Privacy Policy — the Heaven Health app

Last updated 17 August 2026 · Applies to the Heaven Health mobile and desktop application

Heaven Health is a longevity and health-research application. It cannot do what it does without health information about you, so this policy sets out plainly what we access, what we collect, what we work out from it, who else touches it, how long we keep it, and the things we will never do with it.

1. Health and wellness data

To provide its features the app accesses, collects, derives and uses health data. We treat this as the most sensitive category of information we hold, and it is subject to the specific commitments in sections 5 and 6.

Health data reaches us in three ways: read from your device's health store with your permission (section 2), given to us directly by you (section 3), and computed by us from the first two (section 4).

2. Health data we access from your device

With your explicit permission, and only after you grant it, we read the following from Apple Health (HealthKit) on iOS and Health Connect on Android:

• Heart rate, and resting heart rate
• Heart rate variability
• Respiratory rate
• Sleep
• Steps, and activity / exercise records
• Total calories burned

With your permission we also write back to Apple Health and Health Connect the workouts, exercise sessions and mindfulness sessions you complete in the app, so your activity is consistent across your health apps.

You can withdraw these permissions at any time in your device settings, or directly in Apple Health or Health Connect. The app continues to work without them, with less personalisation.

Data from a connected Heaven Halo ring

If you pair a Heaven Halo smart ring, the app reads the wellness signals it records — heart rate, heart rate variability, sleep and activity — over Bluetooth, on your request. Bluetooth scanning is never used to derive your location.

3. Health data you give us

4. Health data we derive

From the above we compute and store: your biological age, your Heaven Score, your biomarker trends over time, your personalised protocol, and — where you hold an active membership and have uploaded blood work — a 12-week restoration plan including per-marker targets and your adherence to it.

5. How we use health data

We use health data only to:

• generate and personalise your protocol, plans and recommendations;
• calculate your scores, biological age and trends;
• check for interactions between the compounds, foods and interventions in your plan;
• show you your own history and progress;
• send you the reminders and notifications you have enabled; and
• operate, secure and troubleshoot the service.

6. What we never do with health data

7. Blood-test bookings and location

The app lists independent blood-testing providers — clinics, laboratories, mobile phlebotomists and call-out doctors — so you can find one near you and arrange an appointment. Heaven Health is not the provider of that service, does not supervise or accredit it, and takes no payment for appointments.

Precise location

When you open the blood-tester finder and choose to share your location, we use your device's precise location to search for providers near you and sort them by distance.

• Your coordinates are sent to Heaven Health's own servers to run that search.
• They are not stored, not added to your profile, not used to build a location history, and not shared with the providers.
• Location is requested only while that screen is open, and only after we have explained why. You can decline and pan the map instead — the feature still works.
• Map images are served by the OpenStreetMap Foundation, which receives the map area being displayed as an ordinary consequence of loading images. It does not receive your identity or your account.

What the provider you choose receives

• the name you type into the booking form (this is the name you want them to expect — it is not taken from your account);
• if you are booking for a child in your care, the child's first name and the fact that the appointment is for a minor;
• the date, time and type of appointment you requested (a clinic visit or a home visit);
• anything you choose to write in the booking message or the chat thread; and
• the fact that you are seeking a blood test.

The provider does not receive your account identifier, your email address, your previous results, your protocol, or any other health data from your account. Nothing from your account is sent to them automatically. Equally, your results do not come back to us through them — your results go to you, and you decide whether to upload them.

Messages and reminders

Each booking has a message thread. We store those messages so both sides have a record of what was agreed, alongside automatic notices we add ourselves (the request, the confirmation, a cancellation, appointment reminders). Only you and that provider can read the thread. Push notifications about a booking deliberately do not contain the message text, so it does not appear on a lock screen.

If you are a provider (business accounts)

If you register a business in the directory, we collect and publish the business information you give us: business name, type, description, address, the map pin you place, contact telephone and email, website, opening hours and services. We also record your stated registration or licence number and the confirmations you tick at registration; these are used for verification and are not published. "Verified" means a person at Heaven Health reviewed the details you submitted — it is not an accreditation, endorsement, inspection or clinical assessment.

8. Account and device data

9. Membership and purchases

If you buy the H Week membership or a token pack, the purchase itself is handled by Apple or Google — we never see your card details. To confirm and maintain your membership we receive and store: the store transaction identifiers, the product purchased, the purchase and expiry dates, the store environment, and the receipt or purchase token needed to re-verify your entitlement with the store. We use this only to decide whether your membership is active, to restore it on a new device, and to keep our records straight.

10. Advertising

Free parts of the app show advertising through Google AdMob. On iOS we ask for your permission before any tracking identifier is used; if you decline, you still see ads, but they are not personalised. As stated in section 6, no health information is ever used for or shared with advertising.

11. Who processes data for us

• Google Cloud Platform and Firebase (Google LLC) — hosting, authentication, database storage, notifications and analytics.
• Luna Heaven — our AI processing service. It receives the specific content needed to answer a request (for example a meal photo, or the health question you asked), processes it on our instruction, and does not use it for its own purposes.
• Apple and Google — payment processing for in-app purchases, and verification of those purchases.
• OpenStreetMap Foundation — map imagery only, as described in section 7.
• PubMed and ClinicalTrials.gov — consulted for research literature. No personal or health data about you is ever sent to them.

These providers act as processors under our instructions and are bound by confidentiality and security obligations.

12. Legal basis (UK and EU GDPR)

Health data is special-category data. Our legal basis for processing it is your explicit consent, which you give when you turn on a feature that needs it — granting health permissions, uploading a blood test, sending a booking request. You may withdraw consent at any time, as described in sections 13 and 14; withdrawing it does not affect processing already carried out.

For your account, security and the operation of the service we rely on the performance of our contract with you and on our legitimate interests in keeping the service working and secure. For advertising identifiers on iOS we rely on your consent through the system prompt.

13. Retention and deletion

Health data is stored against your account and kept until you delete it or close your account. You can delete individual records — a blood test report, a gut log — in the app at any time.

Booking information has its own schedule:

• Message threads are deleted 180 days after a booking ends.
• Bookings that did not go ahead (declined, cancelled, or an appointment time that passed without the provider confirming it) are deleted after 90 days.
• Completed appointments are kept for 24 months as the provider's record that a service was performed, then deleted.
• Business applications that never became a listing are deleted after 12 months.
• Ratings are kept while the provider is listed, and removed if you close your account or the provider closes theirs.

Closing your account removes your health records, your journal, your protocol and your ratings, other than anything we are legally required to retain. If you have an appointment that has not happened yet, it is cancelled and the provider is told it was cancelled — they are expecting somebody to arrive — and your name and messages are removed from the record they keep.

14. Your rights

You may request access to, correction of, export of, or erasure of your data at any time, and you may object to or ask us to restrict processing. You can delete your account from within the app (Me → account menu → Delete Account), or write to us at the address in section 18. Where we rely on consent, you can withdraw it at any time. You also have the right to complain to your data protection authority; in the UK that is the Information Commissioner's Office.

15. Children

The app is not directed at anyone under 18, and an account holder must be an adult. We do not knowingly collect health data from a child through an account.

There is one deliberate exception. An adult may book a blood test on behalf of a child in their care. In that case we collect the child's first name only — no surname, no date of birth, no contact details and nothing clinical — together with the fact that an appointment was arranged for them, and we pass that to the provider so they know who to expect. The adult must confirm that they are the child's parent or legal guardian and that they will attend and give consent in person. The child's first name is deleted when the appointment record is deleted, or immediately if the adult closes their account.

16. Security and international transfers

Data is encrypted in transit. Health records are held in Google Cloud and are reachable only through our authenticated services — they are not open to the public internet, and our database rules deny direct client access to them. Access within our team is limited to those who need it to operate the service.

Our infrastructure is in the United States. Where data is transferred out of the UK or EEA we rely on the appropriate safeguards, including the UK International Data Transfer Addendum and the EU Standard Contractual Clauses.

17. Changes to this policy

If we change what we collect or how we use it, we will update this page and the date at the top. Where a change materially affects health data we will tell you in the app.

18. Contact us

Bodhisla LTD, trading as Heaven Eco Hub, United Kingdom.
Email support@heavenecohub.com for any privacy question, data request or complaint.

This policy was last updated on 17 August 2026.