Laiqa Wellness Standard Privacy Policy

1. Collection and use of Personal Information

What Information we collect

We collect Personal Information about you, if you opt to provide it — for e.g., to contact certain mailboxes or to register for certain services. In some cases, you will have previously provided your Personal Information to Laiqa (if, for example, you are a former employee). If you choose to register or login to a Laiqa website and/or application using a Third-party single sign-in service that authenticates your identity and connects your social media login information (e.g., Google, Instagram, LinkedIn, or X) with Laiqa, we will collect information or content required for the registration or log-in that you have allowed the social media provider to share with us, such as but not limited to your name, and email address. Other information that we collect will be subject to the privacy settings you have set with your social media provider(s), kindly review the Privacy Policy and associated settings of the applicable service.

When you register or submit Personal Information to Laiqa, we will use this information in the manner outlined in this Privacy Policy. Your Personal Information is not utilized for other purposes, unless we take your consent, or unless otherwise mandated or permitted by Law or professional ethics.

For example, if you register to a Laiqa website and/or application and provide information about your preferences, we will use this information to personalize your user experience. Where you sign up or login using a Third-party single user sign-in, we may also identify you as the same user across any different computing devices you use and personalize your user experience across other Laiqa websites and/or applications you visit. If you send us a resume or curriculum vitae (CV) to apply online for a position with Laiqa, we will use the information that you provide to match you with available Laiqa job opportunities.

In some cases where you have registered for certain services, we might reach out to you as part of registration / de-registration activities and/or for any other relevant alerts / notifications.

The legal grounds on which Company has to use your Personal Information

Laiqa usually collects only the Personal Information which is essential to fulfill your request. Where supplementary information is required, you will be notified of this at the point of collection.

We can process Personal Information, so long as we have legitimate ground(s) under the data protection laws to do so. It also mandates us to tell you what those legal grounds are. As a result, when we process your Personal Information, we will depend over one [1] of the following processing condition(s):

• Performance of a Contract: When the processing of your Personal Information is necessary in order to perform our obligations under a contract
• Legal Obligation: When we are required to process your Personal Information in order to comply with a legal obligation, such as keeping records for tax purposes or providing information to a law enforcement agency, or a public body
• Legitimate Interests: We will process information about you where it is in our legitimate interest in running a lawful business to do so in order to further that business, so long as it doesn’t overshadow your interests

Few instances of the ‘legitimate interests’ mentioned, above are:

• To thwart fraudulent or criminal activity and to protect our Information Technology (IT) landscape
• To offer information and/or services or offer information about employment opportunities to individuals who visit our website
• To execute, and to analyze, our marketing activities
• To tailor individuals’ online experience and improve the performance serviceability and efficiency of Laiqa’s online existence
• To meet our Corporate and Social Responsibility (CSR) commitments.

4. Your Consent: In some instances, we will ask you for explicit permission in order to process some of your Personal Information, and we will only process your Personal Information in this manner if, you agree to us doing so. You may withdraw and/or modify your consent at any time by contacting Laiqa at privacy@laiqa.ai

In some instances, the Personal Data that we collect may include Special Categories of Data, e.g., diversity related information (including data about ethnic and racial origin, religious beliefs, political opinions, and other beliefs of a similar nature, additionally may include sexual orientation data), or health data and data about alleged or proven criminal offences in each case where permitted by law.

1.3 Automatic Collection of Personal Information

In some instances, Laiqa and its service providers may use cookies, web beacons, and/or other technologies to automatically collect certain types of information when you visit us online via our website and/or application, as well as through emails that we may exchange. The collection of this information allows us to customize your online experience, improve the performance, usability and effectiveness of Laiqa’s online presence, and to measure the effectiveness of our marketing activities.

1.3.1 IP Addresses

An IP address is a number allocated to your computer / mobile device whenever you access the internet. It allows computer(s) / mobile device(s) and server(s) to recognize and communicate with one another. IP addresses from which website visitors appear to originate will be logged for IT Security and system diagnostic purposes. This information will also be used in aggregate manner to conduct website performance, and trend analysis.

1.3.2 Cookies

Please refer our COOKIES POLICY

1.3.3 Web Beacons

Web beacons are small image files on a web page which can be used to collect certain information from your computing device, like IP address, the time the content was viewed, web browser type, and the presence of cookies earlier set by the same server. Laiqa only uses web beacons as per applicable laws.

You have the option to render some web beacons unusable by disabling their associated cookies. The web beacon may still record an anonymous visit from your system’s IP address, but cookie information will not be logged.

In some of our bulletins and other communications, we may monitor recipient actions such as email opening rate via embedded links within the messages. We collect this information to gauge user interest and to enhance future user experiences.

1.3.4 Location-based Tools

Laiqa may collect and use the geographical location of your computing device. This location data is collected for providing you with information regarding services which we believe may be of interest to you based on your geographic location, and to improve our location-based products, and services.

1.3.5 Social Media Widgets and Applications

Laiqa websites may contain functionality to enable sharing through third-party social media applications, such as X widget, LinkedIn widget, and Instagram button. These social media applications may collect and use information about your use of Laiqa websites. Any Personal Information that you provide via such social media application(s) may be collected and used by other members of that social media application and such interactions are governed by the Privacy Policies of the companies that offer the respective application. We do not have control over, or accountability for, those companies or their usage of your information.

In addition, Laiqa websites may host forums, blogs, crowd-sourcing and other applications or services (collectively “social media features”). The purpose of social media features is to enable the sharing of knowledge and content. Any Personal Information that you provide on any Laiqa social media feature may be shared with other users of that social media feature (unless otherwise specified at the point of collection), over whom we may have limited or no control.

1.3.6 HealthKit and Apple Health Data

Our iOS application may integrate with Apple HealthKit to access and store health and fitness data with your explicit permission. We take the privacy and security of your health data very seriously.

What HealthKit Data We May Access:

• Activity data (steps, distance, active energy)
• Body measurements (weight, body mass index, body fat percentage)
• Sleep analysis
• Heart rate and vitals
• Nutrition and water intake
• Menstrual cycle tracking data
• Other health metrics relevant to your wellness program

How We Use HealthKit Data:

• To provide personalized wellness recommendations and insights
• To track your progress in our wellness programs
• To enable our healthcare professionals to provide better guidance
• To improve the effectiveness of your treatment plans

Important HealthKit Privacy Commitments:

• We will only access HealthKit data after obtaining your explicit permission
• You can revoke access to HealthKit data at any time through your device settings
• HealthKit data is not used for marketing or advertising purposes
• We do not sell or share your HealthKit data with third parties for their marketing purposes
• HealthKit data is stored securely and separately from other data
• We comply with all applicable health data protection laws and regulations
• HealthKit data may be shared with your healthcare providers only with your consent

You maintain full control over what health data you share with us through HealthKit. You can manage these permissions at any time in your iPhone's Settings app under Privacy & Security → Health → Laiqa.

1.3.8 Device Identifier Collection (iOS App Tracking Transparency)

Our iOS application collects device identifiers in compliance with Apple's App Tracking Transparency (ATT) framework. We want to be completely transparent about what we collect and why.

What We Collect:

We collect your iOS Vendor ID (IDFV), which is a unique identifier assigned to apps from the same developer on your device. This identifier is used exclusively for essential app functionality.

Why We Request App Tracking Transparency Permission:

Apple requires us to request ATT permission when accessing certain device identifiers. However, it's important to understand that we are NOT tracking you across other apps or websites.

How We Use the Device Identifier:

• Push Notification Delivery: The identifier is used with Firebase Cloud Messaging (FCM) to send you important notifications about your wellness program, appointment reminders, and health insights
• App Session Management: It helps us maintain your login session and provide a seamless experience when you use the Laiqa app
• Personalized Experience: The identifier allows us to remember your preferences and settings within the Laiqa app only

What We Do NOT Do:

• We do NOT track your activity across other apps or websites
• We do NOT share your device identifier with third-party advertisers
• We do NOT use the identifier to build advertising profiles
• We do NOT sell your device identifier to data brokers
• We do NOT use the identifier for behavioral advertising

Your Control:

You can manage ATT permissions at any time in your iPhone's Settings app under Privacy & Security → Tracking. Please note that denying this permission may affect your ability to receive push notifications and could impact certain app features that rely on session management.

Data Security:

All device identifiers are encrypted during transmission and storage. We implement industry-standard security measures to protect this information from unauthorized access.

1.3.9 AI-Powered Diet and Fitness Recommendations

At Laiqa, we leverage advanced artificial intelligence technology to provide you with personalized diet and fitness recommendations. We use Google Gemini AI as part of our recommendation engine, and we want you to understand exactly how this works and how your data is protected.

How AI Recommendations Work:

When you provide information about your health goals, dietary preferences, and fitness objectives, our system uses Google Gemini AI to generate personalized recommendations. This AI processing helps us provide faster, more comprehensive, and data-driven suggestions tailored to your unique needs.

What Data We Send to Google Gemini AI:

We send only non-personalized, anonymized health data to Google Gemini AI. This includes:

• General health metrics (such as age range, activity level, general health status)
• Fitness goals and objectives
• Dietary preferences and restrictions
• Wellness objectives and lifestyle factors
• Aggregated health patterns and trends

What We Do NOT Send to AI:

We take your privacy seriously. We do NOT send the following information to Google Gemini AI:

• Your name, email address, or phone number
• Your exact location or address
• Payment information or financial data
• Any personally identifiable information (PII)
• Specific medical diagnoses or sensitive health conditions
• Information that could be used to identify you personally

Human-in-the-Loop Approach:

This is one of our most important safeguards. Every AI-generated recommendation goes through expert human review before it reaches you. Here's how it works:

• Expert Review: All AI recommendations are reviewed by qualified professionals including nutritionists, certified fitness trainers, and healthcare professionals
• Accuracy Verification: Our experts verify that the recommendations are accurate, safe, and appropriate for your specific situation
• Safety Checks: Human reviewers ensure there are no contraindications or potential health risks
• Personalization: Experts may adjust AI recommendations based on their professional judgment and your unique circumstances
• Quality Assurance: This dual approach combines the speed and comprehensiveness of AI with the wisdom and safety oversight of human expertise

Data Processing and Security:

• Data Processor Role: Google Gemini AI acts as a data processor under our instructions and does not have independent control over your data
• Anonymization: All data sent to Gemini is anonymized and cannot be linked back to your identity
• No Model Training: Google does not use your data to train their AI models or for any purpose beyond generating your specific recommendations
• Encrypted Transmission: All data transmission between our systems and Google Gemini AI is encrypted using industry-standard protocols
• Limited Retention: Data sent to Gemini is processed in real-time and not retained longer than necessary to generate recommendations
• Compliance: Our use of Google Gemini AI complies with applicable data protection laws and regulations

Your Control and Opt-Out:

You have full control over AI-powered recommendations:

• You can opt out of AI-powered recommendations at any time
• If you opt out, you will receive recommendations created entirely by our human experts
• To opt out or request human-only consultations, contact our support team at care@laiqa.ai
• Opting out will not affect your access to other Laiqa services

Benefits of AI-Enhanced Recommendations:

By combining AI technology with human expertise, we can:

• Provide faster turnaround times for personalized recommendations
• Analyze complex patterns in health and wellness data more comprehensively
• Offer more diverse and creative solution options
• Stay current with the latest research and best practices
• Deliver more detailed and thorough recommendations

We believe this hybrid approach gives you the best of both worlds: the analytical power and speed of AI combined with the judgment, empathy, and safety oversight of qualified human professionals.

1.3.10 Children

Laiqa understands the importance of protecting children’s privacy, especially in an online environment. Our websites and/or applications are not purposefully designed for or directed at children below the age of 13. It is our policy never to purposefully and knowingly collect or maintain information about anyone below the age of 13, except as part of an engagement to provide professional services if and when applicable.

2. Sharing and Transfer of Personal Information to Third-parties

We do not share Personal Information with Third-parties, except as required for our legitimate professional and business needs, to carry out your requests, and/or as obligated or permitted by law or professional standards.

2.1 Data Processing and Third-Party Services

To provide you with our services, we work with carefully selected third-party service providers who act as data processors under our instructions. We want to be transparent about these relationships and how your data is protected.

Google Gemini AI - AI Recommendation Engine

As described in section 1.3.9, we use Google Gemini AI to generate personalized diet and fitness recommendations. Here are the key privacy protections:

• Data Processor Status: Google Gemini AI acts solely as a data processor under our instructions and contractual agreements
• Anonymized Data Only: All data sent to Gemini is anonymized and stripped of personally identifiable information
• No Identity Linking: The data cannot be linked back to your identity or used to identify you
• No Model Training: Google does not use your data to train their AI models or improve their services
• Limited Purpose: Data is used exclusively for generating your specific wellness recommendations
• No Secondary Use: Google does not use your data for any purpose beyond what we instruct them to do
• Secure Transmission: All data transmission is encrypted using TLS/SSL protocols
• Minimal Retention: Data is processed in real-time and not retained longer than necessary

Firebase Cloud Messaging - Push Notifications

We use Firebase Cloud Messaging (FCM) to deliver push notifications to your device. This service requires device identifiers as described in section 1.3.8:

• Essential Functionality: FCM is used solely to deliver notifications about your wellness program, appointments, and health insights
• No Tracking: Device identifiers are not used to track you across other apps or websites
• No Advertising: We do not share device identifiers with advertisers or use them for ad targeting
• Secure Infrastructure: FCM provides enterprise-grade security for notification delivery

Third-Party Service Commitments

For all third-party services we use:

• We conduct thorough privacy and security assessments before engagement
• We establish contractual agreements that protect your data rights
• We require compliance with applicable data protection laws
• We limit data sharing to only what is necessary for the specific service
• We regularly review and audit third-party practices
• We ensure third parties cannot use your data for their own purposes

Your Rights Regarding Third-Party Processing:

You have the right to:

• Know which third-party services process your data
• Understand the purpose of each third-party data processing activity
• Opt out of AI-powered recommendations (as described in section 1.3.9)
• Request information about our third-party data processing agreements
• Exercise all your data rights (access, correction, deletion) even for data processed by third parties

If you have questions about our third-party data processors or wish to exercise your rights, please contact us at privacy@laiqa.ai

3. Choices

In general, you are not required to submit any Personal Information to Laiqa, but we will require you to provide certain Personal Information for you to receive additional information about our services and events. Laiqa will also ask for your permission for certain uses of your Personal Information, and you can agree to or decline those uses.

As defined in “Cookies Policy”, if you wish to avoid cookies from tracking you as you navigate our websites, you can retune your browser to refuse all cookies or to indicate when a cookie is being sent. However, note that some portions of our websites and/or application may not work properly if you elect to refuse cookies.

4. Your Rights

If Laiqa processes Personal Information about you, you have the following rights:

• Right to be Informed: You have right to know what all information we have collected about you, why the information is collected, how long it will be kept, how you can file a complaint, and with whom Laiqa will share the data
• Right of Access and Rectification: You have the right to access your Personal Information. This is called as ‘Data Subject Access Request’. If we agree that we are obliged to provide Personal Information to you, we will make it available to you free of charge. Prior to providing Personal Information to you, we may ask for proof of identity and adequate information about your interactions with us that we can trace your Personal Information. If the information we hold about you is incorrect, you are allowed to ask us to correct any inaccuracies in your Personal Information
• Right to be Forgotten / Erasure: You have right to be forgotten which is also known as the right to erasure. This right allows you to ask for your Personal Information to be deleted from our systems
• Right to Object and Restrict Processing: You have the right to object to or restrict us from processing your Personal Information
• Right to Data Portability: It allows you to transfer your Personal Information to another Organization, that you have previously provided to us in a structured, commonly used, and machine-readable format. However, it can only be applied to the Personal Information that you have provided to us by consent or contract and if the processing is carried out by automated means

You can make a request or exercise these rights contacting Laiqa at privacy@laiqa.ai and we will make all reasonable and practical efforts to comply with your request, so long as it is in line with applicable law and professional standards.

5. Data Security and Integrity

Laiqa has implemented reasonable security policies and procedures in place to protect Personal Information from unauthorized loss, misuse, alteration, or destruction. Despite Laiqa’s best efforts, however, security cannot be absolutely guaranteed against all threats. To the best of our ability, access to your Personal Information is restricted to those who have a need-to-know. Those personnel who have access to the data are required to maintain the confidentiality.

We retain Personal Information for as long as it is needed to provide our services, stay in contact with you and to comply with applicable Laws, Regulations, and Professional obligations that we are subject to and for other legitimate business reasons.

6. Links to other sites

Please be aware that Laiqa websites could contain links to other sites, which might not be managed by Laiqa and hence outside the ambit of this Privacy Policy. We encourage you to review the Privacy Policy of each and every website visited prior to disclosing any Personal Information.

By registering on any Laiqa website and/or and then navigating to another Laiqa website while still logged in, you agree to the use of your personal information in accordance with the privacy policy of the Laiqa website you are visiting.

7. Changes to this Policy

Laiqa may modify this Privacy Policy from time-to-time to reflect Company’s current Privacy practices. When we update this policy, we will revise the “Updated” date at the top of this page. But our commitment to guard the privacy of website users will continue to remain.

8. Policy Questions and Enforcement

If you have any question(s) regarding Company’s Privacy practices or this Privacy Policy and Cookies Policy, or to request this Privacy Policy in another format, please contact us at:

We will acknowledge your email within [14] days and seek to resolve your concern within one [1] month of receipt. Where the concern is complex or we have a large volume of concerns, we will notify you that the concern will take longer than one [1] month to resolve, and we will seek to resolve your concern within three [3] months of the concern being first raised. We may accept your concern (and in that case implement one of the measures set out in the ‘Your Rights’ section above), or we may reject your concern on legitimate basis.