Privacy Policy

1. Introduction

Nostavia Health ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your health data. This Privacy Policy outlines how we collect, use, process, and protect your information when you use our health intelligence infrastructure, APIs, SDKs, and applications.

2. Information We Collect

We may collect and process the following types of information:

• Health Data: Biomarker data, lab results, wearable device metrics (such as HRV, sleep data, heart rate), and nutritional data inputs.
• Account Information: Name, email address, phone number, and demographic information necessary for providing our services.
• Device and Usage Data: IP address, browser type, operating system, application usage data, and logs of interactions with our services.

3. How We Use Your Information

Your data is utilized strictly to provide and improve our services:

• To deliver personalized health insights, including lab decoding, food bio-impact analysis, and wearable integration.
• To train and improve our AI health concierge models (anonymized and aggregated data only).
• To ensure the security and integrity of our platform.
• To communicate with you regarding updates, security alerts, and support messages.

4. Data Sharing and Disclosure

We do not sell your personal health data to third parties. We may share your information only under the following circumstances:

• With Your Consent: When you explicitly authorize us to share data with third-party providers (e.g., your clinician or diagnostic lab).
• Service Providers: With trusted vendors who perform services on our behalf under strict confidentiality agreements.
• Legal Requirements: If required by law, regulation, or legal process.

5. Data Security

We employ enterprise-grade security measures to protect your data, including AES-256 encryption at rest and in transit. Our infrastructure is SOC 2 Type II and DPDP compliant, ensuring the highest standards of data protection.

6. Your Privacy Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or restrict the processing of your personal data. To exercise these rights, please contact our Data Protection Officer at privacy@nostaviahealth.com.

7. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date.

8. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: contact@nostaviahealth.com
Address: Nostavia Health HQ, Lucknow, India