Consumer Health Data Privacy Policy
Last updated: October 2, 2026
This policy describes health information that S2Y, LLC may handle when you use the S2Y mobile app, S2Y Rapha, and related wellness services. It supplements our Privacy Policy. Apple Health access, optional account backup, and sending selected content to Omer Online are separate choices. The app can still offer available local features when you decline optional sharing.
Your Health Data Privacy Rights
Depending on where you live and the data involved, you may have rights to know about, access, correct, delete, or limit the use of your health information. Contact us using the details below to make a request.
Right to Know
- What personal health information we collect about you
- How we use your health information
- Who we share your health information with
- How long we retain your health information
Right to Access
- Request a copy of your personal health information
- Receive your health data in a portable format
- Ask how to receive a copy of information held in your S2Y account
Right to Correct
- Request correction of inaccurate health information
- Add supplemental information to your health records
- Request updates to outdated health information
Right to Delete
- Request deletion of your personal health information
- Right to be forgotten (subject to legal requirements)
- Ask what account-linked copies remain after a deletion request, subject to applicable exceptions
Right to Limit Use and Disclosure
- Opt out of certain uses of your health information
- Restrict sharing with third parties
- Control marketing communications related to health
Health Information We Collect
Health Profile Information
- Symptoms and wellbeing information you choose to enter in a check-in or conversation
- Clinical record summaries or document excerpts you choose to make available to Omer Online
- Photos and files you choose to attach to an online question
Biometric and Physiological Data
- Available Apple Health information you authorize the app to read, such as heart rate, activity, body measurements, and sleep
- If you separately enable sample account backup: newly received steps, heart rate, resting heart rate, active energy, and body mass samples
Behavioral Health Data
- Check-in responses, including mood, energy, stress, sleep concerns, or other symptoms you choose to report
- Short summaries derived from those responses, if you separately choose to share them with Omer Online
Device and Usage Data
- Rapha pairing, available device status, session settings, and session history
- Feedback you choose to record before or after a session
How We Use Your Health Information
Personal Wellness Purposes
- Displaying personal trends, check-ins, and Rapha session history
- Preparing an answer to a question you send to Omer Online with the content you have chosen to share
- Showing personal observations while making clear that an association is not proof of a treatment effect
Product and Service Improvement
- Maintaining the app and investigating support or safety issues you report
- Improving the service only where the relevant data use is permitted and disclosed
Legal and Regulatory Compliance
- Responding to valid legal requests and meeting applicable legal obligations
Health Data Sharing and Disclosure
We do not automatically send Apple Health information to a clinician, device manufacturer, or Omer Online just because you granted Apple Health access. The following sharing depends on the feature and choices you use:
- Account and cloud providers, including Firebase services, for information you choose to back up to your S2Y account
- Omer Online and the providers needed to operate it, for the question, selected attachments, and separately authorized summaries you choose to send
- A recipient you affirmatively choose when using an available export or sharing feature
Legal Requirements
We may disclose health information when required by law:
- Court orders and legal proceedings
- Other disclosures required by applicable law
Protecting Health Data
The app uses device permissions to limit Apple Health access to categories you choose. Account and online features use sign-in and access controls, and information sent to connected services uses secure network connections. No method of storage or transmission is risk-free. Specific legal or security commitments for a service should be confirmed in the documentation applicable to that service.
Data Retention and Disposal
Information held only on your iPhone remains under the device's storage and app controls. Turning off Apple Health access or a backup or Omer sharing choice stops the corresponding future access or sharing; it does not automatically erase information already copied to an S2Y account or sent to an online service. Account-linked information is retained as needed to provide the selected service, handle a request, or meet applicable legal obligations. Contact us to request deletion of account-linked copies; we may need to verify your identity and explain any lawful exceptions. We do not apply a single seven-year health-record period or two-year device-usage period to every app record.
International Health Data Transfers
Connected services may process information outside your country. Where applicable law requires particular safeguards for a transfer, we assess and apply the appropriate mechanism. Contact us for information about a transfer relevant to your account.
Children's Health Data Privacy
The S2Y mobile app is not presented as a service for children. Please contact us before providing information about a child so we can explain whether the requested service is available and what permissions are required.
How to Exercise Your Rights
Making Requests
To exercise your health data privacy rights, you can:
- Use an available privacy or account control in the S2Y app
- Email our Health Privacy Officer at healthprivacy@s2y.us
- Mail written requests to our Health Privacy Office
Identity Verification
To protect your health information, we may require:
- Government-issued photo identification
- Verification of your relationship to the patient
- Completion of our identity verification process
- Additional documentation for sensitive requests
We respond to verified requests within the period required by the applicable law. If we need more time or cannot fulfill part of a request, we will explain why where required.
Health Data Breach Notification
If we identify a reportable breach, we will notify affected people and authorities as required by applicable law, with information about the incident and available next steps.
Third-Party Health Apps and Devices
When integrating with third-party health applications:
- You control which data is shared
- Review third-party privacy policies
- Understand data sharing permissions
- You can revoke access at any time
Changes to This Policy
We may update this Consumer Health Data Privacy Policy to:
- Reflect changes in health data practices
- Comply with new healthcare regulations
- Improve health data protection measures
- Enhance transparency and user rights
We will post an updated version and provide any additional notice required by applicable law.
Contact Our Health Privacy Team
For questions about your health data privacy or to exercise your rights:
Health Privacy Officer
Email: healthprivacy@s2y.us
Hours: Monday-Friday, 9 AM - 5 PM EST
Mailing Address:
S2Y, LLC
Health Privacy Office
1515 Route 22 West STE 30 #1099
Watchung, NJ 07069
United States
Your health data privacy is important to us. We are committed to protecting your personal health information and respecting your privacy rights under all applicable healthcare privacy laws.