Privacy Policy

1. Introduction

At Aspiros, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our health tracking application and services. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the application.

2. Information We Collect

2.1 Personal Information

We collect information that you provide directly to us when you:

• Create an account (name, email address, password)
• Complete your health profile (age, gender, height, weight, health goals)
• Contact us for customer support
• Subscribe to our newsletter or promotional communications

2.2 Health Data

With your explicit consent, we collect and process health-related information including:

• Activity data (steps, workouts, active minutes)
• Sleep data (duration, quality, sleep stages)
• Nutrition data (meals, calories, macronutrients)
• Hydration data (water intake)
• Mental wellness data (mood, stress levels)
• Biometric data (heart rate, blood pressure, if provided)

2.3 Automatically Collected Information

When you access our Service, we automatically collect certain information about your device, including:

• Device information (type, operating system, unique device identifiers)
• Usage data (features used, time spent, interactions)
• Log data (IP address, browser type, access times)
• Location data (if you grant permission)

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process your transactions and manage your subscriptions
• Generate personalized health insights and recommendations using AI
• Send you technical notices, updates, security alerts, and support messages
• Respond to your comments, questions, and customer service requests
• Communicate with you about products, services, offers, and events
• Monitor and analyze trends, usage, and activities
• Detect, prevent, and address technical issues and fraudulent activity
• Comply with legal obligations and protect our legal rights

4. Data Sharing and Disclosure

4.1 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information or health data to third parties for their marketing purposes.

4.2 Service Providers

We may share your information with third-party service providers who perform services on our behalf, such as:

• Cloud hosting providers (data storage and processing)
• Payment processors (subscription billing)
• Analytics providers (service improvement)
• Customer support tools

These service providers are bound by contractual obligations to keep your information confidential and use it only for the purposes we specify.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

4.4 Business Transfers

If Aspiros is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

5. Data Security

We implement appropriate technical and organizational security measures to protect your information:

• End-to-end encryption for data transmission (TLS/SSL)
• Encryption at rest for stored data (AES-256)
• Regular security audits and penetration testing
• Access controls and authentication mechanisms
• Regular backups and disaster recovery procedures
• Employee training on data protection and privacy

While we strive to protect your information, no security system is impenetrable. We cannot guarantee the absolute security of your data.

6. Your Data Rights

You have the following rights regarding your personal information:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Export: Download your data in a portable format
• Opt-out: Unsubscribe from marketing communications
• Restrict: Limit how we use your data
• Object: Object to certain types of processing

To exercise any of these rights, please contact us at support@aspiros.com or through your account settings.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide you services. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal purposes.

8. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

9. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. By using our Service, you consent to the transfer of your information to our facilities and those of our service providers.

10. Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last updated” date. For material changes, we will provide at least 30 days' notice.

12. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to request deletion of personal information
• Right to non-discrimination for exercising your rights

13. GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), you have certain rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure (“right to be forgotten”)
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision-making

14. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us: