Health Data Privacy

How we handle health information specifically, and the rights you have over it.

Last updated: 6 September 2026

Effective date: 6 September 2026

This policy is published by ELASTOVA (SMC-PRIVATE) LIMITED, a private limited company incorporated in Rawalpindi, Punjab, Pakistan, as required by the Washington My Health My Data Act and the Nevada consumer health data law. Our full company details are at the end of this document.

It describes only our handling of consumer health data. Our general Privacy Policy covers everything else.

1. Categories of consumer health data we collect

• Bodily and physical condition information — the presence and extent of loose skin, which areas of your body are affected, and how it affects you physically
• Measurements — your current body weight, and the amount of weight you have lost
• Medical and surgical treatment information — the method by which you lost weight, which may include use of prescription medication such as GLP-1 drugs, or surgical procedures such as bariatric surgery
• Bodily images — photographs of your own body, if you choose to add them
• Health and fitness measurements from Apple Health, only where you have explicitly granted permission, and only the categories you permit
• Biological sex
• Health-related statements you make in conversation with our AI assistant
• Precise information derived from the above where the assistant refers back to what you have told it

2. Purpose of collection, and how the data is used

We collect consumer health data for one purpose: to provide the service you asked us for — keeping a private record of your own body over time, and enabling our AI assistant to answer your questions about it.

Specifically, it is used to:

• Store your own record so you can see it and refer back to it
• Enable the AI assistant to give you relevant, informed answers

It is not used for advertising, marketing, profiling, resale, research, or AI model training.

3. Categories of sources

• Directly from you — what you type, what you tell the assistant, and photographs you choose to add
• From Apple Health on your device, only with your explicit permission

We do not obtain consumer health data from data brokers, advertising networks, public records, or any other third party.

4. Categories of consumer health data we share

We share the following, only with the service providers in section 5, and only so that Elastova can function:

• Health-related statements made in conversation — shared with our AI service provider so a reply can be generated
• All categories listed in section 1 — stored with our hosting and database provider

We do not share consumer health data with anyone else.

5. Categories of third parties and specific affiliates we share with

Affiliates: ELASTOVA (SMC-PRIVATE) LIMITED has no affiliates, parent companies or subsidiaries. No consumer health data is shared with any affiliate, because none exists.

Service providers (processors), each bound by written contract to act only on our instructions:

We do not share consumer health data with: advertisers, advertising networks, analytics providers, data brokers, insurers, employers, social media platforms, or any other user of Elastova.

6. We do not sell consumer health data

We have never sold consumer health data and we will not. Because we do not sell it, we do not seek the signed authorization that a sale would require.

7. Your rights, and how to exercise them

You have the right to:

• Confirm whether we are collecting, sharing or selling your consumer health data, and access that data
• Confirm we have not sold your consumer health data
• Withdraw your consent to our collection and sharing of your consumer health data
• Delete your consumer health data, including from our archived and backup systems, and to have that deletion passed on to our service providers
• Appeal a refusal of any of the above

How to exercise them

In the app: tap the account symbol at the top of the chat screen, or, if you have declined the consent screen, tap "Manage my account" there. Deletion, consent withdrawal and a copy of your data are all available in both places.

By email: privacy@elastova.com — state which right you wish to exercise. We may need to confirm you control the account before we act.

Timing and cost: we respond free of charge, up to twice per year per person. If we refuse a request, we will tell you why and how to appeal. Your appeal will be reviewed by a person, and you will receive a written decision.

Withdrawing consent means we can no longer keep your consumer health data, so we will delete it. Elastova cannot function without it, so this effectively closes your account.

We will not discriminate against you for exercising any of these rights.

8. Contact

privacy@elastova.com