Privacy Policy

Last updated: March 2026

ICHI-CodAs is a research-oriented tool. We are committed to high standards of data protection and transparency. Following the principle of Data Minimization (GDPR), we process only the data strictly necessary to provide and improve the coding assistant.

User Responsibility: Please ensure your input is de-identified. Do not enter patient names, birth dates, or specific identifiers. This tool is designed for classification research only.

1. Hosting and Infrastructure

This application is operated in Vienna, Austria (EU). It is hosted by internex.at on servers physically located in Austria. This ensures that all data remains within the European Union's jurisdiction and adheres to the strict General Data Protection Regulation (GDPR).

2. API Key Protection (Privacy by Design)

Your Anthropic API key is handled with maximum security:

  • The full key is stored exclusively in your browser's local storage.
  • For authentication and session management, only the first 7 characters of your key are transmitted to our backend.
  • We never store, log, or have access to your full API key.

3. Optimization of the Assistant (Logging)

To improve the technical performance, mapping accuracy, and reliability of the ICHI-CodAs assistant, the text of your coding queries is logged on our server.

  • These logs allow us to identify cases where the assistant's interpretation of the ICHI framework needs refinement.
  • Logs are stored anonymously and are not associated with IP addresses or persistent user identifiers.
  • The data is used solely for the technical and scientific optimization of the ICHI-CodAs tool.

4. Analytics (Privacy-First)

We use Plausible.io for web analytics. Plausible is a privacy-focused tool that:

  • Does not use cookies.
  • Does not collect personal data or persistent identifiers.
  • Anonymizes all data to provide aggregate statistics (e.g., country of origin, device type) without tracking individual users.

5. Your Rights and Contact

Since we do not store personal identifiers (like IP addresses), we generally cannot link specific logs to individual users. However, you have the right to inquire about data processing at any time.

Responsible for Data Processing:
Manuel Roier
Vienna, Austria
Email: m.roier@kmlh.org