GDPR Privacy Notice (EU/EEA)

Legal Bases

• Contract: provide the service you signed up for
• Consent: special‑category health data (explicit)
• Legitimate interests: security, fraud prevention
• Legal obligation: comply with the law

Special Category Data

Health data (e.g., glucose) requires explicit consent. You can withdraw consent anytime.

Your Rights

• Access, Rectification, Erasure, Restriction, Portability, Object

Use our Data Rights page to submit a request.

Retention

We retain data while your account is active and follow deletion/backup purge policies as documented in our Privacy Policy.

International Transfers

Data may be processed in the U.S. with protections (encryption, access controls, SCCs as appropriate).

Contact

privacy@performanceos.com — responses within 30 days.