Privacy Policy

1. Our Privacy Principles

We limit how personal information is used and give members meaningful choices over connected health data.

• Minimum Necessary Data: For Apple Health, Slynk requests the data types needed for the objective you select. Other tracking providers may bundle multiple permissions; their authorization screen shows what access is requested.
• Employer Sees Outcomes Only: Your employer sees whether you completed your objective and how much you earned. They never see your step counts, sleep data, heart rate, or any raw health metric.
• Encrypted at Rest and in Transit: All data is encrypted using industry-standard protocols. Health data is encrypted at rest in our database and in transit between your device, our servers, and third-party providers.
• Isolated by Company: Slynk uses tenant access controls designed to separate one participating organization's information from another's.
• Deletion Requests: You can request deletion of your account and associated data through the app or by contacting support. Your account remains active while we review active challenges, earned rewards, pending withdrawals, raffle entries and applicable retention requirements. We will respond within 30 days and confirm when processing is complete.
• No Profiling or Scoring: We do not build health profiles, assign risk scores, or use your data for anything beyond objective verification. There is no algorithmic health assessment.

2. What Data We Collect

The information collected depends on how you use Slynk, the objective you select, and the tracking provider permissions you grant.

3. How We Use Your Data

• Verify daily progress toward your wellness objective by comparing your activity data against your selected goal.
• Display your progress, balance, and history within the Slynk app so you can track your own performance.
• Generate aggregated, anonymized reports for your employer showing participation rates and program outcomes — never individual health data.
• Process payout claims when you request to receive your earned benefit credits as cash.
• Send you notifications about your objective status, new periods, and important account updates.
• Authenticate your account, maintain provider connections, prevent fraud, secure the Service, and troubleshoot support requests.
• Measure product usage, diagnose crashes and performance issues, respond to surveys, and improve Slynk.

4. Sources, Service Providers and Disclosures

We receive information from you, your participating organization, your identity provider, your device, and tracking providers you choose to connect. We use service providers to operate Slynk; they may process information only for contracted services and subject to applicable obligations.

We do not sell personal information or health data, and we do not use health or fitness information for third-party advertising, data-broker activity, insurance underwriting or employment decisions.

Service providers may process information outside your province, state or country, including in Canada, the United States and other locations where they operate. Information in another jurisdiction may be subject to that jurisdiction's laws and lawful access requests.

5. What We Never Do

These commitments govern how Slynk uses personal information.

• We never sell your data to third parties. Not to advertisers, data brokers, insurers, or anyone else.
• We never share your individual health metrics with your employer. They see completion status and earned credits — nothing more.
• We never use your health data for insurance underwriting, employment decisions, or any form of discrimination.
• We do not retain health data indefinitely; we retain it only for the operational, audit, dispute-resolution and legal periods described below.
• The Slynk iOS app does not request device location permission. A connected provider may include location-related workout information if its permission screen authorizes that data.
• We never use your data to train machine learning models or build predictive health profiles.

6. What Your Employer Can and Cannot See

Privacy boundaries are enforced by system architecture. These are not configurable settings — they are hard limits.

Your employer CAN see

• Whether you have an active objective this period
• Whether you completed or did not complete your objective
• How much you earned in benefit credits
• Claim amounts on invoices (when you request a payout)

Your employer CANNOT see

• Your step counts, sleep data, or any raw health metric
• Which objective type you chose (walking, running, cycling, sleep)
• Your daily progress or qualifying day counts
• Your connected tracking provider or device information

7. Data Security and Retention

Slynk uses administrative, technical and organizational safeguards designed to protect personal information. Communications use TLS encryption, databases use encryption at rest, and authentication tokens are stored in the iOS Keychain. No method of storage or transmission is completely secure.

We retain account, program, objective, reward and transaction records while your account or participating program is active and afterward as reasonably required for program administration, unclaimed rewards, audits, disputes, security, legal compliance and enforcement. Health and activity records are retained for objective verification, audit and dispute-resolution needs rather than indefinitely.

Firebase and other service providers apply their own documented retention schedules. For example, diagnostic and performance records may be retained for limited service-specific periods. Provider access continues until disconnected, revoked or otherwise terminated.

We respond to a verified deletion request within 30 days. Submitting a request does not immediately delete the account or automatically cancel an active challenge, earned reward, pending withdrawal or raffle entry. We review each request, then delete or de-identify information unless limited retention is required or permitted for financial records, legal obligations, fraud prevention, security, disputes or enforcement. We confirm when processing is complete and explain any limited information retained. Aggregated or de-identified information that cannot reasonably identify you may be retained.

8. Your Rights

You have control over your data. Here is what you can do at any time.

9. Changes to This Policy

We may update this policy to reflect changes in our practices, providers, technology or legal obligations. We will post the revised policy and update its effective date. When appropriate, we will provide additional notice in the app or by email before a material change takes effect.

10. Contact the Privacy Officer

To ask a privacy question, exercise an applicable right, request access, correction or deletion, or raise a complaint, use the in-app support feature or email our Privacy Officer. We may need to verify your identity before completing a request.

privacy@slynk.com