Privacy Policy & GDPR
Last updated: November 2025
1. Who are we?
Lifestyle Monitors, Oosterhout, Netherlands. Data controller under the GDPR. Email: info@lifestylemonitors.com
2. What data do we process?
Account data: Email, name. Profile data: Date of birth, gender. Health data (GDPR Art. 9): Heart rate, HRV, stress values, relaxation index. Technical data: Browser, app version, language.
3. Why do we process your data?
Solely to provide the StressChecker service: storing readings, showing results, calculating trends, and (with Pro) linking with a professional. Legal basis: Your explicit consent (GDPR Art. 9(2)(a)) — withdrawable at any time.
4. Sharing with third parties
We never sell your data. Data is only shared with your Pro professional — exclusively with your explicit consent via pairing code. Our servers are located in Europe.
Our backup service. We make a daily copy of our databases, which we keep outside our own servers with a storage service. That copy is encrypted before it leaves our server, and the key to open it does not travel with it. The storage service therefore holds files it cannot read. The company is American; the files themselves are stored within the European Union.
5. Security
TLS/SSL encryption during transmission and storage. Passwords are hashed. Access to personal data is restricted to authorised personnel.
Failed sign-in attempts. To slow down password guessing, we count failed sign-in attempts per email address. The address itself is not stored; we keep a derived identifier that cannot be read back. This count is deleted after 24 hours. An account is never locked as a result: after a short wait you can try again.
Activating a licence code. When a licence code is activated, we record when that happened, from which IP address, and with which browser. This exists so that misuse of a code can be traced. We keep these details for no longer than ninety days.
6. Retention periods
Account data: as long as your account is active.
You can delete your account at any time. You do this yourself, in Settings. We ask you to confirm, and then we carry out the deletion immediately. It cannot be undone: you will not be able to log in again, and we cannot restore anything.
What we delete. Your name, your email address and your password. If you use the Healthy Lifestyle Monitor, we also delete your Compass answers and the notes you wrote with them, your weekly self-reflections, your goals, the questions you added to your own questionnaires, your anchor, your answers from the self-test, and the interpretations the AI gave with your measurements — those quote your own words, after all.
What remains of the account. One line for your account, and one line for each licence you held — all carrying the same untraceable identifier. The account line records when the deletion took place; a licence line holds the details of the subscription that went with it. They contain no contact details; the email field holds a placeholder that points to no one. We keep these lines so we can demonstrate that we carried out your request. If you used the monitor as a professional, we also clear your clients' details: their names, email addresses, phone numbers and the notes you wrote about them.
What we keep for research. This applies only to the Healthy Lifestyle Monitor. If you use StressChecker, we delete your measurement values as well, and nothing is kept for research. With the Healthy Lifestyle Monitor, a set of calculated values from your measurements remains: your Relax Index, your average heart rate, the measures of heart rate variability, the quality of the measurement, and the scores you gave yourself — how you felt, how you slept, how much pressure you experienced. We do not keep the raw heart-rate series; it is erased at deletion. No name, no email address and no calendar date remain alongside them: of each measurement we keep only the hour of the day and which day it was, counted from your first measurement. We do keep your age at the time of measuring and your gender, because a measurement can only be compared with those of people of comparable age and gender. What remains is therefore a set of numbers with an age and a gender, without a calendar date and without any link back to you. This processing cannot be undone: afterwards no key exists by which those values could be connected to you.
Your invoices and payments. Invoices and payment details are kept by our payment provider. That is where the record of your payments lives, and it is subject to the statutory retention period of seven years. These details fall outside the deletion of your account. In our own records only a reference to the order and the payment remains, without your name and without your email address.
7. Your rights (GDPR)
Access, rectification, erasure, restriction, portability, objection. Contact: info@lifestylemonitors.com. You may also lodge a complaint with your national data protection authority.
8. Medical disclaimer
The StressChecker is not a medical device. Not intended for diagnosis or treatment. Results may be unreliable with heart failure, arrhythmias, a pacemaker or heart medication. Always consult a doctor.
info@lifestylemonitors.com
→ Full privacy policy · Software usage terms