← Back to Home

Privacy Policy

Last Updated: January 8, 2025

1. Introduction

Welcome to Verve. This Privacy Policy explains how Verve Health AI, Inc. ("Verve," "we," "us," or "our") collects, uses, shares, and protects your personal information when you use our mobile application, website, and related services (collectively, the "Service").

We are committed to protecting your privacy and being transparent about our data practices. This policy applies to all users of our Service and describes your privacy rights and how the law protects you.

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this policy, please do not use our Service.

2. Information We Collect

A. Information You Provide

We collect information you provide directly to us, including:

  • Account Information: Name, email address, password, and other registration details
  • Profile Information: Age, health goals, preferences, and wellness objectives
  • Health and Wellness Information: Dietary preferences, exercise history, sleep goals, and other wellness-related data you choose to share
  • Payment Information: Payment details are processed by our third-party payment processors; we do not store complete payment card information
  • Communications: Messages you send to us, feedback, and support requests

B. Information from Third-Party Integrations

With your permission, we collect data from connected services:

  • Wearable and Fitness Platforms: We integrate with platforms such as Oura, Whoop, Garmin, Fitbit, Apple Health, and similar services to collect sleep data, activity metrics, heart rate, workout history, and readiness scores
  • Calendar Services: We connect with Google Calendar, Apple Calendar, and similar services to access your schedule for workout planning and availability optimization

C. Location Information

With your permission, we collect precise location information to provide:

  • Restaurant recommendations near you
  • Time zone detection for schedule optimization
  • Weather-based wellness suggestions
  • Location-aware notifications and reminders

You can disable location access at any time through your device settings. Disabling location services may limit certain features of the Service.

D. Automatically Collected Information

When you use our Service, we automatically collect:

  • Device Information: Device type, operating system, app version, and unique device identifiers
  • Usage Data: Features used, interaction patterns, and preferences
  • Log Data: IP address, access times, pages viewed, and error logs
  • Analytics Data: Anonymized usage patterns to improve our Service

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and personalize the Service
  • Generate AI-powered wellness recommendations tailored to your goals and lifestyle
  • Sync with your calendar to optimize your schedule for wellness activities
  • Provide location-based recommendations, including restaurant suggestions and weather-aware wellness guidance
  • Adjust recommendations based on your time zone and local context
  • Send notifications, reminders, and wellness nudges
  • Improve and develop new features and services
  • Communicate with you about service updates, support, and promotional materials (with your consent)
  • Ensure the security of our Service and prevent fraud
  • Comply with legal obligations
  • Conduct anonymized research and analytics to improve wellness outcomes

4. AI and Machine Learning

Verve uses artificial intelligence and machine learning technologies to provide personalized wellness recommendations. Here's what you should know:

  • How AI Processes Your Data: Your wellness data, preferences, and interactions are analyzed by AI systems to generate personalized recommendations for sleep, nutrition, and movement
  • Third-Party AI Providers: Your data may be processed by third-party AI service providers, including Anthropic, OpenAI, Google, and similar platforms. We use multiple AI providers for different features to deliver the best possible experience
  • Data Protection: We have data protection agreements in place with all our AI providers to ensure your information is handled securely and in accordance with this Privacy Policy
  • No Training on Your Data: Your personal information is not used to train third-party AI models. Our AI providers process your data solely to provide recommendations within our Service
  • Human Review: AI-generated content is not reviewed by humans unless flagged for safety concerns or you specifically request human support

AI-generated recommendations are intended for general wellness guidance only and should not be considered medical advice. Always consult with healthcare professionals before making significant changes to your health routine.

5. How We Share Your Information

We Share Information With:

  • Service Providers: Third-party companies that help us operate our Service, including cloud hosting (Google Cloud), payment processing, and email delivery (Resend)
  • AI Providers: As described above, to generate personalized recommendations
  • Analytics Providers: We share anonymized and aggregated data to understand usage patterns and improve our Service
  • Legal Authorities: When required by law, legal process, or government request
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction

We Do Not:

  • Sell your personal information to third parties
  • Share your health data with advertisers for targeted advertising
  • Share your data with insurance companies or employers
  • Share identifiable information with third parties for their own marketing purposes

6. Third-Party Integrations

Verve integrates with various third-party services to provide a comprehensive wellness experience. These integrations are optional and controlled by you:

  • Wearable and Fitness Platforms: Oura, Whoop, Garmin, Fitbit, Apple Health, and similar services. Each platform has its own privacy policy governing its data practices
  • Calendar Services: Google Calendar, Apple Calendar, and similar services are subject to their respective privacy policies

When you connect a third-party service, we only access the data necessary to provide our Service. You can disconnect any integration at any time through your account settings.

We recommend reviewing the privacy policies of any third-party services you connect to understand how they handle your data.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

  • Encryption in Transit: All data transmitted between your device and our servers is encrypted using TLS/HTTPS
  • Encryption at Rest: Your data is encrypted when stored on our servers
  • Access Controls: We limit access to personal information to employees and contractors who need it to perform their job functions
  • Authentication: We use secure authentication methods to protect your account
  • Security Assessments: We regularly assess and update our security practices
  • Incident Response: We have procedures in place to detect, respond to, and recover from security incidents

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to implementing and maintaining appropriate safeguards.

8. Data Retention

We retain your personal information as follows:

  • Active Accounts: We retain your data for as long as your account is active and as needed to provide you with the Service
  • Deleted Accounts: When you delete your account, we will delete your personal information within 30 days, except as required by law or for legitimate business purposes (such as resolving disputes or enforcing agreements)
  • Anonymized Data: We may retain anonymized and aggregated data indefinitely for research and analytics purposes. This data cannot be used to identify you
  • Backups: Backup copies may be retained for a limited period for disaster recovery purposes

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request that we correct inaccurate or incomplete information
  • Deletion: Request that we delete your personal information
  • Data Portability: Request a copy of your data in a machine-readable format
  • Opt-Out of Marketing: Unsubscribe from marketing communications at any time
  • Withdraw Consent: Withdraw consent for optional data processing

How to Exercise Your Rights

You can exercise your privacy rights by:

We will respond to your request within 30 days. We may need to verify your identity before processing your request.

10. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Your California Rights

  • Right to Know: You have the right to know what personal information we collect, use, disclose, and sell
  • Right to Delete: You have the right to request deletion of your personal information
  • Right to Correct: You have the right to request correction of inaccurate personal information
  • Right to Opt-Out of Sale: You have the right to opt-out of the sale of your personal information. We do not sell your personal information
  • Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information:

  • Identifiers (name, email address, device identifiers)
  • Personal information under California Civil Code Section 1798.80 (name, address)
  • Health information (with your consent)
  • Internet or network activity information
  • Geolocation data
  • Inferences drawn from the above

Do Not Sell or Share My Personal Information

We do not sell your personal information. We have not sold personal information in the preceding 12 months and have no plans to do so.

Authorized Agents

You may designate an authorized agent to make a request on your behalf. We may require verification that you authorized the agent to act on your behalf.

Shine the Light

Under California Civil Code Section 1798.83, California residents may request information about our disclosure of personal information to third parties for direct marketing purposes. We do not disclose personal information for direct marketing purposes.

11. Children's Privacy

Our Service is not intended for users under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@coachverve.com.

If we discover that we have collected personal information from a child under 18, we will take steps to delete that information promptly.

12. International Data Transfers

Your information may be transferred to and processed in the United States and other countries where our service providers operate. These countries may have different data protection laws than your country of residence.

When we transfer your information internationally, we implement appropriate safeguards, such as standard contractual clauses approved by relevant authorities, to ensure your information remains protected.

By using our Service, you consent to the transfer of your information to the United States and other countries as described in this Privacy Policy.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons.

If we make material changes, we will notify you by:

  • Posting the updated policy on our website and app
  • Sending you an email notification
  • Displaying a prominent notice within the app

We will provide at least 30 days' notice before material changes take effect. Your continued use of the Service after the effective date of the revised Privacy Policy constitutes your acceptance of the changes.

14. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Verve Health AI, Inc.
Email: support@coachverve.com

For data protection inquiries or to exercise your privacy rights, please email us at the address above with "Privacy Request" in the subject line.