Privacy Policy
Effective Date: 09/09/2026
Last Updated Date: 09/09/2026
Academy for Future Health LTD (“Company”, “we” or “us”) attaches great importance to the protection of personal information. This Privacy Policy describes how we collect, use, disclose and otherwise process (collectively, “process” or “processing”) your personal information when you use the OVAL HOME website available at [https://www.ovalhome.com/] (the “Website”), the OVAL HOME mobile application (the “App”), the Adapt Layer, the Adapt Hub, and other OVAL HOME products (the “Products”), or any subscription services or other services and features made available through the Website, the App or the Products (collectively, the “Services”). For purposes of this Privacy Policy, “you” refers to users of the Services.
For purposes of this Privacy Policy, Academy for Future Health LTD, a company incorporated in the United Kingdom, is the controller of your personal data. Our contact details are set out in Section IX.
Please read this Privacy Policy carefully. By using the Services, you acknowledge the information practices described in this Privacy Policy. You may download a printable copy of this Privacy Policy here.
This Policy will help you understand the following content:
-
Categories of Personal Information We Collect
-
Sources of Personal Information
-
How We Use Personal Information
-
Retention of Personal Information
-
How We Share and Disclose Personal Information
-
How We Protect Personal Information
-
Your Privacy Rights
-
Changes to this Policy
-
How to Contact Us
I. Categories of Personal Information We Collect
When we use the term “personal information,” we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified so that it cannot identify or be reasonably linked to you. For consistency and ease of reference, we describe the categories of personal information below using, where applicable, the categories recognized under the California Consumer Privacy Act (“CCPA”). Depending on how you interact with the Services, we may collect or process the following categories of personal information:
A. Identifiers
Name, email address, telephone number, user ID, account credentials, shipping/billing address, IP address, device ID, and cookie ID.
B. Customer Record Information
Name, address, telephone number, height, weight, and payment-related information (excluding full payment card numbers).
C. Characteristics of Protected Classifications
Date of birth (age) and gender.
D. Commercial Information
Purchase history, orders, returns and refunds, subscription records, transaction records, products viewed or considered for purchase, shopping cart information, and customer service communication records.
E. Internet or Other Electronic Network Activity
Website/app usage activity, page views, clicks, browser type, operating system, information collected through cookies, SDKs, and similar tracking technologies, advertising interactions, app activity records, and certain system logs.
F. Geolocation Data
Approximate location inferred from IP address and precise GPS location in certain Android scenarios.
G. Audio, Electronic, Visual, Thermal, Olfactory, or Similar Information
Raw sensor signals and device monitoring information, including temperature measurements, body movement data, piezoresistive/piezoelectric signals, humidity measurements, and similar raw device data.
H. Inferences
Sleep quality, sleep time, sleep stages, sleep efficiency, sleep score, sleep duration, time in bed, heart rate, respiratory rate, HRV, temperature preferences, behavioral characteristics, personalized tags, long-term user profiles, and other insights or inferences generated by AI or algorithms from user profile information, health data, device activity, AI interactions, and other information.
I. AI Interactions and Other Information You Choose to Provide
When you use our AI-enabled features, we may process information you choose to provide, including prompts, questions and other content you submit. Our AI-enabled features are intended for general wellness purposes only. Please do not submit government-issued identification numbers, medical records, personal information about other individuals, or other sensitive personal information that is not necessary for your use of these features. Depending on the content you choose to provide, such information may fall within one or more of the categories of personal information described in this Section.
J. Sensitive Personal Information
Certain information we collect may constitute “Sensitive Personal Information” under applicable law. Depending on how you use the Services, this may include precise geolocation information, account log-in information in combination with credentials allowing access to an account, and personal information collected and analyzed concerning your health, such as sleep quality, sleep time, sleep stages, sleep efficiency, sleep score, sleep duration, time in bed, heart rate, respiratory rate, HRV, and health-related AI-generated analyses or profiles.
II. Sources of Personal Information
We may collect personal information from the following sources in connection with the Services.
A. From You Directly
We collect personal information directly from you when you create or manage an account, make a purchase, manage a subscription, communicate with us, use our AI-enabled features, complete forms, or otherwise provide information to us through the Services.
B. From Our Products and Sensors.
We collect personal information automatically through our Products and connected sensors when you use the Products, including when they measure sleep, movement, physiological signals, temperature, humidity, or other sensor-based activity.
C. From Third-Party Health and Wellness Platforms
If you choose to connect a third-party health or wellness platform, such as Apple Health, we may receive personal information that you authorize the platform to make available to us in accordance with your permissions and settings.
D. From Product Analytics and Algorithm Service Providers
We may receive personal information from third-party product analytics and algorithm service providers when they analyze data collected through our Products or connected sensors and return physiological, sleep-related, wellness, or other analytical results to us.
E. Generated or Derived by Us
We may generate or derive additional information through our algorithms, analytics tools, and AI-enabled features based on information collected from you, through our Products, or from other permitted sources.
F. From Our App and Website
We collect personal information automatically when you visit our Website, use our App, or otherwise interact with our digital services, including through cookies, SDKs, pixels, logs, and similar technologies.
G. From Social Media Platforms.
We may receive personal information from social media platforms when you interact with our official accounts, engage with our posts or advertisements, communicate with us through a social media platform, or otherwise interact with us through social media.
III. How We Use Personal Information
We may collect and use personal information for the following purposes. If certain personal information is not provided, we may be unable to provide the relevant Products, Services, features, transactions, support, or other functions described below. For ease of reference, this Section refers to the categories of personal information described in Section I rather than repeating specific data elements. Please refer to Section I for the specific data elements included in each category.
A. To Provide Our Products and Related Services
We may process Identifiers, Customer Record Information, Characteristics of Protected Classifications, Commercial Information, Internet or Other Electronic Network Activity, Geolocation Data, Audio, Electronic, Visual, Thermal, Olfactory, or Similar Information, Inferences, AI Interactions and Other Information You Choose to Provide, and Sensitive Personal Information, as applicable, to provide our Products and related Services, including account management, device connectivity and control, sleep and wellness analysis, personalized recommendations, and device personalization.
B. To Process Purchases, Payments, and Subscriptions
We may process Identifiers, Customer Record Information, Commercial Information, and Internet or Other Electronic Network Activity to process orders, payments, deliveries, subscriptions, cancellations, returns, exchanges, refunds, and related transaction notifications.
C. To Provide Customer Service and After-Sales Support
We may process Identifiers, Customer Record Information, Characteristics of Protected Classifications, Commercial Information, Internet or Other Electronic Network Activity, Audio, Electronic, Visual, Thermal, Olfactory, or Similar Information, Inferences, AI Interactions and Other Information You Choose to Provide, and Sensitive Personal Information, as applicable, to respond to inquiries, feedback, complaints, device or service issues, after-sales requests, and other customer support matters.
-
To Maintain, Analyze, and Improve Our Products and Services
We may process Identifiers, Customer Record Information, Characteristics of Protected Classifications, Commercial Information, Internet or Other Electronic Network Activity, Audio, Electronic, Visual, Thermal, Olfactory, or Similar Information, Inferences, AI Interactions and Other Information You Choose to Provide, and Sensitive Personal Information, as applicable, to operate, maintain, analyze, test, evaluate, develop, and improve our Products, Services, algorithms, AI-enabled features, and personalization functions.
-
To Conduct Marketing and Advertising Activities
We may process Identifiers, Customer Record Information, Characteristics of Protected Classifications, Commercial Information, Internet or Other Electronic Network Activity, Geolocation Data (excluding precise geolocation information), and Inferences (excluding personal information collected and analyzed concerning your health), as applicable, to send marketing communications, measure marketing effectiveness, and, where applicable, conduct personalized or targeted advertising.
-
To Maintain Security, Comply with Legal Obligations, and Protect Rights and Interests
We may process Identifiers, Customer Record Information, Characteristics of Protected Classifications, Commercial Information, Internet or Other Electronic Network Activity, Geolocation Data, and other categories of personal information described in Section I where reasonably necessary, to maintain account and system security, prevent fraud, comply with legal, tax, accounting, and regulatory obligations, enforce agreements, resolve disputes, and protect the rights and interests of the Company, our users, and others.
-
Other Purposes
If we use personal information for purposes not specified in this Policy or for new purposes that are materially different from those stated at the time of collection, we will provide additional notice or obtain consent where required by applicable law.
IV. Retention of Personal Information
The Company will retain personal information only for a period reasonably necessary to fulfill the purposes described in this Policy, or as otherwise required or permitted by applicable laws and regulations.
For each category of personal information described in Section I, the Company determines the applicable retention period based on, as applicable, the nature and sensitivity of the information; the purposes for which it is processed; the duration of the user’s account or subscription; the period reasonably necessary to provide the Services, complete transactions, and provide customer support; the applicable legal and regulatory requirements; and the Company’s legitimate business needs, including security, fraud prevention, recordkeeping, audit, compliance, and dispute resolution.
When personal information is no longer reasonably necessary for the purposes described in this Policy, the Company will handle such information in accordance with applicable law and its data retention practices, unless continued retention is required or permitted by applicable law.
V. How We Share and Disclose Personal Information
We may share or disclose personal information with the following categories of recipients in connection with the purposes described in Section III. The categories of personal information disclosed may vary depending on the relevant Product, Service, feature, transaction, or recipient. For ease of reference, the categories of personal information referenced below correspond to the categories described in Section I. Please refer to Section I for the specific data elements included in each category.
The identification of a category below does not necessarily mean that every data element within that category is disclosed to the relevant recipient. The specific data elements disclosed depend on the services provided by the recipient and the applicable purpose.
The information practices described in this Privacy Policy reflect our current practices and, where applicable, our practices during the preceding 12 months.
We do not sell your personal information for monetary consideration. However, certain disclosures involving advertising or marketing technologies may constitute a “sale,” “sharing,” or processing for “targeted advertising” under applicable U.S. state privacy laws, even where no money is exchanged. During the preceding 12 months, we have shared Identifiers, Commercial Information, Internet or Other Electronic Network Activity, Geolocation Data (excluding precise geolocation information), and Inferences (excluding personal information collected and analyzed concerning your health) with analytics, advertising, cookie, and social media providers for the purposes of measuring marketing effectiveness and conducting personalized or targeted advertising. Where applicable, you may exercise your right to opt out of such activities as described in Section VII (Your Privacy Rights). We do not have actual knowledge that we sell or share the personal information of consumers under 16 years of age.
In addition, please see the Appendix for information about our disclosures of personal information to service providers and contractors for business purposes.
A. Our Affiliates
We may disclose personal information to our affiliated entities where necessary to operate our business, provide and support the Products and Services, administer accounts and transactions, provide technical or customer support, maintain and improve our systems and services, and perform other internal business functions. Depending on the relevant purpose, the personal information disclosed to our affiliates may include any of the categories of personal information described in Section I, as applicable.
B. Product Analytics and Algorithm Service Providers
We may disclose personal information to product analytics and algorithm service providers that support the analysis of data generated through our Products and connected sensors. For example, raw sensor data may be provided to such providers for analysis to generate physiological, sleep-related, or wellness information, such as heart rate, respiratory rate, or other related measurements. Personal information disclosed to or processed by these providers may include Audio, Electronic, Visual, Thermal, Olfactory, or Similar Information and Sensitive Personal Information, as applicable.
C. AI Model and Related Service Providers
We may disclose personal information to AI model providers, model hosting providers, and other AI-related service providers when we use their technologies to provide AI-enabled features, analyses, recommendations, or related functionality. Depending on how you use the relevant feature, the personal information disclosed to or processed by these providers may include Customer Record Information (limited to height and weight), Characteristics of Protected Classifications, Inferences, AI Interactions and Other Information You Choose to Provide, and Sensitive Personal Information, as applicable.
D. Cloud Hosting Service Providers
We may disclose personal information to, or permit access to personal information by, cloud hosting and other technology service providers that support the operation and availability of our Website, App, Products, and Services. Depending on the services they provide, these providers may process any of the categories of personal information described in Section I, as applicable.
E. E-Commerce Platforms and Payment Service Providers
We may disclose personal information to e-commerce platforms, payment processors, App-based payment or subscription providers, and other transaction service providers to process purchases, payments, subscriptions, refunds, chargebacks, fraud prevention, and related transactions. Depending on the relevant service, personal information disclosed to or processed by these providers may include Identifiers, Customer Record Information, Commercial Information, Internet or Other Electronic Network Activity, and Geolocation Data (excluding precise geolocation information), as applicable.
F. Logistics and Fulfillment Service Providers
We may disclose personal information to logistics, shipping, delivery, warehousing, and fulfillment service providers to process and deliver orders, manage returns or exchanges, and provide related fulfillment services. Personal information disclosed to these providers may include Identifiers, Customer Record Information, and Commercial Information, as applicable.
G. Analytics, Advertising, Cookie, and Social Media Providers
We disclose personal information to analytics providers, advertising platforms, social media platforms, and providers of cookies, pixels, SDKs, and similar technologies to understand how users interact with our Website, App, advertisements, and marketing activities, measure campaign effectiveness, and, where applicable, support personalized or targeted advertising. Personal information disclosed to or made available to these providers may include Identifiers, Commercial Information, Internet or Other Electronic Network Activity, Geolocation Data (excluding precise geolocation information), and Inferences (excluding personal information collected and analyzed concerning your health), as applicable.
Certain disclosures to advertising or social media providers may be considered a “sale” or “sharing” of personal information or processing for “targeted advertising” under applicable U.S. state privacy laws. Where applicable, you may opt out of these activities through our “Your Privacy Choices” link or other methods described in this Privacy Policy.
H. Email and Other Marketing Service Providers
We may disclose personal information to email, SMS, and other marketing and communications service providers to send communications, manage subscriptions, analyze engagement, personalize marketing activities, and measure marketing performance. Personal information disclosed to these providers may include Identifiers, Customer Record Information, Characteristics of Protected Classifications, Commercial Information, and Internet or Other Electronic Network Activity, as applicable.
I. Customer Support and Other Technical Service Providers
We may disclose personal information to customer support, technical support, troubleshooting, and related service providers to respond to inquiries, provide after-sales services, diagnose technical or device issues, and otherwise support users of our Products and Services. Depending on the nature of the request, personal information disclosed to these providers may include Identifiers, Customer Record Information, Commercial Information, Internet or Other Electronic Network Activity, and other information you choose to provide in connection with your support request, as applicable.
J. Legal and Regulatory Disclosure
We may disclose personal information to governmental authorities, courts, regulators or law enforcement agencies where required or permitted by applicable law, including in response to valid legal process, regulatory inquiries, or where necessary to protect the rights, property or safety of the Company, its personnel or others.
VI. How We Protect Personal Information
The Company takes reasonable and appropriate administrative, technical, and organizational measures designed to protect personal information processed in connection with the Services against unauthorized access, disclosure, alteration, loss, destruction, or misuse, taking into account the nature and sensitivity of the information and the risks associated with its processing.
However, no method of transmission over the Internet or method of electronic storage can be guaranteed to be completely secure. The Company periodically reviews its security measures in light of applicable legal requirements and relevant security risks.
VII. Your Privacy Rights
Under applicable data protection laws, you may have all, or part of, the following rights with respect to personal information we process in connection with the Services. The availability of these rights may vary depending on the laws applicable to you. You may exercise applicable privacy rights through the contact methods described in Section IX.
-
Right to Know and Access
You may have the right to request information about the personal information we collect, use and disclose about you, including the categories of personal information collected, the purposes for which it is used, and the categories of recipients to whom it has been disclosed.
You may also have the right to request access to or a copy of certain personal information we maintain about you, subject to applicable legal exceptions.
Where required by applicable law, we will provide the responsive information in a portable and, to the extent technically feasible, readily usable format.
-
Right to Correct
You may have the right to request correction of inaccurate personal information that we maintain about you.
-
Right to Delete
You may request deletion of your personal information in accordance with applicable law. Please note that we may decline or be unable to fulfill a deletion request where continued retention is required or permitted by applicable law, or where the data is needed for legal, tax, accounting, audit, record-keeping, internal control or dispute resolution purposes.
-
Right to Limit Use and Disclosure of Sensitive Personal Information
Where provided by applicable law, you may have the right to limit certain uses and disclosures of Sensitive Personal Information. However, we do not use or disclose Sensitive Personal Information for purposes that would give rise to a right to limit its use or disclosure under applicable law.
-
Right to Opt Out of Sale, Sharing or Targeted Advertising
Where provided by applicable law, you may have the right to opt out of the sale of personal information, the sharing of personal information for cross-context behavioral advertising, or the processing of personal information for targeted advertising purposes.
You may exercise your applicable opt-out rights through the “Your Privacy Choices” link available on the Website. Where required by applicable law, we also recognize and process applicable universal opt-out preference signals, such as Global Privacy Control (“GPC”). When we receive a legally recognized opt-out preference signal, we will apply it to the browser or device from which the signal is sent and, where we can associate that browser or device with a consumer account or profile, to the account or profile as required by applicable law. You can use an opt-out preference signal by enabling it through a supported browser, browser extension, or other technology that supports such signals.
-
Right to Non-Discrimination
We will not discriminate or retaliate against you for exercising any of the rights described in this Section.
-
Right to Appeal
Where provided by applicable law, if we decline your request, you may appeal our decision by contacting us as described in Section IX.
VIII. Changes to this Policy
We may update or modify this Policy from time to time to reflect changes in the Services, applicable laws and regulations, or our personal information processing practices.
Where required by applicable laws and regulations, we will notify you of material changes through appropriate means, such as system notifications, email notices or other reasonable methods.
Where a material change involves the purposes, methods or categories of personal information processing, or otherwise requires your consent under applicable laws and regulations, we will seek your consent as required by applicable laws.
IX. How to Contact Us
If you have any questions, concerns or requests regarding this Policy or our processing of your personal information in connection with the Services, you may contact us at:
Oval Home Privacy Team
Email: support@ovalhome.com
Online Privacy Request Form: Submit a Privacy Request
To exercise any of the rights described in Section VII, you may submit a request through the Online Privacy Request Form above or use any of the other contact methods listed above.
You may also designate an authorized agent to submit certain privacy requests on your behalf where permitted by applicable law. We may require the authorized agent to provide proof that you have authorized the agent to act on your behalf and, where permitted by applicable law, may ask you to verify your identity or directly confirm that you authorized the agent to submit the request.
We will respond to your request within the period required by applicable laws and regulations. Where permitted by applicable laws, we may need to verify your identity before processing your request. This may require you to provide information such as your name, user ID and device ID. We will generally verify your identity by matching the information you provide against information maintained in our records.
Appendix: Disclosures of Personal Information for Business Purposes
The table below identifies the categories of personal information we have disclosed to service providers and contractors for business purposes during the preceding 12 months.
The table reflects the relationship among the categories of personal information, the categories of service providers and contractors, and the applicable purposes; however, listing a category of personal information does not mean that every data element within that category is disclosed to every service provider or contractor within a listed recipient category, as the specific data elements disclosed depend on the services provided and the applicable purpose.
|
Categories of Personal Information
|
Categories of Recipients
|
Business Purposes
|
|
Identifiers
|
|
|
|
Customer Record Information
|
|
|
|
Characteristics of Protected Classifications
|
|
|
|
Commercial Information
|
|
|
|
Internet or Other Electronic Network Activity
|
|
|
|
Geolocation Data
|
|
|
|
Audio, Electronic, Visual, Thermal, Olfactory, or Similar Information
|
|
|
|
Inferences
|
|
|
|
AI Interactions and Other Information You Choose to Provide
|
|
|
|
Sensitive Personal Information
|
|
|