Status: 29/04/2026
As Streamcheck GmbH, we appreciate your interest in our Streamcheck app and our products. The protection of your personal information, in particular your health-related data, is our top priority. Below we explain in detail what data we collect, how we process it and what rights you have.
Responsible for the collection and processing of your personal data within the meaning of the General Data Protection Regulation (GDPR) is
Streamcheck GmbH Arnsdorf 26, 02894 Vierkirchen, Germany
E-Mail: support@streamcheck.io Webseite: https://streamcheck.io
Data protection refers to personal data. This refers to all information relating to an identified or identifiable natural person (Art. 4 No. 1 GDPR). In particular, this includes your health data that is collected when you use the app, as well as your address, payment and technical usage information.
To fully utilise the Streamcheck app, the application requires access to certain functions of your end device. These access rights are requested before the first use and can be managed by you at any time in the device settings.
When you create a user account or purchase products in our shop, we process the following data:
Purpose: Conclusion of the contract, delivery of goods, invoicing, customer communication and administration of your user account.
Data transfer: Your address information (name, address, e-mail address) is transmitted to our service providers Stripe (for payment processing) and Silver ERP (for order processing and customer management).
Legal basis: The processing is necessary for the fulfilment of the purchase and usage contract with you (Art. 6 para. 1 sentence 1 lit. b GDPR).
When using the app with the measuring device, the following health data (special category of personal data according to Art. 9 GDPR) is collected and processed:
Purpose: The purpose of this processing is to enable you to analyse, document and track your measured values and to present the results to you clearly in the app.
Legal basis: The processing of your health data takes place exclusively on the basis of your explicit consent, which you give separately during the ordering process (Art. 9 para. 2 lit. a GDPR). Without this consent, the main function of the app cannot be used.
Every time you use the app and our website, certain technical data is automatically processed:
Purpose: Ensuring operation, guaranteeing system security and stability, data backup and technical error analysis.
Legal basis: Our legitimate interest in the secure and functional operation of our services (Art. 6 para. 1 sentence 1 lit. f GDPR).
For the purposes set out in this section, we process aggregated and anonymized uroflowmetry and biomarker measurement data. No directly identifying information (such as name, e-mail, address, or account ID) is included in this processing. The data is anonymized prior to aggregation, access is restricted to the persons within Streamcheck GmbH responsible for these activities, and re-identification of individual users is not pursued and is technically prevented.
As the manufacturer of a CE-marked medical device, Streamcheck GmbH is required under the EU Medical Device Regulation (MDR 2017/745) to operate a Post-Market Surveillance system (Art. 83 MDR) and to perform trend reporting for statistically significant changes in device performance and safety (Art. 86 MDR). Fulfilling these obligations requires the statistical aggregation of measurement data collected during normal device use.
Purpose: § 27 BDSG (processing of special categories of personal data for scientific or statistical purposes) in conjunction with Art. 9(2)(j) GDPR. The processing is necessary to fulfil our obligations under Art. 83 and Art. 86 MDR.
Legal basis: § Section 27 BDSG (processing of special categories of personal data for scientific or statistical purposes) in conjunction with Art. 9 para. 2 lit. j GDPR. The processing is necessary to fulfil our obligations under Art. 83 and Art. 86 MDR.
To advance the scientific understanding of urinary health and uroflowmetry methodology, Streamcheck GmbH uses the same anonymized and aggregated dataset for scientific research purposes. This research is carried out internally and, where appropriate, in cooperation with academic and clinical research partners (for example, universities and university medical centres). Where data is shared with external research partners, it is shared exclusively in anonymized and aggregated form, and is governed by written agreements that prohibit any attempt at re-identification.
Purpose: Scientific research, methodology development, and academic collaboration in the field of urinary health.
Legal basis: § 27 BDSG (processing of special categories of personal data for scientific or statistical purposes) in conjunction with Art. 9(2)(j) GDPR. The technical and organizational safeguards required by Art. 89(1) GDPR (data minimization, anonymization, suppression rules, access controls) are applied.
No consent toggle. This processing does not require your consent and is not subject to a consent toggle in the app. The exercise of certain data subject rights may be limited under § 27(2) BDSG to the extent necessary to achieve the statistical and research purposes, consistent with the safeguards described above.
We only pass on your data to third parties if this is permitted by law or if you have given your consent. We use carefully selected technical service providers to provide our services.
Our app and the entire technical infrastructure are hosted by Amazon Web Services EMEA SARL, 38 avenue John F. Kennedy, L-1855 Luxembourg (AWS for short).
For the secure processing of your purchases we use the services of:
To improve and analyse our app, we use services from Google Firebase (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).
We only store your personal data for as long as is necessary for the respective purposes.
You have the following rights in relation to your personal data:
To assert your rights, please contact us directly using the contact details provided in section 1.
You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your data violates the GDPR (Art. 77 GDPR).
We take extensive technical and organisational security measures (e.g. encryption, access controls) to protect your data from unauthorised access, misuse and loss.
We reserve the right to amend this privacy policy in the event of changes to our services or new legal requirements. The current version at the time of your use applies.