Your Hormonal Journey
Starts Here

1. Who We Are (Art. 13.1.a)

Nlyte Health is the data controller responsible for your personal data. Contact: privacy@nlyte.life

2. Data Protection Officer (Art. 13.1.b)

For data protection enquiries, contact our privacy lead at dpo@nlyte.life.

3. Legal Basis for Processing (Art. 13.1.c)

We rely on the following legal bases:

• Explicit Consent (Art. 9.2.a) — for health, biometric, and ethnic background data. You may withdraw at any time.
• Contractual Necessity (Art. 6.1.b) — for account creation and core service delivery.

4. What Data We Collect

We collect standard personal information (name, email, date of birth), biometric data (height, weight), lifestyle data (stress, sleep, diet, exercise, budget), and sensitive health data (menstrual cycle, contraception, symptoms, diagnosed conditions, medications, allergies, family history, and ethnic background).

5. How We Use Your Data (Art. 13.1.c)

Your data is used exclusively to build your dynamic hormonal health profile and to power SAGE AI — our Temporal Agent — which generates personalised recommendations tailored to your unique hormonal patterns. No data is sold to third parties.

6. Automated Decision-Making & SAGE AI (Art. 13.2.f)

SAGE AI is a profiling system that analyses your health and lifestyle inputs to identify hormonal patterns and generate daily personalised insights. The logic considers factors including cycle data, symptoms, lifestyle habits, and goals. You have the right to request human review of any AI-generated recommendation.

7. Data Recipients (Art. 13.1.e)

• Cloud infrastructure providers (secure hosting)
• LLM / AI providers powering SAGE AI
• Workflow automation services (n8n) for data processing

All third parties are bound by data processing agreements and GDPR-compliant terms.

8. Data Retention (Art. 13.2.a)

Your data is retained for as long as your account is active, plus 30 days for backup purging after deletion. Incomplete onboarding profiles are automatically deleted after 30 days of inactivity.

9. Your Rights (Art. 13.2.b–d)

• Access — Request a copy of your personal data.
• Rectification — Correct inaccurate data.
• Erasure — Request deletion of your data ("right to be forgotten").
• Restriction — Limit how we process your data.
• Objection — Object to profiling or processing based on legitimate interests.
• Portability — Receive your data in a machine-readable format.
• Withdraw Consent — Withdraw at any time via your account settings. This will halt all SAGE AI processing immediately.
• Lodge a Complaint — Contact your national data protection authority (e.g., ICO in the UK, CNIL in France).

10. Cookies & Tracking

We use only essential functional data. No advertising or third-party tracking cookies are used.

11. Contact

To exercise any of your rights or raise a concern, email privacy@nlyte.life.

Effective date: 1 January 2025  |  Version 1.0  |  Nlyte Health