Privacy Policy

Welcome to EYVA (“we,” “our,” or “us”), a product of BlueSemi R&D Pvt. Ltd. We are committed to protecting your privacy and ensuring complete transparency about how your personal data is collected, used, stored, and shared.

This Privacy Policy describes our data practices in connection with the EYVA wellness device, the EYVA mobile application (the “App”), and all related wellness services (collectively, the “Services”).

This Privacy Policy constitutes an electronic record under the Information Technology Act, 2000 (as amended), and rules made thereunder. This document does not require any physical, electronic, or digital signature.

We collect the following categories of data to provide and improve our wellness Services:Your EYVA device measures general wellness indicators using Advanced sensor technology including Polyplethismography (PPG). These wellness scores include:

• Heart Rate and Heart Rate Variability (HRV) trends
• Vascular Pressure trends (general wellness indicator, not a clinical measurement)
• Oxygen trends
• Glucose trends and estimated HbA1c* (general wellness indicators, not clinical monitoring)
• Cardiac Rhythm patterns
• Skin temperature trends

• Account information: Name, email address, phone number
• Profile information: Date of birth, gender, height, weight

• Chat messages and conversation history with the AI wellness coach
• Voice audio recordings (for voice-based wellness coaching interactions)
• Feedback, ratings, and wellness notes you provide

• Device identifiers: User ID, device ID, EYVA device code
• Technical information: App version, device model, operating system version
• Usage analytics: Interaction logs, feature usage patterns, session duration
• Diagnostics: Crash logs, performance data, and error reports

With your permission, we may collect approximate location data solely to provide environmental wellness context such as local air quality information. We do not track precise GPS location.

We use your data exclusively for the following purposes:

• Provide personalized wellness insights, trends, and AI-powered wellness coaching
• Process and display your biometric wellness scores and historical trends
• Enable AI-powered conversations about your wellness data and general health awareness
• Improve the accuracy and quality of our wellness algorithms and scoring models
• Send relevant wellness notifications and trend alerts
• Maintain, troubleshoot, and improve the App's performance and reliability
• Conduct anonymized, aggregated research to improve our wellness Services
• Comply with applicable legal and regulatory obligations

We process your data on the following legal grounds:

• CONSENT: You provide explicit consent when you create an account, agree to this Privacy Policy, and opt into specific features.
• CONTRACTUAL NECESSITY: Processing necessary to provide the wellness Services you have requested and agreed to.
• LEGITIMATE INTEREST: Processing for service improvement, security, and fraud prevention, balanced against your rights.
• LEGAL OBLIGATION: Processing required to comply with applicable Indian and international laws and regulations.

To provide AI-powered wellness coaching, we work with trusted third-party AI service providers. These providers help generate personalized wellness insights based on your wellness data and conversations.

Your personal contact details (phone number, email, and login credentials) are never shared with AI providers. Only your wellness scores and chat messages are used to generate coaching responses.

We also use standard service providers for app functionality such as notifications, error monitoring, and secure login verification.

We retain your data according to the following principles:

• Active Account Data: Personal information and wellness data are retained for as long as your account remains active and as needed to provide the Services.
• Wellness Measurement History: Historical wellness data is retained to enable trend analysis, pattern recognition, and longitudinal wellness tracking.
• AI Conversation Data: Conversation history is retained to maintain context for ongoing wellness coaching. Individual conversations can be deleted through the App at any time.
• Diagnostic Data: Crash logs and performance data are retained for up to 12 months for service improvement.
• Post-Deletion: Upon account deletion, personal data is removed within 30 days, subject to legal retention requirements. Anonymized, aggregated data may be retained for research.

We implement industry-standard security measures to protect your data at every level:

• All data transmitted between the App and our servers is encrypted using TLS/SSL (TLS 1.2 or higher)
• Bluetooth communication between EYVA device and the App uses encrypted BLE connections
• Authentication secured using JSON Web Tokens (JWT) with audience-scoped permissions
• Wellness data processed and stored on secured cloud infrastructure with access controls
• Rate limiting, API usage controls, and intrusion detection to prevent unauthorized access
• Passwords stored using industry-standard cryptographic hashing
• Periodic security assessments and vulnerability reviews

Under the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023, and other applicable data protection laws, you have the following rights:






To exercise any of these rights, contact us at support@eyva.io. We will respond within 30 days or as required by applicable law.

We obtain your consent through the following mechanisms:

• Account Registration: By creating an account, you consent to the collection and processing of data described in this Privacy Policy.
• Feature-Specific Consent: Certain features (voice interactions, location services, AI wellness coaching) require separate opt-in consent, revocable through App settings.
• Notification Preferences: Manage notification preferences through App settings or your device's notification controls.
• Opt-Out: You may opt out of non-essential data processing at any time. Opting out of essential processing may limit certain wellness features.

Your data is stored and processed on servers located in the same country or region where your EYVA device was purchased. For example, devices purchased in India will have their data stored on servers in India.

In limited circumstances, certain data may be processed internationally — for instance, when interacting with third-party AI wellness coaching providers. In such cases, we ensure appropriate safeguards are in place, including contractual protections and compliance with applicable data protection laws. Your personal contact information (phone number, email) is never transferred internationally.

The Services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you are a parent or guardian and believe a child has provided us with personal data, please contact us immediately at support@eyva.io so we can take appropriate action to delete such data.

We may update this Privacy Policy to reflect changes in our practices, technology, legal requirements, or regulatory guidance. When we make material changes, we will update the “Last Updated” date and may notify you through the App or via email. Continued use of the Services after the effective date constitutes acceptance of the updated policy.

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, we have appointed a Grievance Officer to address any concerns regarding data processing: