Privacy Policy

01Who this policy applies to

This policy covers the Health Life apps for Android and iOS, this page, and the support channels we operate. It explains how we handle personal information — information that can be linked to you or to your device.

“We”, “us” and “our” mean the publisher of Health Life. “You” means the person using the app. “Panel” means a compatible Sunglor red light therapy device.

It does not cover other companies’ apps, websites or services, including any store, website or panel provider you reach through a link in the app. Those services publish their own privacy policies.

Panels are sold separately and communicate with the app over Bluetooth. A panel may keep pairing details on the device itself; that behaviour is described in the documentation supplied with your panel.

02Information we collect

We try to collect only what the app needs to work. The four tables below cover every category of information the app can handle. Information reaches us from you (when you type it or change a setting), from your panel over Bluetooth, and automatically from the app and our servers.

2.1 Account, sign-in and preferences

2.2 Panels and Bluetooth connections

2.3 Sessions, presets and progress

2.4 Feedback and technical data

2.5 Device permissions

• Bluetooth (Nearby devices on Android 12 and later, Bluetooth on iOS). Required to find, connect to and control your panel. Without it the app cannot operate the hardware.
• Camera. Opened only when you scan the QR code printed on the stand base. Frames are read on your device to decode the code; we do not receive or store the images.
• Location (Android 10 and earlier only). Android requires this permission for Bluetooth scanning on those versions. Health Life does not read your location, does not store coordinates, and on Android 12 and later declares Bluetooth scanning as never for location.

2.6 What we do not collect

The app does not ask for, and does not read:

• contacts, calendars, SMS or call history;
• photos, videos or files from your device;
• microphone audio;
• precise, background or continuous location;
• your advertising ID, or any cross-app or cross-site tracking data;
• medical records, diagnoses, prescriptions or biometric data;
• social media profiles or login credentials for other services.

03How we use information

We use the information described above only to:

• Provide the app. Create and secure your account, discover and control your panel, run and pause sessions, keep paired panels synchronised, store presets, and show Statistics and History.
• Keep the service working and secure. Detect abuse and unauthorised access, verify that a request comes from your account, and diagnose faults.
• Support you. Answer your feedback and messages, and follow up on device problems you report.
• Improve the app. Understand which features fail and where, using aggregated technical data rather than advertising profiles.
• Comply with the law. Meet legal obligations, enforce our terms, and respond to lawful requests from public authorities.

We do not use your information for advertising, we do not build advertising profiles, and we do not make automated decisions that produce legal or similarly significant effects about you.

04Legal bases for processing

Where the General Data Protection Regulation or UK data protection law applies, we rely on the following legal bases.

• Performance of a contract. Creating your account, pairing and controlling your panel, running sessions and storing presets are all part of the service you asked for.
• Legitimate interests. Keeping the service secure, preventing abuse, diagnosing faults, supporting you and improving the app. We balance these interests against your rights and only use the minimum data needed.
• Consent. Granting camera or Bluetooth access is your choice, and you can withdraw it at any time in your device settings. Adding contact details to feedback is optional.
• Legal obligation. Keeping records where the law requires it, and responding to lawful requests.

05When we share information

We do not sell personal information, and we do not share it for cross-context behavioural advertising or with data brokers.

We share information only in these situations:

• Service providers. Companies that host our backend and databases, deliver sign-in codes by email, and keep the service running. They act on our instructions under contracts that require confidentiality and security, and they may not use your information for their own purposes.
• Legal and safety. When we believe in good faith that disclosure is required by law, a valid legal process, or necessary to protect the rights, safety or security of you, us or others.
• Business transfer. If the app or the business behind it is sold, merged or reorganised, information may transfer as part of that transaction, subject to this policy.
• At your direction. For example, when you contact us and ask us to look into your account together with a panel supplier.

06What stays on your device

The app keeps some information locally so it works offline and starts quickly. This information is not sent anywhere unless the features above require it.

• Sign-in token. Stored in the platform’s secure storage — the iOS Keychain or the Android Keystore — so you stay signed in between sessions.
• Settings and presets. Language choice, saved preset heights, the last connected panel and similar preferences are cached in the app’s private storage.
• Cached images. Icons, preset artwork and other images fetched from our servers are kept in the app’s cache directory so pages load without a network round trip.

Clearing the cache in Settings, or uninstalling the app, removes these local copies. It does not delete your account data on our servers — use Delete Account for that.

07Retention and deletion

• Account and session data are kept while your account is open, because History and Statistics read from them.
• Technical logs are kept for a short period for security and troubleshooting, then deleted or aggregated.
• Feedback is kept while we handle it and for a limited period afterwards for quality and dispute resolution.
• Records we must keep — for example for tax, fraud prevention or a legal claim — are retained only as long as the law requires.
• Encrypted backups rotate on a fixed schedule, so deleted data disappears from them within a limited period.

Deleting your account

Open Profile → Settings → Delete Account in the app. After confirmation, your account and the related data described above are permanently deleted and you are signed out. Deletion cannot be undone.

A small number of records may be retained where the law requires it, or to prevent fraud and abuse. Uninstalling the app stops local collection but leaves your account in place.

08How we protect information

Traffic between the app and our servers uses HTTPS. Access to production data is limited to the staff and systems that need it, sign-in tokens stay in platform secure storage on your device, and we review how the backend handles account and session data.

No system is perfectly secure. If a security incident affects your information, we will notify you and the relevant authorities as the law requires.

09International transfers

Our servers and service providers may process information in countries other than the one you live in. Those countries may have different data protection laws.

Where we transfer information internationally, we use appropriate safeguards — such as standard contractual clauses approved by the European Commission, or a transfer to a country recognised as providing adequate protection — and we keep the transfer to what the service needs.

10Your rights and choices

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct information that is inaccurate or incomplete.
• Delete your account and the information linked to it.
• Receive a copy of information you provided, in a portable format.
• Restrict or object to certain processing, including processing based on legitimate interests.
• Withdraw consent at any time, without affecting processing that already happened.
• Complain to your local data protection authority.

How to exercise them

Use the in-app Contact Us or Feedback channel and tell us what you need. We may ask you to confirm control of the account email first, so that we do not disclose information to the wrong person. There is no charge for a request, and we respond within the deadlines set by applicable law — one month for requests under the GDPR or UK GDPR, and 45 days for California requests, with notice if we need an extension.

California and other US state privacy laws

If you live in California or another US state with a comprehensive privacy law, you also have the right to know what categories of personal information we collect and disclose, to request deletion or correction, to opt out of the sale or sharing of personal information, and to be free from discrimination for exercising those rights. We do not sell or share personal information as those laws define it. You may use an authorised agent to make a request on your behalf.

11Children

Health Life is not directed to children under 13, and we do not knowingly collect information from them. In the EEA and the UK, if you are below the age at which you can consent to data processing in your country, use the app only with a parent or guardian.

If you believe a child has provided us with information, contact us and we will delete it. Let an adult supervise any use of a panel.

12Links to other services

Parts of the app — the user guide, the about page or a website link — may open content from another service. Those services have their own privacy policies, and this policy does not apply to them.

13Wellness, not medical advice

Health Life is a wellness companion app, not a medical device. It is not intended to diagnose, treat, cure or prevent any disease. We do not ask you for medical records, and the session records described in this policy are app activity data, not a medical file.

Consult a qualified healthcare professional before starting a light therapy routine, and always follow the instructions supplied with your panel.

14This page, cookies and tracking

This page is a hand-written static HTML document. It sets no cookies, writes nothing to local storage, runs no analytics, and loads no fonts, scripts or images from third parties. Printing it produces the same text you see here.

The web host that serves this page may keep standard server logs such as IP address, request time and browser type for security and availability. We do not use those logs to identify individual visitors or to build profiles.

15Changes to this policy

When we change how the app handles information, we update this page and the “Last updated” date above. If a change materially affects your rights, we will tell you in the app before it takes effect. Continuing to use the app after a change means you accept the updated policy, where the law allows.

16How to contact us

The fastest way to reach us is from inside the app:

• Profile → Contact Us for the published contact details of the Health Life team.
• Profile → Feedback to send a message directly to support.

Messages sent from the app include your account email address, so we can find your account and reply. If your question is about a privacy right, say so in the message and we will route it to the right person.

Where local law requires a named representative, a postal address or a dedicated privacy contact, that information is published in the app’s Contact Us screen.