Privacy Policy

NUMA Health ("we," "our," or "us") is committed to protecting your privacy and securing your personal health information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services.

1. Information We Collect

Health and Wellness Information

We collect health and wellness information that you voluntarily provide to us when using NUMA Health:

• Medication data: Names, dosages, schedules, and adherence records
• Health metrics: Sleep patterns, activity levels, vital signs, hydration
• Nutrition information: Meal logging, calorie tracking, dietary preferences
• Wellness data: Fasting periods, exercise routines, mood tracking
• Medical documents: Lab results, doctor reports (if you choose to upload them)

Personal Information

• Account information: Name, email address, phone number
• Profile data: Age, gender, height, weight, health goals
• Payment information: Processed securely through Apple's App Store (we do not store credit card details)

Automatically Collected Information

• Device information: Device type, operating system, unique device identifiers
• Usage data: App features accessed, time spent in app, interaction patterns
• HealthKit data: With your explicit permission, we access Apple HealthKit data

2. How We Use Your Information

We use your information to:

Provide and Improve Services

• Deliver personalized health insights and recommendations
• Generate AI-powered health analytics based on your data
• Send medication reminders and health notifications
• Track your health progress over time
• Improve our AI models and app functionality

Communication

• Respond to your inquiries and support requests
• Send important updates about the app or your account
• Provide health tips and educational content (if you opt in)

Legal and Security

• Comply with legal obligations and regulations
• Protect against fraud and unauthorized access
• Enforce our Terms of Service

3. Important Disclaimer: Not a Medical Device

Key Points:

• NUMA Health is a personal wellness tracker, not a medical app or healthcare provider
• All health insights and recommendations are for informational purposes only
• Always consult qualified healthcare professionals for medical advice and decisions
• Do not use NUMA Health for medical emergencies or urgent health concerns
• The app does not replace professional medical care, diagnosis, or treatment

4. Data Storage and Processing

Local Processing

When possible, NUMA Health processes your data locally on your device. This includes:

• Basic health metric calculations
• Simple pattern recognition
• Medication reminder notifications

Cloud Storage

Some data is stored in secure, HIPAA-compliant cloud servers to:

• Enable data synchronization across your devices
• Provide backup and recovery capabilities
• Generate advanced AI insights requiring significant computing power
• Allow access to your data if you get a new device

We use Amazon Web Services (AWS) with enterprise-grade security for cloud storage. Data is stored in US-based data centers with strict physical and digital security controls.

5. Data Sharing and Disclosure

We Do NOT Sell Your Data

NUMA Health will never sell your personal health information to third parties. Your health data is yours, and we treat it with the utmost respect and confidentiality.

Limited Sharing

We may share your information only in these specific circumstances:

• With Your Consent: When you explicitly authorize us to share your data (e.g., with your healthcare provider)
• Service Providers: With trusted vendors who help us operate our services (cloud hosting, analytics, customer support). These providers are contractually bound to protect your data and maintain strict confidentiality.
• Legal Requirements: When required by law, court order, or government regulation
• Emergency Situations: To protect your vital interests or safety, or that of others, in emergency situations
• Business Transfers: In the event of a merger, acquisition, or sale of assets (with continued privacy protections)

Aggregated and De-identified Data

We may use aggregated, anonymized data that cannot identify you individually for:

• Research and analysis to improve health outcomes
• Training and improving our AI models
• Publishing insights about health trends and patterns

6. Your Rights and Choices

Access and Portability

You have the right to:

• Access all your personal health information stored in NUMA Health
• Export your data in a machine-readable format (JSON, CSV)
• Request a copy of your data for your records

Correction and Deletion

• You can edit or delete any health data entry within the app
• You can request correction of inaccurate personal information
• You can delete your entire account and all associated data at any time

Communication Preferences

• Opt out of promotional emails (medication reminders cannot be disabled without affecting core functionality)
• Control push notification settings through your device
• Manage email preferences in app settings

Data Retention

We retain your data:

• For as long as your account is active
• For up to 90 days after account deletion (to allow for account recovery)
• Longer if required by law or to resolve disputes

7. Security Measures

We implement industry-standard security measures to protect your information:

• Encryption: End-to-end encryption for sensitive health data
• Authentication: Multi-factor authentication options
• Network Security: Firewalls, intrusion detection, and DDoS protection
• Regular Audits: Security assessments and penetration testing
• Employee Training: All staff trained on data privacy and security best practices
• Incident Response: Procedures for detecting and responding to security breaches

8. Children's Privacy

NUMA Health is not intended for children under 17. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete such information.

9. International Data Transfers

NUMA Health primarily operates in the United States. If you are located outside the U.S., your information will be transferred to and processed in the United States, where data protection laws may differ from your country. By using our services, you consent to this transfer.

We implement appropriate safeguards to protect your information in compliance with applicable laws, including:

• Standard contractual clauses approved by regulatory authorities
• Compliance with GDPR requirements for EU residents
• Privacy Shield principles (where applicable)

10. Third-Party Services

Apple HealthKit Integration

With your permission, NUMA Health integrates with Apple HealthKit to:

• Read health metrics from other apps and devices
• Write your NUMA Health data to HealthKit

Important: We never share HealthKit data with third parties for advertising or marketing purposes, in compliance with Apple's guidelines. You can revoke HealthKit permissions at any time through iOS Settings.

Analytics Services

We use privacy-respecting analytics to understand app usage and improve functionality. These services receive only anonymized, aggregated data that cannot identify you personally.

11. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect and how it's used
• Right to delete your personal information
• Right to opt-out of the sale of personal information (we don't sell your data)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at privacy@numafit.ai

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by:

• Posting the updated policy in the app
• Sending you an email notification
• Displaying a prominent notice in the app

Your continued use of NUMA Health after changes take effect constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: