cosinuss° takes the protection of your personal data very seriously. The company collects and stores only the data that is required for the purpose of the products and services described here. Collected data is always treated confidentially and in accordance with the statutory data protection regulations.
This privacy policy applies to the iPhone and Android Lab Apps (hereinafter referred to as “App” or “Lab App”), which can be used in combination with the in-ear vital sign sensors c-med° alpha and corpuls auryx (hereinafter referred to as “Sensor”).
The c-med° alpha is an ear-worn Class IIa medical device that continuously measures vital parameters in the outer ear canal. The c-med° alpha can transmit the values to the Lab App in real time.
The corpuls auryx is an ear-worn Class IIb medical device that continuously measures vital parameters in the outer ear canal and can be used for critically ill patients in emergency situations. The corpuls auryx can transmit the values to the Lab App in real time.
This statement describes the nature, purpose and scope of data collection in connection with the use of the Lab App.
What data is collected when using c-med° alpha/corpuls auryx with the corpuls auryx App?
The in-ear sensors c-med° alpha/corpuls auryx generate data and send it to the Lab App via Bluetooth Low Energy, but do not store any data themselves. If there is briefly no Bluetooth connection, the vital parameter data measured and calculated by the sensor for that period is lost.
The Lab App likewise only displays the received data while a sensor is connected and keeps it in its internal memory only until a short timeout without sensor data occurs. The Lab App therefore offers no function for storing or exporting vital data.
Visualizing or monitoring vital parameters is not the primary purpose of the Lab App. Instead, the app serves other purposes, namely:
- Display of the update status and configuration states (e.g. power mode, Bluetooth mode, transmission interval) of the connected sensor
- Firmware update of the connected sensor
- Changing the configuration states of the connected sensor
The following data is generated when using c-med° alpha/corpuls auryx with the Lab App:
Data generated by c-med° alpha/corpuls auryx and the Lab App
| Data | Description | Storage |
| Metadata | ||
| c-med° alpha/corpuls auryx (with associated firmware) | ||
| Serial number | Serial number of the sensor. Used to assign and recognize the paired sensor. | Locally in the app. Transmitted to the update server (DMS) to verify the serial number, retrieve device attributes and check for firmware updates. |
| Bluetooth identifier | Identifier under which the operating system addresses the sensor via Bluetooth. | Locally in the app. |
| Manufacturer | Manufacturer information of the sensor. | Not stored. |
| Model number | Model identifier of the sensor. | Not stored. |
| Hardware revision | Revision level of the sensor hardware. | Not stored. |
| Firmware revision | Version of the firmware installed on the sensor | Not stored. |
| Software revision | Additional version information of the sensor | Not stored. |
| MAC address | Media access control address | Locally in the Android app. |
| Unique device identification (UDI) | Identification number | Locally in the app. |
| Firmware version | Version, release ID and release hash of the software running on the sensor. Model and project name as well as a flag for simulation mode. | Locally in the app. |
| Bluetooth device name | Bluetooth name of the sensor. | Not stored. |
| Power, Bluetooth and transmission behavior | Configuration states of the sensor (e.g. power mode, Bluetooth mode, transmission interval) that can be displayed and changed in the Lab App. | Not stored. |
| Error code | Error codes reported by the sensor and displayed in the Lab App. | Not stored. |
| Sensor size | Size of the sensor head. | Stored in the app. |
| Battery | Battery states of the sensor. | Not stored. |
| Lab App | ||
| Lab App version | Version number of the app. | Transmitted to the update server (DMS) when a firmware update is retrieved. |
| Mobile device: device model and operating system version | Model name of the mobile device and version of the operating system (iOS or Android). | Transmitted to the update server (DMS) when a firmware update is retrieved. |
| Update log | When a firmware update is retrieved, the update server (DMS) assigns a log ID. After a successful update, the app reports this ID back to the DMS. | On the update server (DMS). Messages that have not yet been transmitted are temporarily stored locally in the app and resent automatically. |
| Log file | Technical log of the Lab App (e.g. connection status, error messages, requests to and responses from the update server). May contain the device, configuration and mobile device data listed in this table as well as the measured values received while establishing the connection (see Vital parameters). | Locally on the mobile device. Export is only possible manually by the user. |
| Generated data | ||
| Quality indicators | ||
| Quality index | Index for assessing the reliability of the pulse measurement and the fit of the sensor. | Not stored. |
| Perfusion index | An indicator of the reliability of the oxygen saturation. | Not stored. |
| Vital parameters (calculated by c-med° alpha/corpuls auryx) | ||
| Body temperature | Body temperature (°C or °F) | Not stored. |
| Pulse rate | Beats per minute (bpm) | Not stored. |
| SpO2 | Arterial oxygen saturation of the blood (%) | Not stored. |
The device information of c-med° alpha/corpuls auryx is partly stored in the app and on the cosinuss° DMS server in order to be able to trace the version numbers as well as the update and error history of the devices at any time and to ensure qualified support. The stored device information ensures a better user experience; this information is also required in order to inform the user about an update for their c-med° alpha/corpuls auryx device. The storage period is determined by the requirements of the applicable medical device regulations.
The Lab App serves as an update and configuration tool for the in-ear sensors c-med° alpha/corpuls auryx. The Lab App does not store any calculated or transmitted vital parameter data of the user.
Please note! Cosinuss GmbH has no access to your data via the Lab App.
Please note! As a user, you are personally responsible for protecting the display of your data on your local receiving device against unauthorized access. Please use only trustworthy and secured devices and services.
Data collected on the basis of granted access rights
Location data & Bluetooth
To enable you to connect your c-med° alpha/corpuls auryx to your receiving device via Bluetooth Low Energy, your operating system requires access to your location data (this is usually the case with Android). The Lab App and Cosinuss GmbH have no influence on this access and do not themselves receive access to your location data.
cosinuss° also points out that data transmission via Bluetooth involves security risks. Complete protection of the data against access by third parties is not possible.
Error analysis
With your optional consent, you can have a technical event log (log file) sent to Firebase Crashlytics for a specific error event in the event of a technical error. The log file is also made available to cosinuss° and helps the development team to detect errors and to find and fix their cause. The log file includes device information of c-med° alpha/corpuls auryx and of your mobile device, version information of the app and settings of your operating system at the time of the error. Recorded vital parameters are expressly not transmitted. Firebase Crashlytics is operated by Google. The respective privacy policies can be found at https://privacy.google.com/ and https://firebase.google.com/support/privacy/. Transmitted data may remain stored in the processing systems of Firebase for an extended period.
For logging errors, cosinuss° expressly uses only Crashlytics and no other Firebase services.
Location of the cosinuss° DMS servers
The cosinuss° servers are provided and hosted by Hetzner Online GmbH, located at Industriestrasse 25, 91710 Gunzenhausen. A corresponding data processing agreement is in place between the parties. The servers are located in Nuremberg and Falkenstein (Vogtl.) in Germany. Hetzner Online GmbH is DIN ISO/IEC 27001 certified and thus provides the legally required protection for personal data.
Other services of Cosinuss GmbH
In addition to using c-med° alpha/corpuls auryx and the corpuls auryx App, you come into contact with external links and websites, e.g. when making purchases, contacting customer service or using other services of Cosinuss GmbH.
The European General Data Protection Regulation (“GDPR”) applies to all pages and services of Cosinuss GmbH. Please refer to the privacy notices on the respective websites.
Access, erasure, blocking
You have the right at any time to obtain information free of charge about your stored data, its origin and recipients and the purpose of the data processing, as well as the right to have this data corrected, blocked or erased.
For this purpose, and for any further questions regarding your data, you can contact the responsible department at cosinuss° at any time using the contact details provided.
Right to lodge a complaint with the competent supervisory authority
We would like to point out that, in the event of data protection violations, you have the right to lodge a complaint with the competent supervisory authority.
You can contact us at the following address:
dataprivacy@cosinuss.com
or contact our external data protection officer:
IITR Datenschutz GmbH
Dr. Sebastian Kraska
Marienplatz 2
80331 Munich
Germany
Tel: +49 89 189 173 60
Email: email@iitr.de
The supervisory authority responsible for data protection matters is the State Commissioner for Data Protection of the federal state in which cosinuss° has its registered office. A list of the data protection commissioners and their contact details can be found at the following link: https://www.bfdi.bund.de/EN/Home/home_node.html
Changes to this privacy policy
We reserve the right to amend this privacy policy in accordance with the law and to obtain your consent again.
Controller
The “controller” is the body that collects, processes or uses your personal data. The controller responsible for data processing in connection with this app is:
Cosinuss GmbH,
Kistlerhofstraße 60,
81379 Munich,
Germany,
Tel.: +49 (0)89 740 418 32
Email: dataprivacy@cosinuss.com
Applicable law
This privacy policy is governed by German law or comparable national law.
Document last modified in October 2026.