Privacy Policy

Website

Who We Are Our website address is: https://ileria.com. Ileria Oy (Business ID: 3488145-9) is a Finnish health tech company registered in Tampere, Finland. We specialize in CPR training technologies and instructor-focused applications.

Comments: When visitors leave comments on our site, we collect the data shown in the comments form, along with the visitor’s IP address and browser user agent string to help detect spam. An anonymized hash of your email address is sent to the Gravatar service to check if you use it. You can view Gravatar’s privacy policy here. Once your comment is approved, your profile picture may be publicly visible alongside your comment.

Media: If you upload images to our website, please avoid including embedded location data (EXIF GPS). Visitors may download and extract location data from images posted on the site.

Cookies: If you leave a comment, you may opt in to saving your name, email, and website in cookies for convenience. These cookies last for one year. When visiting our login page, we set a temporary cookie to check if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser. Upon login, we set cookies to store your login credentials and screen preferences. Login cookies last two days; screen preference cookies last one year. Selecting “Remember Me” extends login persistence to two weeks. Logging out removes login cookies. Editing or publishing an article sets an additional cookie that stores the post ID. It expires after one day and contains no personal data.

Embedded Content from Other Websites: Articles on this site may include embedded content (e.g., videos, images, articles). Embedded content behaves as if you visited the external site directly. These sites may collect data, use cookies, embed third-party tracking, and monitor your interaction with their content—especially if you’re logged into their platform.

Google Analytics: We use Google Analytics to collect non-personal data about website traffic and user behavior. This helps us understand how our site is used and improve the user experience.

Sales Inquiries & Distributor Agreements Ileria does not sell products directly through this website. Purchases are arranged either through direct contact with our sales team or through a contract with one of our official distributors. When you contact our sales team or enter into a distributor agreement, we collect the information you provide — such as your name, company name, email address, phone number, and billing/contract details — to respond to your inquiry, prepare a quote, and manage the resulting business relationship. This information is retained for as long as necessary to service the agreement and to meet our legal and accounting obligations, and is not used for marketing purposes unless you explicitly consent.

Contact Forms When you submit an inquiry through our contact form, we collect the data shown in the form to respond to your request. This information is not used for marketing purposes unless you explicitly consent.

Who We Share Your Data With: If you request a password reset, your IP address will be included in the reset email.

How Long We Retain Your Data: Comments and their metadata are retained indefinitely to recognize and auto-approve follow-up comments. For registered users (if applicable), we store the personal data provided in their profile. Users can view, edit, or delete their data at any time (except usernames). Website administrators can also access and modify this information.

What Rights You Have Over Your Data. If you have an account or have left comments, you may request an exported file of your personal data. You may also request deletion of your data, except for information we must retain for administrative, legal, or security reasons.

Where Your Data Is Sent, visitor comments may be checked through an automated spam detection service.

Mobile App

Last Updated: August 22, 2026

At Ileria, your privacy is our priority. This policy explains how the Ileria CPR Trainer app collects, uses, and protects your information to provide a high-quality life-saving training experience.

1. Data Collection

The Ileria CPR Trainer app collects the following types of data:

Performance Metrics: Detailed CPR metrics such as compression depth, rate, rhythm, recoil, and overall scores captured during training.

Account Information: Your name, email address, and user identifiers used for account management and certification.

Audio and Messages (Ephemeral):

Voice Recordings: Used exclusively for real-time speech-to-text interaction with our AI assistant. Audio is processed in memory and is not stored or saved on our servers.

In-App Messages: Interactions with the AI assistant are processed instantly to provide coaching and are not persistently stored.

User-Generated Content: Qualitative evaluations and comments provided by instructors during assessment sessions.

Device Information: Bluetooth identifiers for pairing with Ileria CPR training devices, and device IDs for crash reporting and app diagnostics.

2. How We Use Data

To provide real-time CPR training feedback and AI-driven coaching.

To track your progress, performance improvements, and issue training certificates.

To improve our training algorithms, app stability, and features.

To send optional push notifications regarding training reminders (you may opt out at any time).

3. AI Transparency

AI Interaction Disclosure: The Ileria app includes an AI-powered coaching assistant (“Ileria AI Chat”) that interacts with you by voice and text during training sessions. In accordance with Article 50 of the EU Artificial Intelligence Act (Regulation (EU) 2024/1689), you are clearly informed, at the start of your first interaction, that you are communicating with an artificial intelligence system and not a human instructor.

AI-Generated Content: Only the responses, messages, and coaching guidance produced by the Ileria AI Chat are generated by an artificial intelligence system and are labeled as such within the app. CPR performance metrics (e.g., compression depth, rate, rhythm, recoil, and overall scores) are calculated by Ileria’s own technical algorithms based on sensor readings from the CPR Feedback Device. They are not produced by an AI or machine-learning system and do not constitute “AI-generated content” for the purposes of the EU AI Act.

No Solely Automated Decision-Making: Ileria does not issue training certificates through a solely automated process. Certificates are issued only after review by a qualified human instructor, who retains full authority over pass/fail and certification decisions. Performance metrics and AI coaching feedback are provided as supporting information only; as stated in our Terms of Service, they should not be relied upon as the sole basis for medical decisions.

No Emotion Recognition or Biometric Categorisation: The Ileria app does not use emotion recognition or biometric categorisation systems on user data.

Human Oversight: Where you are assigned to an instructor, that instructor reviews your performance data and, where applicable, your AI coaching interactions, as part of the educational assessment process described under “Data Sharing with Instructors and Service Providers” below.

4. Data Sharing with Instructors and Service Providers

Instructors/Organizations: If you are part of a training organization, your assigned instructor can view your performance metrics, session history, and personal identifiers (name/email) for educational assessment and feedback purposes.

Service Providers: We use trusted partners like OpenAI (for AI processing) and Google/Firebase (for authentication and infrastructure). These providers act as “Service Providers” and process data only on our behalf; they do not use your data for their own independent purposes.

5. Data Security

Encryption: All data transmitted between the app and our servers is secured using industry-standard HTTPS/TLS encryption.

Protection: We implement strict access controls and hashing for sensitive information like passwords.

6. Third-Party Services

Firebase (Google LLC): For authentication, notifications, and app diagnostics.

Bluetooth/Location: Note that Android requires location permissions for Bluetooth scanning. Ileria does not collect, access, or store your actual GPS location data.

7. Data Retention and Deletion

Retention: We retain data while your account is active to maintain your training history.

Deletion: You may request the deletion of your account and data at any time via:

Self-Service: platform.ileria.com/account/settings

Email: Contacting us at [email protected]

Anonymization: Upon deletion, personal identifiers are removed. We may retain anonymized, non-identifiable session metrics for long-term analytical research.

8. User Rights

You have the right to request access to your data, request corrections, export your training history, or withdraw consent for data processing by deactivating your account.

9. Children’s Privacy

Ileria is intended for users aged 18 and over. We do not knowingly collect data from individuals under 18.

10. Consent

By creating an account and using the Ileria app, you consent to the collection and processing of your data as described in this policy.