Healium data privacy

Our Take on Privacy

Healium’s mission is to reduce stress and help people learn to improve their mental fitness. The last thing that we want to create is stress for you in how we use your data. The entire design of our application is built around the security and privacy of your data. Your brain patterns and heart rate play an important role in your mental fitness and learning to self-regulate. Before Healium decided to start capturing biometric data, we spent years learning how to properly protect it. 

 

Our Commitment to Privacy

At Healium, data is handled with the highest level of sensitivity. We apply the same security standards for each piece of data in our care. We only use data we absolutely need in order to provide the user experience expected of us. We recognize the responsibilities associated with processing biometric data and the general public’s concerns around its use. Given our holistic approach to caring for all data we process with the highest standards of care, we align our data privacy and security actions to continually address any risks that arise. 

 

Personalized digital experiences require the processing of personal information. This means using data about you for your experience within our application. If you decide that you no longer want to have personal digital experiences, we provide our clients with the choice to delete all of their information from further processing.

 

 

FAQs on Data

Are you going to read my thoughts?

Plain and simple, no. Our apps are designed to analyze your brainwaves in order to give you a score to let you know how on target you are for the state of Focused Calm we’re guiding you to achieve. 

 

What happens to my data? Are you going to sell it?

Healium’s application captures, analyzes, and provides you with scores about your stress and relaxation levels. 

 

We do not sell your data. 

 

At any point, you may choose to opt out of the measurements or even delete all data sets. 

 

trend graph

My Healium access is provided through my employer. Will my individual scores or brainwave data be shared with them?

No, your individual scores and brainwave data remain private and accessible only to you. Healium provides your employer with anonymized, aggregated data—never any information that personally identifies you. This approach allows your employer to understand your company's overall engagement with Healium while keeping your personal results confidential.

 

I was prescribed Healium for medical purposes in the United States. Will my medical provider be able to see my progress within Healium?

Yes, when your medical provider prescribes access to Healium, they will be able to review your progress and make adjustments to your therapeutic plan accordingly.

 

Your medical provider will ask you to sign a statement required by the Health Insurance Portability and Accountability Act (HIPAA) to allow them access to your medical data.


As a part of HIPAA, your medical provider will also have signed an agreement with Healium, known as a Business Associate Agreement. This agreement allows your medical provider to obtain your consent and work with Healium to monitor your progress.

Please note: This does not apply to users who purchase Healium as consumers. Healium's consumer and healthcare provider licenses are not combined or linked.

 

Where is the data being stored? 

Healium’s data is stored in a secure environment within the United States. 

 

Regulatory Portfolio

Healium incorporates the regulatory requirements and industry standards at each stage of its business model: development, testing, production, and facilitation.

 

> General Data Protection Regulation (European Union)

> California Consumer Privacy Act

> HIPAA, Health Insurance Portability and Accountability Act (United States)

> NIST Cybersecurity Framework

> NIST Privacy Framework

> ISO 27001 Standard

> ISO 27701 Standard

 

Below are some examples of data that will be captured through a wearable device. Please note that this data will be used with the sole purpose of giving you insights and is not intended to be used as a diagnostic measurement tool.

 

> Electrocardiogram Data (ECG)

> Electroencephalogram Data (EEG)

> Heart Rate Data

 

Consent is required, the privacy notice is available and written in understandable language. Data is securely stored and the user is in control. Read our full Privacy Notice here.

 

We hope this information will make you confident in the security and privacy of your data. If you have any additional questions or concerns, please contact our Data Protection Officer at hello@tryhealium.com