Anriwell Privacy Policy
Last Updated: [April 22, 2026]
Your Privacy Matters to Us
Thank you for choosing Anriwell. We are committed to protecting your privacy and ensuring the highest level of transparency and security in how we handle your personal information.
Anriwell is a health and wellness platform that combines smart devices and mobile app services to help users better monitor and manage personal wellbeing.
This Privacy Policy describes how Anriwell (“we,” “us,” or “our”) collects, uses, stores, shares, and protects your Personal Data when you use our website, mobile application (the “App”), and connected devices and services (collectively, the “Services”).
We seek to comply with applicable data protection laws including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other relevant international standards.
If you have questions, please contact us at:
privacy@anriwell.com
SUMMARY
• I. Key Definitions and Concepts
• II. Sources of Data We Collect
• III. Consent and Legal Basis
• IV. Use and Processing of Personal Data
• V. Data Retention
• VI. Data Transfers and Security
• VII. Your Rights and How to Exercise Them
• VIII. HomeCircle Feature and Family Access
• IX. Third-Party Services and SDK Disclosures
• X. AI Wellness Report Data Processing
• XI. Contact Us
I. KEY DEFINITIONS AND CONCEPTS
Personal Datarefers to any information relating to an identified or identifiable natural person.
Health Datais a special category of Personal Data that includes information related to physical or mental health — such as heart rate, sleep patterns, blood pressure, and other wellness indicators collected through Anriwell devices or input by the user.
Anonymized Datameans information irreversibly de-identified so it can no longer be associated with a specific individual.
Pseudonymized Datameans data where identifying information has been replaced with a pseudonym, allowing re-identification only with additional separately maintained information.
Data Controllerrefers to the entity that determines the purposes and means of processing Personal Data.
Legal Basis refers to lawful grounds for processing Personal Data under applicable laws (such as consent, contractual necessity, legal obligation, or legitimate interest).
II. SOURCES OF PERSONAL DATA WE COLLECT
2.1 When You Use Our Mobile App
We may collect
• Name
• Email address
• Optional phone number
• Gender
• Birth date
• Password/login credentials
You may also enter health and wellness information manually or automatically through connected devices.
2.2 When You Use Anriwell Devices
When paired with the App, devices such as the Sleep Monitor or Blood Pressure Monitor may generate Health Data, including:
• Heart rate
• Sleep duration
• Blood oxygen levels
• Blood pressure
• Glucose readings
• Body temperature
This data is securely stored and visualized within the App.
2.3 HomeCircle
If you participate in HomeCircle, we may process permissions and sharing-related data among invited family members or caregivers.
2.4 Customer Support
Support interactions may involve collection of contact details, device usage information, and support inquiry content.
2.5 Device and App Analytics
We may automatically collect:
• IP address
• Device identifiers
• Operating system version
• Language preferences
• Crash logs
• Usage patterns
2.6 Third-Party SDKs
Certain third-party services integrated into the App may collect limited technical identifiers as described in Section IX.
III. CONSENT AND LEGAL BASIS
3.1 Consent Collection
We process Personal Data based on:
• Explicit consent
• Contractual necessity
• Compliance with legal obligations
• Legitimate interests where not overridden by your rights
Consent may be obtained when:
• Creating an account
• Enabling HomeCircle sharing
• Participating in research or surveys
• Accepting location or notification features
• Enabling security features
• Generating AI Wellness Reports using optional automated analysis features
You may withdraw consent at any time.
3.2 Consequences of Withholding Consent
Withholding certain data or consent may limit some features.
IV. USE AND PROCESSING OF PERSONAL DATA
A. Provision of Core Services
| Purpose | Data Categories | Legal Basis | Retention |
| Account creation |
Name, email, password, birth date, gender |
Contractual necessity |
Until account deletion |
| Health data tracking and display |
Heart rate, BP, sleep, oxygen, glucose |
Contractual necessity |
Until account deletion |
| Data visualization and reporting |
Wellness trends, PDF reports |
Contractual necessity |
Until account is deleted |
| HomeCircle sharing |
Permissions, access history |
Consent |
Until revoked or deleted |
B. Optional Features
| Purpose | Data Categories | Legal Basis | Retention |
| Location services |
GPS, IP address |
Consent |
Until disabled |
| Marketing communications |
Email, user behavior |
Consent / legitimate interest |
Until unsubscribed |
| Product research |
Survey responses |
Consent |
Until opt-out |
| AI Wellness Reports and trend analysis |
Selected pseudonymized wellness data, reporting ranges |
Consent (where applicable) and contractual necessity |
Until account deletion or anonymization |
C. Support and Compliance
| Purpose | Data Categories | Legal Basis | Retention |
| Customer support |
Account info, logs |
Contractual necessity |
Up to 10 years |
| Fraud prevention |
IP/session data |
Legitimate interest |
1 year |
| Legal compliance |
Transaction records |
Legal obligation |
Up to 10 years |
D. Pseudonymized and Anonymized Processing
We may use pseudonymized or anonymized data for:
• System optimization
• Internal analytics
• Model improvement using anonymized data only, where permitted
• Public interest wellness statistics
Anonymized data may be retained indefinitely.
V. DATA RETENTION
| Data Type | Retention |
| Account data |
Until account deletion |
| Health/device data |
Until deleted or account closed |
| Support logs |
Up to 10 years |
| Compliance records |
As legally required |
| Backup copies |
Temporary service continuity |
Inactive accounts may be deleted after prolonged inactivity with notice.
VI. HOSTING, TRANSFER, AND SECURITY
6.1 Data Hosting
Data may be hosted in the United States or other jurisdictions with appropriate safeguards.
6.2 International Transfers
Transfers may rely on:
• Standard Contractual Clauses
• Binding Corporate Rules
• Adequacy decisions
6.3 Security Measures
Safeguards include:
• Encryption in transit and at rest
• Role-based access controls
• Security assessments
• Employee privacy training
• Breach response protocols
Where health data is processed for AI Wellness Reports, reasonable technical and organizational safeguards are applied during transmission and processing.
VII. YOUR PRIVACY RIGHTS
You may have rights to:
• Access
• Correction
• Deletion
• Restriction
• Portability
• Objection
• Withdraw Consent
California residents may also exercise CCPA rights.
Requests:
privacy@anriwell.com
VIII. HOMECIRCLE: FAMILY AND CAREGIVER ACCESS
Users may share selected health data with invited participants.
Access permissions may be customized and revoked at any time.
Anriwell relies on user authorization for invited relationships.
IX. THIRD-PARTY SERVICES AND SDK DISCLOSURES
| SDK | Purpose | Data Collected | Provider |
| Google Maps SDK |
Location services |
IP, location, device info |
Google |
| Crashlytics/Bugly |
Diagnostics |
Device ID, logs |
Google/Tencent |
| Analytics SDKs |
Usage analytics |
App behavior |
Various |
| Cloud Messaging |
Push notifications |
Device token |
Firebase/Apple |
No third-party SDK may access Health Data unless specifically disclosed and consented to.
Additional Disclosure Regarding AI Services
No third-party AI service provider may process Health Data unless specifically disclosed in this Policy and subject to user consent where applicable.
X. AI WELLNESS REPORT DATA PROCESSING
10.1 Purpose
If you elect to use the AI Wellness Report feature, selected wellness-related information may be processed solely to generate automated wellness summaries and lifestyle reference content requested by you.
This feature is informational only and does not provide diagnosis, treatment recommendations, or clinical decision support.
10.2 Data Used
Depending on user selection:
• Blood pressure data
• Blood glucose data
• Blood oxygen data
• Body temperature data
• Sleep data
• Measurement timestamps
• User-selected reporting ranges
10.3 Data Not Intended for AI Report Generation
Personal identifiers are not intended to be transmitted for AI report generation, including:
• Name
• Email
• Phone number
• Address
• Emergency contacts
• Government-issued identifiers
Where feasible, data may be de-identified or pseudonymized.
10.4 Third-Party AI Service Providers
Authorized third-party AI providers may be used solely for requested report generation.
Such providers are expected to process data only for that purpose and not unrelated uses.
User consent will be obtained where required.
10.5 User Choice
Use of AI Wellness Reports is optional.
Declining this feature does not affect core app functionality.
10.6 Limitations
AI-generated outputs may omit relevant context and should not be relied upon for medical decisions.
Users should consult healthcare professionals regarding health concerns.
XI. CONTACT INFORMATION
Anriwell Legal & Privacy Team
Email: privacy@anriwell.com
Address: 2062 Business Center Dr Ste 125
Irvine, CA 92612 USA
We aim to respond within 30 calendar days.
Questions regarding AI Wellness Report data processing may also be directed to privacy@anriwell.com.