Privacy Policy

Last updated: September 30, 2026

This Privacy Policy (“Policy”) describes how all.health, Inc. (collectively “Company,” “we,” “our,” or “us”) collect, use, and disclose personal information through our website located at https://all.health/, any other websites that link to this Policy, our mobile app, wearable devices, and via any other interactions we may have with you, whether online or offline (collectively, the “Services”). Other Company websites, products, and services may have their own privacy policies. To the extent we handle protected health information (“PHI”) as defined by the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) on behalf of a healthcare provider, health plan, or other covered entity, that information is governed by HIPAA and our agreement with that organization rather than this Policy.

“Personal information”, is any information that enables us to identify you, directly or indirectly, by reference to an identifier such as your name, identification number, location data, online identifier or one or more other factors specific to you.

Please note that this Policy does not apply to individuals with whom we interact in an employment-related context. For more information about the personal information we collect about job applicants, please see our California Applicant Privacy Policy. Further, employees and contractors can find more information about the personal information we collect about them in our California Employee Privacy Policy, available from People Operations at hr@all.health.

By using our Services, you acknowledge and agree that your personal information will be used as set forth in this Policy and agree to our Terms of Service. If you do not agree to the terms of this Policy or our Terms of Service, please do not use our Services.

PERSONAL IFORMATION WE COLLECT

We, and our vendors, collect the following categories of personal information about consumers:

Identifiers, such as name, alias, postal address, unique personal identifier, online identifiers, Internet Protocol address, email address, account name, signatures, physical characteristics or description, telephone number, or other similar identifiers.
Insurance Information, including insurance policy number or health insurance information.
Characteristics of Protected Classifications under state or federal law, such as age, gender, and marital status.
Biometric Information, such as imagery of the iris, retina, fingerprint, face, hand, palm, vein patterns, voice recordings, gait patterns, or rhythms, and sleep, health, or exercise data from which we can extract identifying information.
Internet or Other Network Information, such as browsing history, search history, information regarding your interactions with our websites or advertisements.
Geolocation Data, such as device location that is more granular than a city or town.
Audio, Electronic, Visual and Similar Information, such as call and video recordings.
Professional or Employment-Related Information, such as work history and prior employer.
Education Information, as defined in the federal Family Educational Rights and Privacy Act, such as student records and directory information.
Inferences drawn from any of the personal information listed above to create a profile or summary about, for example, an individual’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. This category includes sensitive data inferences, which are inferences made by us based on personal information, alone or in combination with other data, to indicate your sensitive personal information.
Sensitive Personal Information, including:
1. Personal information that reveals your:
  1. Social security, driver’s license, state identification card, or passport number;
  2. Account log-in, financial account number, debit card number, or credit card number in combination with any required security or access code, password, or credentials for allowing access to an account;
  3. Precise geolocation that is used or intended to be used to locate you within a small geographic area (less than a radius of 1,850 feet);
  4. Racial or ethnic origin, religious or philosophical beliefs, or union membership;
  5. Contents of your email and text messages, unless we are the intended recipient; or
  6. Genetic data.
2. Biometric data processed for the purpose of uniquely identifying you;
3. Personal Information collected and analyzed concerning your health; and
4. Personal Information collected and analyzed concerning your sex life or sexual orientation.

PURPOSES FOR PROCESSING AND DISCLOSING PERSONAL INFORMATION

We collect, process, and disclose the categories of personal information we collect for the following purposes:

To process, track and fulfill your order.
To confirm, schedule or provide other services related to our services and products.
To administer a contest, promotion, survey, or other site feature, and to provide you with the relevant products or services (for instance to deliver a prize you may have won in a contest).
For our analytics and marketing purposes, including to send you information/materials about products, recommendations, offers, and news we think could interest you.
To provide, develop, improve, repair, and maintain our products and Services.
To operate and improve our Services, including to analyze use of our Services and learn about our visitors and how they use and navigate the Services, so we can operate and improve our products and Services to deliver the best user experience.
To communicate with you, including responding to your inquiries.
To comply with the law and to maintain the security of our Services.
As otherwise disclosed at the time of collection or use.
To otherwise accomplish our business purposes and objectives.

We may combine any personal information we collect about you with any other information we maintain for the above purposes.

We may also deidentify any personal information we collect about you. When we do so, we take reasonable measures to ensure that the information cannot be associated with a consumer or household, and we maintain and use the information in deidentified form. We will not attempt to reidentify the information, except that we may attempt to reidentify the information solely for the purpose of determining whether our deidentification processes satisfy applicable legal requirements. After it has been deidentified, the information is no longer personal information and is not subject to this Policy.

SOURCES OF PERSONAL INFORMATION

We collect personal information directly from consumers in a variety of contexts, including: (1) via signups on our Services, such as through the creation of an account; (2) from an online, email, or telephone purchase or order; (3) when you contact us, such as through customer service communications, including our online chat features; (4) when you register a Company product; (5) when you submit a business reply, product, or warranty card; or (6) when you interact with us for any other purpose.

We also collect personal information from other sources, including from vendors and third parties when they provide personal information to us, and from cookies and other tracking technologies used on our Services. If you provide delivery information or other personal information which is not your own to us, then you must have that person’s permission to give us their personal information and for us to use and disclose it as provided in this Policy.

DISCLOSURE OF PERSONAL INFORMATION

We disclose the categories of personal information listed in the “Personal Information We Collect” section, above, in the following contexts:

To our Affiliates and Vendors. We disclose the personal information we collect to our affiliates and to our vendors who act on our behalf. For example, we use vendors to operate our Services; host our websites; and to help us with our promotional efforts. These vendors may need personal information about you to perform their obligations. We contractually require our vendors to keep the personal information they process on our behalf confidential and to use it only to provide services on our behalf.
As Described in a Privacy Notice or With Your Consent. We may disclose personal information as described in any privacy notice we provide to you via our Services, or with your consent if we obtain it from you in a particular context.
In Aggregate or De-Identified Form. We may aggregate or de-identify the personal information we collect, and we may disclose aggregated and/or de-identified information to our vendors, and to third parties for our business operational purposes and for any other purposes permitted by applicable law.

We may also disclose personal information in the following contexts:

As Part of a Business Transfer. We may disclose personal information to a successor organization if, for example, we transfer the ownership or operation of all or a portion of our Services to another organization, we merge with or are acquired by another organization, or if we liquidate our assets. If such a transfer occurs, we will seek assurances that the successor organization will treat the personal information we disclose to it in accordance with this Policy.
To Comply with Laws and Protect Our Rights and the Rights of Others. We may disclose personal information when we, in good faith, believe disclosure is appropriate to comply with the law, a court order, or a subpoena. We may also disclose personal information to prevent or investigate a possible crime, such as fraud or identity theft; to protect the security of our Services; to enforce or apply our other agreements; or to protect our own rights or property or the rights, property, or safety of our users or others.

Please note that our Services do not currently respond to the “Do Not Track” signal.

THIRD-PARTY LINKS & PLUG-INS

Our Services may provide links to third-party websites or apps. We do not control the privacy practices of those websites or apps, and they are not covered by this Policy. You should review the privacy policies of other websites or apps that you use to learn about their data practices.

YOUR CHOICES

To opt out of our email marketing or to unsubscribe from our email newsletters, you can use the “unsubscribe” link provided at the bottom of each marketing message or newsletter. Please note that even if you choose to opt out, you will continue to receive some email communications related to our transaction(s) and relationship with you, such as purchase and shipping confirmations.

If you have opted in to receive text messages from us, you can opt out at any time by replying STOP to any message. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes.

If you would like to update your mailing information or want your name and address removed from our direct mailing list, you can contact our customer service department using the information in the “Contact” section below.

CHILDREN’S PRIVACY

Our Services are not intentionally designed for or directed at children under 18 years of age. We do not knowingly collect personal information from children under the age of 18 without the consent of the child’s parent or guardian. If you are a parent or guardian and believe we have collected personal information from your child without your consent, please contact us promptly at legal@all.health

SECURITY

The security of Personal Information is important to us. We implement reasonable physical, technical, and administrative security features designed to promote the confidentiality, integrity, and availability of information in our possession or control. Such measures are designed to protect your Personal Information from loss, unauthorized access, disclosure, alteration, or destruction. However, no method of transmitting or securing data is completely secure, and we do not guarantee the security of information transmitted over the Internet. Specifically, email is a non-encrypted form of Internet communications that may be accessed or viewed by other Internet users without your knowledge or permission while in transit to us. For that reason, in order to protect your privacy, please do not use email to communicate information to us that you consider confidential. Any information you choose to disclose to us is done at your own risk.

UPDATES TO THIS POLICY

We may change this Policy at any time in our discretion. If we decide to change our Policy, we will post the changes on this page and update the “last updated” date, above. Please review this page periodically to see any updates to the information provided here.

CONTACT US

If you have questions or wish to contact us about this Policy, please direct inquiries to:

By mail:
all.health, Inc.
Attn: Legal Department (re: Privacy Policy)
649 Front St, Suite 200
San Francisco, CA 94111
U.S.A.

By e-mail:
e: legal@all.health

By telephone:
t: 1.415.689.3018

supplemental privacy policy for residents of certain U.S. states

Last Updated: September 30, 2026

This Supplemental Privacy Policy (“Supplemental Policy”) describes how all.health (“Company,” “we,” “us,” “our”) collect, use, and disclose personal information we collect about consumers through both online and offline interactions and provides additional disclosures for compliance with state comprehensive privacy laws that apply to Company (collectively, “U.S. Privacy Laws”). Some portions of this Supplemental Policy apply only to residents of particular states. In those instances, we have indicated that such language applies only to those residents.

Please note that this Supplemental Policy does not apply to individuals with whom we interact in an employment-related context. For more information about the personal information we collect about job applicants, please see our California Applicant Privacy Policy. Further, employees and contractors can find more information about the personal information we collect about them in our California Employee Privacy Policy, available from People Operations at hr@all.health.

Please note that to the extent the Company collects “protected health information” (“PHI”) as defined by the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) that is not a part of this Supplemental Policy.

DEFINITIONS

“Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal information also includes “sensitive personal information” that we specifically describe in this Supplemental Policy.
“Sell,” “Sale,” or “Sold” means renting, releasing, or transferring an individual’s personal information to a third party for money or other valuable consideration.
“Share,” “Shared,” or “Sharing” means transferring an individual’s personal information to a third party for cross-context behavioral advertising or targeted advertising purposes, whether or not for money or other valuable consideration. Sharing includes “targeted advertising,” as that term is defined by the U.S. Privacy Laws.
“Third Party” means any non-affiliated person that is not a vendor.
“Vendor” means a service provider, contractor, or processor which collects, stores, or otherwise handles data for us and is bound by contractual obligations to use your personal information only as directed by us.

You may be familiar with different terms that are used to describe materially similar concepts in this section by the U.S. Privacy Laws in your state of residence. You can treat them as the same for the purpose of our Supplemental Policy. For example, we intend the term “personal information” here to have the same definition as “personal data” used in specific U.S. Privacy Laws.

PERSONAL INFORMATION WE COLLECT

We, and our vendors, collect and have collected in the past 12 months the following categories of personal information about consumers:

Identifiers, such as name, alias, postal address, unique personal identifier, online identifiers, Internet Protocol address, email address, account name, signatures, physical characteristics or description, telephone number, or other similar identifiers.
Insurance Information, including insurance policy number or health insurance information.
Characteristics of Protected Classifications under state or federal law, such as age, gender, and marital status.
Biometric Information, such as imagery of the iris, retina, fingerprint, face, hand, palm, vein patterns, voice recordings, gait patterns, or rhythms, and sleep, health, or exercise data from which we can extract identifying information.
Internet or Other Network Information, such as browsing history, search history, information regarding your interactions with our websites or advertisements.
Geolocation Data, such as device location that is more granular than a city or town.
Audio, Electronic, Visual and Similar Information, such as call and video recordings.
Professional or Employment-Related Information, such as work history and prior employer.
Education Information, as defined in the federal Family Educational Rights and Privacy Act, such as student records and directory information.
Inferences drawn from any of the personal information listed above to create a profile or summary about, for example, an individual’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. This category includes sensitive data inferences, which are inferences made by us based on personal information, alone or in combination with other data, to indicate your sensitive personal information.
Sensitive Personal Information, including:
1. Personal information that reveals your:
  1. Social security, driver’s license, state identification card, or passport number;
  2. Account log-in, financial account number, debit card number, or credit card number in combination with any required security or access code, password, or credentials for allowing access to an account;
  3. Precise geolocation that is used or intended to be used to locate you within a small geographic area (less than a radius of 1,850 feet);
  4. Racial or ethnic origin, religious or philosophical beliefs, or union membership;
  5. Contents of your email and text messages, unless we are the intended recipient; or
  6. Genetic data.
2. Biometric data processed for the purpose of uniquely identifying you;
3. Personal Information collected and analyzed concerning your health; and
4. Personal Information collected and analyzed concerning your sex life or sexual orientation.

PURPOSES FOR PROCESSING AND DISCLOSING PERSONAL INFORMATION

We, and our vendors, collect, process, and disclose the categories of personal information described in this Supplemental Policy for the following purposes:

To process, track and fulfill your order.
To confirm, schedule or provide other services related to our services and products.
To administer a contest, promotion, survey, or other site feature, and to provide you with the relevant products or services (for instance to deliver a prize you may have won in a contest).
For our analytics and marketing purposes, including to send you information/materials about products, recommendations, offers, and news we think could interest you.
To provide, develop, improve, repair, and maintain our products and Services.
To operate and improve our Services, including to analyze use of our Services and learn about our visitors and how they use and navigate the Services, so we can operate and improve our products and Services to deliver the best user experience.
To communicate with you, including responding to your inquiries.
To comply with the law and to maintain the security of our Services.
As otherwise disclosed at the time of collection or use.
To otherwise accomplish our business purposes and objectives.

We may combine any personal information we collect about you with any other information we maintain for the above purposes.

We do not process personal information for purposes of profiling or to engage in automated decision making in furtherance of decisions that produce legal or similarly significant effects (which means a decision that results in the provision or denial of financial or lending services, housing, insurance, education enrollment or opportunity, criminal justice, employment opportunities, health-care services, or access to essential goods or services).

RETENTION OF PERSONAL INFORMATION

We retain personal information for the period reasonably necessary to provide goods and services to you and for the period reasonably necessary to support our business operational purposes listed in “Purposes for Processing and Disclosing Personal Information” section, above.

SALE, SHARING, AND TARGETED ADVERTISING

We do not Sell or Share, and we have not Sold or Shared in the past 12 months, the Personal Information we collect about you.

We also do not knowingly Sell or Share the Personal Information of consumers under the age of 16.

DISCLOSURE OF PERSONAL INFORMATION

We disclose the categories of personal information listed in the “Personal Information We Collect” section, above, in the following contexts:

To our Affiliates and Vendors. We disclose the personal information we collect to our affiliates and to our vendors who act on our behalf. For example, we use vendors to operate our Services; host our websites; and to help us with our promotional efforts. These vendors may need personal information about you to perform their obligations. We contractually require our vendors to keep the personal information they process on our behalf confidential and to use it only to provide services on our behalf.
As Described in a Privacy Notice or With Your Consent. We may disclose personal information as described in any privacy notice we provide to you via our Services, or with your consent if we obtain it from you in a particular context.
In Aggregate or De-Identified Form. We may aggregate or de-identify the personal information we collect, and we may disclose aggregated and/or de-identified information to our vendors, and to third parties for our business operational purposes and for any other purposes permitted by applicable law.

We may also disclose personal information in the following contexts:

As Part of a Business Transfer. We may disclose personal information to a successor organization if, for example, we transfer the ownership or operation of all or a portion of our Services to another organization, we merge with or are acquired by another organization, or if we liquidate our assets. If such a transfer occurs, we will seek assurances that the successor organization will treat the personal information we disclose to it in accordance with this Policy.
To Comply with Laws and Protect Our Rights and the Rights of Others. We may disclose personal information when we, in good faith, believe disclosure is appropriate to comply with the law, a court order, or a subpoena. We may also disclose personal information to prevent or investigate a possible crime, such as fraud or identity theft; to protect the security of our Services; to enforce or apply our other agreements; or to protect our own rights or property or the rights, property, or safety of our users or others.

To the extent required by law, we may obtain your consent prior to making any of the above disclosures.

SOURCES OF PERSONAL INFORMATION

We collect personal information directly from consumers in a variety of contexts, including: (1) via signups on our Services, such as through the creation of an account; (2) from an online, email, or telephone purchase or order; (3) when you complete a survey; (4) when you contact us, such as through customer service communications, including our online chat features; (5) when you participate in an event we host or attend; (6) when you register a Company product; (7) when you submit a business reply, product, or warranty card; or (8) when you interact with us for any other purpose.

We also collect personal information from other sources, including from vendors and third parties when they provide personal information to us, and from cookies and similar technologies used on our Services. If you provide delivery information or other personal information which is not your own to us, then you must have that person’s permission to give us their personal information and for us to use and disclose it as provided in this Supplemental Policy.

DATA SUBJECT RIGHTS

Residents who reside in states with U.S. Privacy Laws have the following rights regarding our collection and use of the personal information, subject to certain exceptions. Please read this section carefully as some rights vary by state.

Rights that Require Verification. You may exercise the data subject rights below by contacting us at support@all.health, by calling 1 888 897 5755, or by submitting our online request form and providing details regarding your request. You may also authorize an agent to make data subject requests on your behalf. In such instances, authorized agents may use the same methods as you to submit the requests on your behalf. To verify your identity and protect your personal information, we may ask the requestor to provide information that will enable us to verify your identity in order to comply with your data subject request, such as asking your agent to provide proof of signed permission from you, or asking you to confirm with us directly that you provided the agent with permission to submit the request. In some instances, we may decline to honor your request if an exception applies under applicable law. We will respond to your request consistent with applicable law.
- Right to Know: You have the right to know the following details about our privacy practices at or before the point of collection. We have provided such information in this Supplemental Policy. You may also request that we provide you with information about the following aspects of how we have handled your personal information specifically in the 12 months preceding your request:
  - The categories of personal information we have collected about you;
  - The categories of sources from which we collected such personal information;
  - The business or commercial purpose for collecting, selling, or sharing personal information about you;
  - The categories of personal information about you that we disclosed and the categories of third parties to whom we disclosed such personal information;
  - The categories of personal information about you that we sold, shared, or used for targeted advertising purposes, and the categories of third parties with whom we sold or shared such personal information;
  - The categories of sensitive personal information to be collected, the purposes for which it is collected or used, and whether that information is sold or shared; and
  - The length of time we intend to retain each category of personal information, or if that is not possible, the criteria used to determine that period.
- Right to Deletion: You may request that we delete any personal information about you we that we collected from or about you, depending on your state of residence.
- Right to Correction: You may request that we correct any inaccurate personal information we maintain about you. Please note this right does not apply to Iowa and Utah residents.
- Right to Access Specific Pieces of Personal Information and Data Portability: You may ask to obtain the specific pieces of personal information we have collected about you in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the personal information to another entity without hindrance. You may not exercise this right more than two times in a calendar year.
Rights that Do Not Require Verification.
- Right to Opt-Out of the Sale, Sharing of Your Personal Information, and Use of Your Personal Information for Targeted Advertising. You have the right to opt out of the sale, sharing, and use of your personal information for targeted advertising purposes. Currently, however, we do not sell, share, or use your personal information for targeted advertising purposes.
- Right to Revoke Consent for or Limit the Use of Your Sensitive Personal Information. If we have collected your consent for processing of your Sensitive Personal Information in conjunction with our Services, you may withdraw your consent at any time. If you have consented to our collection of your precise geolocation data via our mobile application, you can withdraw your consent for collection of precise geolocation data by updating your location sharing preferences via the settings on your device. If you have consented to collection of other types of Sensitive Personal Information in conjunction with our Services, you may withdraw your consent for such processing by contacting us via the methods listed above, under the header “Data Subject Rights.”
Opt-Out Preference Signals. We do not Sell or Share Personal Information, or use or disclose Sensitive Personal Information for purposes other than those authorized by the CCPA and its implementing regulations. Accordingly, we do not process opt-out preference signals. If we process opt-out preference signals in the future, we will update this policy to provide details about how we do so.
Non-Discrimination. We will not discriminate against you for exercising your data subject rights. For example, we will not deny goods or services to you, charge you different prices or rates, or provide a different level of quality for products or services as a result of you exercising your data subject rights.
Appeals. Residents of certain states have the right to appeal our decisions on their data subject requests. This section does not apply to California or Utah residents, or to residents who reside in other states where the applicable U.S. Privacy Law does not give them the right to appeal Controllers’ decisions regarding data subject rights. To appeal our decision on your data subject requests, you may contact us at support@all.health. Please enclose a copy of or otherwise specifically reference our decision on your data subject request, so that we may adequately address your appeal. We will respond to your appeal in accordance with applicable law.

OTHER DISCLOSURES

Residents Under Age 18. If you are under the age of 18 and a registered user of our website, you may ask us to remove content or data that you have posted to the website by writing to support@all.health. Please note that your request does not ensure complete or comprehensive removal of the content or data as, for example, some of your content or data may have been reposted by another user.
Disclosure for California Residents
- Direct Marketing. California Civil Code § 1798.83 permits California residents to annually request certain information regarding our disclosure of personal information to other entities for their direct marketing purposes in the preceding calendar year. We do not disclose to third parties for their own marketing purposes the categories of personal information listed in California’s “Shine the Light” law, such as names, addresses, email addresses, and telephone numbers.
- Financial Incentives for California Residents. We do not provide financial incentives to California residents who allow us to collect, retain, sell, or share their personal information. We will describe such programs to you if and when we offer them to you.
Disclosure for Nevada Residents. To the extent we collect personal information that identifies you through an online website or service among the categories of personal information listed in the “Personal Information We Collect” section above, we do not sell that personal information for monetary consideration.

UPDATES TO THIS POLICY

We may change this Supplemental Policy at any time in our discretion. If we decide to change our Supplemental Policy, we will post the changes on this page and update the “last updated” date, above. Please review this page periodically to see any updates to the information provided here.

CONTACT US

If you have any questions or concerns related to this Supplemental Policy, or if you have a disability and would like to access this Supplemental Policy in another format, please direct inquiries to:

By mail:
all.health, Inc.
Attn: Legal Department (re: Privacy Policy)
649 Front St, Suite 200
San Francisco, CA 94111
U.S.A.

By e-mail:
e: legal@all.health

By telephone:
t: 1.415.689.3018