1. Introduction
At ēpi Health Optimization Platform ("we", "our", or "us"), we are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, website, and services (collectively, the "Services").
Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Services.
2. Information We Collect
2.1 Personal Information
We may collect personal information that you voluntarily provide to us when you:
- Register for an account
- Fill in forms on our platform
- Subscribe to our newsletter
- Request customer support
- Participate in surveys or promotions
This information may include:
- Name
- Email address
- Password
- Profile information
- Communication preferences
2.2 Health Data
With your explicit consent, we may collect health-related data that you provide or that is collected through connected devices and services. This may include:
- Physical activity data
- Sleep patterns
- Nutrition information
- Biometric measurements
- Other health metrics
2.3 Authentication Data
When you sign in using third-party authentication providers (such as Google or Apple), we receive basic profile information from these providers in accordance with your privacy settings with those services.
2.4 Technical Information
We automatically collect certain information when you visit, use, or navigate our Services, including:
- Device and connection information
- Browser and operating system information
- IP address
- Usage data and analytics
- Cookies and similar technologies
3. How We Use Your Information
We use the information we collect for various purposes, including:
- Providing, maintaining, and improving our Services
- Processing your account registration
- Personalizing your experience
- Communicating with you about updates, security alerts, and support
- Analyzing usage patterns and trends
- Developing new features and services
- Protecting against unauthorized access and fraud
- Complying with legal obligations
4. Legal Basis for Processing
We process your personal data based on one or more of the following legal grounds:
- Consent: Where you have given us explicit consent to process your data for specific purposes.
- Contract: Where processing is necessary for the performance of a contract with you.
- Legitimate Interests: Where processing is necessary for our legitimate interests, provided these interests do not override your fundamental rights and freedoms.
- Legal Obligation: Where processing is necessary to comply with a legal obligation.
5. Data Sharing and Disclosure
We may share your information with:
- Service Providers: Third-party vendors who perform services on our behalf (e.g., hosting, analytics, customer support).
- Business Partners: With your consent, we may share data with trusted partners to offer joint services or promotions.
- Legal Requirements: When required by law, court order, or governmental authority.
- Business Transfers: In connection with a merger, acquisition, or sale of assets.
We do not sell your personal information to third parties.
6. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
7. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. When determining the appropriate retention period, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, and applicable legal requirements.
8. Your Rights
Depending on your location, you may have certain rights regarding your personal data, including:
- Right to access your personal data
- Right to rectify inaccurate or incomplete data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent
To exercise these rights, please contact us using the information provided in the "Contact Us" section.
9. International Data Transfers
Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that are different from those in your country. We ensure appropriate safeguards are in place to protect your information when transferred internationally.
10. Children's Privacy
Our Services are not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last updated" date. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.
12. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:
Email: privacy@epihealth.com
Address: ēpi Health, Inc., 123 Health Street, San Francisco, CA 94105, USA