Privacy Policy

Privacy Policy of Endo45 Limited | NZBN. 9429050344680 | Registered New Zealand business | Effective Date: March 2026

1. Introduction

Endo45 Limited (“Endo45”, “we”, “our”, or “us”) operates a digital health mobile application designed to support individuals managing endometriosis.

We are committed to protecting your personal information and handling sensitive health-related data responsibly and transparently.

This Privacy Policy explains:

This policy is designed to comply with:

If you do not agree with this policy, please do not use our app or website.

2. Personal Data We Collect

We collect personal data necessary to provide and improve our services.

2.1 Identity & Contact Data

2.2 Health-Related Data (Special Category Data)

Health-related data is processed only with your explicit consent.

2.3 Subscription Data

Payment card details are processed exclusively by Apple or Google and are not stored by Endo45.

2.4 Technical & Usage Data

Analytics data collected via Mixpanel includes usage events such as feature interactions, session activity, and app engagement metrics.

No symptom logs, health entries, or free-text health content are transmitted to analytics providers.

We Do Not Collect:

3. How We Use Your Data

We use personal data to:

We do not sell your personal data.

4. Legal Basis for Processing (GDPR)

Article 6 – Personal Data

We rely on:

Contractual Necessity (Art. 6(1)(b))
To provide the services you request.

Consent (Art. 6(1)(a))
For marketing communications and optional features.

Legitimate Interests (Art. 6(1)(f))
To maintain platform security, prevent fraud, analyse usage patterns to improve functionality, and ensure service reliability, where such interests do not override your rights.

Legal Obligation (Art. 6(1)(c))
Where required by law.

Article 9 – Special Category Data

Health-related data is processed under:

Explicit Consent (Art. 9(2)(a))

You provide explicit consent when creating an account and entering health-related information.

You may withdraw consent at any time by deleting your account.

5. Data Retention

We retain personal data only as long as necessary for its intended purpose.

Health-related data:

Subscription data:

Marketing data:

Backup data:

6. Data Sharing & Third-Party Processors

We do not sell your data.

We use trusted service providers to operate the app. These include:

These providers process data under contractual safeguards and applicable data processing agreements.

7. International Data Transfers

Your data may be processed in countries outside your home jurisdiction, including:

Where data is transferred internationally, we rely on:

We implement technical and organisational measures to protect your data during such transfers.

8. Security Measures

We implement appropriate technical and organisational safeguards, including:

If a personal data breach occurs, we will notify affected individuals and relevant authorities where required by law.

9. Your Rights

Under GDPR, you have the right to:

Requests can be made via:

📧 support@endo45.co.nz

We respond within one month where required by law.

10. Children’s Privacy

The app is intended for users aged 16 and over in the EU, UK, and Switzerland.

Users under 18 in other jurisdictions must obtain parental consent.

We do not knowingly collect data from children under these age thresholds.

11. Complaints

If you believe your data protection rights have been infringed, you may contact:

We encourage you to contact us first at support@endo45.co.nz.

12. Changes to This Policy

We may update this Privacy Policy from time to time.

Material changes will be communicated via the app or website.

Continued use of the app after updates constitutes acceptance of the revised policy.

PRIVACY POLICY EFFECTIVE DATE

This Privacy Policy is effective as of 2nd March 2026.

If you have any question regarding the privacy policy, please contact us through the contact page.