Privacy Policy

← Back to Hume Band 2.0

Last updated: June 2026

Health data deserves careful handling. This page explains, in plain terms, what Hume Health Corp collects through humeband.uk and the Hume Health app, what we do with it, and the rights you have under UK data protection law.

1. Who's Responsible for Your Data

Hume Health Corp is the data controller for the personal data described on this page, and we handle it in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What We Collect

Directly from you

• Basics like your name, email, delivery address and payment details when you order or set up an account.
• Anything you tell us when you contact support.

From the band and app

• Biometric readings — heart rate, HRV, SpO2, skin temperature, sleep stages, movement — that power the figures shown in the app, such as Metabolic Momentum and biological age.
• Basic technical details — device model, app version, general usage patterns — that help us keep the service running properly.

3. Our Lawful Basis for Using It

We process your data to perform our contract with you (fulfilling orders, running your account), based on your consent (for optional marketing), and for our legitimate interests in improving the accuracy of our sensors and algorithms — always balanced against your rights and freedoms.

4. What We Do With It

• Turn raw sensor data into the trends and insights shown in the app.
• Process and dispatch your order, and handle any return or warranty claim.
• Respond when you contact support.
• Improve our sensors and algorithms over time, generally using aggregated or de-identified data.
• Send order-related messages, and — only where you've opted in — the occasional product update.

5. It's Your Data

Your biometric history belongs to you. Export it from the Hume Health app whenever you like, and if you'd rather we deleted your account and its data entirely, contact support — we process deletion requests within 30 days, aside from records we're legally required to keep, such as order history for tax purposes.

6. When We Share It

We don't sell your health data. It's shared only in these situations:

• Service providers who help us operate — payment processors, delivery couriers, cloud hosting — under contracts limiting their use of it strictly to providing that service.
• Legal requirements, where we're obliged to disclose something under law, regulation, or a valid legal request.
• A business sale or merger, should one occur, under the same privacy commitments set out here.

Where data is transferred outside the UK, we put appropriate safeguards in place, such as the UK's International Data Transfer Agreement or an adequacy decision, as required.

7. How It's Protected

Data in transit and at rest is encrypted to industry standards, and internal access is limited to people who genuinely need it to do their jobs. Nothing is completely risk-free, but we take this seriously given the sensitivity of health data.

8. Cookies

The site uses cookies to remember your preferences, keep you signed in, and understand broadly how the site is used, so we can improve it. You can turn these off in your browser settings, though some parts of the site may not work as well without them.

9. Your Rights

Under UK GDPR, you have the right to access, correct, export, restrict, or ask us to delete your personal data, and to object to certain processing, including direct marketing (there's an unsubscribe link in every marketing email). To exercise any of these, use the contact details below. You also have the right to complain to the Information Commissioner's Office (ICO) if you're unhappy with how we've handled your data.

10. Children

We don't knowingly collect data from anyone under 13, and the Services aren't aimed at children. If you believe a child has shared data with us, let us know and we'll remove it.

11. Updates to This Policy

We may update this Privacy Policy from time to time, reflected in the date at the top. For anything material, we'll give more prominent notice — an in-app message or email, for example.