Existence LLC’s (“Existence,” “our,” “us,” and “we”) Privacy Policy (“Privacy Policy”) describes how Existence handles your personal information generally. Certain U.S. state laws require specific disclosures regarding consumer health data. This Consumer Health Data Policy (“Health Data Policy”) supplements our Privacy Policy and describes how we collect, use, and share your consumer health data. Unless otherwise defined in the Health Data Policy, capitalized terms used herein shall have the same meanings as set forth in the Privacy Policy.
This Health Data Policy applies only if and when you choose to connect health or wellness tracking devices (such as wearables) or health-related applications to your Existence account. If you do not connect such devices or applications, this Health Data Policy does not apply to your use of Existence Services.
This Health Data Policy does not apply to protected health information as defined by the Health Insurance Portability and Accountability Act (“HIPAA”) as Existence is not subject to HIPAA.
For questions about this Health Data Policy or our privacy practices, contact us at: privacy@existence.io or write to us at: Existence LLC, 1801 Century Park E, Suite 700, Century City, CA 90067, Attn: Legal
1.1 Consumer Health Data. “Consumer health data” is personal information that identifies your past, present, or future physical or mental health status. Existence collects consumer health data to provide wellness insights and help you optimize your time, energy, and well-being through our Services, from the following sources:
(a) Authorized third-party integrations and connected devices, including:
(i) Apple HealthKit (sleep duration, activity metrics, health data);
(ii) Wearable devices and health data aggregators (such as Junction) for sleep and activity data; and
(iii) Google Calendar API (which may inadvertently contain health-related appointment information).
(b) Through our Services, when we generate insights, recovery estimates, and wellness patterns derived from the integration sources described above.
1.2 Information We May Collect. Existence collects the following types of consumer health data:
(a) Sleep information: Sleep duration, sleep quality metrics, sleep patterns, and sleep-related data from wearables and Apple HealthKit, for example.
(b) Activity and wellness metrics: Energy ratings, activity levels, wellness patterns across Existence’s four pillars (life, health, sleep, work).
(c) Health-related calendar data: Calendar events that may inadvertently contain health information (e.g., medical appointments). Existence does not utilize geofencing technology to track, collect, or identify your presence at healthcare facilities, reproductive health clinics, or mental health centers. We do not extract or process precise geolocation coordinates (GPS) from your calendar entries or connected devices for the purpose of health tracking. While our AI Assistant parses technical capture timestamps and location metadata from user-uploaded visual media to cluster calendar time blocks, we do not extract or use image location metadata to identify visits to healthcare facilities, reproductive or mental health clinics, or to infer medical diagnoses, treatments, or health conditions.
(d) AI-generated insights: Wellness recommendations and patterns identified through AI analysis of your data.
2.1 Use. We use your consumer health data only for the following purposes:
(a) Wellness insights and personalization: to analyze your sleep patterns, energy levels, and activity data to provide personalized insights and recommendations for optimizing your time and well-being.
(b) Service functionality: to enable core features including tracking across our four pillars (life, health, sleep, work), generating AI-powered insights, and helping you design time effectively.
(c) Service improvement: to improve our algorithms, enhance our AI models (using only anonymized and aggregated data), and develop new wellness features. We do not use consumer health data to train generalized models applied across users without your explicit consent.
(d) Customer support: to assist you with questions about your wellness data and insights.
(e) Legal compliance: to comply with applicable laws and respond to legal process.
(f) Safety and security: to protect the security and integrity of our Services.
(g) Account-isolated AI processing: All AI analysis of your consumer health data is confined to your account. Your consumer health data is never used to generate insights for other users, contribute to shared wellness models applied across users, or inform AI outputs delivered to any person other than you.
2.2 Non-Use. We do NOT use consumer health data for:
(a) Marketing or promotional purposes;
(b) Sale to third parties; or
We implement appropriate technical and organizational safeguards to protect your consumer health data against unauthorized access, disclosure, alteration, and destruction. These measures include:
(c) Creating consumer profiles for advertising purposes.
3.1 Sharing. We may share your consumer health data only in the following limited circumstances:
(a) With AI service providers: We share your data with third-party AI providers to generate wellness insights and recommendations. These providers are contractually required to protect your data and use it only to provide services to us.
(b) With integration partners: When you connect third-party services (e.g., Apple HealthKit, wearable devices), we may exchange data as necessary to provide integrated wellness insights.
(c) With service providers: Including cloud storage providers, analytics services, and other vendors who assist us in operating our Services, but only to the extent necessary and under strict confidentiality agreements.
(d) With your consent: We may share your data when you explicitly consent to specific sharing practices. We will not disclose or share your consumer health data with any new third-party recipients, service provider categories, or for any new purpose not disclosed in this Policy without first obtaining your separate, affirmative, voluntary consent.
(e) For legal reasons: When required by law, court order, or to protect rights, safety, or property.
(f) With potential purchasers: In connection with or during negotiation of any reorganization, merger, acquisition, financing, or sale of all or a portion of our assets. In the event of a merger, acquisition, change in ownership control, or sale of assets, we may transfer your information to the successor entity. However, for any data obtained through Google API Services, we will obtain your explicit prior consent before transferring such data to a third party in connection with a corporate event. For all other data, we cannot promise that an acquiring party or the merged entity will have the same privacy practices or treat your information the same as described in this Policy, but we will provide notice before your personal information is transferred and becomes subject to a different policy. Any recipient of such data must comply with the Google API Services User Data Policy, including Limited Use requirements.
3.2 No Sale. We do not “sell” consumer health data as defined in applicable law.
4.1 Encryption of consumer health data in transit and at rest;
4.2 Access controls limiting employee access to your consumer health data. Specifically, regarding data obtained via Google API Services, human access to such data is strictly prohibited except in the following limited circumstances: (a) we have obtained your affirmative agreement to view specific data (e.g., for customer support); (b) it is necessary for security purposes, such as investigating a bug or abuse; (c) it is necessary to comply with applicable laws; or (d) the data has been aggregated and anonymized and is used only for internal operations;
4.3 Regular security assessments and updates; and
4.4 Secure cloud infrastructure.
Data processed through AI service providers for insight generation may be retained in their active processing environments for a limited period pursuant to their own policies (typically up to 30 days) after which such data is deleted or anonymized.
5.1 Rights. You have the following rights regarding your consumer health data:
(a) Right to Access: You may request a copy of the consumer health data we maintain about you at any time through your account settings or by emailing privacy@existence.io, without requirement of an active paid subscription.
(b) Right to Deletion: You may request that we delete your consumer health data, subject to certain legal exceptions. In accordance with the California Delete Act, Existence honors deletion requests received via the California Privacy Protection Agency’s centralized "DROP" mechanism. Upon receipt of a valid deletion request, we will remove your consumer health data from our active systems and AI processing queues within 30 days, unless a shorter period is required by law. Existence will automatically propagate your deletion request and instructions to all processors, vendors, and downstream service providers that have received your consumer health data, contractually requiring them to permanently delete your data from their records and processing environments within the same timeframe.
We retain consumer health data only as long as necessary for:
(c) Right to Withdraw Consent: You may withdraw your consent for our collection and use of your consumer health data at any time by disconnecting your integrations in your Account settings or by contacting privacy@existence.io. Upon withdrawal of consent, we will cease collection from your connected integrations and notify our service providers to immediately cease processing such data.
(d) Right to Correction: You may request that we correct inaccurate consumer health data maintained in our direct systems. Because Existence consumes raw device metrics and activity records directly from third-party aggregators and device manufacturers (such as Junction, Apple, Oura, or Garmin) on a read-only basis, corrections to raw device telemetry must be initiated directly with the underlying hardware provider or aggregator. If you correct data at the source provider, Existence will synchronize and reflect those corrections upon the next data ingest.
(e) Right to Data Portability: You may request your consumer health data in a standard, portable, machine-readable format by contacting privacy@existence.io.
(f) Right to Opt-Out: You may opt-out of certain uses of your consumer health data, noting however that such opt-out may remove access to certain features of our Services.
(g) Right to Appeal: If we deny your request, you have the right to appeal our decision by emailing privacy@existence.io.
5.2 Location. We extend these rights to all users of our Services regardless of their location or jurisdiction. For users located in Canada, your consumer health data will be collected, processed, and stored in the United States subject to the protections of this Policy and our Privacy Policy.
Washington State Residents. For the purposes of the Washington My Health My Data Act, Existence only collects and shares “consumer health data” with your separate, affirmative, and voluntary consent, which may be withdrawn at any time. Under Washington State law, "consumer health data" includes any information linked or reasonably linkable to your past, present, or future physical or mental health status, including sleep patterns, activity metrics, and inferences about your wellness. In addition to standard access rights, Washington residents have the right to receive a specific list of all third parties and affiliates with whom Existence has shared their consumer health data, including an email address or other mechanism to contact those entities.
To exercise these rights, please contact us at privacy@existence.io. We will respond to your request within the timeframe required by applicable law. If we deny your request, you may appeal by emailing us again at privacy@existence.io within 30 days of our denial.
PLEASE NOTE THAT THIS HEALTH DATA POLICY IS SUBJECT TO CHANGE BY EXISTENCE IN ITS SOLE DISCRETION AT ANY TIME. When changes are made, Existence will make a new copy of this Health Data Policy on its website. The “Effective Date” at the top of this page indicates when this Health Data Policy was last revised. If we make material changes to this Health Data Policy, we may (and, where required by law, will) also provide notification of changes in another way that we believe is reasonably likely to reach you, such as via e-mail if you have an Account or another manner through the Services (which may include posting an announcement on our website). We may also notify you in other ways from time to time about the collection, use, and disclosure of your health data described in this Health Data Policy.
7.1 Collection: We will only collect your consumer health data with your affirmative, voluntary consent, which we obtain at the specific moment you connect health data platforms, wearable devices, or health integrations within the Services. Collection consent is presented as a distinct, standalone choice and is not conditioned on general account registration.
7.2 Sharing: To the extent your consumer health data is shared with or processed by external third parties (such as third-party AI model providers), we require a separate, specific, and unbundled affirmative consent prior to any such transmission. We require separate, specific consent before sharing your consumer health data with any third parties beyond what is described in this Health Data Policy or necessary to provide our Services.
7.3 AI Processing: As described in this Policy, you may separately choose whether to authorize the transmission of your consumer health data to third-party AI service providers to generate personalized wellness summaries. We do not process consumer health data through third-party AI models without your separate, affirmative consent.
7.4 No Sale: We do not sell consumer health data under any circumstances.
8.1 Discriminate against you for exercising your rights under this Health Data Policy;
8.2 Use consumer health data for purposes unrelated to wellness insights and service improvement;
8.3 Share consumer health data for marketing or advertising purposes; and
8.4 Use your consumer health data to make decisions that could have legal or similarly significant effects.
9.1 Providing ongoing wellness insights and Services;
9.2 Maintaining your account and historical wellness trends;
9.3 Legal obligations and compliance requirements;
9.4 Resolving disputes and enforcing our agreements; and
9.5 With respect to AI processing specifically, consumer health data submitted for insight generation is retained in active AI service provider processing environments for a limited period pursuant to their own policies (typically up to 30 days), after which it is deleted or anonymized, consistent with our contractual requirements. AI-generated insights and wellness summaries stored in your account are retained for as long as your account is active and deleted upon account closure or valid deletion request. Raw consumer health data from connected wearables and integrations is stored by our data aggregator, Junction, only while an active connection is maintained. Disconnecting an integration, withdrawing consent, or closing your account will stop further collection and prompt the deletion of your imported wearable data from Junction’s systems. AI-generated daily summaries previously saved to your account history remain accessible until you delete your account or submit a deletion request.
All service providers that process consumer health data on our behalf are contractually required to:
10.1 process such data solely for the purpose of providing services to Existence;
10.2 not retain such data longer than necessary to perform such services;
10.3 not use such data to train, improve, or develop generalized or non-user-specific artificial intelligence or machine learning models;
10.4 not disclose such data to any third party except as strictly necessary to perform contracted services;
10.5 implement appropriate technical and organizational safeguards to protect such data;
10.6 Assist us in responding to consumer requests; and
10.7 adhere to the Google API Services User Data Policy, including its Limited Use requirements, with respect to any data derived from or relating to Google API Services, including aggregated, anonymized, or de-identified forms of such data, regardless of the form in which such data was received.
Notice vs. Re-Acceptance Standards:
• Narrowing or Clarifying Changes (Notice Only): Updates that narrow or restrict our collection or use of consumer health data, reduce data sharing, eliminate commercial permissions, or expand user rights will take effect upon posting with updated Effective Date notice.
• Material Expansions (Affirmative Re-Acceptance Required): If we introduce new categories of consumer health data, new processing purposes, or new third-party recipient classes that expand beyond the scope of your prior authorization, we will obtain your fresh, affirmative, separate consent prior to collecting or sharing such data under the expanded terms.