Privacy Policy
Last Updated: November 12, 2024
1. Introduction
Welcome to ELEVA. We are committed to protecting your privacy and ensuring the security of your personal health and wellness information. This Privacy Policy explains how we collect, use, protect, and share information when you use our Women's Integrated Wellness Intelligence platform.
Your health data is deeply personal, and we believe you should always maintain full control over it. This policy is designed with transparency in mind, so you understand exactly what happens with your information.
2. Information We Collect
2.1 Health & Wellness Data
When you connect your existing health and wellness applications to ELEVA, we may collect:
- Cycle & Reproductive Health: Menstrual cycle data, ovulation tracking, fertility information
- Physical Activity: Exercise data, step counts, workout information, activity levels
- Sleep Data: Sleep duration, sleep quality, sleep patterns
- Biometric Data: Heart rate, heart rate variability, blood pressure, body temperature
- Mood & Mental Health: Mood tracking, stress levels, emotional state information
- Nutrition: Dietary information, hydration tracking, nutritional intake
- Body Metrics: Weight, BMI, body composition
- Health Records: Symptoms, medications, health conditions (if you choose to share)
2.2 Personal Information
- Name and email address
- Account credentials
- Profile information (age, gender, location - optional)
- Communication preferences
2.3 Usage Data
- How you interact with the ELEVA platform
- Features you use most frequently
- Device information (type, operating system, browser)
- Log data (IP address, access times, pages viewed)
2.4 Connected App Data
We collect data only from apps and services you explicitly authorize us to connect with. You maintain full control over which apps are connected and can disconnect them at any time.
3. How We Use Your Information
We use your information to:
- Provide Our Service: Integrate your health data across platforms and generate personalized insights
- AI Analysis: Use artificial intelligence to detect patterns, anticipate issues, and deliver proactive guidance
- Personalization: Tailor recommendations specifically to your unique health profile and rhythms
- Improve Our Platform: Analyze aggregated, anonymized data to enhance our algorithms and features
- Communication: Send you updates, insights, and important information about your account
- Security: Protect your account and data from unauthorized access
- Legal Compliance: Meet legal obligations and enforce our terms
Important: We NEVER sell your personal health data to third parties. Your health information is not a product.
4. Data Security & Encryption
We implement industry-leading security measures to protect your sensitive health information:
- End-to-End Encryption: Your data is encrypted during transmission and at rest
- Secure Storage: Data stored on secure, HIPAA-compliant cloud servers
- Access Controls: Strict internal access policies limiting who can view your data
- Regular Audits: Ongoing security assessments and penetration testing
- Anonymization: Personal identifiers removed from data used for research or improvements
- Two-Factor Authentication: Optional additional account security
While we implement robust security measures, no system is 100% secure. We continuously work to protect your information and will notify you promptly of any security breaches.
5. Your Rights & Control
You have complete control over your data. Your rights include:
- Access: Request a copy of all data we have about you
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your account and all associated data
- Export: Download your data in a portable format
- Disconnect Apps: Remove any connected third-party applications at any time
- Opt-Out: Unsubscribe from marketing communications
- Restrict Processing: Limit how we use your data
- Object: Object to certain uses of your information
To exercise any of these rights, please contact us.
GDPR Rights (EU Users)
If you are in the European Economic Area, you have additional rights under GDPR, including the right to lodge a complaint with your local data protection authority.
CCPA Rights (California Users)
California residents have specific rights under the California Consumer Privacy Act (CCPA), including the right to know what information we collect and the right to opt-out of any "sale" of personal information (which we don't do).
6. Third-Party Integrations
ELEVA integrates with third-party health and wellness applications to provide you with unified insights. When you connect these apps:
- You authorize us to access specific data from those services
- The third-party app's own privacy policy governs their data practices
- We only request the minimum data necessary to provide our service
- You can disconnect any app at any time from your settings
Service Providers: We work with trusted service providers for hosting, analytics, and infrastructure. These providers are contractually obligated to protect your data and only use it for the services they provide to us.
8. Children's Privacy
ELEVA is designed for adults and is not intended for children under 18. We do not knowingly collect information from individuals under 18. If we discover we have collected data from a minor, we will delete it promptly.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data, including:
- Standard contractual clauses approved by regulatory authorities
- Adherence to international data protection frameworks
- Encryption during transmission across borders
10. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes via:
- Email notification to your registered address
- Prominent notice on our platform
- In-app notification
Continued use of ELEVA after changes indicates acceptance of the updated policy. The "Last Updated" date at the top reflects our most recent revision.
11. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us through our contact form.
For Privacy Inquiries: Submit a contact form
Data Protection Officer: Contact us with "Data Protection" in your message