Privacy Policy

Introduction

We understand how important the privacy of your personal data is, and we take our responsibility to protect it seriously. This Privacy Policy describes how we collect, use, store, and protect your personal information when using the Lissa Health application.

Collected Data

• Personal Data: First name, last name, date of birth, gender, email address, phone number.
• Medical Information: Data about your health, including medical history, test results, diagnoses, prescribed treatments.
• Activity Tracker Data: Information about your physical activity, sleep, nutrition, and other metrics obtained from activity tracking devices.
• Location Data: Information about your location if you provide access to geolocation.

Data Usage Purposes

• Providing and Improving Our Services: We use your information to provide personalized recommendations, analyze treatment effectiveness, track your progress, and improve the overall quality of our services.
• Communication with You: We may use your information to communicate about health-related matters, the application, or updates.
• Statistical Analysis: We may use anonymized data for statistical analysis and service improvement.

Data Storage and Protection

We take all necessary measures to protect your personal information from unauthorized access, use, modification, or destruction. We use secure servers and data encryption for storing and transmitting your information.

IMPORTANT: Data Localization In accordance with the requirements of Federal Law №152-FZ, all personal data of Russian citizens is processed and stored exclusively within the territory of the Russian Federation. We guarantee that your data will not be transferred outside the RF without your explicit consent.

Cross-border Data Transfer

To provide key functions of our service related to data analysis using advanced large language models (LLM), we may transfer part of your medical data outside the Russian Federation.

Important: Cross-border transfer is carried out only to foreign countries included in the list of countries with adequate personal data protection approved by the authorized body (Roskomnadzor), in accordance with the current requirements of Federal Law №152-FZ.

• Purpose of transfer: Using LLM computing capabilities for data analysis and providing you with personalized recommendations.
• Anonymization: Before cross-border transfer, personal data is usually anonymized — identifiers that allow identifying the data subject are removed or replaced.
• Your consent: Cross-border transfer is carried out only on the basis of your separate and explicit consent, which you provide in the application. Without this consent, operation with the main functionality of the service will be impossible.
• Legislative changes: The list of countries to which data transfer is permitted may change in accordance with decisions of authorized bodies. We promptly adapt our practices to current requirements.

Data Transfer to Third Parties

• With Your Consent: We may transfer your information to third parties if you have given consent.
• Legal Requirement: We may transfer your information to third parties if required by law or court order.
• Protecting Our Interests: We may transfer your information to third parties if necessary to protect our legitimate interests or the interests of other persons.

Authentication via External Services

For user convenience, we offer quick authentication through external services (Google, Yandex, X/Twitter). When using this feature:

• Your personal data (name, email, profile) is transferred from the external service to our application
• This is considered cross-border data transfer and requires your separate consent
• You can choose not to use external authentication and use only local registration

Your Rights

• Access: You can request access to the personal information we store.
• Correction: You can request correction of inaccurate or outdated information.
• Deletion: You can request deletion of your personal information if it is no longer needed for the purposes for which it was collected.
• Processing Limitation: You can request limitation of processing of your personal information.
• Consent Withdrawal: You can withdraw your consent for processing of your personal information.

Contact Information

If you have questions or comments about our Privacy Policy, please contact us.

Changes to the Privacy Policy

We reserve the right to modify this Privacy Policy without prior notice. Changes will be published on our website and in the application.

Conclusion

We hope that this Privacy Policy will help you understand how we protect your personal information. If you have any questions, please do not hesitate to contact us.