GDPR

GDPR consent explainer

Last updated 1 July 2026

Health data is ‘special category’ data under GDPR Article 9, which needs a higher bar than ordinary consent. This page explains, in plain English, exactly what you're agreeing to when you switch on each consent — and how to turn it off.

Two separate, explicit consents

We ask for two clear consents during onboarding, and you can grant or revoke each independently:

  • Process my bloods — lets us analyse your results and build your trends and coaching.
  • Read my wearables — lets us fuse Apple Watch and Apple Health data for daily context. (More devices to come.)

What ‘explicit consent’ means

Explicit consent must be a clear, affirmative action — a deliberate toggle, not a pre-ticked box or a buried clause. We tell you the specific purpose before you consent, and we don't bundle unrelated purposes together.

You can withdraw anytime

Withdrawing consent is as easy as giving it. Turn either toggle off in the app and we stop that processing immediately. Withdrawing doesn't affect the lawfulness of what we did while consent was active, and you can still export or delete everything.

What we never do with your consent

Consent to process your health data is strictly for your programme. We never use it to sell data, target ads, or share with third parties beyond the labs, clinicians and sub-processors needed to deliver the service.

Children

Arcaevo is for adults (18+). We do not knowingly process the data of children.

This document is current best-effort copy pending solicitor review and is not legal advice. Arcaevo is a product of Codú Limited (registered in Ireland, CRO [TODO: CRO number]), Dublin, Ireland — the data controller for GDPR purposes. Questions: privacy@arcaevo.com.