Privacy Policy

Last updated: June 2026

BoneOS is a project by Netstrada SRL, developed in collaboration with Dr. med. Carl Peter Meschede. Netstrada SRL is the sole controller for the processing of your personal data; Dr. Meschede is a medical collaboration partner and has no access to your data.

1. Data Controller

The controller within the meaning of the GDPR for data processing via BoneOS is:

Netstrada SRL
Via Marche 43, 60019 Senigallia (AN), Italy
VAT No.: IT02865850428
Represented by (Managing Director): Manuela Miriam Winter
Contact: hello@netstrada.it

More about the collaboration with Dr. Meschede in the Legal Notice.

2. Data We Collect

Waitlist

When you sign up for the BoneOS beta, we store your email address and any optional demographic information you voluntarily provide (age range, gender, diagnosis status). We also store a confirmation token and the time of confirmation.

Usage Analytics

With your consent, we collect anonymized usage data via PostHog (e.g. pages visited, click behavior) to improve BoneOS. PostHog is only activated after you give your consent.

3. Purpose of Processing

  • Notifying you about beta access and the app launch
  • Improving the product based on anonymized usage data

4. Legal Basis

Processing of your data is based on your explicit consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time by contacting us at hello@netstrada.it.

5. Sub-processors

Resend Inc. (Email delivery)

We use Resend to send confirmation emails. Processing occurs on EU servers. Privacy information: resend.com/privacy

PostHog Inc. (Analytics)

PostHog stores analytics data in the EU Cloud (Frankfurt). Data is anonymized and only collected after your consent. Privacy information: posthog.com/privacy

Hetzner Online GmbH (Hosting)

Our servers are located in Germany (Hetzner data center). Privacy information: hetzner.com/legal/privacy-policy

6. Retention

Your email address and associated data are retained until the official app launch or until you request deletion. Analytics data is automatically anonymized after 90 days.

7. Your Rights

Under the GDPR, you have the following rights:

  • Access to the data stored about you (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure of your data (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Objection to processing (Art. 21 GDPR)
  • Data portability (Art. 20 GDPR)

To exercise these rights, contact us at: hello@netstrada.it

8. Right to Lodge a Complaint

You have the right to lodge a complaint with the competent data protection supervisory authority. As Netstrada SRL is based in Italy, this is primarily the Garante per la protezione dei dati personali (garante.it).

9. Cookies and Tracking

BoneOS does not use persistent tracking cookies without your consent. PostHog is only activated after your explicit consent via the cookie banner. Your choice is stored in your browser's local storage (boneos_analytics) — no server-side cookie.