Privacy Policy — the Heaven Health app

Last updated 10 November 2026 · Applies to the Heaven Health mobile and desktop application

Heaven Health is a longevity and health-research application. It cannot do what it does without health information about you, so this policy sets out plainly what we access, what we collect, what we work out from it, who else touches it, how long we keep it, and the things we will never do with it.

1. Health and wellness data

To provide its features the app accesses, collects, derives and uses health data. We treat this as the most sensitive category of information we hold, and it is subject to the specific commitments in sections 5 and 6.

Health data reaches us in three ways: read from your device's health store with your permission (section 2), given to us directly by you (section 3), and computed by us from the first two (section 4).

2. Health data we access from your device

With your explicit permission, and only after you grant it, we read the following from Apple Health (HealthKit) on iOS and Health Connect on Android:

• Heart rate, and resting heart rate
• Heart rate variability
• Respiratory rate
• Sleep
• Steps, and activity / exercise records
• Total calories burned

With your permission we also write back to Apple Health and Health Connect, so your records are consistent across your health apps:

• the workouts, exercise sessions and mindfulness sessions you complete in the app;
• active energy burned during those sessions;
• heart rate and heart rate variability measured in the app or read from a paired Heaven Halo ring;
• resting heart rate, respiratory rate and blood oxygen, where the app has measured or received them.

We only ever write the readings the app itself produced or received from a device you paired. We never alter or delete anything already in your health store.

You can withdraw these permissions at any time in your device settings, or directly in Apple Health or Health Connect. The app continues to work without them, with less personalisation.

Data from a connected Heaven Halo ring

If you pair a Heaven Halo smart ring, the app reads the wellness signals it records — heart rate, heart rate variability, sleep and activity — over Bluetooth, on your request. Bluetooth scanning is never used to derive your location.

3. Health data you give us

Body and scalp progress photos — these never reach us

The app can take optional progress photos of your body and scalp so you can compare them over time. These are handled differently from every other kind of photo in the app, and the difference matters:

• They are stored only on your device, in the app's private storage.
• They are never uploaded to Heaven Health. We never receive them, never store them, and cannot see them.
• They are excluded from iCloud and Google backups and from device-to-device transfer, so they do not leave your phone even when the rest of your data is backed up.
• They are deleted when you delete them in the app, when you delete your account, or when you uninstall the app.

This is different from meal photos and blood test documents, which are sent to our servers to be analysed, as described above.

4. Health data we derive

From the above we compute and store: your biological age, your Heaven Score, your biomarker trends over time, your personalised protocol, and — where you hold an active membership and have uploaded blood work — a 12-week restoration plan including per-marker targets and your adherence to it.

5. How we use health data

We use health data only to:

• generate and personalise your protocol, plans and recommendations;
• calculate your scores, biological age and trends;
• check for interactions between the compounds, foods and interventions in your plan;
• show you your own history and progress;
• send you the reminders and notifications you have enabled; and
• operate, secure and troubleshoot the service.

6. What we never do with health data

7. Blood-test bookings and location

The app lists independent blood-testing providers — clinics, laboratories, mobile phlebotomists and call-out doctors — so you can find one near you and arrange an appointment. Heaven Health is not the provider of that service, does not supervise or accredit it, and takes no payment for appointments.

Precise location

When you open the blood-tester finder and choose to share your location, we use your device's precise location to search for providers near you and sort them by distance.

• Your coordinates are sent to Heaven Health's own servers to run that search.
• They are not stored, not added to your profile, not used to build a location history, and not shared with the providers.
• Location is requested only while that screen is open, and only after we have explained why. You can decline and pan the map instead — the feature still works.
• Map images are served by the OpenStreetMap Foundation, which receives the map area being displayed as an ordinary consequence of loading images. It does not receive your identity or your account.

What the provider you choose receives

• the name you type into the booking form (this is the name you want them to expect — it is not taken from your account);
• if you are booking for a child in your care, the child's first name and the fact that the appointment is for a minor;
• the date, time and type of appointment you requested (a clinic visit or a home visit);
• anything you choose to write in the booking message or the chat thread; and
• the fact that you are seeking a blood test.

The provider does not receive your account identifier, your email address, your previous results, your protocol, or any other health data from your account. Nothing from your account is sent to them automatically. Equally, your results do not come back to us through them — your results go to you, and you decide whether to upload them.

Messages and reminders

Each booking has a message thread. We store those messages so both sides have a record of what was agreed, alongside automatic notices we add ourselves (the request, the confirmation, a cancellation, appointment reminders). Only you and that provider can read the thread. Push notifications about a booking deliberately do not contain the message text, so it does not appear on a lock screen.

If you are a provider (business accounts)

If you register a business in the directory, we collect and publish the business information you give us: business name, type, description, address, the map pin you place, contact telephone and email, website, opening hours and services. We also record your stated registration or licence number and the confirmations you tick at registration; these are used for verification and are not published. "Verified" means a person at Heaven Health reviewed the details you submitted — it is not an accreditation, endorsement, inspection or clinical assessment.

8. Account and device data

9. Membership and purchases

If you buy the H Week membership or a token pack, the purchase itself is handled by Apple or Google — we never see your card details. To confirm and maintain your membership we receive and store: the store transaction identifiers, the product purchased, the purchase and expiry dates, the store environment, and the receipt or purchase token needed to re-verify your entitlement with the store. We use this only to decide whether your membership is active, to restore it on a new device, and to keep our records straight.

9a. Heaven Halo reservations (website and app)

You can reserve a Heaven Halo ring on heaven-health.com or in the app. A reservation is not a purchase and nothing is charged when you make one.

What we collect: your email address; your first name, if you give it; your country; the finish and ring size you chose (or that you asked for a sizing kit); the language of the page or app you used; whether the reservation came from the website, the app or a shared link; and whether you ticked the box to receive news and launch offers. We do not store your IP address with a reservation.

Why: to handle your reservation — to confirm it with you, send a sizing kit if you asked for one, and later send your payment link. We email you news and launch offers only if you ticked that box, and you can unsubscribe at any time.

How long we keep it: if you do not confirm a reservation from the email we send, we delete it after 30 days. A confirmed reservation is kept until you cancel it or it is fulfilled. You can cancel from the link in any reservation email.

Your rights: you can ask to see, correct or delete your reservation details at any time by writing to support@heavenecohub.com. Your other rights are set out in section 14.

Shop statistics: the shop page counts a few anonymous events — for example that a finish was selected or that a reservation was sent — as daily totals. These counts set no cookies, store nothing on your device and contain no identifier, so they cannot be linked to you.

9b. Heaven Halo camera ring sizer (website)

Our website offers an optional tool that uses your phone's camera and a plastic card to suggest Halo sizes to try. It runs only if you choose to start it and confirm that you are 18 or over. You can measure a ring you already own, or your finger.

What happens to the picture: the picture from your camera is processed on your own device, in your browser. It is not sent to us or to anyone else. When you use the camera in this page, it is not saved. The tool is used only to suggest sizes, and not to identify anyone.

If you measure your finger: the tool finds the card and the edges of your finger. The hand-tracking software is downloaded from our own website when you choose this option.

If you measure a ring: you place a ring and a plastic card on a surface and the tool measures the inside of the ring against the card. The tool does not look for or analyse a hand or finger, and the hand-tracking software is not downloaded for this option. If a hand or other item appears in the picture, it is handled like the rest of the picture: processed on your device and not saved or sent.

If you take a photo instead: your phone's own camera app takes the picture and hands it to this page, which processes it on your device and does not send it to us. Some camera apps may keep their own copy in your photo gallery; that copy is under your control.

Cards: we ask you to use a loyalty, gym or travel card. Please avoid showing a bank card; if you do, cover the number and your name without using your hand. The picture of the card is discarded in the same way, and the tool does not read what is printed on the card.

What the tool produces: suggested sizes, shown on your screen. If you go on to the shop, they are also kept in your browser for this visit (in session storage), so they can be shown on the Halo page. They stay on your device and are cleared when you remove them or the visit ends.

What we receive: nothing from the tool itself. If you go on to reserve a Halo, the size you choose is handled as described in section 9a. The measuring software is downloaded from our own website, and no third party receives your camera picture.

If you would rather not use your camera, you can reserve with a free sizing kit or use our printable sizing guide instead.

10. Advertising

Free parts of the app show advertising through Google AdMob. On iOS we ask for your permission before any tracking identifier is used; if you decline, you still see ads, but they are not personalised. As stated in section 6, no health information is ever used for or shared with advertising.

11. Who processes data for us

• Google Cloud Platform and Firebase (Google LLC) — hosting, authentication, database storage, notifications and analytics.
• Luna Heaven — our AI processing service. It receives the specific content needed to answer a request (for example a meal photo, or the health question you asked), processes it on our instruction, and does not use it for its own purposes.
• Apple and Google — payment processing for in-app purchases, and verification of those purchases.
• OpenStreetMap Foundation — map imagery only, as described in section 7.
• PubMed and ClinicalTrials.gov — consulted for research literature. No personal or health data about you is ever sent to them.

These providers act as processors under our instructions and are bound by confidentiality and security obligations.

12. Legal basis (UK and EU GDPR)

Health data is special-category data. Our legal basis for processing it is your explicit consent, which you give when you turn on a feature that needs it — granting health permissions, uploading a blood test, sending a booking request. You may withdraw consent at any time, as described in sections 13 and 14; withdrawing it does not affect processing already carried out.

For your account, security and the operation of the service we rely on the performance of our contract with you and on our legitimate interests in keeping the service working and secure. For advertising identifiers on iOS we rely on your consent through the system prompt.

13. Retention and deletion

Health data is stored against your account and kept until you delete it or close your account. You can delete individual records — a blood test report, a gut log — in the app at any time.

Booking information has its own schedule:

• Message threads are deleted 180 days after a booking ends.
• Bookings that did not go ahead (declined, cancelled, or an appointment time that passed without the provider confirming it) are deleted after 90 days.
• Completed appointments are kept for 24 months as the provider's record that a service was performed, then deleted.
• Business applications that never became a listing are deleted after 12 months.
• Ratings are kept while the provider is listed, and removed if you close your account or the provider closes theirs.

Closing your account removes your health records, your journal, your protocol and your ratings, other than anything we are legally required to retain. If you have an appointment that has not happened yet, it is cancelled and the provider is told it was cancelled — they are expecting somebody to arrive — and your name and messages are removed from the record they keep.

14. Your rights

You may request access to, correction of, export of, or erasure of your data at any time, and you may object to or ask us to restrict processing. You can delete your account from within the app (Me → account menu → Delete Account), or write to us at the address in section 18. Where we rely on consent, you can withdraw it at any time. You also have the right to complain to your data protection authority; in the UK that is the Information Commissioner's Office.

15. Children

The app is not directed at anyone under 18, and an account holder must be an adult. We do not knowingly collect health data from a child through an account.

There is one deliberate exception. An adult may book a blood test on behalf of a child in their care. In that case we collect the child's first name only — no surname, no date of birth, no contact details and nothing clinical — together with the fact that an appointment was arranged for them, and we pass that to the provider so they know who to expect. The adult must confirm that they are the child's parent or legal guardian and that they will attend and give consent in person. The child's first name is deleted when the appointment record is deleted, or immediately if the adult closes their account.

16. Security and international transfers

Data is encrypted in transit. Health records are held in Google Cloud and are reachable only through our authenticated services — they are not open to the public internet, and our database rules deny direct client access to them. Access within our team is limited to those who need it to operate the service.

Heaven Health data is stored on Heaven Cloud servers in the United Kingdom, operated by Heaven Eco Hub. Sign-in accounts are still provided by Google Firebase Authentication. Where data is transferred out of the UK or EEA we rely on the appropriate safeguards, including the UK International Data Transfer Addendum and the EU Standard Contractual Clauses.

17. Changes to this policy

If we change what we collect or how we use it, we will update this page and the date at the top. Where a change materially affects health data we will tell you in the app.

18. Contact us

Bodhisla LTD, trading as Heaven Eco Hub, United Kingdom.
Email support@heavenecohub.com for any privacy question, data request or complaint.

This policy was last updated on 10 November 2026.