Privacy Policy of Endo45 Limited | NZBN. 9429050344680 | Registered New Zealand business | Effective Date: March 2026
Endo45 Limited (“Endo45”, “we”, “our”, or “us”) operates a digital health mobile application designed to support individuals managing endometriosis.
We are committed to protecting your personal information and handling sensitive health-related data responsibly and transparently.
This Privacy Policy explains:
This policy is designed to comply with:
If you do not agree with this policy, please do not use our app or website.
We collect personal data necessary to provide and improve our services.
Health-related data is processed only with your explicit consent.
Payment card details are processed exclusively by Apple or Google and are not stored by Endo45.
Analytics data collected via Mixpanel includes usage events such as feature interactions, session activity, and app engagement metrics.
No symptom logs, health entries, or free-text health content are transmitted to analytics providers.
We use personal data to:
We do not sell your personal data.
We rely on:
Contractual Necessity (Art. 6(1)(b))
To provide the services you request.
Consent (Art. 6(1)(a))
For marketing communications and optional features.
Legitimate Interests (Art. 6(1)(f))
To maintain platform security, prevent fraud, analyse usage patterns to improve functionality, and ensure service reliability, where such interests do not override your rights.
Legal Obligation (Art. 6(1)(c))
Where required by law.
Health-related data is processed under:
Explicit Consent (Art. 9(2)(a))
You provide explicit consent when creating an account and entering health-related information.
You may withdraw consent at any time by deleting your account.
We retain personal data only as long as necessary for its intended purpose.
Health-related data:
Subscription data:
Marketing data:
Backup data:
We do not sell your data.
We use trusted service providers to operate the app. These include:
These providers process data under contractual safeguards and applicable data processing agreements.
Your data may be processed in countries outside your home jurisdiction, including:
Where data is transferred internationally, we rely on:
We implement technical and organisational measures to protect your data during such transfers.
We implement appropriate technical and organisational safeguards, including:
If a personal data breach occurs, we will notify affected individuals and relevant authorities where required by law.
Under GDPR, you have the right to:
Requests can be made via:
We respond within one month where required by law.
The app is intended for users aged 16 and over in the EU, UK, and Switzerland.
Users under 18 in other jurisdictions must obtain parental consent.
We do not knowingly collect data from children under these age thresholds.
If you believe your data protection rights have been infringed, you may contact:
We encourage you to contact us first at support@endo45.co.nz.
We may update this Privacy Policy from time to time.
Material changes will be communicated via the app or website.
Continued use of the app after updates constitutes acceptance of the revised policy.
This Privacy Policy is effective as of 2nd March 2026.
If you have any question regarding the privacy policy, please contact us through the contact page.