ISAIYA Privacy Policy

1. Who we are

ISAIYA is a platform for specialists in wellbeing, a healthy lifestyle and longevity, as well as their clients. We provide tools for maintaining a wellbeing questionnaire, taking tests, viewing parameter dynamics and interaction between specialist and client. The ISAIYA team acts as the operator processing personal data.

2. What data we collect

2.1. Account data

• email address and password (the password is stored as a hash);
• first name, last name, phone number (if you provided them);
• role in the system (client or specialist) and related attributes.

2.2. Wellbeing questionnaire

• date of birth, sex, height, weight, blood type;
• allergies, wellbeing specifics, supplements taken, family history — to the extent you are willing to provide them;
• body type, activity level, subjective wellbeing assessment, habits and lifestyle;
• answers to onboarding questions.

This information is sensitive wellbeing data. We process it only with your explicit consent and use it solely within the service.

2.3. Test and analysis data

• video recordings and snapshots obtained from connected devices (microscope, etc.);
• computed parameters, statuses, reference ranges and test interpretations;
• specialist notes related to a specific analysis session.

2.4. Device data

• serial number, type, model and firmware version of the linked device;
• last connection time, activity status, service settings.

2.5. Technical data

• IP address, browser or operating system type, session identifiers;
• app activity logs (sign-in, API requests, response time) — to the minimum extent necessary for diagnostics and security.

We do not collect geolocation data, phone book contacts, third-party app history or any information unrelated to the operation of the service.

3. How we use the data

• providing core functionality: profile management, taking tests, displaying history and parameter dynamics;
• specialist–client interaction: a specialist sees data only of clients with whom they have an active link in the system;
• technical support, error diagnostics, protection against unauthorized access;
• improving service quality and usage analytics in anonymized form;
• compliance with applicable law (for example, in response to lawful requests from government authorities).

We do not use your data for sale, advertising targeting or transfer to marketing partners.

4. Legal grounds for processing

We process data on the following grounds:

• your explicit consent — for sensitive wellbeing data;
• performance of a contract — for account data and data necessary to operate the service;
• legitimate interest — to ensure security, prevent fraud, and for anonymized analytics;
• legal requirement — where processing is mandatory under applicable law.

5. Storage and security

• data is stored on secure servers; access is limited to the minimum necessary group of staff;
• the connection to the server is encrypted (TLS), passwords are stored only as a hash, access tokens have a limited lifetime;
• we regularly update our infrastructure and apply security best practices (least-privilege principle, environment isolation, backups);
• if an incident affecting your data is detected, we will notify you within a reasonable time and describe the measures taken.

6. Sharing data with third parties

We do not sell or transfer your data for advertising or commercial purposes. Limited transfer is possible only to:

• infrastructure providers (hosting, cloud storage, sending notifications) — to the extent necessary to operate the service and subject to confidentiality;
• your specialist — if you use the platform as a client and have been added to them;
• government authorities — where required by law and upon their lawful request.

7. Retention period

Data is retained as long as your account is active and for a reasonable period after its deletion — to fulfill obligations, resolve disputes and comply with legal requirements. After this period, data is deleted or anonymized.

8. Your rights

In relation to your data, you have the right to:

• access it and obtain a copy in a machine-readable format;
• correct inaccurate information in your profile;
• withdraw previously given consent to processing;
• delete your account and the data associated with it;
• restrict or object to processing where there are lawful grounds to do so.

You can exercise these rights in the app settings or by writing to the contact address listed in section 11.

9. Cookies and local storage

The web portal uses cookies and browser local storage only for authentication purposes and to save user settings (for example, the color theme). We do not use third-party advertising or analytics cookies that identify you as an individual outside ISAIYA.

10. Age restrictions

The service is not intended for persons under 18. If we become aware that we have collected data of a minor without the consent of a legal guardian, such data will be deleted.

11. Policy changes

We may update this Policy from time to time. The current version is always posted on this page, and the update date is shown at the top of the document. We additionally announce significant changes within the app.

12. Contacts

For any questions about this Policy and the processing of your data, write to us:

📩 isaiyahealth@gmail.com