set technical security cookies (for example __cf_bm) to tell legitimate traffic from bots. The site uses the browser's local storage (localStorage) only to remember the light or dark theme and the language. These are strictly necessary and require no consent; you can clear them from your browser settings.
5. Recipients
Data are not sold or transferred. They may be accessed by the controller and, as technical provider, Cloudflare. They may be disclosed to authorities only where required by law.
6. Your rights
You may request access, rectification, erasure, restriction and portability of your data and object to processing based on legitimate interest (arts. 15–22 GDPR) by writing to the contact in section 1. You have the right to lodge a complaint with the Italian Data Protection Authority (Garante).
7. Who the demo is for
The demo is intended for healthcare professionals.
8. Security
Communications are encrypted (HTTPS).
9. Changes
Any changes will be published on this page with a new update date. The installable app is covered by the app privacy policy.