Summary: We collect only what's necessary to provide our services. Your health data stays private. We don't sell your information. You control your data.
1. Introduction
As Above Technologies LLC ("As Above," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, applications, and integrations.
By using our services, you consent to the practices described in this policy.
2. Information We Collect
2.1 Information You Provide
- Account Information: Name, email address, and authentication credentials from OAuth providers (Google, Fitbit, etc.)
- Profile Data: Preferences, settings, and configuration choices
- Communications: Messages you send to us for support or feedback
2.2 Health and Wellness Data
When you connect health tracking devices or services, we may access:
- Sleep metrics (duration, quality scores, sleep stages)
- Heart rate data (resting heart rate, heart rate variability)
- Activity data (steps, active minutes, calories)
- Body measurements (if you choose to sync them)
Important: Health data is processed locally or in secure environments and is never sold to third parties. You maintain full ownership and control of your health information.
2.3 Automatically Collected Information
- Device Information: Device type, operating system, browser type
- Usage Data: Features accessed, timestamps, interaction patterns
- Log Data: IP address, access times, error logs
3. How We Use Your Information
| Purpose | Data Used |
|---|---|
| Provide and maintain services | Account info, preferences |
| Health insights and tracking | Health metrics from connected devices |
| Personalization | Usage patterns, preferences |
| Communication | Email address |
| Security and fraud prevention | Log data, device information |
| Service improvement | Aggregated, anonymized usage data |
4. Data Sharing and Disclosure
We do not sell your personal information.
We may share information only in these limited circumstances:
- Service Providers: Trusted vendors who assist in operating our services (cloud hosting, analytics), bound by confidentiality agreements
- Legal Requirements: When required by law, court order, or governmental authority
- Safety: To protect the rights, property, or safety of As Above, our users, or others
- Business Transfers: In connection with a merger, acquisition, or sale of assets (you would be notified)
- With Your Consent: When you explicitly authorize sharing
5. Data Security
We implement industry-standard security measures to protect your data:
- Encryption in transit (TLS/SSL) and at rest
- Secure OAuth 2.0 authentication
- Regular security audits and updates
- Access controls and authentication requirements
- Secure cloud infrastructure with leading providers
While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
6. Data Retention
We retain your data only as long as necessary to provide services and fulfill the purposes described in this policy. Specifically:
- Account Data: Retained while your account is active
- Health Data: Retained according to your preferences; deletable upon request
- Log Data: Typically retained for 90 days
You may request deletion of your data at any time (see Your Rights below).
7. Your Rights
Depending on your location, you may have the following rights:
- Access: Request a copy of your personal data
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your data
- Portability: Request your data in a portable format
- Withdraw Consent: Revoke previously granted permissions
- Object: Object to certain processing activities
To exercise these rights, contact us at [email protected].
8. Third-Party Services
Our services integrate with third-party platforms including:
- Google (Calendar, Gmail, Home, Fit)
- Fitbit (health metrics)
- Other OAuth providers
These services have their own privacy policies. We encourage you to review them. We only access data you explicitly authorize through OAuth consent screens.
9. Children's Privacy
Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected data from a child, we will delete it promptly.
10. International Data Transfers
Your information may be transferred to and processed in the United States or other countries where our service providers operate. We ensure appropriate safeguards are in place for such transfers.
11. California Privacy Rights (CCPA)
California residents have additional rights under the California Consumer Privacy Act:
- Right to know what personal information is collected
- Right to know if personal information is sold or disclosed
- Right to opt-out of the sale of personal information (we don't sell data)
- Right to non-discrimination for exercising privacy rights
12. Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be communicated through our services or via email. The "Effective Date" at the top indicates when the policy was last revised.
13. Contact Us
For questions, concerns, or requests regarding this Privacy Policy or your data:
As Above Technologies LLC
Email: [email protected]
Website: asabove.tech