Privacy Policy

Last updated: September 29, 2026

Introduction

Elevatia ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.

Information We Collect

Personal Information

  • Name, email address, and profile information
  • User account credentials and authentication data
  • Device information and identifiers
  • Usage data and app analytics

Health Data

We collect health-related information to provide personalized wellness insights and track your progress. This includes:

  • Health metrics from your device (HealthKit on iOS, Health Connect on Android)
  • Activity data (steps, workouts, sleep patterns)
  • Wellness goals and preferences
  • Progress tracking and achievement data

Third-Party Health Data Integrations

With your explicit consent, we may collect health data from third-party services including:

  • WHOOP: Recovery, strain, sleep, and heart rate variability data
  • Oura Ring: Sleep quality, readiness, activity, and temperature data
  • Eight Sleep: Sleep tracking, temperature preferences, and sleep environment data
  • Apple HealthKit: Comprehensive health and fitness data from your iPhone
  • Health Connect (Android): with your permission, and only for the kinds of data you switch on, we read steps, active calories burned, exercise sessions, sleep (including sleep stages), resting heart rate, heart rate variability, oxygen saturation and respiratory rate. We read only; Elevatia writes nothing to Health Connect. This data is used to personalise your own guidance and is shown back to you. It is never used for advertising, never sold, and never shared with third parties for their own purposes. You can change or withdraw each permission at any time in Health Connect, and disconnecting in Elevatia gives the permissions back.

You can revoke access to any third-party service at any time through your device settings or the respective service's privacy controls.

Clinical Health Records (iOS only)

If your doctor, hospital, or lab is connected to Apple Health, you may choose to import clinical records into Elevatia. This is off by default and never happens automatically.

  • What we request: lab results and vital signs only. We do not request medications, conditions, procedures, allergies, immunizations, or insurance coverage.
  • What we keep: of the records Apple Health returns, only glucose, HbA1c, total cholesterol, HDL, LDL, triglycerides, and blood pressure. Everything else is discarded on your device and never transmitted to us.
  • When we read: only when you tap Import, covering the previous two years. There is no background delivery and no schedule.
  • What we do with it: readings are charted alongside ones you enter yourself and may influence which daily tasks you are offered. Elevatia does not interpret, score, or diagnose them. They are never used for advertising, never sold, and never sent to a third party. Where our AI coach is involved it receives only a coarse direction derived from a reading — for example "blood sugar elevated" — never the measurement itself.
  • Turning it off: the Health Records screen withdraws your permission and deletes every imported reading, keeping the ones you entered yourself.

Cycle, Reproductive and Pregnancy Data

If you use cycle tracking, everything below is entered by you, is optional, and can be removed one day at a time or all at once.

  • What you can log: period flow, whether a day starts a period, symptoms, mood, energy, basal body temperature, ovulation test results, cervical mucus quality, free-text notes, and sexual activity.
  • What we ask once: during setup we ask whether you have a menstrual cycle. You may answer "prefer not to say", which is treated as a decline and not as a "no".
  • What you may declare: hormonal conditions such as PCOS, endometriosis, a thyroid condition, perimenopause, menopause, or adrenal fatigue. These make relevant content more likely to be offered. They never restrict what you are shown.
  • Pregnancy: if you give a due date we store it and derive your week and trimester from it each day. Nothing about a pregnancy is inferred without a date you entered.
  • What we derive: an estimated cycle phase, typical length, variability, next period and fertile window. These are estimates from your own entries, not measurements.
  • Where it lives: in a part of your account only your own signed-in session can read. It is not on the profile document friend search can reach, and no other Elevatia user can read it.
  • Never shared in-app: cycle data never appears in the activity feed, in Crucible, on a share card, or to a friend. Sexual activity is never shown anywhere outside the day you logged it, and is never included in anything sent to an AI model.
  • Apple Health: if you choose to import, we read menstrual flow, basal body temperature, ovulation test results, cervical mucus quality, and — on a supported Apple Watch — sleeping wrist temperature. Only when you tap it, never in the background, and entries you made in Elevatia are never overwritten.

What this is not: Elevatia is not a medical device and none of this is contraception. A fertile window derived from your logs is not a reliable way to avoid pregnancy, and the app never describes any day as safe for unprotected sex.

Reproductive and sexual health information is treated as sensitive personal data. Depending on where you live it may carry additional protections, including as "special category" data under the GDPR and under US state laws covering consumer health data. We do not sell it, do not use it for advertising, and do not disclose it to third parties for their own purposes.

How We Use Your Information

  • To provide and maintain our wellness coaching service
  • To generate personalized health insights and recommendations
  • To track your progress and achievements
  • To notify you about changes to our Service
  • To provide customer support and respond to inquiries
  • To improve our algorithms and service quality
  • To send you relevant wellness tips and updates (with your consent)
  • To ensure app security and prevent fraud
  • To comply with legal obligations

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

  • With your consent: When you explicitly authorize us to share data
  • Service providers: With trusted third-party services that help us operate our app (Firebase, analytics providers)
  • Text messaging: if you choose to text with Elevatia, your messages to and from the Elevatia number are carried by Sendblue, a messaging provider acting on our behalf. Sendblue processes the text of those messages and your phone number to deliver them, and nothing else. Elevatia's replies may draw on the same information it uses in the app. Reply STOP at any time to end texting; your phone number is removed when you unlink it in the app or delete your account.
  • Advertising measurement: we use Meta's tools to learn which of our own ads led someone to install Elevatia or subscribe. For this we send Meta a limited set of events (such as completing registration or starting a subscription), an account identifier and your device's advertising identifier. We never send Meta health data, cycle data, check-ins or anything you write in the app. You can limit this in your device settings: on iPhone under Privacy & Security > Tracking, and on Android under Privacy > Ads.
  • Legal requirements: When required by law, court order, or government request
  • Safety purposes: To protect the rights, property, or safety of Elevatia, our users, or others

Data Storage and Security

  • Your data is stored on Google Cloud Platform, using Firebase, in the United States.
  • Data is encrypted in transit using TLS, and encrypted at rest by Google Cloud.
  • Access is enforced per account. Your health data, cycle logs, due date, biomarkers, imported clinical records and declared conditions are readable only by your own signed-in session. Your connections to Whoop, Oura, Garmin and Eight Sleep are stored where no user account can read them at all, including yours — only our servers can use them to fetch your data.
  • If you sign in with Apple or Google, that account's own two-factor protection applies to your Elevatia sign-in. Elevatia does not currently offer a separate second factor of its own.
  • We monitor for errors and abuse. Diagnostic logs are write-only from the app and cannot be read back by any user account.

We are a consumer wellness app, not a healthcare provider, health plan, or clearinghouse. HIPAA does not apply to Elevatia, and we do not claim to be HIPAA compliant. Health information you give us is protected by this policy and by consumer privacy law, not by HIPAA — including where you import records that originally came from a provider who is covered by it.

Data Retention

  • Personal and health data is retained for as long as your account is active. Health history is kept rather than aged out, so that trends stay meaningful over years rather than months.
  • Deleting your account deletes your data. It removes your profile, paths and progress, activity history, friendships and Crucible records, all synced and manually entered health data, biomarker readings, imported clinical records, your cycle logs and everything in them, your due date, your declared conditions and quiz answers, and your stored connections to Whoop, Oura, Garmin and Eight Sleep. Deletion is immediate and cannot be undone.
  • You can delete imported clinical records on their own, delete a single day of cycle data, or clear your due date, at any time without deleting anything else.
  • A small amount of data may be retained after deletion where the law requires it — for example records of payments. This never includes health data.
  • To request deletion by email instead, contact notifications@getelevatia.com. You can also request deletion without the app installed at https://www.getelevatia.com/delete-account.

Your Rights

You have the right to:

  • Access your personal data and request a copy
  • Correct or update your personal data
  • Request deletion of your personal data
  • Object to processing of your personal data
  • Request restriction of processing your personal data
  • Request transfer of your personal data (data portability)
  • Withdraw consent for data processing
  • Disconnect third-party health data integrations

To exercise these rights, please contact us at zackh@getelevatia.com.

International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with applicable privacy laws.

Children's Privacy

Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If we discover that a child under 13 has provided us with personal information, we will delete it immediately.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by:

  • Posting the new Privacy Policy on this page
  • Sending you an email notification
  • Displaying a prominent notice in our app

Continued use of our service after changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

  • Email: zackh@getelevatia.com
  • Website: https://getelevatia.com

Compliance

We aim to meet our obligations under the privacy laws that apply to us, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), along with Apple App Store and Google Play privacy requirements. We honour the rights described above regardless of where you live.

We do not claim HIPAA compliance. HIPAA applies to healthcare providers, health plans and clearinghouses and their business associates. Elevatia is none of those.