Privacy Policy

1. Who we are

This privacy policy applies to MediBalans Christina Biri AB, a Swedish private healthcare provider at Banérgatan 10, 115 23 Stockholm, Sweden, and to Meet Mario (meetmario.ai), the clinical AI platform operated by the company. We refer to both jointly in this policy as "MediBalans", "we", "us", or "our".

MediBalans Christina Biri AB is the data controller for personal data processed under this policy within the meaning of the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and the Swedish Patient Data Act (Patientdatalagen, 2008:355).

For all matters concerning your personal data, including access, correction, deletion, or complaints, you can contact our data controller directly:

We have not appointed a formal Data Protection Officer because our processing operations do not meet the mandatory threshold under GDPR Article 37(1). Dr Mario Anthis handles privacy enquiries on behalf of the company.

2. What data we process

We process several categories of personal data depending on how you interact with us. We have a duty under GDPR Article 13 to be transparent about each category.

2.1 Patient data (clinical records)

When you become a MediBalans patient, we process the data necessary to provide healthcare services, including:

• Identity data (name, date of birth, personnummer if provided, address, phone, email)
• Clinical history (symptoms, diagnoses, medications, allergies, lifestyle factors)
• Laboratory results (food reactivity testing via ALCAT, intracellular nutrient analysis via CMA, whole-genome sequencing data, blood work, hormone panels, gut microbiome panels, and other functional medicine assessments)
• Genetic data, including single-nucleotide polymorphism profiles and full genome sequence data when whole-genome sequencing is performed
• Treatment plans, dietary protocols, supplement recommendations, and clinical notes
• Communications with the clinic and clinical team

Most of this data falls under Article 9 GDPR (special category data — data concerning health and genetic data). We process it on the legal basis of Article 9(2)(h) — necessity for medical diagnosis, the provision of health care, and the management of healthcare systems — combined with the Swedish Patient Data Act, which authorises healthcare providers to process such data for documented medical purposes.

2.2 Platform data (meetmario.ai users)

If you create an account on meetmario.ai, we additionally process:

• Account credentials (email, authentication tokens — passwords are not stored in clear text)
• Usage data (pages visited within the platform, features used, in-app interactions)
• Content you upload (lab results in PDF or other formats, photos of food, photos of supplements, free-text symptom descriptions)
• Wearable device data, where you choose to connect a device
• Device and browser metadata (IP address, user agent, time zone) for security and fraud prevention

2.3 Public communications (Facebook, Instagram, email, web forms)

When you contact us via our public channels:

• Facebook and Instagram comments and direct messages on the MediBalans Page — your Facebook display name, your Page-Scoped User ID (a pseudonymous identifier issued by Meta), the content of your message or comment, and any contact details you voluntarily share
• Meta Instant Forms — for the specific initial-consultation form, we retrieve only your name, email address, phone number, form identifier, and submission time. Custom form answers are not copied into our follow-up system. We use the contact details to send a booking link and one reminder; either message includes an immediate opt-out.
• Web forms on medibalans.com or meetmario.ai — the data you enter in the form
• Email correspondence — the content and metadata of your messages

2.4 Marketing and analytics data

On the general public Meet Mario landing page only, and only after you make an affirmative choice in our cookie settings, we may use:

• Google Analytics 4 for aggregate audience and landing-page measurement. Advertising storage, Google Signals, ads personalisation, and Google Ads linking are disabled in our initial configuration.
• Meta Pixel, only where separately enabled for an approved campaign, for aggregate campaign and public landing-page measurement. Automatic advanced matching and automatic event collection are disabled.

These tools can process a sanitised landing-page view, consent state, browser and device characteristics, approximate location, and online identifiers such as first-party analytics cookies. The providers necessarily receive the connecting IP address while delivering their scripts and receiving an event. We do not send names, email addresses, phone numbers, personnummer, account or patient identifiers, form contents, free text, health information, genetic information, search terms, or unrestricted URLs or referrers.

The trackers are confined to the generic public paths / and /start. They do not run in pricing or checkout, booking or intake, pregnancy, onboarding, login or authentication, the patient application, chat, administration, APIs, or other clinical areas. They also fail closed on the landing page when a Meet Mario patient session is present in the browser.

3. Legal bases for processing

Under GDPR Article 6 (and Article 9 for health data), we rely on the following bases:

For all health and genetic data, the additional Article 9(2)(h) basis applies.

4. Use of artificial intelligence

We use AI-powered tools to assist clinical interpretation and patient communication. Transparency about this is important to us.

4.1 Clinical AI on meetmario.ai

Meet Mario uses AI to generate conversations, explain information from your account and laboratory results, and suggest food-plan guidance. Chat replies and automatically generated suggestions can be shown to you without individual review or approval by Dr Mario. They may be incorrect or incomplete. AI-generated explanations are separate from advice or decisions recorded by your clinician. Discuss medical decisions with a qualified healthcare professional and do not use AI output alone to diagnose a condition, change medication or treatment, or delay seeking care.

4.2 Optional photo checks

When you explicitly allow a plate check, Anthropic receives the chosen image together with the relevant parts of your food plan and recorded food-reactivity list. For an ingredient-label or restaurant-menu check, Anthropic receives only the image; for a menu it also receives the selected response language. Meet Mario then compares the extracted visible label or menu text with your recorded food-reactivity list on the server. OpenAI receives only the text of Mario's answer if you separately request spoken audio.

Plate and ingredient-label images are processed in real time and are not stored as images by Meet Mario. A restaurant-menu image is stored temporarily in a private, access-controlled area while the menu reader completes and is normally deleted immediately after processing. If processing or cleanup is interrupted, automated cleanup keeps retrying; the image never becomes part of the patient record. The structured menu result is cleared after display and expires from app access within 2 hours. Automated cleanup keeps retrying until any stored copy is removed.

Plate and ingredient-label checks may save a structured observation in your patient record. Restaurant-menu comparisons do not write an observation or change adherence or BES. Permission is optional, is recorded for the current disclosure version, and can be withdrawn at any time in Account settings. Results are not individually reviewed before you see them. They are advisory, not a guarantee that a food is safe. Restaurant menus may omit sauces, cooking oils, marinades, garnishes, and cross-contact, so ingredients and preparation must be confirmed with the restaurant. Do not use photo checks for emergencies, diagnosis, or changing treatment.

Age & Vitality private research pilot

Invited accounts may separately consent to experimental facial-age analysis and private storage of a current photograph. Photographs are processed on Meet Mario's server using an Intel OpenVINO model. They are not sent to an external AI inference service, used for identity recognition or used to train models. Camera metadata is removed before storage. Photographs and facial results are stored in a private Supabase bucket and an account-scoped history, accessible only through the verified account boundary. They remain until you delete the feature history or your account; copies in service backups, where present, expire under the existing backup retention schedule. Deletion cannot recall a copy you deliberately downloaded.

A new assessment requires a baseline photo and a fresh photo every three calendar months. Existing reports remain readable. Research calculations read your own dated blood, CMA, ALCAT and verified genomic observations. An optional published phenotypic-age calculation also reads your birth date from your verified clinic record to determine chronological age at blood collection; the birth date is not returned in the assessment response. With nine eligible blood biomarkers it can produce a lab-based research age estimate in years, shown separately from the facial appearance estimate. Its accuracy and uncertainty for Mario's users have not been established. The optional blood reference-alignment index is a separate 0–100 calculation. No combined photo-and-lab biological-age model is validated. Reports remain in the current session, with optional printing or PDF saving, and do not change clinical records or generate treatment recommendations. Your separate photo consent can be withdrawn by deleting the photo history. Oura is disabled while MediBalans awaits written provider clarification.

4.3 Public-channel AI (Facebook, Instagram, web chat widget)

We use an AI assistant to reply to public comments, direct messages on Facebook and Instagram, and conversations on the medibalans.com chat widget. This assistant represents the MediBalans team and provides general educational information about our services. It does not provide personalised medical advice. Clinical questions are routed to Dr Mario for human follow-up.

When you interact with our public AI assistant, the content of your messages is processed by Anthropic PBC (a US-based AI provider) to generate the response, in accordance with Anthropic's data processing terms. Anthropic does not retain conversation content for training purposes under the API terms we use.

4.4 Optional Mario voice processing

When a patient explicitly enables Mario's AI voice, live microphone audio is sent to OpenAI for transcription and Mario's saved, finished answer is sent to OpenAI for synthetic speech. What the patient says, the transcript, and Mario's answer may themselves contain health or identifying information. Meet Mario attaches no separate patient identifier, patient record, system prompt, or chat history to these requests. Meet Mario does not store the microphone recording. The submitted transcript and Mario's answer are stored as part of the patient's Mario conversation.

4.5 Right not to be subject to automated decision-making

You have the right under GDPR Article 22 not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects on you, subject to the conditions and exceptions in that Article. You can contact [email protected] to request human review, explain your position or contest an AI-generated output. An automatically generated answer is not confirmation that a clinician has reviewed or authorised it.

5. Who we share data with

We share personal data only when necessary for the purposes described above. Categories of recipients include:

5.1 Laboratory partners

To process the diagnostic tests we order on your behalf:

• Genova Diagnostics, Inc. (United States) — for tests in the Genova catalogue (NutrEval, GI Effects, Methylation Panel, Hormone testing, etc.). We are the official Swedish distributor of Genova Diagnostics tests.
• Cell Science Systems, Ltd. (United States) — for ALCAT food reactivity testing and CMA functional micronutrient-response analysis. We are the official Swedish distributor.
• Dante Labs S.r.l. (Italy) — for whole-genome sequencing services.

These transfers include identity data, sample data, and clinical context required for testing.

5.2 Technology service providers (data processors)

We use the following third-party services that process personal data on our behalf, under applicable contracts and data-processing terms:

• Anthropic PBC (United States) — AI conversation and optional photo-check processing
• OpenAI (United States) — optional live voice transcription and AI-generated speech
• Supabase Inc. — database hosting (data residency: Frankfurt, Germany / EU)
• Vercel Inc. (United States) — application hosting and content delivery
• Cloudflare, Inc. (United States) — content delivery, security, edge processing
• Resend, Inc. (United States) — transactional email delivery
• Cliniko (Red Guava Pty Ltd) (data residency: EU shard) — practice management and appointment booking
• Google Ireland Limited / Google LLC — consented Google Analytics 4 processing on the generic public landing page
• Meta Platforms Ireland Limited / Meta Platforms, Inc. — Facebook Page and Instagram messaging, and consented Meta Pixel processing where an approved public campaign is active

5.3 Legal disclosures

We may disclose personal data when required by Swedish law, court order, or formal request from a competent regulatory authority (such as IVO — Inspektionen för vård och omsorg, or IMY — Integritetsskyddsmyndigheten).

We do not sell personal data to anyone, ever. We do not upload patient or enquiry lists to advertising platforms or use patient, booking, form, or clinical data for ad targeting. When you separately consent to a configured Meta Pixel on the generic public landing page, the limited browser and page-view data described in section 2.4 is sent to Meta for campaign measurement.

6. International data transfers

Some of the recipients listed above are located outside the European Economic Area (EEA), in particular the United States. Where this applies, we rely on the following safeguards under GDPR Articles 44–49:

• EU–U.S. Data Privacy Framework certification, where the recipient is certified
• Standard Contractual Clauses (SCCs) approved by the European Commission, where DPF certification is not in place
• Your explicit consent for specific transfers, where applicable under Article 49(1)(a)

You have the right to obtain a copy of the safeguards applied to a specific transfer by contacting Dr Mario.

7. How long we keep data

After the retention period expires, we delete the data or anonymise it irreversibly such that it can no longer be linked to an individual.

8. Your rights

Delete your Meet Mario account or selected data: our account and data deletion page explains how to send a request without signing in or installing the app, what may be retained and for how long. You can also request deletion of selected data while keeping your account.

Under GDPR you have the following rights:

• Right of access (Art. 15) — to obtain confirmation of whether we process your data and to receive a copy of it
• Right to rectification (Art. 16) — to have inaccurate data corrected
• Right to erasure (Art. 17, "right to be forgotten") — to have data deleted, subject to legal retention obligations (clinical records cannot be deleted before the statutory period under PDL)
• Right to restriction (Art. 18) — to limit how we process your data
• Right to data portability (Art. 20) — to receive your data in a structured, machine-readable format
• Right to object (Art. 21) — to processing based on legitimate interest
• Right not to be subject to automated decision-making (Art. 22) — see section 4.5
• Right to withdraw consent (Art. 7(3)) — for processing based on consent

To exercise any of these rights, contact Dr Mario at [email protected] or [email protected]. We respond to verified requests within 30 days, in line with GDPR Art. 12(3).

For Facebook/Instagram interactions specifically, you can also message our Page with the word "DELETE" to request deletion of all data we hold from those channels.

You also have the right to lodge a complaint with the Swedish data protection authority:

9. Security

We implement technical and organisational measures appropriate to the risk of the processing, including:

• Encryption of data in transit (TLS 1.2+) and at rest
• Role-based access control to clinical systems
• Database access restricted to authenticated server-side processes
• Audit logs for clinical record access
• Regular review of access permissions
• Incident response procedures in case of a personal data breach

In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the Integritetsskyddsmyndigheten within 72 hours per GDPR Art. 33 and notify affected individuals where the risk is high per Art. 34.

10. Cookies

Our websites use cookies and similar browser storage. Where required by Swedish electronic-communications rules, we obtain your consent before loading non-essential analytics or marketing technology.

• Necessary preferences — the public landing page stores your language and cookie choices locally in your browser. These choices do not contain your identity and are not used for advertising.
• Analytics — if you choose Analytics, Google Analytics 4 may set _ga and a property-specific _ga_* cookie for up to 60 days.
• Marketing — if a Meta campaign is active and you separately choose Marketing, Meta Pixel may set _fbp or _fbc for up to 90 days.

Reject all and Accept all are presented alongside granular settings. Choices are off by default. You can withdraw or change consent at any time through Cookie settings in the public landing-page footer. Withdrawal stops future optional tracking; the site also attempts to remove the first-party GA4 and Meta cookies it can access.

11. Children

The Meet Mario app is intended for adults aged 18 and over.

For MediBalans clinical services, separate from the app, our services are not intended for use by children under the age of 13 without parental involvement. For minors aged 13–17, parental or guardian consent is required for clinical services. We do not knowingly collect data from children for marketing purposes.

12. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via the websites (medibalans.com and meetmario.ai) and, where appropriate, by direct email to active patients. The "Last updated" date at the top reflects the date of the most recent change.

13. Contact

For all questions about this policy or your personal data: