Introduction and who we are

Salus is a wellness and self-awareness platform available at salusdaily.com, operated by Salus. You can reach us about privacy at salusdailywellness@gmail.com. This policy explains what information Salus collects, how it is used, and who can see it. It covers both individual users and students at schools that adopt Salus. Salus is a wellness and self-awareness tool. It is not a medical device, not a diagnostic tool, and not a substitute for a physician, therapist, counselor, or athletic trainer.

A note for schools, parents, and students

When a school adopts Salus, Salus acts as a service provider that processes data on the school's behalf. Under the Family Educational Rights and Privacy Act (FERPA), the school controls the education records, and Salus acts as a school official with a legitimate educational interest. Salus uses the data only to provide the service and does not repurpose it for its own commercial purposes. Salus deletes or returns school-controlled data at the school's request. Parents and eligible students (those 18 or older) have rights to access and correct education records, described below.

Information we collect

Account and profile data: your name, email address, a password (hashed by our authentication provider), your account role, and your school or team affiliation. Onboarding data: height, weight, and physical profile details, entered in imperial units, used to personalize your experience. Daily check-in and wellness data: self-reported mood, energy, soreness, stress, and similar day-to-day inputs. Screener and assessment results: your responses to wellness and mental-health screening questions and any derived scores. Wearable data: if you connect an Oura device, metrics such as heart rate variability, sleep, and recovery, which may qualify as biometric information under Arizona law. Injury and pattern data: self-reported injury or load information and the app's injury trajectory projection, which is a pattern projection and not a medical prediction. Team and coaching data: assignments, streaks, leaderboards, availability, season goals, and anonymized team comparisons. Notification data: push notification tokens and your notification preferences. Usage and log data: analytics on how the app is used, timestamps, and error logs.

How we use information

We use your information to provide and personalize the service, generate wellness insights, power coach and team features according to the permission model, send notifications you have opted into, and maintain the security and reliability of the service. Some information you enter is processed by an artificial intelligence provider (OpenAI) to generate insights and narrative summaries from your wellness data. We do not use your data for targeted advertising, and we do not sell it.

How information is shared inside Salus

Salus uses a role-based permission model. Members see their own data. Coaches see the data of members assigned to their team, according to the team model. Guardians see the data of the student linked to their account. Clinicians see the data of their patients. Information is shared only according to these roles and the permissions granted by you, a guardian, or a school. We do not sell your data, we do not use it for targeted advertising, and we do not build profiles about you for any purpose other than providing the service.

Subprocessors and third parties

Salus relies on a small number of service providers that process data only to provide their service to Salus and are bound by contract. Supabase provides database, authentication, and storage hosting. OpenAI processes user-entered wellness data to generate AI insights and narrative summaries. Vercel provides application hosting and usage analytics. Our email provider sends transactional email such as signup confirmations and notifications. Oura is the source of imported wearable data, and only if you choose to connect a device.

Data storage and location

Salus stores data with Supabase in the United States. We will notify schools before changing the region in which school-controlled data is stored, including backups and disaster recovery. We take reasonable steps to ensure our subprocessors store data within the United States.

Children's and student data

Salus is used by minors, including students who may be under 13 and students aged 13 to 17. For users under 13, consent is provided by the school or by a parent or guardian, not by the student, consistent with the Children's Online Privacy Protection Act (COPPA). Salus collects only what is needed for the educational and wellness purpose and keeps it only as long as needed. Wellness and mental-health screeners require the applicable parental or school consent before a student can take them, consistent with the Protection of Pupil Rights Amendment (PPRA) and Arizona Revised Statutes section 15-117. Connecting a wearable and importing biometric data requires written parental or guardian consent, and for school deployments Salus supports advance written notice at least 30 days before biometric information is collected, consistent with Arizona's rule for charter schools.

Arizona-specific compliance

Salus handles categories of data protected under Arizona Revised Statutes section 15-1046, including health and biometric information, and aligns its data handling with that statute. Screener consent follows Arizona Revised Statutes section 15-117. Consistent with Arizona's protections for student data operators, Salus affirmatively commits that it does not sell student data, does not use student data for targeted advertising, does not build non-educational profiles of students, deletes school-controlled student data on the school's request within a reasonable time, maintains reasonable security, and provides prominent notice to students and parents before any change to this policy takes effect.

Your rights and choices

You may request access to, correction of, or deletion of your information. For minors, a parent, guardian, or the school may exercise these rights, and eligible students who are 18 or older may exercise them directly. You can delete your account at any time using the account deletion feature in the app. To make a request or ask a question, contact salusdailywellness@gmail.com. Depending on where you live, you may also have rights to access, delete, or correct your information, and to opt out of the sale of personal information. Salus does not sell personal information.

Data retention and deletion

Salus keeps your information for as long as your account is active or as needed to provide the service. You can delete your account at any time, which removes your data across our systems. For school deployments, Salus deletes or returns school-controlled data at the school's request within a reasonable time.

Security

Salus protects your information with encryption in transit and at rest, access controls that follow the principle of least privilege, and passwords that are hashed by our authentication provider. No system can be guaranteed perfectly secure, and we continue to improve our safeguards over time.

Data breach and incident notification

If a security incident affects your information, Salus will notify affected users and, for school deployments, the school, promptly and consistent with Arizona Revised Statutes section 18-552 and any applicable school data agreement.

Changes to this policy

Salus will provide prominent notice to students and parents before a material change to this policy takes effect. We keep prior versions of this policy available so you can see what changed.

Contact

For privacy questions or to exercise your rights, contact salusdailywellness@gmail.com.

Privacy Policy