Privacy Policy

← Back to Hume Band 2.0

Last revised: June 2026

Health-related data warrants extra care. This page sets out, in everyday language, what Hume Health Corp gathers through hume-band.uk and the Hume Health app, how we use it, and the rights available to you under UK data protection law.

1. Who Controls Your Data

Hume Health Corp acts as data controller for the personal data covered here, handling it in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What We Gather

Provided directly by you

• Standard details — name, email, delivery address, payment information — supplied when you order or register an account.
• Whatever you share when contacting support.

Generated by the tracker and app

• Biometric readings — heart rate, HRV, SpO2, skin temperature, sleep stages, movement — behind the figures shown in the app, including Metabolic Momentum and biological age.
• Basic technical information — device model, app version, general usage patterns — that helps keep the service running smoothly.

3. Why We're Allowed to Use It

We process your data to carry out our contract with you (fulfilling orders, running your account), based on your consent (for optional marketing), and for our legitimate interest in refining our sensors and algorithms — always weighed against your rights and freedoms.

4. How We Use It

• Convert raw sensor readings into the trends and insights the app displays.
• Process and ship your order, and handle any return or warranty claim.
• Reply when you get in touch with support.
• Refine our sensors and algorithms over time, generally using aggregated or de-identified data.
• Send order-related communications, plus — only if you've opted in — the occasional product update.

5. Your Data Stays Yours

Your biometric history belongs to you. Export it from the Hume Health app any time, and if you'd like your account and data deleted entirely, contact support — deletion requests are processed within 30 days, aside from records we're legally obliged to retain, such as order history for tax purposes.

6. When We Share It

We don't sell health data. It's disclosed only in these circumstances:

• Service providers supporting our operations — payment processors, delivery couriers, cloud hosting — under agreements that restrict their use of it strictly to delivering that service.
• Legal obligations, where disclosure is required by law, regulation, or a valid legal request.
• A business sale or merger, if one takes place, under the same privacy commitments described here.

Where data leaves the UK, we apply appropriate safeguards, such as the UK's International Data Transfer Agreement or an adequacy decision, as required.

7. How We Protect It

Data is encrypted both in transit and at rest, to industry standards, and internal access is limited to staff who genuinely need it. Nothing is entirely risk-free, but we treat this seriously given how sensitive health data is.

8. Cookies

The site uses cookies to remember your preferences, keep you signed in, and get a general sense of how the site is used, so we can make it better. You can disable these in your browser settings, though parts of the site may work less well as a result.

9. Your Rights

Under UK GDPR, you can access, correct, export, restrict, or request deletion of your personal data, and object to certain processing, including direct marketing (every marketing email includes an unsubscribe link). Use the contact details below to exercise any of these. You can also complain to the Information Commissioner's Office (ICO) if you're unhappy with how we've handled your data.

10. Children

We don't knowingly gather data from anyone under 13, and the Services aren't aimed at children. If you believe a child has shared data with us, let us know and we'll remove it.

11. Changes to This Policy

We may update this Privacy Policy periodically, reflected in the date at the top. For anything significant, we'll give more visible notice — an in-app message or email, for instance.