Privacy Policy
This policy explains what personal data the ALIHEALTH mobile app and its online service collect, why, where it is stored, how long it is kept and how you control it. Health data is sensitive: we collect only what the service needs, and most processing depends on your explicit consent.
1. Who is responsible
ALIHEALTH DIGITAL, Cité ASECNA, Mamelles Aviation, Ouakam, Dakar, Senegal, is the controller of your data.
Contact for any privacy question or request: altanaz@hotmail.com.
2. What data we process
| Category | Data | Why |
|---|---|---|
| Account | Email address, password (stored only as a secure hash), language, optional phone number, version and date of the terms you accepted | Create and secure your account, sign you in, send password-reset codes |
| Profile | First and last name, sex, date of birth, country, city, height, weight, units, goals | Personalise the app; your sex, age, height and weight are also sent to your bracelet over Bluetooth so it can compute its values |
| Health profile (optional) | Conditions, medications, allergies, health goal | Personalise advice – only with the “Health data” consent |
| Bracelet | Model, manufacturer, identifier (MAC address/serial), firmware, battery level | Connect and reconnect your bracelet, show its status |
| Readings | Heart rate and variability, blood oxygen (SpO₂), steps, distance, calories, sleep, temperature, blood pressure, glucose, ECG, body composition, and readings you enter manually – each with its time, source and quality (measured or estimated) | Show your values, trends, alerts and weekly report; back them up to your account if you choose |
| Technical app events (optional) | Events such as pairing, synchronisation or screens used, with technical details (app version, bracelet family). Never health values. | Improve the app – only with the “Improve the app” consent |
| Security log | Sign-up, sign-in, failed sign-in, consent changes, export, account deletion, with the time. No health values, no passwords. | Protect your account and investigate abuse |
Blood pressure measured by a bracelet is an estimate, and glucose from a non-invasive bracelet is experimental. They are labelled as such everywhere.
3. Your consents
Each consent is separate, none is pre-selected, and you can change it at any time in Profile › Privacy & data:
- Health data – process your readings and health profile to show trends and advice. Withdrawing it deletes your health profile from our servers.
- Cloud backup – save your readings to your ALIHEALTH account. Without it, readings stay on your phone only. Withdrawing it deletes the server copy of your readings.
- Improve the app – share technical app events. Withdrawing it deletes the events already collected.
Sharing your data with a health professional will only happen if such a feature is offered and you enable it yourself. We keep the history of your consents (what, when, which version) as proof. Withdrawing a consent does not affect processing done before.
4. Where your data is stored
- On your phone: your readings (the last 90 days) and settings. Sign-in tokens are kept in the phone’s secure storage (iOS Keychain / Android Keystore).
- On our servers: only if you have an account. Servers are operated on Amazon Web Services in the Paris region (France, European Union). Data is encrypted in transit (HTTPS/TLS) and at rest (AES-256).
- Without an account, or in demo mode: nothing is sent to our servers. Demo data is simulated, clearly marked and never uploaded.
5. What we never do
- We do not sell your data.
- We do not use your data for advertising and the app contains no advertising trackers.
- We never send health data to marketing or advertising services.
6. Service providers
We use a small number of providers who process data only on our instructions and under contract:
- Amazon Web Services (hosting, database, backups, monitoring) – Paris region.
- An email delivery provider (Amazon SES or Brevo) – only your email address and the password-reset code, to send that email.
Your bracelet communicates with the app over Bluetooth. The app does not send your data to the bracelet maker.
7. Transfers outside your country
Our servers are in France (European Union). If you live in Senegal or another country, using the cloud backup therefore means your data is transferred abroad. ALIHEALTH DIGITAL completes the formalities required by the competent data protection authority (in Senegal, the Commission de Protection des Données Personnelles – CDP, under Law No. 2008-12 of 25 January 2008) and applies the security measures described in this policy.
8. How long we keep data
| Data | Kept |
|---|---|
| Account and profile | Until you delete your account |
| Readings on the server | Until you delete them, withdraw “Cloud backup” or delete your account |
| Health profile | Until you withdraw “Health data” or delete your account |
| Readings on your phone | Last 90 days, or until you sign out or uninstall the app |
| Technical app events | 12 months, or until you withdraw the consent |
| Security log | 12 months |
| Password-reset codes | 30 minutes, single use |
| Backups | Database backups are kept up to 35 days, then deleted automatically. Deleted data disappears from backups within that period. |
9. Your rights
You can at any time:
- Access and export your data – Profile › Privacy & data › Export my data.
- Correct your information – Profile › Personal information.
- Delete your account and all its data – Profile › Privacy & data › Delete my account.
- Withdraw a consent or object to a processing.
For any other request, write to altanaz@hotmail.com. We answer within one month. You may also file a complaint with the data protection authority of your country (in Senegal: the CDP, www.cdp.sn).
10. Security
Encrypted connections only; passwords hashed with Argon2id; short-lived sign-in tokens; sign-in attempts limited; each user can access only their own data; databases not reachable from the internet; encrypted daily backups; security events logged without health values. No system is perfectly secure: if a breach affecting your data occurs, we will inform you and the competent authority as required by law.
11. Age
ALIHEALTH is intended for adults (18 years and older).
12. Changes
If we change this policy, we will update its version and date and inform you in the app. If a change requires a new consent, we will ask for it.