Welcome to EdenVault ("EdenVault", "we", "us", "our"). We are committed to protecting your privacy and handling your data transparently and securely. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use EdenVault’s mobile and web applications, services, and websites (collectively, the "Services").
Note: This policy is designed to align with the EU General Data Protection Regulation (GDPR) and adopts safeguards consistent with the U.S. HIPAA Security Rule where applicable. EdenVault may act as a Business Associate when we provide services to HIPAA-covered entities; otherwise, HIPAA may not apply to consumer use of the app. This document does not constitute legal advice.
For users in the EEA/UK, EdenVault is the data controller for personal data processed via the Services unless stated otherwise. Where we process Protected Health Information (PHI) on behalf of a HIPAA-covered entity, we do so as a Business Associate under a Business Associate Agreement (BAA).
Contact: contact@edenvault.co
We collect health data only with your explicit consent and only from sources you authorize (e.g., HealthKit, Google Fit, connected wearables). You may withdraw consent at any time from your settings; withdrawal will not affect prior lawful processing.
We do not sell your personal data.
If we transfer your personal data outside your jurisdiction, we use appropriate safeguards such as EU Standard Contractual Clauses (SCCs) and implement technical and organizational measures to protect your data.
We retain personal data only as long as necessary for the purposes described above, to comply with legal obligations, resolve disputes, and enforce our agreements. You can request deletion at any time (see Rights below).
We apply safeguards consistent with industry standards and HIPAA Security Rule principles, including encryption in transit and at rest, access controls, audit logging, least-privilege, and regular security assessments. No method of transmission or storage is 100% secure.
Depending on your location, you may have rights to:
Submit requests by emailing contact@edenvault.co.
The Services are not directed to children under 13 (or the minimum age required by your jurisdiction). We do not knowingly collect personal data from children without appropriate consent.
Third-party integrations you choose to connect (e.g., Apple Health, Google Fit, wearables, rewards partners) are governed by their own policies. Please review those policies before enabling integrations.
We may update this Policy from time to time. We will notify you of material changes via in‑app notice or email and update the "Last updated" date above.