Zen HealthZen Health.
LEGAL & GOVERNANCE

Privacy Policy

This Privacy Policy explains how Zen Health collects, processes, and protects patient health data, biomarker and wearable signals, and personal information when you interact with our website and the Zen Longevity360 platform.

Last Updated: September 2026

01

Information We Collect & Ingest

We collect information submitted voluntarily through demo requests, contact forms, and partnership inquiries (including your name, work email address, organization type, and message details). For longevity clinics, diagnostics networks, hospitals, and executive health programs using Zen Longevity360, patient health data — including lab biomarker panels, wearable device signals, biological age inputs, and EMR/EHR records — is ingested strictly via authorized HL7 FHIR R4 API connectors, wearable integrations, or encrypted file uploads.
02

How We Use Information & Zero-AI-Training Guarantee

We use submitted contact information to respond to inquiries, coordinate partnerships, and share product updates. Within the platform, biomarker and wearable data is processed to generate biological age scores, risk stratification, and draft intervention suggestions for clinician review. Zero-AI-Training Guarantee: Protected Health Information (PHI) and biomarker data are processed exclusively in tenant-isolated environments. Patient data is never used to train third-party, commercial, or foundation AI models.
03

De-Identification & Access Controls

Health data ingested from connected wearables, labs, and EMR/EHR systems is de-identified before any AI-assisted analysis. Direct patient identifiers are encrypted and isolated from the biomarker data used in scoring. Unmasked identity access is restricted to the patient's credentialed care team under strict role-based access controls (RBAC).
04

Audit Trail Integrity & Data Retention

Every clinician review, override, or care-plan confirmation creates an immutable, tamper-evident audit record. Health records are retained in accordance with applicable regional recordkeeping requirements and are exported to the patient or partner clinic on request.
05

Data Security & Compliance Standards

Zen Health enforces rigorous physical, technical, and administrative security controls. All data at rest is encrypted using AES-256, and data in transit is protected using TLS 1.3 encryption. Platform data handling is designed to align with HIPAA (United States) Business Associate Agreements, GDPR (European Economic Area) Data Processing Agreements, and India's Digital Personal Data Protection Act, 2023.
06

Cookies & Website Analytics

Our marketing website uses essential cookies solely to support basic navigation and secure form processing. We do not sell user data, nor do we employ cross-site tracking cookies or third-party behavioral profiling.
07

Contact Information

For questions regarding this Privacy Policy, data privacy rights, or compliance documentation, please contact our team.

Have questions about our data security architecture?

Schedule a technical deep-dive with our compliance and engineering team.