Skip to main content
Eleva Wellbeing

Privacy Notice

Last updated: 14 May 2026

This Privacy Notice explains how Eleva Wellbeing Ltd ('Eleva Wellbeing', 'we', 'us', 'our') collects, uses, stores, and protects your personal data when you use the Eleva Wellbeing platform. We are committed to handling your data with care, transparency, and in full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Eleva Wellbeing Ltd is the data controller for your personal data.

Contact: support@elevawellbeing.app | elevawellbeing.app

2. Data We Collect

2.1 Account and Contact Data

  • Name (first name)
  • Email address
  • Date of account creation
  • Language and region preferences

2.2 Wellbeing and Check-in Data

This is the most sensitive data we collect. It includes:

  • Daily emotional check-in responses (energy level, emotional state, contextual tags)
  • Responses to PHQ-9 (depression screening) and GAD-7 (anxiety screening) tools, embedded in the check-in experience
  • Activity and exercise completion data (which practices you completed, feedback provided)
  • Longitudinal wellbeing trajectory data derived from your check-in history

This data is classified as special category health data under UK GDPR and is processed with your explicit consent and with the highest standards of security and confidentiality.

2.3 Usage and Technical Data

  • Device type and operating system
  • App session data (time of use, features accessed)
  • Performance and error data
  • IP address (anonymised where possible)

2.4 Communications Data

  • Emails or messages you send to us
  • Waitlist registration data (email address only)

3. How We Use Your Data

3.1 To Provide the Platform

  • Delivering personalised daily micro-interventions based on your check-in responses
  • Running the AI recommendation engine to adapt content to your patterns and context
  • Tracking your wellbeing trajectory using PHQ-9 and GAD-7 screening tools
  • Activating the signposting feature when screening scores suggest you may benefit from additional support

3.2 To Improve the Platform

  • Analysing anonymised and aggregated usage data to improve recommendation accuracy
  • Developing the clinical outcome dataset that underpins Eleva Wellbeing's evidence base
  • Identifying technical issues and improving platform performance

3.3 To Communicate with You

  • Sending essential service communications (account updates, policy changes)
  • Sending wellbeing reminders at your chosen time (with your consent)
  • Responding to your enquiries and support requests

We do not sell your data. We do not share your data with third parties for marketing purposes. We do not use your personal data for advertising.

We process your data on the following legal bases under UK GDPR:

  • Explicit consent — for special category health data (your check-in data, PHQ-9/GAD-7 responses). You can withdraw this consent at any time by deleting your account.
  • Contract performance — to provide the Eleva Wellbeing service you have signed up for.
  • Legitimate interests — for technical performance data and anonymised analytics, where these do not override your privacy rights.
  • Legal obligation — where required by applicable law.

5. Data Retention

We retain your personal data for as long as your account is active. When you delete your account:

  • Your identifiable account data is deleted within 30 days
  • Anonymised, aggregated wellbeing data may be retained for research and product improvement purposes — this data cannot be linked back to you
  • Any data you have requested us to delete under your right to erasure will be removed within 30 days

6. Data Storage and Security

Your data is stored on servers located within the European Economic Area (EEA). We use industry-standard security measures including:

  • Pseudonymisation of health data at the point of collection
  • Encryption in transit (TLS) and at rest (AES-256)
  • Access controls restricting who within Eleva Wellbeing can access your data
  • Regular security assessments

In the unlikely event of a data breach that poses a risk to your rights, we will notify you and the Information Commissioner's Office (ICO) within 72 hours as required by UK GDPR.

7. Sharing Your Data

We do not sell or rent your personal data. We may share data with:

  • Cloud infrastructure providers (e.g. AWS, Google Cloud) — acting as data processors on our behalf under data processing agreements
  • Analytics tools — only aggregated, non-identifiable data
  • Professional advisors (legal, financial) — under strict confidentiality
  • Authorities — where required by law or to protect the safety of users

We do not share your health data or check-in data with any third party for commercial purposes.

8. Your Rights

Under UK GDPR, you have the following rights:

  • Right of access — request a copy of the personal data we hold about you
  • Right to rectification — request correction of inaccurate data
  • Right to erasure — request deletion of your data ('right to be forgotten')
  • Right to restrict processing — request that we limit how we use your data
  • Right to data portability — receive your data in a machine-readable format
  • Right to object — object to processing based on legitimate interests
  • Right to withdraw consent — for special category health data, withdraw consent at any time without affecting previous lawful processing

To exercise any of these rights, contact us at support@elevawellbeing.app. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk | 0303 123 1113

9. Cookies

Eleva Wellbeing uses cookies and similar technologies. Please refer to our Cookie Policy for full details of the cookies we use and how to manage your preferences.

10. Children

Eleva Wellbeing is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from individuals under 18. If you believe we have collected data from a minor, please contact us immediately at support@elevawellbeing.app and we will delete it promptly.

11. Changes to This Notice

We may update this Privacy Notice from time to time. Where changes are material, we will notify you in the platform or by email. The date at the top of this document reflects when it was last updated.

12. Contact

Eleva Wellbeing Ltd

Email: support@elevawellbeing.app

Website: elevawellbeing.app

Go to top