Privacy Policy

AyuQ is a digital health and longevity platform owned and operated by Zyfolis Healthcare Technology Private Limited (“Company”, “we”, “our”, or “us”).

This Privacy Policy explains how we collect, use, store, protect, and share information when you use the AyuQ mobile application, web application, website, and related services (collectively, the “Services”).

By using AyuQ, you acknowledge that you have read this Privacy Policy. Where applicable law requires consent for a particular processing activity, we will obtain that consent separately or through an appropriate consent mechanism.

1. Information We Collect

We collect information that is necessary to provide, personalize, secure, and maintain our Services.

a. Account Information

When you create or use an AyuQ account, we may collect:

• Name
• Email address
• Password or authentication credentials
• Account identifiers and login information
• Subscription and account status information
• Other information you provide when managing your account

Passwords and authentication credentials are protected using appropriate security measures.

b. Profile and Lifestyle Information

You may voluntarily provide information to personalize your AyuQ experience, including:

• Date of birth
• Gender
• Height
• Weight
• Waist size
• Exercise and training frequency
• Lifestyle information
• Alcohol consumption
• Smoking status
• Stress and lifestyle information
• Family medical history, where voluntarily provided
• Dietary preferences and other wellness-related information, where provided

Providing this information is optional unless it is specifically required for a feature you choose to use.

 c. Health and Diagnostic Data

If you use AyuQ's health, diagnostic, longevity, recovery, or biomarker features, we may collect:

• Biomarker data
• Blood and laboratory test results
• Health and diagnostic reports
• Health measurements
• Medical or health information voluntarily provided by you
• Health, recovery, and wellness scores calculated by AyuQ
• Other health information necessary to provide the features you use

This information may constitute sensitive personal data or personal health information under applicable law. We handle it in accordance with this Privacy Policy and applicable legal requirements.

d. Wearable and Connected Health Platform Data

If you choose to connect a third-party wearable, fitness, health, or activity platform to AyuQ, we may receive data from that platform according to the permissions, authorization, and integration functionality you enable.

Supported integrations may include:

• Garmin Connect
• WHOOP
• Oura
• Apple Health
• Strava
• Fitbit
• Ultrahuman
• Other wearable, fitness, or health platforms supported by AyuQ from time to time

The availability and categories of data depend on the connected platform, the integration method, the permissions granted, and the features supported.

Depending on the integration, the information we may receive includes:

• Heart rate
• Resting heart rate
• Heart-rate variability (HRV)
• Sleep duration, sleep stages, and related sleep metrics
• Recovery and readiness metrics
• Daily activity and movement information
• Steps and other activity measurements
• Running, cycling, swimming, and other workout information
• Workout duration, distance, pace, speed, elevation, and related metrics
• Training load, exercise intensity, and performance information
• Oxygen saturation or other health measurements where supported and authorized
• Device or sensor model information where provided by the connected platform
• Other health, wellness, fitness, and activity information made available through the integration

We collect only information made available to AyuQ through the relevant integration and permissions. We do not represent that every listed category is available from every platform.

 Garmin Connect Data

When you connect Garmin Connect to AyuQ, we may receive Garmin-sourced data through the Garmin Connect Developer Program. The specific data depends on the API, permissions, and integration features available.

We use this information to synchronize and display supported activities, present relevant health and fitness metrics, calculate supported platform scores, and provide other AyuQ functionality you choose to use.

Where Garmin provides device model information, AyuQ may display the model alongside the relevant activity or data view in accordance with applicable Garmin attribution requirements.

Garmin-sourced data is handled according to the safeguards, service-provider disclosures, and restrictions described in this Privacy Policy and the applicable requirements governing the integration.

e. Device and Usage Information

We may automatically collect technical, security, and usage information when you access our Services, including:

• Device type and model
• Operating system and version
• Application version
• IP address
• Session and application usage information
• Crash logs and error reports
• Performance and diagnostic information
• Security events and authentication logs
• Information necessary to maintain the reliability and security of our Services

Where technical logs or diagnostic tools may process personal information, we apply appropriate access and security controls.

2. How We Use Your Information

We use information for purposes including:

• Creating, authenticating, and managing your account
• Providing AyuQ's health, longevity, wellness, and performance services
• Displaying health, fitness, recovery, sleep, activity, and biomarker information
• Connecting and synchronizing data from supported wearable and health platforms
• Generating health, fitness, activity, and performance reports
• Calculating health, recovery, readiness, longevity, and other platform metrics
• Identifying trends and patterns in your data
• Providing personalized insights and recommendations through permitted processing methods
• Combining permitted health and activity measurements to provide platform functionality
• Maintaining your preferences and selected features
• Processing subscriptions and managing account entitlements, where applicable
• Providing customer support and responding to requests
• Maintaining application functionality, reliability, and performance
• Detecting and preventing fraud, unauthorized access, and misuse
• Protecting the security of our Services and users
• Complying with applicable legal and regulatory requirements

We use information only for purposes consistent with this Privacy Policy, the permissions you provide, and applicable law.

3. AI and Third-Party AI Processing

AyuQ may use artificial intelligence and machine-learning technologies for certain features and functionality.

Where external AI services are used, eligible information may be processed by third-party AI providers only where permitted for the relevant feature, consistent with applicable law, and subject to any required consent.

Connected Wearable and Health Platform Data

AyuQ does not provide data obtained from connected wearable, fitness, or health platforms to external AI providers or large language model providers for AI or machine-learning processing.

This restriction applies to data obtained through integrations including, but not limited to:

• Garmin Connect
• WHOOP
• Oura
• Apple Health
• Strava
• Fitbit
• Ultrahuman
• Other supported wearable, fitness, or health platforms

AyuQ does not provide Garmin-sourced data to external AI services as an input for AI processing and does not use Garmin-sourced data to train external AI models.

Connected wearable and health-platform data may be processed within AyuQ's application and infrastructure for permitted functionality, including:

• Displaying health and activity metrics
• Calculating platform scores
• Generating trends and summaries using permitted internal processing
• Combining permitted health and activity metrics
• Providing dashboards and reports
• Supporting other AyuQ features requested by the user

This section describes AyuQ's intended processing practices and does not authorize any processing that is prohibited by an applicable platform agreement.

Other Data and External AI Services

For features where external AI services are used, eligible information may be processed for purposes such as:

• Generating personalized insights
• Analyzing permitted health or lifestyle information
• Identifying patterns in eligible information
• Generating recommendations
• Supporting permitted AI-powered features

Where required, AyuQ will obtain appropriate consent before processing information through external AI services.

Information obtained from connected wearable and health platforms remains excluded from external AI processing as described above.

AyuQ does not sell personal or health data to AI providers.

4. Data Sharing and Disclosure

We do not sell your personal or health data.

We may share or provide access to information where necessary to operate and provide the Services, comply with legal obligations, protect users, or act on your authorization, subject to this Privacy Policy and applicable law.

a. Service Providers

AyuQ uses third-party service providers to support the operation, security, hosting, maintenance, and delivery of its Services.

Depending on the service and the data flow involved, these providers may include:

• Cloud infrastructure and application hosting providers
• Database and data-storage providers
• Wearable integration and data-transfer providers
• Security and infrastructure monitoring providers
• Error tracking and technical diagnostic providers
• Customer support and communication providers
• Other technology providers necessary to operate the Services

Providers That Process Connected Wearable and Health Platform Data

The following disclosures identify the provider categories relevant to connected-platform data. The actual provider names and purposes must reflect the services used in AyuQ's production environment.

Cloud infrastructure and application hosting: Amazon Web Services to host the application and process connected-platform data.
Database and storage: S3 to store and manage connected-platform data and associated application records.
Wearable integration and data transfer:  to facilitate authorized retrieval, synchronization, or transfer of data from supported platforms.
Monitoring, security, and error tracking:  to maintain security, monitor service reliability, and diagnose technical issues where those services process or can access connected-platform data.

These entries must be completed with the actual legal or commonly used provider names before publication. Providers that do not process or have access to connected-platform data should not be represented as doing so merely because AyuQ uses their services for unrelated purposes.

Service providers are permitted to process information only as necessary for their documented services, subject to applicable contractual arrangements, technical access controls, and legal requirements.

AyuQ does not authorize service providers to use connected wearable or health-platform data for purposes inconsistent with this Privacy Policy or the applicable integration requirements.

b. Connected Platforms

When you connect a wearable or health platform, AyuQ receives information made available through that platform according to the authorization and integration functionality you enable.

The connected platform may separately process information under its own terms and privacy policy. AyuQ's handling of information received by AyuQ is governed by this Privacy Policy and applicable law.

c. Legal and Safety Requirements

We may disclose information where reasonably necessary to:

• Comply with applicable laws, regulations, legal processes, or valid governmental requests
• Investigate or prevent fraud, security incidents, or unauthorized activity
• Protect the security and integrity of AyuQ
• Protect the rights, safety, or property of AyuQ, our users, or others
• Establish, exercise, or defend legal claims
• Enforce applicable agreements and policies

d. Business Transfers

If AyuQ or its operating company is involved in a merger, acquisition, restructuring, financing, or sale of all or part of its business or assets, personal information may be transferred as part of that transaction, subject to applicable legal requirements and appropriate safeguards.

e. Connected Platform and AI Restrictions

AyuQ does not sell connected wearable or health-platform data. As described in Section 3, AyuQ does not provide such data to external AI or large language model providers for AI processing or external AI model training.

5. Data Storage and Security

We implement reasonable technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, loss, or destruction.

These measures may include:

• Encryption in transit and, where appropriate, at rest
• Access controls and authentication mechanisms
• Authorization and restricted access to sensitive information
• Secure application and infrastructure configurations
• Monitoring and security controls
• Backup and recovery mechanisms
• Appropriate measures to protect credentials and secrets
• Restrictions on access to production systems and sensitive records

Access to sensitive information is limited to authorized personnel and service providers who require access for legitimate operational purposes, subject to applicable safeguards.

Information may be stored or processed in locations where AyuQ or its service providers operate. Where cross-border processing or transfers occur, we apply safeguards required by applicable law.

No method of electronic storage or transmission is completely secure. Accordingly, we cannot guarantee absolute security.

 6. Your Rights and Choices

Depending on applicable law, you may have rights to:

- Access the personal information we hold about you
- Correct or update inaccurate information
- Request deletion of your account and associated information
- Request deletion of specific information, including connected-platform data
- Withdraw consent where processing is based on consent
- Object to or restrict certain processing, where applicable
- Request a copy or export of information where applicable
- Choose whether to provide optional profile or health information
- Connect or disconnect supported wearable and health platforms
- Manage permissions granted to connected platforms
- Choose whether to use features involving external AI processing, where applicable

You may submit requests relating to your personal information by contacting:

**Email:** support@ayuq.bio

We may need to verify your identity before responding to certain requests.

Connected Platform Permissions and Disconnection

Connecting a wearable or health platform is optional. When you connect an account, you authorize the applicable integration to retrieve supported information according to the permissions and functionality presented during the connection process.

You may disconnect a supported platform through [insert the actual AyuQ account settings or disconnection process] and, where applicable, revoke access through the connected platform.

After disconnection, AyuQ will stop obtaining new data through that integration, subject to any in-progress synchronization or other processing permitted by law and the applicable integration requirements.

Disconnecting a platform does not automatically mean that previously collected information is deleted. Previously collected data may remain in your AyuQ account under the retention practices described in this Privacy Policy unless you request deletion or deletion is otherwise required by applicable law.

You may request deletion of previously collected connected-platform data by contacting support@ayuq.bio.

We will handle access, correction, deletion, and other requests in accordance with applicable law and our legal and operational retention obligations.

7. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

- Provide and maintain the Services
- Maintain your account
- Provide requested features
- Maintain relevant health, activity, and report history
- Comply with legal, regulatory, accounting, or reporting requirements
- Resolve disputes and enforce agreements
- Detect and prevent fraud, misuse, and security incidents

The retention period may vary depending on the type of information, the features you use, your account status, applicable legal requirements, and whether the information is required for legitimate security or operational purposes.

Connected wearable and health-platform data may remain in your AyuQ account after an integration is disconnected. You may request deletion of such data by contacting support@ayuq.bio.

Where deletion is approved and applicable, we will take reasonable steps to delete the relevant information from active systems. Copies may remain in backups or records retained for legitimate legal, security, or operational purposes until deletion is practicable or the applicable retention period expires.

 8. Children's Privacy

AyuQ's Services are not intended for individuals under the age of 18.

We do not knowingly collect personal information from individuals under 18. If we become aware that we have collected such information without appropriate authorization, we will take reasonable steps to delete it, subject to applicable law.

9. Third-Party Services and Links

AyuQ may integrate with or provide links to third-party services, applications, websites, wearable platforms, health platforms, and other external services.

These third parties may have their own terms, privacy policies, security practices, and data-processing procedures. AyuQ does not control the privacy practices of third-party services outside our control.

When you connect a third-party platform to AyuQ, the information made available to AyuQ depends on the permissions you grant, the platform's functionality, and the integration method.

We encourage you to review the relevant third-party privacy policies before connecting accounts or authorizing data transfers.

For Garmin Connect, please review the [Garmin Connect Privacy Notice](https://www.garmin.com/privacy/connect).

 10. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes to our Services, integrations, technology, service providers, data-processing practices, or legal requirements.

If we make material changes, we may notify you through the AyuQ application, website, email, or other appropriate means, where required or appropriate.

The updated Privacy Policy will include a revised “Last Updated” date. Changes will take effect when the updated policy is published or on any later effective date specified in the notice.

11. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or your personal information, please contact us:

**Zyfolis Healthcare Technology Private Limited**

Email: support@ayuq.bio

Website: https://www.ayuq.bio