Privacy Policy

Who we are (Controller)

Vilja Care Ltd (“Vilja Care”, “we”) is the data controller for processing on ICDhelp.ai.

Data minimization & what we process

ICDhelp.ai is designed so you should not submit any personal data. Please provide only de-identified or synthetic text.

• Service data you provide (free text):
  Purpose: generate coding suggestions, secure and improve the Service.
  Legal basis: Legitimate interests (Art. 6(1)(f)) to operate the Service. If you submit special-category data (health) about a person, you must ensure a valid basis (e.g., explicit consent or another Art. 9 basis). We strongly discourage submitting any personal data.
• Device/usage data: IP address, user-agent, basic event logs, cookie/consent preferences.
  Purpose: security, anti-abuse, essential operations, and consent storage.
  Legal basis: Legitimate interests (security/operations) and consent for optional cookies/ads where applicable.
• Advertising: We may show ads via third-party networks. With your consent we may allow personalized ads; without consent we show non-personalized ads or house ads.

AI/third-party processing; international transfers

To generate results, we transmit submitted text to AI model providers acting on our instructions, and use other vendors (hosting, analytics, consent management, ad networks). Some providers are located outside the EEA. We use EU Standard Contractual Clauses and other safeguards for such transfers. By default, we instruct AI providers not to use submitted data to train their models. We do not sell personal data.

• Google AdSense - advertising delivery and consent management. Privacy policy
• OpenAI - processes submitted text to generate coding suggestions. Privacy policy
• Vercel - hosting, edge delivery, and operational logging. Privacy policy

Cookies & consent

We use a TCF-compliant consent banner. You can change choices anytime via “Privacy & cookie settings.” Until consent, only essential storage runs and ads (if any) are non-personalized. See your browser documentation for cookie controls.

Retention

• Input text: processed transiently and not stored longer than needed to provide results and protect the Service.
• Technical logs: retained for 90 days for security and operations.
• Consent records: retained as required by law.

Your rights (GDPR)

If and insofar as we process personal data about you, you may have the right to access, rectify, erase, restrict, object, and port your personal data, and to withdraw consent at any time (this does not affect processing that already occurred).

Identification for rights requests

We do not create user accounts and generally do not retain user-submitted text in an identifiable form. We may therefore ask you for additional information to verify your identity, or explain if we cannot identify data relating to you in our systems.

Children

The Service is not intended for those under 18.

Changes

We may update this Policy; material changes appear here with a new “Last updated”.

Contact: info@viljacare.com.

Last updated: 28 October 2025

© 2025 Vilja Care Ltd