Healthi Privacy Policy

1. Introduction

Healthi ("we", "our", "us") is a service operated by The Smarter Solution Edge Sdn Bhd (Malaysia) under the brand healthi.my. We are committed to protecting the privacy and confidentiality of personal data collected through this website and the associated voice/face health assessment.

This Privacy Policy describes what data we collect, how we use it, how we protect it, and your rights. By using healthi.my and submitting an assessment, you consent to the collection and use of your personal data as described in this policy.

2. Data We Collect

When you complete a Healthi voice and face assessment via this website, we collect the following categories of personal data:

• Personal identifiers: full name, email address, phone number, date of birth, gender
• Health declarations: medication status, pain location and level (if you choose to provide them)
• Voice biometric data: a WAV recording of your voice reading a short script, used for vocal biomarker analysis
• Facial biometric measurements (rPPG): derived vital-sign estimates (heart rate, blood pressure, SpO₂, respiration rate, stress level) computed in your browser from a short video; the raw video is not transmitted or stored
• Device and session metadata: browser, operating system, device type, audio sample rate, language, referral code, IP address, and timestamps

Voice recordings and facial measurements are used exclusively for health-assessment analysis and are not used for identity verification, advertising, or profiling.

3. How We Use Your Data

Your personal data is used for the following purposes:

• To perform the requested vocal biomarker analysis and produce your personal health report
• To deliver your report to the email address you provided
• To maintain a record of your assessments where you have requested longitudinal tracking
• To produce aggregate, anonymised statistics for service quality and research
• To comply with applicable legal and regulatory obligations

We do not use your personal data for behavioural advertising, commercial profiling, or sale to third parties.

4. Data Storage & Security

Voice recordings and your assessment profile are uploaded over TLS (HTTPS) to a server operated by us in Tokyo, Japan (AWS Lightsail, ap-northeast-1 region). The data is stored on encrypted block storage with access restricted to authorised personnel.

For redundancy, backups are replicated to a secured cloud-storage location managed by us. Backup access is restricted to authorised personnel and protected by account-level multi-factor authentication.

We implement industry-standard technical and organisational measures including HTTPS/TLS in transit, access controls, request rate-limiting, and a Content Security Policy. However, no method of internet transmission or storage is 100% secure, and we cannot guarantee absolute security.

5. Voice Data

Voice recordings made via the assessment flow are encoded as WAV files in your browser and transmitted to our server for processing. Voice recordings are:

• Tagged with a structured filename containing your assessment session metadata
• Used solely for vocal biomarker analysis — not for speaker identification beyond the originating session
• Processed by Voice For Health AI technology under a data-processing arrangement
• Not shared with third parties other than the analysis partner identified above
• Subject to deletion upon written request (see Section 7)

The vocal biomarker analysis is performed by Voice For Health AI. For details of their independent data-handling practices, see voiceforhealth.ai.

6. Cookies, Tracking & Analytics

healthi.my does not set tracking or advertising cookies. The site does not embed third-party analytics (Google Analytics, Meta Pixel, etc.). Standard server access logs may record your IP address, user-agent, and request path for security and abuse prevention; these logs are retained for no longer than 90 days.

The site is fronted by Cloudflare for content delivery and security; Cloudflare may set its own minimal security cookies (e.g. __cf_bm) for bot detection. See Cloudflare's privacy policy for details.

7. Data Sharing

We do not sell, rent, or trade your personal data. We may share data with the following parties only:

• Voice For Health AI — for vocal biomarker analysis, under contractual data-protection obligations
• Authorised Healthi practitioners assigned to deliver your report (where applicable)
• Cloud-infrastructure providers (AWS, Cloudflare, Google) acting as data processors on our behalf, bound by their respective Data Processing Agreements
• Regulatory or law-enforcement authorities where required by law

8. Your Rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your personal data (the "right to be forgotten")
• Object to processing of your data for specific purposes
• Request restriction of processing
• Data portability (where technically feasible)
• Withdraw consent for further processing at any time

To exercise any of these rights, email us at the address in Section 12 with subject line "Data Subject Request". We will respond within 30 days as required by the Malaysian Personal Data Protection Act 2010 (PDPA).

9. Retention

Personal data is retained for as long as necessary to fulfil the purposes described in this policy or as required by applicable law. By default:

• Voice recordings and assessment profiles are retained on our primary server for 30 days, then automatically removed
• Backups in cloud storage are retained for up to 12 months unless you request earlier deletion
• Aggregate, anonymised analytics may be retained indefinitely (no individual identification possible)

10. Children

healthi.my is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Significant changes will be notified via the website and, where appropriate, by email. Continued use of healthi.my after changes constitutes your acceptance of the revised policy.

12. Governing Law & Contact

This Privacy Policy is governed by and construed in accordance with the laws of Malaysia, including the Personal Data Protection Act 2010 (PDPA). Users in other jurisdictions may also be subject to local data-protection laws including the GDPR (European Union), PDPA (Singapore), and PDPA (Thailand).

For privacy-related enquiries, data-subject requests, or to report a concern, contact:

The Smarter Solution Edge Sdn Bhd
(operating Healthi)
Email: [email protected]
Web: https://healthi.my