GRND Privacy Policy

1. Overview & Data Sovereignty

GRND Technologies Inc. ("GRND", "we", "us", or "our") operates the GRND wearable device, mobile and web applications, cloud synchronization infrastructure, and the continuous health timeline engine (collectively, the "Service").

We operate under the fundamental principle of Data Sovereignty: your health data belongs exclusively to you. We act as custodians, processing your biological telemetry solely to generate personal insights, baseline models, and wellness trends for your direct benefit.

2. Information We Collect

To provide personal health intelligence, the GRND ecosystem collects the following categories of data:

• Continuous Physiological Signals: Multi-wavelength photoplethysmography (PPG) optical signals, heart rate (HR), heart rate variability (HRV / rMSSD), peripheral capillary oxygen saturation (SpO2 estimates), peripheral skin temperature fluctuations, galvanic skin response (electrodermal activity), and multi-axis accelerometry movement data.
• User-Reported Symptoms & Logs: Subjective wellness entries, symptom tags (e.g., fatigue, headache, muscle soreness), cycle and menstrual tracking logs, meal timing, hydration, and medication reminders.
• Connected Integrations & Clinical Uploads: Data synchronized via authorized APIs (Apple HealthKit, Google Health Connect, continuous glucose monitors, blood pressure cuffs) and lab test reports (PDFs, blood panels) uploaded directly by you.
• Account & Technical Telemetry: Email address, device serial number, firmware diagnostics, battery telemetry, and app crash logs.

3. How We Use Your Health Data

We use your physiological and biometric data strictly to:

• Calculate your personalized physiological baseline rather than comparing your body against generalized population averages.
• Identify significant acute and longitudinal deviations in resting heart rate, recovery, temperature, and autonomic nervous system tone.
• Generate interactive timeline correlations (e.g., how specific workouts or late meals correlate with nocturnal recovery).
• Prepare patient-directed Doctor Summary sheets when explicitly triggered by you for medical consultations.
• Continuously improve the accuracy of our baseline calibration algorithms using privacy-preserving federated techniques.

4. Non-Sale & Data Sharing Restrictions

We will never sell, lease, commercialize, or trade your personal health data.

We do not share your health data with:

• Health, life, or disability insurance providers.
• Advertisers, ad tech networks, or behavioral data aggregators.
• Government agencies or legal authorities, unless compelled by a legally binding court order with prior notice to you where permitted by law.

5. Cryptographic Security & Infrastructure

Security is built into GRND at the silicon level:

• Encryption at Rest & In Transit: All databases, time-series health logs, and documents are encrypted using AES-256 with key management isolated from application runtime. All communications use TLS 1.3 with strict certificate pinning.
• Secure Enclave Processing: Sensitive biomarker correlation models execute inside isolated cloud execution enclaves with memory encryption.
• Audit Logs: Every access to user health records is cryptographically signed and auditable.

6. Data Portability, Deletion & User Rights

You maintain complete control over your health record:

• Export: Download your entire historical timeline, raw sensor readings, and summaries in JSON or standard FHIR format at any time.
• Immediate Deletion: When you request account deletion, all physiological records, backups, and user credentials are permanently and irrevocably purged from our live and backup systems within 30 days.
• Global Privacy Compliance: We uphold the protections granted under the General Data Protection Regulation (GDPR), California Consumer Privacy Act / CPRA, and HIPAA data security guidelines.

7. Contact Our Privacy & Security Team

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your biological data, please reach out to our dedicated Data Protection Officer: