1. Introduction
This Privacy Policy describes how Life Dash ("we," "our," or "us") collects, uses, discloses, and protects your personal information when you use our online platform ("Platform") to store your personal medical data and/or access information. By using the Platform, you agree to the collection and use of information in accordance with this Privacy Policy. You acknowledge that any sharing of personal information with third parties is at your own discretion and risk.
2. Eligibility
The Platform is intended for use by individuals who are at least 18 years old. By using the Platform, you represent and warrant that you are at least 18 years of age.
3. Information We Collect
3.1 Personal Information
When you use the Platform, we may collect personal information that you provide to us, including but not limited to:
- Name
- Email address
- Date of birth
- Sex
- Any other data/information you choose to provide
3.2 Usage Data
We may also collect information on how the Platform is accessed and used ("Usage Data"). This Usage Data may include information such as your device's IP address, browser type, browser version, the pages of our Platform that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers, and other diagnostic data.
4. How We Use Your Information
4.1 Providing and Improving the Platform
We use the collected information to:
- Facilitate account creation and login processes
- Store and manage your personal medical data
- Provide access to the tiered breakdown of indicators in major disease categories
- Improve our services and develop new features
- Monitor usage and detect, prevent, and address technical issues
4.2 Communication
We may use your personal information to contact you with newsletters, marketing, or promotional offers. You can opt out of receiving these communications at any time.
4.3 Third-Party Sharing
If you choose to share your personal information with any third party through or in connection with the Platform, you do so at your own discretion and risk. Life Dash is not responsible for the absolute security of any personal information once it has been shared with third parties, nor for any breaches of privacy, data security, or other unauthorized access that may occur as a result of such sharing.
5. Legal Bases for Processing (GDPR)
If you are located in the European Economic Area (EEA), we process your personal information under the following legal bases:
- Your consent
- The performance of a contract with you
- Our legitimate business interests
- Compliance with our legal obligations
6. Data Security
At Life Dash, we take your data security seriously and have implemented robust technical and organizational measures to protect your information.
- Secure Infrastructure: Life Dash is hosted on Amazon Web Services (AWS), a trusted platform compliant with globally recognized security standards such as SOC 2 and ISO/IEC 27001, ensuring your data is stored in a highly secure environment.
- Data Encryption: All data is encrypted both in transit (using TLS) and at rest (using AES-256) to protect it from unauthorized access.
- Regular Security Audits: We conduct automated vulnerability scans and annual penetration tests to proactively identify and mitigate potential threats.
- Privacy Protections: Strict privacy rules prevent unauthorized access to your data. You remain in control of your personal information, which is handled in compliance with GDPR and SOC 2 Type II standards.
- Ownership and Transparency: You retain full ownership of your data and may export it at any time. Life Dash will never share your information without your explicit consent.
- User Authentication: Access to your account is secured with hashed and salted passwords.
While we adhere to industry-standard safeguards, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. By using the Platform, you acknowledge that you provide personal information at your own risk.
7. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. We use appropriate criteria to determine the retention period, including the nature of the data, the purposes for processing, and legal requirements.
8. Cookies and Tracking Technologies
We may use cookies and similar tracking technologies to collect and use personal information about you, including to serve interest-based advertising. Where required by law, we will obtain your consent before placing non-essential cookies on your device. You can control cookies through your browser settings.
9. International Data Transfers
Your information, including personal information, may be processed outside of your country of residence. If you are located in the EEA, we will protect your personal information when it is transferred outside of the EEA by implementing appropriate safeguards, such as standard contractual clauses.
10. Your Rights
Depending on your jurisdiction, you may have certain rights regarding your personal information, including:
- The right to access and review your personal data.
- The right to correct or update your information.
- The right to request deletion of your information, subject to any legal obligations to retain it.
- The right to request restriction of processing.
- The right to object to certain processing activities.
- The right to request the transfer of your data to another service (data portability).
To exercise any of these rights, please contact us using the details in the Contact section below. We may need to verify your identity before processing your request.
11. Your California Privacy Rights
If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). These rights include:
- Right to Know: Request information about the categories and specific pieces of personal information we collect, the categories of sources, our business purpose for collecting it, and the categories of third parties with whom we share it.
- Right to Delete: Request that we delete your personal information, subject to certain exceptions.
- Right to Correct: Request correction of inaccurate personal information we maintain about you.
- Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information. We do not sell your personal information for monetary value, but certain activities may be considered a “sale” or “sharing” under California law.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.
To exercise any of these rights, please contact us at
info@life-dash.com.
12. Do Not Sell or Share My Personal Information
If we engage in activities that qualify as selling or sharing personal information under applicable law, you may opt out at any time by clicking the “Do Not Sell or Share My Personal Information” link on our website or by contacting us at
info@life-dash.com.
13. Supervisory Authority Complaints (GDPR)
If you are located in the EEA and believe that we have not adequately resolved a privacy concern, you have the right to lodge a complaint with your local data protection authority.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on our Platform and updating the effective date at the top. Your continued use of the Platform after any changes constitutes your acceptance of the revised Privacy Policy.
15. Contact Information
If you have any questions about this Privacy Policy or your personal information, please contact us at:
info@life-dash.com.
