🍪 Cookie Policy

1. Introduction

This Cookie Policy explains how My Health Gheware ("we", "us", or "our") uses cookies and similar technologies to recognize you when you visit our website at https://health.gheware.com. It explains what these technologies are, why we use them, and your rights to control our use of them.

This policy is designed to comply with:

• GDPR (General Data Protection Regulation) - EU regulation on data protection and privacy
• India IT Act 2000 - Rule 5 of Information Technology (Reasonable Security Practices and Procedures) Rules, 2011
• Digital Personal Data Protection Act 2023 - India's data protection legislation

2. What Are Cookies?

Cookies are small text files that are stored on your device (computer, tablet, or mobile) when you visit a website. They help websites remember information about your visit, such as your preferences and login status, making your next visit easier and the site more useful to you.

In addition to cookies, we also use localStorage, a browser storage mechanism that allows us to store data locally on your device for authentication and preference management.

3. Types of Cookies We Use

We categorize cookies into two main types based on their purpose and whether they require your consent:

3.1 Strictly Necessary Cookies

These cookies are essential for the website to function and cannot be switched off. They are usually only set in response to actions made by you, such as logging in or setting your privacy preferences.

3.2 Analytics Cookies

These cookies help us understand how visitors interact with our website by collecting and reporting information anonymously. We use this data to improve our service and user experience.

4. What We Track with Analytics

When you consent to analytics cookies, we collect the following anonymized information:

• Page Views: Which pages you visit and how long you spend on them
• Feature Usage: Which features you use (e.g., Strava sync, CGM uploads, sleep tracking)
• User Journey: How you navigate through our website
• Technical Information: Browser type, device type, screen resolution (anonymized)
• IP Address: Anonymized for privacy protection
• Campaign Attribution: UTM parameters for marketing campaign effectiveness

We DO NOT track:

• Personal health data (CGM readings, sleep data, activity data)
• Personally identifiable information (name, email, phone number)
• Financial information (payment details)

All analytics data is processed by Google Analytics 4 (GA4) with IP anonymization enabled. For more information about how Google processes data, see Google's Privacy Policy.

5. How to Manage Cookies

You have the right to decide whether to accept or reject cookies. You can exercise your cookie preferences in the following ways:

5.1 Using Our Cookie Consent Tool

When you first visit our website, you will see a cookie consent banner. You can:

• Accept All: Allow all cookies including analytics
• Reject Optional: Only allow strictly necessary cookies
• Customize: Choose which cookie categories to allow

You can change your preferences at any time by clicking the button below:

5.2 Using Your Browser Settings

Most web browsers allow you to control cookies through their settings. Here's how to manage cookies in popular browsers:

• Chrome: Settings → Privacy and security → Cookies and other site data
• Firefox: Settings → Privacy & Security → Cookies and Site Data
• Safari: Preferences → Privacy → Manage Website Data
• Edge: Settings → Cookies and site permissions → Cookies and site data

Note: If you block strictly necessary cookies, you will not be able to log in or use key features of our website.

6. Third-Party Services

We use the following third-party services that may set cookies:

6.1 Google Analytics

• Provider: Google LLC
• Purpose: Website analytics and usage tracking
• Data Collected: Anonymized IP address, browser type, device info, page views
• Privacy Policy: https://policies.google.com/privacy
• Opt-Out: Google Analytics Opt-out Browser Add-on

6.2 Google OAuth

• Provider: Google LLC
• Purpose: Authentication and login
• Data Collected: Email address, profile information (with your consent)
• Privacy Policy: https://policies.google.com/privacy

6.3 Strava API (Optional)

• Provider: Strava, Inc.
• Purpose: Activity data integration (only if you connect Strava)
• Data Collected: Activity data (runs, rides, workouts)
• Privacy Policy: https://www.strava.com/legal/privacy

7. Data Retention

We retain cookie data for the following periods:

• Authentication Tokens: 30 days (auto-renewed on activity)
• Session Cookies: Until you close your browser
• Cookie Consent: 365 days (or until you change your preferences)
• Google Analytics: Up to 26 months (Google's retention policy)

8. Your Rights

Under GDPR and India's data protection laws, you have the following rights:

• Right to Access: Request a copy of the data we hold about you
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data (right to be forgotten)
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw cookie consent at any time

To exercise any of these rights, please contact us using the information below.

9. Changes to This Policy

We may update this Cookie Policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. We will notify you of any material changes by:

• Updating the "Last Updated" date at the top of this policy
• Displaying a prominent notice on our website
• Sending you an email notification (if you have an account)

We encourage you to review this Cookie Policy periodically to stay informed about how we use cookies.

10. Contact Us

Your privacy matters to us. You can change your cookie preferences at any time.