Privacy policy
How Kaizin handles your data
Last updated 1 November 2026
In short, we collect the health information you choose to give Kaizin, we use it only to run Kaizin for you, it is stored in London, and we never sell it or use it for advertising. You can see it, take a copy, or delete it whenever you like.
Who we are
Kaizin is run by Olympus Premium Health Limited, a company registered in England and Wales (company number 13621708), registered office 82A James Carter Road, Mildenhall, Bury St Edmunds, Suffolk, IP28 7DE. We are the controller of your personal data, and we are registered with the Information Commissioner's Office (registration number ZC143531).
For anything about your data, email hello@kaizin.health.
What we collect
| Data | Where it comes from | Why we use it |
|---|---|---|
| Your email address | You, when you sign in | To create your account and send sign-in codes |
| Date of birth, sex, and which wearable you use | You, on your profile | To read your results against the right ranges and label your wearable data correctly |
| Blood test PDFs and the results in them | You, when you upload a panel | To show your results and for our doctor's review |
| Our doctor's review and recommended change | The doctor who reviews your panel | To show you what to focus on |
| Resting heart rate, HRV, sleep (including stages and times), steps, and heart rate during the day | Apple Health, if you allow it | To show your readings against your own normal and estimate daily strain |
| Overnight HRV, lowest heart rate, sleep (including stages and times), and steps | Oura, if you connect your Oura account | The same as Apple Health |
| Weight, blood pressure and other readings you type in | You | To track them over time |
| Day tags (for example alcohol or a late meal) | You | To show how your readings change after those days |
| Questions you ask about your results | You | To answer them |
| Your answers before a blood test: medicines, supplements, conditions, habits, measurements, family history, and any symptoms you tick | You, in the app | So the reviewing doctor can read your results in context. We use it for nothing else |
| Your email address, if you join a waitlist | You, on the plans form | To send you one email when that plan or the apps open. Nothing else is sent to it |
Reminder times and your Face ID or passcode setting stay on your iPhone and are never sent to us. Face ID itself is handled by iOS, and Kaizin never sees it.
Our legal basis
Health information is special category data under UK GDPR, so we need a basis under both Article 6 and Article 9.
| What we do | Article 6 | Article 9 |
|---|---|---|
| Storing the laboratory report you upload, and showing it back to you | 6(1)(b), our contract with you | 9(2)(a), your explicit consent, given when you upload it |
| Holding a copy of the notes you choose to share with us from your clinic | 6(1)(b) | 9(2)(a), your explicit consent, given separately for each set of notes, and withdrawable |
| Reading your wearable or Apple Health data | 6(1)(b) | 9(2)(a), your explicit consent, given when you connect the device |
| Taking payment and managing your plan | 6(1)(b) | Not needed, no health data is involved |
You can withdraw any of these whenever you like, by disconnecting a device, withdrawing the sharing of a set of notes, or deleting your account. Withdrawing does not affect what we did beforehand.
Who treats you, and who we are
Kaizin is not your doctor. Kaizin arranges your blood test, stores your laboratory report and shows you your own readings over time.
When your results need a clinical opinion we refer you to Veridian Clinic, and you become Veridian's patient for that consultation in the ordinary way. Veridian practises under the Care Quality Commission registration of Endura Health Ltd, trading as ThanksDoc. Veridian holds your clinical record and is responsible for your care. Kaizin may pay for that consultation on your behalf. That does not make Kaizin your care provider, any more than an insurer becomes your doctor by paying a bill.
After your consultation you receive your notes from Veridian. You then choose, each time, whether to share a copy with Kaizin so that it sits alongside your readings. If you would rather not, Kaizin simply shows your laboratory report and your own measurements. You can withdraw that sharing later and we will delete our copy.
If you want your clinical record, or want it corrected, that request goes to Veridian, because they hold the original. We will tell you how to reach them.
Apple Health and Oura
Kaizin only reads from Apple Health. It never writes to it. You choose which data types to share in iOS, and you can change that in the Health app at any time.
When you connect Oura, you sign in on Oura's own page and approve access to your daily sleep and activity data. We keep Oura's access keys encrypted on our servers, and they never reach your phone. If you disconnect Oura, we revoke access straight away and you can choose to delete the Oura readings we hold.
Data from Apple Health and Oura is used only to run Kaizin for you. We never use it for advertising, never sell it, and never share it with data brokers.
Who we share it with
We don't sell your data. We only share it with the service providers we need to run Kaizin, under contracts that require them to protect it and use it only on our instructions:
- Supabase hosts our database, file storage and sign-in. Your data is stored in London (AWS eu-west-2).
- Google (Gemini API) reads the text of an uploaded lab PDF to pick out each result, and drafts answers to questions you ask about your results. We send only what is needed for that task. Google may process this outside the UK. Where it does, the transfer is covered by the UK International Data Transfer Addendum or an equivalent safeguard.
- Our reviewing doctor sees your panel and profile to review it. They are bound by medical confidentiality.
- Oura, only if you connect it. We receive data from Oura and send nothing back beyond what is needed to sign in and sync.
We may also disclose data if the law requires it, or to protect someone's life in an emergency.
How long we keep it
We keep your data while your account is open. If you delete your account, we delete your results, readings, tags and profile within 30 days, and remove them from backups within a further 30 days. If you disconnect Oura and ask us to, we delete your Oura readings straight away.
Your rights
You can ask us to:
- give you a copy of your data
- correct anything that is wrong
- delete your data
- stop or limit how we use it
- send your data to you or another service in a common format
Email hello@kaizin.health from the address on your account. We reply within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Security
Data is encrypted in transit and at rest. Every record in our database is locked to your account, so no other user can read it. Oura access keys are encrypted again before they are stored. You can lock Kaizin with Face ID or your passcode.
Children
Kaizin is for adults aged 18 and over. We don't knowingly collect data from anyone younger.
This website
kaizin.health runs no analytics, advertising or tracking cookies. If you sign in to your account on the web, your browser stores a sign-in session so you stay signed in. That is strictly necessary to provide the account you asked for, and it is removed when you sign out.
Who else handles your data
These companies process data on our instructions only. They cannot use it for their own purposes, and none of them may sell it.
| Who | What they do | Where |
|---|---|---|
| Supabase | Stores your account, results and uploaded PDFs | London |
| Reads the values out of your uploaded PDF and drafts the wording of your insight. We use the paid tier, under which Google does not use your data to improve its products | Google Cloud | |
| Stripe | Takes payment and manages your plan. We never see your card details | Ireland and the USA |
| Resend | Sends and receives email to kaizin.health addresses | Ireland |
| Vercel | Serves this website | London |
| Oura | Only if you connect it. Your Oura account remains your own | Finland and the USA |
Where a company is outside the UK, the transfer is covered by the UK's approved safeguards for international transfers.
How long we keep it
| What | How long | Why |
|---|---|---|
| Your clinical record: panels, results, PDFs, the doctor's review | 8 years from your last contact with us | The standard retention period for an adult medical record in the UK |
| Wearable readings | 8 years, because they form part of the clinical picture | The same |
| Your account and plan | While you are a member, then 7 years | Contract and tax |
| Sign-in and connection tokens | Deleted as soon as they expire or you disconnect | No reason to keep them |
| Answers before a blood test | Until you delete your account, or sooner if you ask | A later test is read against the earlier answers |
| Waitlist email addresses | Until the plan opens and you have been told, or sooner if you ask | The one purpose is then served |
Your rights
You can ask us to give you a copy of your data, correct anything wrong, delete it, give you a portable copy to take elsewhere, restrict what we do with it, or object to a particular use. Email hello@kaizin.health and we will respond within one month.
Deleting your account removes your data from Kaizin. Where we are professionally required to keep a medical record, we keep only that record, we stop using it to run the app, and we delete it at the end of the period above.
There is no automated decision making in Kaizin that produces a legal or similarly significant effect. Our doctor reviews every panel before you see our reading of it.
If something goes wrong
If there is ever a breach involving your data that is likely to put you at risk, we will tell you, and we will report it to the Information Commissioner's Office within 72 hours of becoming aware of it.
If you are unhappy with how we have handled your data, please tell us first at hello@kaizin.health. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Changes
If we change this policy in a way that affects you, we will tell you in the app before the change takes effect. The date at the top shows the latest version.
