Your health data is personal. We treat it that way.

Your health data is some of the most personal data there is. This policy explains what LeadShala ("Elyxis", "we") collects, why, and the control you have over it.

LAST UPDATED: 21 JUNE 2026 · APPLIES TO ELYXIS V1 (SELF-EXPERIMENTATION APP)

THE SHORT VERSION

We collect only what we need to run your experiments and show your results. We never sell your personal data. We never use your health or wearable data for advertising. You can export or delete your data at any time. Health data from Apple Health or Google Health Connect is used only to provide the features you ask for.

1 · What we collect 2 · Health & wearables 3 · How we use it 4 · Legal bases 5 · Sharing 6 · Apple & Google 7 · Retention 8 · Security 9 · Your rights 10 · Transfers 11 · Children 12 · Cookies 13 · Changes 14 · Contact

What we collect

You give us

→Account info — your email address and authentication details; optional profile basics.

→Experiment & self-report data — what you choose to test, your daily 1–10 ratings, notes, symptoms, and check-ins.

→Support & communications — messages you send us.

You connect (optional)

→Wearable / health data — if you choose to connect Apple Health (HealthKit) or Google Health Connect, we read only the metrics you approve (for example sleep, heart rate, heart-rate variability, steps/activity) to add objective signal to your experiments.

Collected automatically

→Device & usage data — app version, device type, language, and basic interaction events, to keep the app working and improve it.

→Payment data — handled by our payment processor or the app store. We receive confirmation of your subscription status; we do not store your full card details.

Health & wearable data — special handling

Your ratings and any wearable metrics are treated as sensitive personal data. We process them only with your consent and only to provide the Service: to run your experiments, compute your results, show your trends, and (with your separate opt-in, if offered) contribute de-identified data to aggregate insights. You can revoke health-data access at any time in your device settings or in the app, which stops further collection.

How we use your information

→To provide the core service — set up experiments, record your data, and generate your honest, uncertainty-aware results.

→To operate, secure, debug, and improve the app.

→To manage your account, subscription, and support requests.

→To send you service messages (and, only with your consent, optional updates you can unsubscribe from).

→To meet legal obligations and enforce our Terms.

We do not use your health or wearable data to target advertising, and we do not make automated decisions that produce legal or similarly significant effects about you.

Legal bases (where GDPR applies)

→Consent — for health/wearable data and any optional communications. You can withdraw consent at any time.

→Contract — to provide the Service you signed up for.

→Legitimate interests — to secure and improve the Service, balanced against your rights.

→Legal obligation — where the law requires it.

How we share information

We share personal data only in limited ways:

→Service providers — vetted vendors who host our infrastructure, process payments, send email, and provide analytics, acting on our instructions under contract.

→Legal & safety — where required by law or to protect rights and safety.

→Business transfer — if Elyxis is involved in a merger or acquisition, with notice to you and continued protection.

We never sell your personal data, and we never share your health or wearable data for anyone's advertising.

Apple Health & Google Health Connect commitments

Where you connect these sources, we follow the platforms' rules. Specifically, data obtained from Apple HealthKit or Google Health Connect is:

→used only to provide health and wellness features you have requested;

→never used for advertising or marketing, and never sold or shared with data brokers;

→not disclosed to third parties except to provide the Service or as required by law, and never for their independent use.

Data retention

We keep your data for as long as your account is active or as needed to provide the Service. If you delete your account, we delete or de-identify your personal data within a reasonable period, except where we must retain limited records for legal, security, or accounting reasons.

Security

We protect your data with encryption in transit and at rest, access controls, and standard safeguards. No system is perfectly secure, but we work to protect your information and will notify you and regulators of a breach where the law requires.

Your rights & choices

Depending on where you live (for example under the GDPR or California's CCPA/CPRA), you may have the right to:

→access a copy of your data and export it;

→correct inaccurate data;

→delete your data ("right to be forgotten");

→withdraw consent or object to certain processing;

→opt out of the "sale" or "sharing" of personal information — which, for Elyxis, we already do not do.

You can exercise these in-app or by contacting support@elyxis.app. We won't discriminate against you for exercising your rights. If you're in the EEA/UK, you may also complain to your local data-protection authority.

International transfers

We may process data in countries other than yours. Where we transfer data internationally, we use appropriate safeguards (such as standard contractual clauses) as required by applicable law.

Children

Elyxis is for adults 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has used Elyxis, contact us and we will delete the data.

Cookies & analytics

Our website uses essential cookies and limited, privacy-respecting analytics to understand usage and improve the experience. You can control cookies through your browser. We do not use your health data in any analytics or advertising.

Changes to this policy

Elyxis will grow beyond this first version. When it does, we'll update this policy and, for material changes, give you reasonable notice. The "last updated" date above always reflects the current version.

Contact us

Privacy questions or requests: support@elyxis.app. Operated by LeadShala — contact@leadshala.com.

This policy covers Elyxis v1 — the consumer self-experimentation app only. Later phases (such as connecting medical records or genomic data) will involve different data and a different, stricter regulatory footing; we'll publish updated terms before any such feature launches.

Home Where Elyxis is going Privacy Terms