Legal
Privacy Policy.
The short version. Your health data belongs to you. We collect it to power the features you use, we do not sell it, and we do not use it for advertising. You can export or delete it at any time from the CareShield.AI app, or by emailing care@iraring.ai.
01Who we are
This policy explains how [LEGAL ENTITY NAME] (“IRA”, “we”, “us”), registered at [REGISTERED ADDRESS], handles personal data collected through the IRA Smart Ring, the CareShield.AI mobile application, and this website (together, the “Services”).
We are the data controller for that information. If you have questions about this policy, contact us at care@iraring.ai.
02Information we collect
Information you give us
- Account details — name, email address, password, and optionally your phone number.
- Profile details — date of birth, sex assigned at birth, height, weight and ring size. These are used to calibrate measurements; several metrics are inaccurate without them.
- Order details — shipping address and order history. Card and bank details are handled by our payment processor and are never stored on our systems.
- Support correspondence — anything you send us by email or through in-app support.
- Optional inputs — anything you choose to log, such as workouts, symptoms, notes or program check-ins.
Health and wellness data from the ring
When worn, the ring records signals continuously and syncs them to the app. This includes heart rate, heart rate variability, blood oxygen (SpO₂), respiratory rate, skin temperature, motion and activity, sleep timing and stages, stress indicators, and — when you start a reading — ECG recordings and related measurements.
In many jurisdictions this is treated as a special category of personal data. We process it only on the basis of your explicit consent, which you give when you create an account and pair a ring, and which you can withdraw at any time.
Information collected automatically
- Device and diagnostic data — ring serial and firmware version, phone model and OS version, app version, battery level, crash logs and error reports.
- Usage data — which features you open and how you navigate the app, used to fix problems and prioritise improvements.
- Website data — pages viewed and approximate location derived from IP address. See Cookies.
03How we use your information
- To provide the Services — display your metrics, generate scores and trends, and sync between ring and app.
- To generate insights — CareShield.AI analyses your data against your own historical baseline to surface trends and personalised guidance.
- To deliver programs you enrol in — including the 90-day fitness, nutrition and metabolic health program, where your coach sees the data needed to support you.
- To fulfil orders — process payment, ship your ring and handle returns or warranty claims.
- To support you — answer questions and troubleshoot device issues.
- To improve accuracy and reliability — diagnose faults and improve our algorithms. Where we use data for research or model improvement, we use aggregated or de-identified data unless you have separately opted in.
- To meet legal obligations — including tax, accounting and product-safety requirements.
What we never do. We do not sell your personal or health data. We do not share it with advertisers, data brokers, insurers or employers. We do not use your health data to target advertising.
05International transfers
We may store and process data in countries other than your own, including where our cloud providers operate. Where data leaves your jurisdiction, we rely on appropriate safeguards such as standard contractual clauses or an adequacy decision. Contact us if you would like details of the safeguards that apply to you.
06How long we keep it
- Health and wellness data — kept while your account is active, so your history and trends remain meaningful.
- Account data — deleted within 30 days of you deleting your account, except where we must retain it by law.
- Order and payment records — retained for the period required by tax and accounting law, typically several years.
- Backups — deleted data may persist in encrypted backups for a limited period before being overwritten.
07Your rights and choices
Depending on where you live, you may have the right to:
- Access a copy of the personal data we hold about you.
- Correct information that is inaccurate or incomplete.
- Delete your account and associated data.
- Export your data in a portable, machine-readable format.
- Withdraw consent to health data processing at any time, which will disable the features that depend on it.
- Object to or restrict certain processing.
- Lodge a complaint with your local data protection authority.
Most of these are available directly in the CareShield.AI app under Profile → Privacy. For anything else, email care@iraring.ai and we will respond within the period required by applicable law.
08How we protect your data
Data is encrypted in transit between the ring, the app and our servers, and encrypted at rest on our infrastructure. Access by our staff is restricted to those who need it for their role and is logged. We run regular reviews of our systems and require our providers to maintain comparable standards.
No system is completely secure. If a breach affects your personal data and creates a meaningful risk to you, we will notify you and the relevant authority as required by law.
09Children
The Services are not intended for anyone under 16, and we do not knowingly collect data from children. If you believe a child has provided us with personal data, contact care@iraring.ai and we will delete it.
11Changes to this policy
We may update this policy as the Services change. When we make material changes we will update the date at the top and notify you in the app or by email before the changes take effect.
12Contact us
For any privacy question, request or complaint, write to care@iraring.ai. Please include the email address associated with your account so we can locate your records.