Privacy Policy Version 2026-08-19.d1 · NavixPulse, powered by Navix Health

Draft for review. This document is a plain-language draft pending legal counsel review; the version identifier above will change when the reviewed text is finalized.

The short version Your organization's data is your organization's. Biometric data flows into NavixPulse only after the person wearing the device consents on their own phone. Navix Health processes it solely to run the service, protects it as required by HIPAA, and never sells it. De-identified statistics leave an organization's workspace only if that organization has opted in.

What we collect - Account data: name, email, phone (when provided for invites), role, sign-in events. - Biometric data: daily wearable summaries (sleep, heart rate, heart-rate variability, steps, stress, breathing rate, temperature deviation, readiness) for people whose organization enrolled them and who completed the consent step. - Operational data: audit trails of actions taken in the platform, device-connection status, and technical logs needed to keep the service reliable. - Pilot inquiries: contact details submitted through the public request-access form.

How it's used To operate the platform for your organization: showing charts and insights to authorized staff, sending the notifications your organization configures, and keeping the audit trail your organization's administrators can review. Where NavixPulse handles protected health information, Navix Health acts as a business associate under the Business Associate Agreement.

Isolation and security Every organization's records are isolated at the database layer (row-level security), encrypted in transit and at rest by our infrastructure providers, and reachable only by that organization's authorized staff and the minimal service processes that operate the pipeline. Text messages sent by the platform contain links and counts — never names or health data.

De-identified contribution If — and only if — an organization accepts the Data Contribution Agreement, de-identified, aggregated statistics (such as detector performance rates) are used to improve the shared clinical algorithm. These statistics are prepared to the HIPAA de-identification standard and can't reasonably identify any person. Re-identification is prohibited.

Retention and deletion Normalized daily records are kept while an organization uses the service. Raw device payloads used for debugging are deleted after 90 days. When an organization leaves, it receives an export and its records are deleted. Individuals can ask their organization for a copy of their record or removal from monitoring at any time.

Contact Questions about this policy go to privacy@navixhealth.com.