Updated: 4 May 2026

1. General
This privacy policy describes how Injurymap (“we”, “us” or “our”) processes your personal data when you use our services in our mobile app: Injurymap (the “app”).

In this privacy policy, we inform you about your rights and how we process and protect your personal data. If you have any questions about our processing of your personal data, you can contact us at any time:

Injurymap ApS
C/O Health Tech Hub Copenhagen
Danneskiold-Samsøes Allé 41 st.
1434 Copenhagen K
Denmark
support@injurymap.com

It may be necessary from time to time to amend this privacy policy. An updated version will always be available here.

2. Data processing roles
In our app, we offer different services to our users: i) access to our exercises and personal training programmes, and ii) consultations with professional consultants, e.g. online physiotherapists (“professional consultants”).

We act as data controller when we process your personal data in connection with your access to our exercises and training programmes.

We act as data processor on behalf of the consultants in connection with your booking and completion of consultations with professional consultants, including when we provide technical tools for video consultations, journal notes, transcription and AI-supported draft journal notes.

This privacy policy covers our data processing activities, both when we act as data controller and as data processor. We are committed to and responsible for ensuring compliance with applicable data protection legislation when we process your personal data.

3. Processing of personal data
When you sign up for the app, either voluntarily, using a voucher from an external party, e.g. a doctor, or through a referral from a health insurance provider, we may process the following personal data:

General personal data: 

• Identity and contact information: name, address, telephone number, gender, height, weight, body measurements and age;
• Email address and password used to log in to the app;
• User ID and profile information from third-party login providers (Google or Apple);
• IP address, device identifier and browser information;
• Chat data;
• Booking information and technical information in connection with consultations.

Sensitive personal data:

• Diagnosis;
• Specific information about injury;
• Health information, symptoms, treatment information and other information that arises in connection with consultations with professional consultants.

Other information:

• Activity level at work and during leisure time;
• Completed training sessions;
• Assessment of your pain level;
• Internally generated data that is anonymous, aggregated, de-identified, etc.

If you participate in a video consultation with a professional consultant, the consultation may, with your consent, be recorded and transcribed for the purpose of supporting the professional consultant’s journal keeping. In this connection, we may process audio recordings, transcriptions and AI-generated draft journal notes. These data may contain health information and other information that arises during the consultation. AI-generated draft journal notes are used solely as a support tool and must be reviewed by the professional consultant before being used as a journal note.

If you use a referral from your health insurance provider, we also process the following information:

• The health insurance company;
• Information provided to the health insurance provider about you and your injury, including civil registration number and health information;
• Patient journal logged in our app from consultations with our professional consultants.

We provide login methods from third-party applications for the app from Google and Apple. If you use one of these login methods, you give us permission to access certain account information from your Google or Apple account. Injurymap is not responsible for Google’s or Apple’s processing of your personal data in this regard, and we refer you to these third parties’ privacy policies for insight into their processing of your personal data.

4. Purposes
We process your personal data for the purpose of operating our business and providing our services to you, including to:

• Give you access to the content in the app, including our exercises;
• Provide you with the most personalised training programme possible;
• Enable you to engage professional consultants;
• Support professional consultants in connection with consultations, including through transcription of consultations and preparation of draft journal notes;
• Communicate with you in the app, including technical support;
• Administer your account in the app;
• Deliver, maintain and update our services and ensure effective operation of our IT infrastructure;
• Conduct internal business development, including analysis of app usage, product development and improvement of services;
• Promote research and academic research, including with our business partners;
• Ensure security, e.g. to prevent misuse or identify hacking, etc.

Some personal data is collected directly from you when you sign up for the app, while other personal data is collected automatically as part of your use of the app.

5. Legal basis
We rely on the following legal bases when processing your personal data:

• Legitimate interest: We have a legitimate business interest in processing some of your personal data for the purpose of internal business development, operating an effective IT infrastructure and services in the app, enforcing our terms and ensuring appropriate security measures;
• Performance of a contract: When you sign up to use the app, we process your personal data for the purpose of providing you with our services in accordance with your request, including access to our exercises, personal training programme, booking of consultations with professional consultants and other content included in the app. We also process personal data on this legal basis for the purpose of administering your account, communicating with you and providing technical support.
• Consent: When we receive personal data in connection with your use of a referral from your health insurance provider, you consent to the health insurance provider sharing your personal data with us, including health information. If a consultation is recorded and transcribed for the purpose of supporting journal keeping, the professional consultant will ask for your consent before the recording starts. Consent may be given orally to the professional consultant, who registers the consent in the system. You may decline recording and transcription and still complete the consultation.
• Legal obligation: Sometimes we may be legally required to process your personal data in order to comply with our legal obligations.
• Healthcare treatment and journal keeping: When data is processed as part of healthcare treatment, journal keeping or documentation of a treatment course, the processing may take place on the basis of rules on healthcare services, journal keeping and processing of health information under applicable data protection and healthcare legislation.

6. Exchange/disclosure of personal data
We may exchange or share your personal data with third parties for the purposes described in this privacy policy. This includes exchange and/or sharing with the following categories of third parties:

Our Data Processors:
When you sign up to use the app, you acknowledge and authorise us to share or disclose your personal data with third parties that support us in providing our services. We enter into data processing agreements with our data processors to ensure that they comply with applicable data protection legislation.

This includes, among others, providers of hosting, IT operations, support, video consultations, transcription and AI-supported journal assistance. We use Corti ApS as a technology provider for transcription and AI-supported structuring of consultation data. Corti processes data on our instructions for the purpose of providing transcription, summarisation, structuring and related technical functionality for use in professional consultants’ journal keeping.

If it is necessary to transfer your data outside the EU/EEA in order to pursue one or more of the purposes, such transfer to third countries will only take place in accordance with applicable data protection legislation and be based on a valid legal basis for transfer, i.e. the European Commission’s standard contractual clauses or other relevant transfer mechanisms. If you wish to receive a list of transfers to third countries, you may use the contact details in this privacy policy.

You can download the app via a platform operated by a third party, e.g. App Store, Google Play, etc. We have no control over your personal data processed by these third parties, as they are not affiliated with or controlled by Injurymap. Consequently, the use of the app may be subject to additional third-party privacy policies.

Professional consultants:

As a service, we offer the possibility to book consultations with a professional consultant. This service may be provided through a referral from your health insurance provider. The health insurance provider obtains consent for the data processing activities, including exchange of personal data with us and our professional consultants.

Injurymap may also report discharge summaries or similar treatment summaries to the health insurance provider. This can only take place with your specific consent. The health insurance provider is responsible for obtaining your consent for reporting such summaries.

These consultants act as data controllers and we act as their data processor by providing consultants with access to our app data, so that they can access user data necessary to ensure effective and relevant consultations. This may also include access to transcriptions and draft journal notes if consent has been given for recording and transcription of the consultation.

Staff at business partners, e.g. health insurance companies:
If you have been referred to use our services by healthcare personnel or through your health insurance company, we may share relevant user data with selected staff at these business partners. Data sharing is strictly limited to supporting and improving your patient pathway and use of the app. All data sharing takes place in accordance with applicable data protection legislation, and only authorised staff in the partner organisation will have access to your data.

Research Business Partners:
Injurymap facilitates scientific and academic research with our business partners. This may include sharing your personal data with our business partners to conduct commercial and academic research regarding demographics, interests and consumer preferences in order to gain insight into our users, products and services and to use this for i) internal purposes and ii) to improve knowledge about training based on aggregated or de-identifiable data.

Business transactions and reorganisations:
At some point, we may decide to sell some of our assets and activities — in whole or in part — to other companies. Such transactions may include customer information and thus your personal data and user data. You acknowledge that such a transaction may take place when you accept our online terms, and thus that any other company acquiring assets and activities from us may continue to use and process your personal data.

Social Media Platforms:
We may share some of your personal data with Facebook and Google Ads for remarketing purposes.

7. Storage and deletion of data

We process your personal data for as long as you have an active account in the app.

You may edit your account at any time. You also have the option to delete your account. If you delete your account, we will immediately delete your personal data or anonymise it.

We may at any time, if your use of the app violates our online terms, delete your account and the associated personal data.

We only retain your personal data for longer if it is necessary for us to comply with legal obligations or enforce our online terms.

Audio and any video recordings from consultations are stored only for as long as necessary to transcribe the consultation, generate a draft journal note, handle technical errors or ensure correct documentation. Once the necessary information has been transferred to the journal, the raw recording is deleted or anonymised, unless longer storage is necessary to comply with legislation, document treatment, handle complaints or protect legal claims. Transcriptions and journal notes that form part of the patient journal are stored in accordance with the rules and retention periods applicable to patient journals and other health information.

8. Your rights
Under the GDPR, you have certain rights in relation to the personal data that we process:

• You have the right to access the data that we process about you, as well as certain other information;
• You have the right to have inaccurate personal data about you rectified;
• In special cases, you have the right to have personal data about you deleted before our general deletion time;
• In certain cases, you have the right to restrict the processing of your personal data;
• In certain cases, you have the right to object to our otherwise legitimate processing of your personal data; and
• In certain cases, you have the right to receive your personal data in a structured, commonly used and machine-readable format and to transmit such personal data from one data controller to another without hindrance (data portability).
• If the processing is based on your consent, you have the right to withdraw that consent. This does not affect the lawfulness of processing carried out before the withdrawal.

9. Contact information
If you wish to exercise your rights, or if you have any questions regarding our processing of your personal data, please contact us using the contact details at the beginning of this privacy policy. We will promptly assess your request and respond no later than one month after receiving the request to let you know whether it is possible to accommodate the request.

You can complain about our processing of your personal data to the Danish Data Protection Agency, Carl Jacobsens Vej 35, 2500 Valby, Denmark, email: dt@datatilsynet.dk.