Olevity Limited · Hong Kong
Effective 31 July 2026
Olevity is a breathing-training app made by Olevity Limited, a company incorporated in Hong Kong (Business Registration No. 80366672; registered office: Unit 2904-05, 29/F, Universal Trade Centre, 3 Arbuthnot Road, Central, Hong Kong) (“Olevity”, “we”, “us”). This policy covers the Olevity mobile app, the olevity.co website, and support correspondence with us. It explains what information we handle, why, and the choices you have. If anything here is unclear, write to us at [email protected] — a person reads it.
Like almost any online service, our backend and service providers process a limited amount of technical information when the app talks to our servers: IP addresses, request timestamps, device model, operating system and app version, authentication and security events, and service and error logs. We use this information to keep accounts secure, diagnose faults, and operate the service — not to profile you or for advertising. The olevity.co website similarly generates standard web-server request logs.
With your permission, the app reads heart rate, heart-rate variability, beat-to-beat heart data, sleep, respiratory rate, blood oxygen, VO₂ Max, resting heart rate, heart-rate recovery, mindfulness sessions, workouts, and date of birth (used to personalise heart-rate calculations), and writes mindfulness sessions after in-app practice.
Apple Health data is used on your device to show your trends and readiness. Readings imported from Apple Health are not uploaded to our servers. You can change or revoke Health access at any time in iOS Settings. Information the app writes to Apple Health remains under your control in Apple Health.
Where the EU or UK GDPR applies to you, our legal bases are as follows:
Screening answers, physiological readings (heart rate, HRV, breathing, sleep), and any health notes you add are health-related data. We ask for your explicit consent to process this data, separately from your acceptance of the Terms, before the relevant features are used. You can withdraw that consent at any time in the app or by emailing us — withdrawing is as easy as consenting. If you withdraw, the features that depend on that data (screening-based routing, readings, connected integrations) will stop working, but the rest of the app remains available where possible.
We do not sell or rent your data, and we do not share your health information for advertising or marketing. We share personal data only:
No third-party analytics. No advertising or tracking SDKs. No selling or renting data. We do not sell health information or use it for advertising, third-party marketing, or purposes unrelated to providing and securing the Olevity service, except where disclosure or processing is required by law.
We keep your account data, course history, check-ins, and readings while your account is active, so your history and baselines keep working. Accounts that remain inactive for 24 months may be deleted after we notify you at least 30 days beforehand. When your account is deleted, production data is removed as soon as reasonably practicable and within 30 days, except where a shorter rule applies (Oura data — see above) or a longer period is required, as follows: security and API logs are normally retained for up to 90 days; encrypted backups expire and are overwritten within 35 days; records we must keep for tax, accounting, or legal purposes are retained for the applicable statutory period; and minimal records of privacy requests and health-data consent may be retained for six years after account closure to demonstrate compliance and handle legal claims. We may retain data that has been irreversibly anonymised, because it can no longer identify you.
You can delete your account and synced data in three ways:
Deleting your account removes your synced data from our systems, including at our processors, within 30 days (Oura data sooner, as described above). Deleting your account does not cancel an App Store or Google Play subscription — cancel that separately in your store account settings.
Deleting the app removes information stored in the app’s ordinary local storage, subject to the behaviour of your device and backups. Information written to Apple Health remains under your control in Apple Health and may need to be deleted there separately.
Under Hong Kong’s Personal Data (Privacy) Ordinance you have the right to request access to, and correction of, your personal data. Depending on where you live, you may also have rights to delete or export your data, to object to or restrict processing, and to withdraw consent at any time. The app can also export your readings (CSV) directly from your device.
To exercise any right, email [email protected]. We may ask you to verify your identity (normally by responding from your account email address) before acting on a request. For a valid data access or correction request under Hong Kong’s Personal Data (Privacy) Ordinance, we will respond within the applicable statutory period, normally 40 days. Where the EU or UK GDPR applies, we will normally respond within one month, subject to any permitted extension. Other requests will be handled within the period required by applicable law.
If you are unhappy with how we handle your data, you can complain to the Hong Kong Privacy Commissioner for Personal Data (pcpd.org.hk). Where the UK or EU GDPR applies to you, you can also complain to the UK Information Commissioner’s Office or your local EU supervisory authority.
Olevity is for adults. It is not directed at anyone under 18, and we do not knowingly collect their data.
Olevity Limited is based in Hong Kong, while our primary backend is hosted in the United States. When you create an account or enable cloud-based features, your account information, course progress, check-ins, health-safety answers, and synced readings may therefore be transferred to and stored in the United States.
Some of our other service providers may also process personal data in the United States or other countries. We use contractual and organisational safeguards intended to protect personal data wherever it is processed. Where the EU GDPR or UK GDPR applies, these safeguards include the European Commission’s Standard Contractual Clauses and the applicable UK international-data-transfer provisions. You may contact us for further information about these safeguards.
We’ll post any changes on this page and update the effective date. Meaningful changes will be flagged in the app before they take effect.
[email protected] — Olevity Limited, Unit 2904-05, 29/F, Universal Trade Centre, 3 Arbuthnot Road, Central, Hong Kong