Your health data, handled with care.
This policy explains what UnDun collects, how we use it, and the control you keep over it. It applies to the UnDun app, dashboard, and website.
LAST UPDATED · JULY 2026
1. Data we collect
With your explicit consent, UnDun reads health and activity data from wearables and services you choose to connect. This can include sleep, heart rate and heart rate variability, activity and steps, workouts, respiratory rate, and body temperature trends. We also store the account details you provide, such as your name and email.
2. Connected services
When you link a provider such as Fitbit, Whoop, Oura, Ultrahuman, or Eight Sleep, we access only the data categories you authorize, through that provider's official API. We request read access, never write access. We do not modify data on your device or in your provider account. You can revoke access at any time from the provider or from your UnDun settings, and new data collection stops immediately.
3. How we use your data
We use your data to calculate your Intrinsic Capacity baseline, track movement across the five capacity domains, detect meaningful change, and generate your reports and insights. Processing happens to deliver the service you asked for. We do not use your health data for advertising.
4. What we never do
We do not sell your personal or health data. We do not share it with advertisers or data brokers. We do not use data obtained from a connected provider for any purpose beyond providing UnDun to you, and we do not transfer it to third parties except as described below.
5. Sharing with your clinician
If you enroll through a clinic, you control whether your reports are shared with your care team. Clinics see only the patients who have consented, and you can withdraw that consent at any time.
6. Storage and security
Data is encrypted in transit and at rest. Access is limited to the systems and personnel needed to run the service. We retain your data only while your account is active or as required by law.
7. Your rights and deletion
You can request a copy of your data, correct it, disconnect any provider, or delete your account and all associated health data. When you delete your account, we remove data obtained from connected providers, subject to any legal retention requirements. To make a request, email the address below.
8. Contact
Questions about this policy or your data can be sent to privacy@undun.com. We respond within 30 days.