Solas

1. Introduction

Solas Health, Inc. ("Solas," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use the Solas application, website, and related services (collectively, "Services").

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: Name, email address, password, and optional profile information
• Health and Fitness Data: Nutrition logs, meal entries, workout records, health metrics (steps, sleep, HRV, heart rate, weight), and wearable device data
• Goals and Preferences: Health goals, dietary preferences, fitness targets, and coaching preferences
• Communications: Messages and queries you send to the AI coach, support requests, and feedback
• Payment Information: Billing information processed by Stripe. We do not store full payment card numbers.
• Documents: Any documents you upload to the Document Vault feature

2.2 Information Collected Automatically

• Usage data, features accessed, session data
• Device type, operating system, app version, device identifiers
• IP address, access times, error logs, and performance data
• Anonymized usage patterns for service improvement

2.3 Information from Third Parties

• Health and fitness data from connected wearable devices (Apple Health, Garmin, Whoop, Oura, and others) with your explicit authorization
• Calendar data you authorize for briefing features
• Shopping data from authorized retailer integrations

2.4 AI-Generated Memory and Insights

The Services create a persistent memory of information you share, including preferences, health patterns, goals, and profile facts inferred from your interactions. You can review, correct, and delete your stored memories and profile facts through the app's Profile section at any time.

3. How We Use Your Information

We use the information we collect to:

• Deliver personalized health coaching, generate briefings, and power AI-driven features
• Build and maintain your health profile to provide relevant, context-aware coaching over time
• Analyze usage patterns and improve the Services using anonymized and aggregated data
• Operate our safety monitoring systems and maintain platform integrity
• Send service-related notifications and respond to support requests
• Comply with applicable laws and protect the rights of Solas and our users
• Process subscription payments and prevent fraud

We do not sell your personal data to third parties. We do not use your health data for advertising purposes.

4. Health Data — Special Protections

We recognize that health and fitness data is particularly sensitive and apply additional protections:

• Your health data is used exclusively to provide you with personalized coaching and insights
• It is not shared with advertisers, data brokers, insurers, or employers
• We will never sell, rent, or license your health data to any third party
• AI processing of health data occurs under strict data handling agreements with our providers

5. Data Sharing and Disclosure

We may share your information only in these limited circumstances:

5.1 Service Providers. Trusted third-party providers who assist in operating the Services (cloud hosting, database services, AI model providers, payment processing, error tracking). All are contractually bound to protect your data.

5.2 Third-Party Integrations. When you authorize integrations, we share the minimum data necessary to provide that integration.

5.3 Legal Requirements. If required by law, court order, or to protect the safety of any person.

5.4 Business Transfers. In the event of a merger or acquisition, with notice provided before transfer.

5.5 With Your Consent. For any other purpose with your explicit consent.

6. Data Retention

Data Category	Retention Period
Account information	Duration of account + 30 days
Health and fitness logs	Duration of account + 30 days
AI memory and profile facts	Duration of account + 30 days
Payment records	7 years (legal requirement)
Security audit logs	2 years
Safety violation logs	3 years
Anonymized usage analytics	Indefinite

7. Your Rights and Choices

Access and Correction: Update your information through the app's Profile and Settings sections at any time.

Data Export: Request a copy of your data by contacting [email protected]. Delivered within 30 days.

Data Deletion: Request account deletion through the app or by contacting [email protected]. Processed within 30 days.

Memory Management: Review, confirm, reject, and delete individual memory entries and profile facts through the Profile section.

Marketing Communications: Opt out of promotional communications at any time.

Integration Disconnection: Disconnect any wearable or integration at any time through the Devices section.

8. California Privacy Rights (CCPA/CPRA)

California residents have the right to: know what personal information we collect and how it's used; delete personal information; correct inaccurate information; opt-out of the sale of personal information (we do not sell personal information); and non-discrimination for exercising these rights.

To exercise California privacy rights, contact [email protected].

9. European Privacy Rights (GDPR)

If you are in the EEA, UK, or Switzerland, you have rights to access, rectify, erase, restrict, and port your personal data, and to object to processing. We process data on the bases of contract performance, legitimate interests, consent, and legal obligation. Data transfers to the US rely on Standard Contractual Clauses.

For GDPR inquiries, contact [email protected].

10. Children's Privacy

The Services are not directed to children under 18. We do not knowingly collect information from anyone under 18. Contact [email protected] to report any concern.

11. Security

We implement industry-standard security measures including TLS/HTTPS encryption in transit, encryption of sensitive data at rest, access controls, regular security audits, PII scrubbing in operational logs, and secure secrets management.

12. Changes to This Policy

We will notify you of material changes by posting the updated policy in the app and sending an email notification. Continued use after the effective date constitutes acceptance.

13. Contact Us

Privacy questions: [email protected]
Data deletion requests: [email protected] (subject: "Privacy Request")
Website: get-solas.com