Privacy Policy

Who we are

Gammacog OÜ ("Gamma", "we", "us") is responsible for the personal data described in this policy. For any privacy question, request or complaint, contact nisha@gammacog.com.

This website

You can read this website without creating an account. The pages do not set cookies or use analytics or advertising trackers.

To show the page, your browser connects to a few services that receive technical information such as your IP address and browser type:

• Netlify, our hosting provider, which delivers the website, keeps standard server logs, and receives and stores waitlist sign-ups for us.
• Google Fonts, which supplies the typefaces.
• jsDelivr and cdnjs, which supply the animation libraries the page uses.

The waitlist

When you join the waitlist, the form sends us the details you enter:

• your email address;
• the wearable you use;
• what best describes you (for example, founder or operator).

We use these details to keep you updated on the Apple Watch pilot, to invite you when places open, and to decide which integrations to plan next. We process them because you asked to join.

We keep waitlist details until you ask us to remove you, or until we no longer need them for the pilot. To leave the waitlist at any time, email nisha@gammacog.com.

Research study and the Gamma app

If you take part in our research study or use the Gamma app, we may collect:

• Account information: email and a hashed password.
• EEG data (research study only): raw four-channel signal from a Muse 2 headset during sessions you start. Samples are streamed from your device to our server so the scoring algorithm can run server-side.
• Apple Health data: if you connect Apple Health, we ingest daily summaries (HRV, resting heart rate, sleep stages, SpO2, and menstrual cycle days where relevant) for the days you use Gamma. We do not read your full Apple Health history.
• Self-reported context: optional inputs such as caffeine, sleep hours, stress level, notes and, where relevant, last period start date, plus post-session decision logs.
• Performance data: reaction times from cognitive tasks and focus events generated during sessions.

How we use it

• To compute your Headroom and its trend over time.
• To build personal baselines, so results are measured against your own usual pattern.
• To train and evaluate the model linking EEG and wearable signals. Aggregated, de-identified results may be published as research.

How it is stored

Data is stored in a managed PostgreSQL database hosted on Railway (US region). Connections use TLS. Your EEG, wearable and self-reported data are scoped to your user ID and not shared with other users.

Retention

Personal data collected during the research study, including EEG, wearable and behavioural data, is retained for the duration of the study and for as long as necessary to train and improve the Gamma algorithm. You may request early deletion at any time. Deletion requests will be honoured unless retention is required for legitimate research purposes under GDPR Article 89.

Loaned study equipment

If you take part in a study, we may loan you a Muse EEG headband for the duration of your cohort. We record the device assigned to you, its return status and your signed loan acknowledgment (name, timestamp and device identifier). This is kept for the study duration plus 12 months and used only to manage equipment loans and study operations.

Who we share data with

• Railway hosts the application and database.
• Resend sends transactional email, such as password resets and session summaries.
• Netlify hosts this website and stores waitlist sign-ups, which it forwards to our team by email.
• Google Workspace hosts our team email.
• Apple Health data stays on your device until you grant Gamma read access; we then receive only the daily summaries described above.

We do not sell your data. We do not run advertising. We do not share your individual data with anyone outside Gamma without your explicit consent.

Our database is hosted in the United States. If you would like more information about how this data is protected when it leaves the European Economic Area, contact us.

Your rights

Under the GDPR you have the right to access your personal data, to have it corrected or erased, to restrict processing, to data portability, and to withdraw consent at any time without affecting processing that took place before you withdrew it.

To exercise any of these rights, email nisha@gammacog.com. You also have the right to complain to a data protection authority, such as the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or the authority where you live.

Not a medical device

Gamma is not a medical device. Headroom is wellness guidance, not a medical measurement, and it is not intended to diagnose, treat or prevent any condition.

Changes to this policy

We will update this policy as Gamma develops. When we make material changes, we will update the date at the top of this page and, where appropriate, tell you by email.

Contact

Questions, deletion requests or data exports: nisha@gammacog.com.