Terms and Privacy

NestEgg Health – Terms of Service & Privacy Policy (v1.7)
Last Updated: October 2026. Effective: October 5, 2026.

1. Introduction

Welcome to NestEgg Health.

By creating an account, joining a Nest, or participating in any NestEgg Challenge ("Challenge"), you ("Participant", "Egg", "you") agree to these Terms of Service and Privacy Policy ("Terms").

These Terms form a legally binding agreement between you and NestEgg Health Ltd. ("NestEgg", "we", "us").

NestEgg provides a community based exercise experience that uses activity data from your wearable to calculate scores, leaderboards, and feedback.

NestEgg is not a medical service and does not provide healthcare, diagnosis, treatment, supervision, or medical advice.

2. What Data We Collect and Why

We collect only the data necessary to operate the NestEgg Challenge and related services.

2.1 Data Collected

Data Type
Purpose
Source
Data Type: Name and Organization
Purpose: Identify participants and Nests
Source: Provided by you
Data Type: Email Address
Purpose: Login and Challenge communications
Source: Provided by you
Data Type: Date of Birth
Purpose: Calculate estimated maximum heart rate for scoring
Source: Provided by you
Data Type: Workout Type and Duration
Purpose: Calculate Exercise Points
Source: Fitness wearable
Data Type: Heart Rate Data (average, peak, resting)
Purpose: Calculate workout intensity and scoring
Source: Fitness wearable
Data Type: Device and App Metadata
Purpose: Performance, security, and troubleshooting
Source: Automatically collected

We do not collect medical records, diagnoses, treatment information, or clinical health data.

3. Legal Basis for Processing (GDPR)

NestEgg processes personal data in accordance with the General Data Protection Regulation (GDPR) and equivalent UK and international data protection laws.

3.1 Article 6: Personal Data

We process personal data under Article 6(1)(b) GDPR (performance of a contract), as processing is necessary to operate the Challenge you choose to join.

3.2 Article 9: Health and Biometric Data

Health related and biometric data (including heart rate metrics) are processed under Article 9(2)(a) GDPR based on your explicit consent.

Participation in a NestEgg Challenge requires this consent. You may withdraw consent as described below.

4. How We Use Your Data

We use your data only to:

  • Calculate Exercise Points, scores, levels, and rankings

  • Display progress and team contributions

  • Display workout summaries and heart rate metrics within Challenges

  • Provide Challenge related notifications and insights

  • Prepare Challenge reports for the organization that runs your Challenge, as described in Section 7A

  • Prepare aggregate reports that do not identify you, for program evaluation

  • Operate and improve the NestEgg platform

We do not sell personal data.

We do not use personal data for advertising.

We do not use your data, or allow your employer to use it, to make decisions about your employment, pay, performance, promotion, insurance eligibility, or benefits, except a record of whether you took part where your employer's program is based on participation.

5. Consent, Withdrawal & Health Pause

By joining a Challenge and connecting a wearable, you explicitly consent to processing of activity and heart rate data for scoring, for community display, and for the Challenge reports described in Section 7A. Your scores are calculated from your heart rate data, so a report that shows your scores is covered by this consent.

You may withdraw consent at any time.

If consent is withdrawn during an active Challenge:

  • Your participation will be paused using the Health Pause function

  • Scoring and leaderboard participation will stop

  • Historical Challenge data may remain visible where required for team integrity

  • You will not be named in any Challenge report issued after you withdraw. Your past scores may still count toward your Nest's results, shown only as part of the Nest total

Health Pause is private. A Challenge report will never show, by name or in a way that could identify you, that you used a Health Pause or why. Health Pauses are reported to your employer only as a total count across the whole Challenge.

After a Challenge ends, you may request deletion of your account and data (see Section 10).

6. Controller Roles & Employer Involvement

NestEgg Health Ltd. is the data controller for participant personal data.

If you join a workplace Challenge:

  • Your employer does not control how your data is processed

  • Your employer's Challenge administrators can see, within the app, the data made visible to all participants in that Challenge (Section 7)

  • At the end of a Challenge, and where agreed during it, your employer receives a Challenge report as described in Section 7A

  • Your employer never receives your heart rate data, your date of birth, your Health Pause status, or any other health information

  • Your employer has agreed with NestEgg to use Challenge reports only to evaluate and run its wellbeing program, to keep them confidential within the people responsible for that program, and not to use them for any decision about your employment

  • Employers are not joint data controllers

NestEgg does not supervise, direct, or manage your physical activity on behalf of your employer.

Participation remains voluntary and self directed at all times. Choosing not to take part, or taking part with low scores, has no effect on your employment. NestEgg cannot control your employer's conduct, but your employer's agreement with NestEgg prohibits treating you differently because of your participation or results.

7. Participant Visibility & Community Data

NestEgg is a social, team based experience.

Participants within the same Challenge can see Challenge relevant activity information of other participants, including:

  • Scores and rankings

  • Workout summaries (type and duration)

  • Contribution toward team results

  • Heart rate metrics (average, peak, and resting heart rate associated with logged workouts)

Continuous raw biometric traces (such as second by second heart rate graphs) are not shared.

By participating in a Challenge, you acknowledge and accept that your activity summaries and heart rate metrics will be visible to other participants in that Challenge.

7A. Employer Challenge Reports

7A.1 What a report is. At the end of each workplace Challenge, NestEgg prepares a report for the organization that runs it, so it can see how its program performed. A report may also be prepared during a Challenge. Reports are prepared by NestEgg from Challenge data and reviewed by NestEgg before release.

7A.2 What a report may include about you. A report may identify you by name and include the following, which is the same information other participants can already see in the Challenge:

May be included
Never included
May be included: Your name and Nest
Never included: Heart rate data of any kind (average, peak, resting, or traces)
May be included: Exercise Points, Level, Level Score, and Nest Score for each week
Never included: Date of birth, age, or estimated maximum heart rate
May be included: Your rankings within the Challenge
Never included: Health Pause status, dates, or reasons
May be included: Workout counts, workout types, and total exercise time
Never included: Device, app, or location data
May be included: Whether you took part in each week
Never included: Workout photos, captions, or comments
May be included: Your number of Flock Feed posts and reactions received
Never included: Any data from after you withdrew consent

7A.3 Aggregate figures. A report also includes figures for the whole Challenge, such as participation and activity rates, that do not identify anyone. Where a Nest or group has fewer than three people, its figures are combined with others so no one can be singled out.

7A.4 If you withdraw. If you withdraw consent or leave the Challenge, you are not named in any report issued afterward. Your earlier activity may still count within your Nest's totals.

7A.5 Your rights over reports. You may ask us for a copy of what any report said about you, and for corrections, under Section 11.

8. Data Security

We use industry standard security measures including:

  • Encryption in transit and at rest

  • Role based access controls

  • Secure cloud infrastructure

  • System monitoring and backups

Third party providers are assessed for security and data protection standards.

No system can guarantee absolute security. Participants acknowledge this inherent risk of digital services.

9. International Data Transfers

Some service providers may process data outside the European Economic Area.

Where this occurs, NestEgg relies on appropriate safeguards including Standard Contractual Clauses or equivalent lawful transfer mechanisms.

10. Data Retention & Deletion

We retain personal data only for as long as necessary to:

  • Operate Challenges

  • Maintain participation history

  • Meet legal or contractual obligations

Your employer keeps its copy of a Challenge report for no longer than 24 months after the Challenge ends, under its agreement with NestEgg, and then deletes it. If you ask NestEgg to delete your data, we will also ask your employer to remove your name from any report it still holds.

Inactive accounts are periodically reviewed.

You may request deletion of your account and personal data by contacting privacy@nestegghealth.com, subject to Challenge integrity and legal requirements.

11. Your Rights (GDPR)

You have the right to:

  • Access your personal data, including what any Challenge report said about you

  • Correct inaccurate information

  • Request deletion

  • Withdraw consent

  • Lodge a complaint with a supervisory authority

Requests may be sent to privacy@nestegghealth.com.

12. Health Acknowledgement & Assumption of Risk

By participating in NestEgg, you acknowledge that:

  • You are solely responsible for selecting, performing, and supervising your own physical activity

  • Exercise involves inherent risks including injury, illness, or adverse health events

  • You should consult a qualified healthcare professional if you have medical concerns

You voluntarily assume all risks associated with your participation.

NestEgg:

  • Is not a medical service

  • Does not provide medical advice

  • Does not diagnose, treat, supervise, or prevent disease

All insights and feedback are informational only.

13. HIPAA & US Healthcare Disclaimer

NestEgg Health is not a healthcare provider, health plan, or HIPAA covered entity.

Data processed by NestEgg is not subject to HIPAA and is not intended for clinical or medical decision making.

14. Liability & Participation Waiver

Participation is voluntary.

To the maximum extent permitted by law:

  • You release and discharge NestEgg Health Ltd., its directors, officers, employees, contractors, and partners from liability for injury, illness, or damages arising from participation.

  • You agree that NestEgg is not liable for misinterpretation of Challenge data, insights, rankings, or heart rate metrics.

  • You acknowledge that technical issues or wearable syncing errors may occur.

Nothing in these Terms excludes liability for death or personal injury caused by gross negligence or willful misconduct where such exclusion is unlawful.

15. Limitation of Liability

To the fullest extent permitted by law:

  • NestEgg's total liability arising out of or related to participation shall not exceed the total fees paid (if any) by you for participation in the preceding twelve months.

  • NestEgg shall not be liable for indirect, incidental, consequential, special, or punitive damages, including loss of profits, business interruption, or reputational harm.

16. Indemnity

You agree to indemnify and hold harmless NestEgg Health Ltd. from claims, damages, or expenses arising from:

  • Misuse of the platform

  • Falsification of activity data

  • Violation of these Terms

  • Conduct that harms other participants

17. Acceptable Use & Conduct

Participants must not:

  • Falsify or manipulate activity data

  • Abuse manual workout entry

  • Harass, intimidate, or disrupt others

NestEgg may suspend or remove accounts for misuse.

18. Governing Law & Jurisdiction

These Terms are governed by the laws of Ireland.

Any disputes arising under these Terms shall be subject to the exclusive jurisdiction of the Irish courts.

19. Changes to These Terms

We may update these Terms periodically.

Material changes will be communicated via the app or email. A change that expands how your data is used or who receives it applies only to Challenges that start after you accept it in the app. For other changes, continued participation constitutes acceptance.

20. Contact

Privacy inquiries: privacy@nestegghealth.com

General inquiries: info@nestegghealth.com