Privacy Policy – Vive Home AS

1. Introduction

Vive Home AS (“ViveHome”, “we”, “us”) respects your privacy. This Privacy Policy describes how we collect and process personal data, including health data, when you visit vivehome.no, express interest in, order, or use the ViveHome system and related services. Processing is carried out in accordance with the Personal Data Act and the General Data Protection Regulation (GDPR).

2. Data Controller

Vive Home AS is the data controller for the personal data described in this policy.

• Org. no.: 931 253 441
• Address: Håkkagata 10, 7714 Steinkjer, Norway
• Email: [email protected]
• Phone: +47 400 62 510

If you have questions about this Privacy Policy or our processing of personal data, you can contact us using the information above.

3. Who This Policy Applies To

This Privacy Policy applies to:

• Visitors to vivehome.no
• Main users of the ViveWatch system (for example elderly or seriously ill individuals using the watch and screen)
• Next of kin/caregivers with access to the user’s data
• Healthcare professionals using dashboards or alerts, where applicable

4. What Data We Process

4.1 Data you provide to us

Website visitors: When you use vivehome.no, you may provide contact details (name, email address, phone number) when you fill out forms, request information, or sign up for news or pre-registration. We also collect the content of messages you send us.

Main users: When you register and use ViveHome, we may collect name, contact information, user ID, age or age range, gender (if you choose to share it), language preferences, and medical context (where relevant and provided by you or your healthcare provider).

Next of kin/caregivers: Name, contact details (email, phone), relationship to the main user, login information, and notification preferences.

Healthcare professionals: Name and professional role, organisation/clinic details, contact information, login information, and logs/audit trails for access to user data.

4.2 Data collected automatically from the ViveWatch system

For main users, the following health data may be collected when the ViveWatch, screen and software are active:

• Vital signs and physiological data: pulse, blood oxygen saturation (SpO₂), body temperature, blood pressure (where supported)
• Derived metrics and trends: sleep patterns and duration, stress indicators, activity levels and rest periods, historical trends
• Alert and event data: alert triggers, time/context of alerts, who received alerts
• Device and technical data: device identifiers, timestamps, synchronisation, connectivity status, error logs, battery/system status

In some configurations, location information may be processed (for example for “safety zone” functionality). Where such features are active, this will be clearly described in the user settings.

4.3 Data collected automatically on the website

When you visit vivehome.no, we may automatically collect IP address, browser type and version, device and operating system, referring URLs and pages visited, time and date of visit, and time spent on pages. We use this information primarily for security, to maintain and improve the website, and to understand how it is used.

4.4 Meta advertising (Facebook and Instagram)

We use Meta’s advertising platforms to reach people who may be interested in ViveHome. When you interact with our ads, Meta may collect information as an independent controller. We may receive limited information from Meta, for example that you clicked an ad or submitted a lead form. We use this information to follow up on requests and measure ad performance.

5. Purposes and Legal Bases for Processing

We process personal data only when we have a valid legal basis. The purposes are:

• Providing the service: registering and managing user accounts, measuring and displaying health data, generating and delivering alerts, providing dashboards and reports, maintaining the service – legal basis: performance of a contract (GDPR Art. 6(1)(b)), legitimate interests (Art. 6(1)(f)), or protection of vital interests (Art. 6(1)(d)). For health data: your explicit consent (Art. 9(2)(a)) and/or processing necessary for healthcare under professional responsibility (Art. 9(2)(h)).
• Communication and support: responding to inquiries, communicating about account and updates – legal basis: legitimate interests.
• Analytics and product improvement: improving performance, user experience and security measures – legal basis: legitimate interests (where data is anonymised).
• Legal obligations and security: complying with legal obligations, preventing misuse, securing systems – legal basis: legal obligation (Art. 6(1)(c)), legitimate interests.

6. Storage and Deletion

• Contact details and order history are stored for up to 3 years after the customer relationship ends.
• Health data and alert history are stored for as long as the subscription is active, and are normally deleted no later than 30 days after the subscription ends, unless longer storage is necessary to fulfil legal obligations.
• Accounting records are stored for 5 years in accordance with the Bookkeeping Act.
• Technical logs are stored for a limited time.

7. Disclosure to Third Parties and Processors

We do not sell your personal data. We share data with the following recipients, all bound by data processing agreements with confidentiality and security requirements:

• Stripe and Vipps: payment processing
• Hosting provider/cloud service: operation and storage of the app and platform
• SMS provider: sending SMS confirmations and notifications
• Shipping partner: delivery of the ViveWatch system
• Next of kin and healthcare professionals: where you have granted access
• Public authorities: where required by law

8. International Data Transfers

We seek to store and process personal data within the EU/EEA where possible. If data is transferred outside the EU/EEA, we use adequate safeguards such as Standard Contractual Clauses (SCC).

9. Data Processing Security

We implement technical and organisational security measures to protect your personal data against accidental or unlawful deletion, alteration or disclosure. This includes encryption of data in transit (TLS/SSL) and secure storage of data with approved processors. The ViveWatch device communicates only with our secure servers.

You are however responsible for securing your device against loss, theft or misuse. If the ViveWatch device is lost or stolen, please notify us immediately at [email protected]. We will deactivate the device and delete all personal data from it as soon as possible.

ViveWatch is a supplementary welfare technology assistive device and is not medically approved equipment. The system is not intended for and cannot be used as a substitute for professional medical monitoring, direct observation by caregivers or healthcare professionals, or emergency services in acute situations. The system may fail to detect deviations or send alerts due to technical, network, software or other reasons, and ViveHome is not liable for missed alerts, erroneous notifications, or health conditions that occur without warnings. Call 113 in emergencies.

10. Security Breaches

If we discover a security breach that may affect your personal data or health data, we will notify you and relevant authorities within a reasonable time, in accordance with GDPR Articles 33 and 34. We will provide information about the nature of the breach, which data is affected, and what measures we have taken to minimise harm.

11. Your Rights

• Access to the personal data we hold about you
• Rectification of inaccurate data
• Erasure (“right to be forgotten”)
• Object to or request restriction of processing
• Data portability in a machine-readable format
• Withdraw consent at any time, without affecting the lawfulness of processing carried out before consent was withdrawn

Requests should be sent to [email protected]. You may also lodge a complaint with the Norwegian Data Protection Authority (datatilsynet.no).

12. Cookies

Our website uses necessary cookies for operation and security. Non-essential cookies (e.g. for statistics and marketing) are set only with your consent via the cookie banner, in accordance with the E-commerce Act. You can manage cookie preferences in your browser settings.

13. Children’s Data

ViveWatch may in some cases be used by or for children, in cooperation with healthcare professionals and guardians. Where we process children’s data, we apply additional safeguards and ensure appropriate legal bases and authorisations.

14. Changes

We may update this Privacy Policy from time to time. In the event of significant changes, we will notify you, and the updated version will be published on the website with a new “Last updated” date.

15. Contact

Vive Home AS (org. no. 931 253 441)

• Email: [email protected]
• Phone: +47 400 62 510
• Address: Håkkagata 10, 7714 Steinkjer, Norway

See also our terms of sale and terms of use.