Privacy Policy

This Privacy Policy describes how Ardelium Group LLP ("+Life", "we", "our" or "us") collects, uses and discloses personal information when you use our website and the +Life web application (the "Service"). A real person wrote all of it. Please read it if you have questions about how we handle your information.

This policy was last updated 6 October 2026. If we change it, we will post the changes on this page. Changes are effective when posted.

Why we collect your data

Your data is the core of the service we provide. We combine the information you share with us, from connected devices, uploaded records and what you enter yourself, into one picture of your health and give you trends, correlations and next steps. Our service is about making use of information you choose to share, and we take the responsibility to protect it seriously.

The information we collect

When you create a +Life account you become a registered user and can connect it with third-party devices and services with which you also have an account (a "Source").

When you connect a Source, we collect the full set of metrics it makes available through its API, so your health picture is as complete as possible. Depending on the Source this may include sleep, heart rate and heart-rate variability, activity and workouts, body measurements and more. We access Sources only through their official APIs, with read-only permissions, and only after you authorise the connection. We never ask for your Source account password. Along with this data we collect identifying and preference information the Source provides, such as your username or your preference for metric or imperial units.

We continue to collect information from a Source for as long as it is connected, even when you are not logged in, so that your data is up to date. When you first connect a Source we may collect historical data back to the date you created your account with that Source.

You may also provide information directly: lab results, medical documents you upload, nutrition and supplement logs, notes, goals and answers to in-app questions. In this case no Source is involved and the data is sent directly to +Life.

As part of creating an account we collect your name and email address to administer the account.

Other information we collect

If you correspond with us by email, we may retain the content of your messages, your email address and our responses. When you use the Service, our servers automatically record log information such as your IP address, browser type, referring pages, pages viewed and timestamps. We use cookies to keep you logged in and to remember your settings. You can refuse cookies in your browser, but some features may not work.

The Service is intended for adults. We do not knowingly collect information from anyone under 18.

How we use the information we collect

We use your information to operate, maintain and provide the features of the Service: building your health picture, trends and recommendations. Health data is processed only with your explicit consent, which you give when you create an account, upload data or connect a Source. You can withdraw it at any time by disconnecting a Source or deleting your account.

We use your email address to send Service-related notices, including notices required by law. We may also send you updates about new features; you can opt out of these at any time. You cannot opt out of Service-related notices.

We may use information internally to analyse how the Service is used, diagnose technical problems, maintain security and personalise content. We may generate aggregated, anonymised statistics that do not identify individual users.

Your health data is not used to train machine-learning models, by us or by our service providers.

Use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

What information we share

We do not rent, sell or share personal information with other people or companies except when we have your permission or as described here.

We may share personal information with service providers that process it on our behalf to provide the Service: cloud hosting and database providers, email delivery, error tracking, and AI model providers that generate insights from your data. Their use of your information is bound by contracts that limit them to providing the service to us and prohibit using your data for their own purposes, including model training. We may store information on servers located outside your country; where required we use contractual safeguards for such transfers.

We will never sell personal information as part of the everyday running of +Life. If +Life or Ardelium Group LLP is sold, merged or dissolved, your information may be transferred as part of that transaction. We will do our best to notify you in advance so you can delete your account before any transfer.

We may disclose information if required by law or to protect the rights, safety or property of +Life or others.

How we protect your information

Data is encrypted in transit and at rest. We limit access to personal information to staff who reasonably need it to provide the Service or keep it running. We use commercially reasonable physical, managerial and technical safeguards, but cannot guarantee that information transmitted to the Service will never be accessed, disclosed or destroyed through a breach of those safeguards. You are responsible for keeping your password secret.

How you can delete your information

You can stop us collecting information from a Source by disconnecting it in your account. Data already received from that Source is deleted within 30 days of disconnection.

You can delete your account at any time. When you do, we delete all personal information from the Service within 30 days. Backups are overwritten on a rolling basis within 90 days. We may retain records we are legally required to keep, and anonymised statistics that cannot identify you.

Your rights

You can access, export, correct or delete your data from your account or by contacting us. Depending on where you live you may also have the right to restrict or object to processing, to data portability and to complain to a supervisory authority. We apply the Law of the Republic of Kazakhstan "On Personal Data and Its Protection" and, for users in the EEA and UK, the GDPR and UK GDPR.

Contact us

Ardelium Group LLP, 1 K. Arystanbekov St., Akkol village, Balkhash District, Almaty Region, Kazakhstan. If you have any questions about this policy, contact us at hello@{{DOMAIN}}.