BR Product Factory, LLC • Effective date: August 17, 2026 • Version 1.5
This Privacy Policy explains how BR Product Factory, LLC ("we," "us") collects, uses, shares, and protects information when you use HealthyLifeOS (the "Service") — our wellness and fitness application — including the mobile apps, web app, Care Circle features, and related communications. By using the Service you agree to this Policy.
Account & profile: phone number (used for sign-in verification), name, age/date of birth, sex, height, weight, health conditions you select, goals, and preferences.
Health & fitness data (with your permission): data you authorize from Apple Health (HealthKit), Health Connect, and connected devices and services — such as heart rate, heart rate variability, blood pressure, blood oxygen, respiratory rate, temperature, glucose, weight, steps, stairs/flights, workouts, fall events, and sleep (including sleep stages); meal photos and the nutrition estimates derived from them; hydration and workout logs; and voice interactions with the coach (transcripts; audio is discarded after transcription by default).
Health records (only if you connect them): medications/prescriptions, conditions, immunizations, family history, care team, and related records you authorize from providers, health systems, or pharmacies (e.g., via Apple Health Records or SMART on FHIR connections).
Location: an approximate "home" area you set (stored as a geofence center and radius, not a tracked route) and home/away state changes computed on your device; optional ZIP code; optional street address only if you choose to add it for Care Circle emergency context. We do not collect continuous GPS location trails.
Care Circle content: invitations, your sharing/consent settings, milestone reactions, and messages exchanged in Circle Chat.
Device & usage information: device model, OS version, app version, connection/sync status, crash and performance diagnostics, and how you use app features.
Purchase information: subscription status from Apple/Google. We do not receive or store your full payment card details.
AI processing: coaching and nutrition estimation use artificial-intelligence models. We send these systems structured, minimized summaries rather than your full record, under contracts that prohibit the provider from using your data to train their models and require appropriate safeguards.
We build the Service using industry best practices for technical and administrative safeguards — the same categories of controls used in regulated healthcare systems — and we execute confidentiality and data-protection agreements with vendors handling identifiable health information. HealthyLifeOS is a consumer wellness product, not a healthcare provider or health plan, and is not certified under HIPAA. Depending on how you use the Service, your data may also be protected by the FTC Health Breach Notification Rule and state health-privacy laws (such as Washington's My Health My Data Act and California's CCPA/CPRA treatment of sensitive personal information). Where these laws grant you specific rights, we honor them as described in Section 8.
We retain your information while your account is active. If you delete your account, deletion takes effect immediately in our live systems, and residual copies in encrypted backups are purged within 30 days, except where retention is required by law (e.g., audit, tax, security records) or where limited records of consents and disclosures must be kept. If your subscription ends and you do not resubscribe, your account becomes read-only and is retained for 90 days so you can export your data or pick up where you left off (your connected devices continue syncing for the first 60 of those days); we email you before any scheduled deletion, after which your account and its data are permanently deleted. You can delete individual items (meal photos, messages, logged entries) anytime in the app.
We may use your email address to send product news, feature announcements, tips, and offers. Every such email includes a one-tap unsubscribe link, and the same control lives in Settings → Notifications → Communications; opt-outs are honored promptly and maintained on a suppression list. Marketing text messages require your prior express consent (they are off by default); reply STOP to any text to revoke. Transactional messages (verification codes, receipts, security notices, safety alerts you configure) are not marketing and continue regardless of marketing preferences. We never sell your contact information, never use your health data to target advertising, and cap the frequency of promotional messages.
Encryption in transit (TLS 1.2+) and at rest (customer-managed keys), network isolation (VPC Service Controls), least-privilege access with audit logging, biometric app lock, and vendor security review. No system is perfectly secure; we will notify you and regulators of breaches as required by law.
The Service is for adults 18 and older. We do not knowingly collect information from anyone under 18; if we learn we have, we will delete it.
The Service is operated from the United States and information is processed in the U.S.
We will notify you in-app of material changes before they take effect. The "Effective date" above always reflects the current version, and prior versions are available on request.
Privacy questions or requests: communications@brproductfactory.com • BR Product Factory, LLC.