Privacy Policy

1. Information We Collect

We collect information directly provided by you, automatically through your interaction with our Service, and via third-party integrations:

• Account Data: Name, email address, password hashes, organization, and profile settings.
• Biometric & Wearable Data: Health, physiological, and activity signals synced via third-party wearable platforms (including Apple Watch, Oura, Whoop, Garmin) or custom ingestion pipelines.
• Usage & Telemetry Data: Operational logs, device details, IP addresses, and interaction metrics generated when navigating the Service.
• Authentication Data: Tokens and API credentials necessary to securely communicate with external services.

2. How We Use Your Data

We process your data strictly to operate, maintain, and enhance the Service:

• Service Delivery: Processing physiological and contextual data to compute readiness scores, resilience metrics, and performance insights.
• System Security: Monitoring platform integrity, detecting unauthorized activity, and maintaining cloud infrastructure defense.
• Service Improvements: Aggregating anonymized, de-identified telemetry to refine model accuracy and system reliability.

3. Data Processing & Storage

• Data Isolation: User data and organizational telemetry are logically separated to prevent cross-tenant access.
• Retention: We retain personal and physiological data only as long as your account remains active or as needed to provide the Service. You may request account deletion at any time.

4. Sharing & Disclosures

We share information only under limited operational conditions:

• Service Providers: Vetted infrastructure, database, and cloud hosting partners (e.g., Google Cloud Platform) bound by strict confidentiality and security requirements.
• Legal Compliance: When required by applicable law, court order, or governmental subpoena, provided we give advance notice where legally permitted.

5. Data Security

We implement industry-standard administrative, physical, and technical safeguards—including end-to-end encryption in transit (TLS 1.3) and at rest (AES-256)—to shield your information from unauthorized access, alteration, or destruction.

6. Your Rights & Choices

Depending on your jurisdiction, you have the right to:

• Access, correct, or download a copy of your data.
• Revoke third-party wearable sync authorizations.
• Request permanent deletion of your account and associated data.

To exercise any of these rights, contact us at privacy@ironmind.ai.