Privacy Policy

We collect information directly from you, automatically through your use of the Services, and from authorized third-party integrations.

A. Personal Information

• Account Identifiers: Full name, email address, phone number, date of birth, and authentication credentials.
• Profile Data: User preferences, timezone, avatar/profile image, and communication settings.

B. Sensitive Health & Wellness Data

To deliver core health functionality, we may collect and process sensitive health information with your explicit consent:

• Self-Reported Health Metrics: Symptoms, lifestyle factors, wellness logs, dietary entries, medication routines, and physical measurements.
• Audio & Voice Inputs: Voice recordings or transcriptions when utilizing voice-enabled features or conversational health agents.
• Connected Device & Health Ecosystem Data: Data imported via authorized integrations (such as Apple HealthKit, Google Health Connect, or wearable sensors) where explicitly enabled by you.
• Genetic & Ancestral Insights: Where you elect to use genetic analysis features, genomic data files you upload or authorize, processed solely for the insights you request.

C. Technical & Usage Data

• Device Telemetry: Device model, operating system version, unique device identifiers, IP address, mobile network provider, and crash logs.
• Interaction Logs: Features accessed, session durations, timestamps, and navigation flows within the app.

We process personal and health information only for lawful, specified purposes:

• Delivering Core Services: Providing personalized health insights, trend analysis, symptom tracking, and wellness dashboards.
• AI & Natural Language Processing: Running queries against health knowledge systems, conversational agents, and data models to generate contextual insights.
• Safety & Service Integrity: Monitoring application performance, debugging technical errors, verifying account security, and preventing fraud.
• User Communications: Sending service notifications, security alerts, technical updates, and customer support responses.
• Legal Compliance: Fulfilling statutory obligations, responding to lawful regulatory requests, and enforcing our Terms of Service.

• Zero-Knowledge Architecture: RIJI Health is built on a zero-knowledge architecture. This means your personal health data is encrypted locally on your device before it ever reaches our servers. Even RIJI Health staff, engineers, and administrators cannot access, read, or share your raw health data without your specific client-side encrypted keys.
• On-Device vs. Cloud Execution: Where feasible, voice processing, biometric parsing, and ML inference occur locally on your device (edge computing). When cloud computing is required, data is processed in secure, ephemeral enclaves and remains cryptographically locked.
• Data Minimization: We collect only the minimum amount of health and personal information strictly necessary to fulfill the requested feature.

We believe you have the right to understand exactly how artificial intelligence interacts with your health data:

• No Foundation Model Training: Your identifiable health data is never used to train, fine-tune, or improve foundation models — whether our own or those of third-party AI providers. Contractual and technical controls prohibit AI sub-processors from retaining or training on your inputs.
• Retrieval-Augmented Generation (RAG): When AI features answer questions about your health, relevant fragments of your data are retrieved at query time, processed transiently in memory, and discarded after the response is generated. Your data is not merged into any shared knowledge base.
• On-Device First: Wherever hardware permits, inference runs on-device. Cloud inference is used only when necessary, over encrypted channels, in ephemeral compute enclaves.
• AI Output Limitations: AI-generated insights are informational wellness guidance and do not constitute medical advice, diagnosis, or treatment. Always consult a qualified healthcare practitioner.
• Human Oversight & Explainability: Significant AI-driven insights are traceable to their underlying data sources, and you may request information about the logic involved in automated processing.

Where the GDPR, UK GDPR, or equivalent laws apply, we rely on the following legal bases:

• Explicit Consent (Art. 9(2)(a) GDPR): For all collection and processing of special category health data, including biometric, genetic, and voice data. Consent is granular, informed, and withdrawable at any time.
• Contractual Necessity (Art. 6(1)(b)): Processing account and profile data required to deliver the Services you have requested.
• Legitimate Interests (Art. 6(1)(f)): Limited technical and usage data processing for security, fraud prevention, and service integrity — always balanced against your rights and freedoms.
• Legal Obligation (Art. 6(1)(c)): Processing required to comply with applicable laws and lawful regulatory requests.

Withdrawing consent does not affect the lawfulness of processing performed before withdrawal.

We do not sell, rent, or trade your personal or health data. We share information only under the following limited circumstances:

We employ industry-standard technical and organizational safeguards to protect your data:

• Military-Grade Encryption: Data is secured using military-grade encryption standards (AES-256-GCM) at rest and TLS 1.3 in transit. Your private keys are securely stored in your device's hardware Secure Enclave, ensuring that neither RIJI Health nor any unauthorized third party can decrypt your sensitive health information.
• Access Controls: Strict role-based access control (RBAC), multi-factor authentication (MFA), and audit logging for internal systems.
• Vulnerability Management: Regular code audits, automated dependency vulnerability scanning, and infrastructure monitoring.
• Breach Notification: In the event of a data breach likely to result in serious harm, we will notify affected users and relevant supervisory authorities (e.g., the OAIC, EU/UK regulators) within the timeframes mandated by applicable law.

Depending on your jurisdiction (including Australia, the EU/UK, and various US states), you possess specific statutory rights regarding your personal and health data:

To exercise any of these rights, contact us at support@rijihealth.com. We respond to verified requests within 30 days (or sooner where required by law), free of charge.

We retain your personal and health data only for as long as your account remains active or as needed to provide you with the Services. Upon account deletion:

• Your personal identifiers and identifiable health logs are permanently deleted or irreversibly anonymized within 30 days.
• Backup archives are overwritten according to our standard backup rotation cycle (not exceeding 90 days).
• Limited records may be retained longer only where required by statutory record-retention obligations (e.g., tax, audit, or health-records legislation), and are safeguarded for that sole purpose.

The Services are not directed to individuals under the age of 16 (or the legal age of consent in your jurisdiction). We do not knowingly collect personal health data from children without verified parental or guardian consent. If we become aware that a child has provided us with personal information, we will delete it promptly.

If data is transferred across international borders, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs), adequacy decisions, or equivalent legal mechanisms to protect your information under applicable data protection laws. For Australian users, cross-border disclosures comply with APP 8 (cross-border disclosure of personal information).

Our privacy program is structured to align with leading global health-data standards:

Alignment with a framework does not itself constitute certification; where formal certification or registration applies, it will be identified separately.

We may update this Privacy Policy periodically. If we make material changes affecting how your health data is handled, we will notify you through the app interface, via email, or by a prominent notice on our website prior to the changes taking effect.