Legal

Privacy Policy

Last updated: December 26, 2024

Introduction

Lumo Health ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services.

Information We Collect

Health Information

  • • Continuous Glucose Monitor (CGM) data from connected devices
  • • Blood glucose readings and trends
  • • Meal and activity logs (when provided)
  • • Medication information (when provided)

Personal Information

  • • Name and email address
  • • Account credentials
  • • Communication preferences

Technical Information

  • • Device information and identifiers
  • • App usage analytics
  • • Error logs and performance data

How We Use Your Information

  • • Provide personalized glucose insights and recommendations
  • • Improve our AI algorithms and service quality
  • • Send important notifications and updates
  • • Provide customer support
  • • Ensure platform security and prevent fraud

Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes:

  • • End-to-end encryption of health data
  • • Secure data transmission protocols (HTTPS/TLS)
  • • Regular security audits and assessments
  • • Limited access controls and authentication
  • • Data anonymization and pseudonymization

Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

  • • With your explicit consent
  • • To comply with legal obligations
  • • To protect our rights and safety
  • • With service providers who assist in our operations (under strict confidentiality agreements)

Your Rights

You have the following rights regarding your personal information:

  • • Access your personal data
  • • Correct inaccurate information
  • • Request deletion of your data
  • • Restrict or object to data processing
  • • Data portability
  • • Withdraw consent at any time

Data Retention

We retain your personal information only for as long as necessary to provide our services and fulfill the purposes outlined in this policy. Health data is typically retained for up to 2 years unless you request earlier deletion.

International Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on our website and updating the "Last updated" date.

Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

Email: info@elaris.one