Privacy Policy

Introduction

Astherion, Inc. (“Astherion,” “we,” “us,” or “our”) is a Delaware corporation headquartered in San Francisco, California. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, share, and safeguard your information when you visit our website or use our products and services - including the Ascendra One garment, the Aetheris coaching experience, and any third-party services you choose to connect.

Because some of our features process sensitive physiological data, we have written this policy to be plain-spoken about exactly what we do and do not do with it. If anything here is unclear, contact us at [email protected].

Information We Collect

Personal Information

When you sign up for our waitlist, place a pre-order, or contact us, we may collect:

• Name and contact information (email, phone number, address)
• Demographic information (age, location)
• Activity preferences and outdoor interests
• Payment information (processed by our payment provider for pre-orders and product purchases)

Biometric Data From Our Garment

Sensors integrated into the Ascendra One garment collect physiological data, including:

• Heart rate and heart rate variability (HRV)
• Distributed torso temperature (thermal array sensing across the torso)
• Movement, posture, and spinal-load data
• Breathing rate
• Blood oxygen saturation (SpO2)

This data is collected only with your explicit consent and is used to provide you with the Astherion experience - wellness and performance insights and live coaching. You retain ownership of your biometric data and can delete it at any time as described in Your Rights and Choices.

Data From Connected Third-Party Services

If you choose to connect a third-party wearable or health service (such as your Oura ring), we receive data from that service to power your live coaching experience. This is entirely optional, requires your explicit authorization, and is governed by the dedicated section Connected Services & Third-Party Data below, which controls how we handle that data.

Usage Data

We automatically collect information about your device and how you interact with our website and apps, including IP address, browser type, pages visited, and time spent on pages.

How We Use Your Information

• Live Coaching: To deliver the real-time, proactive and reactive physiological readout that powers the Aetheris coaching experience
• Personalization: To provide personalized wellness and performance insights
• Communication: To send you updates about your waitlist status, pre-order, or product
• Product Development: To operate, maintain, and improve our website, apps, and hardware
• Analytics: To understand how users interact with our products and website
• Legal Compliance: To comply with applicable laws and regulations

Model Training - Our Garment Data Only

Connected Services & Third-Party Data

Astherion lets you optionally connect third-party wearables and health platforms so their readings can enrich your live coaching experience. This section governs all data we receive from those services and takes precedence over any more general language elsewhere in this policy.

Which Services and What We Access

We currently support connecting your Oura account (and may add other wearables over time). Connecting is entirely optional and requires your explicit authorization through the third party’s secure sign-in and consent flow (OAuth). You decide whether to connect, and you choose the scope of access you grant. Depending on what you authorize, the data we may access from Oura includes:

• Heart rate and heart rate variability
• Sleep data
• Readiness data
• Activity and workout data
• Blood oxygen saturation (SpO2)
• Stress data

We only access the categories you grant during the consent flow.

Purpose Limitation - Live Coaching Only

Data from connected third-party services is used for a single purpose: to provide your live coaching experience - the real-time, proactive and reactive physiological readout delivered while you use Astherion. It is used for no other purpose.

No AI Training on Connected-Service Data

Connected-service data is used solely to generate your in-the-moment coaching readout. It never becomes training data, and it is never used to build, benchmark, or refine any model or algorithm.

No Sale and No Onward Sharing

We never sell, rent, license, or otherwise share data from connected third-party services with any third party. We do not combine or correlate it with other data to re-identify you, and we do not use it for advertising or profiling.

Transient Handling - No Persistent Storage

Data from connected third-party services is processed transiently to power your live session. It is not retained in our persistent data stores beyond what is strictly necessary to deliver the in-session coaching experience. We do not build long-term archives of your third-party-service data.

Disconnecting and Revoking Access

You can disconnect a connected service at any time, with no loss of access to the underlying third-party service itself. You can:

• Disconnect the service from the in-app Connections (Settings) screen in the Astherion app; and
• Revoke Astherion’s authorization directly with the provider - for Oura, in your Oura account or app settings.

When you disconnect or opt out, we immediately cease accessing and processing that service’s data.

Deletion Within 72 Hours

If you request deletion of data obtained from a connected third-party service, we will delete that data from our systems within 72 hours of your request. To make a request, contact [email protected].

Data Sharing and Disclosure

We do not sell your personal or biometric data. Ever. The restrictions on connected third-party data in the section above always apply to that data and are never overridden by anything below.

For other personal information, we may share it only in these limited circumstances:

• Service Providers: With trusted vendors who help us operate our business (e.g., hosting, email, and payment processing), under contractual confidentiality and data-protection obligations
• Aggregated or De-Identified Data: We may share anonymized, aggregated data that does not identify you - this never includes data from connected third-party services
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets (you will be notified)

Analytics and cookies

We use PostHog, an analytics service, to understand how people use astherion.com. Until you accept cookies, it runs without them: PostHog stores nothing in your browser, your visits are not recorded as replays, and each visit is counted by a code PostHog computes on its servers from your network address, your browser’s user agent, and a value that changes every day. A visit tomorrow gets a different code, so it cannot be linked to a visit today, and the code cannot be turned back into your address. Vercel, which hosts the site, also counts page views anonymously, by a code it makes from each request and discards within a day. The campaign tags of the address you arrived on (for example, that our newsletter linked you here) are kept only while the page is open. If you give us your email address in a form, we do not tie it to your visits. An order is the exception: it records the campaign that brought you to the page you ordered from (its tags, an ad click identifier, the page you arrived on, and the site that linked you there), so we can tell which campaign led to it.

If you accept, PostHog stores an identifier in a cookie and in your browser’s local storage so it can recognize this browser when you return, and it may record replays of your visits, with every form field masked. We keep the campaign that first brought you here in your browser, so a later order can be traced to it. Accepting also loads the Meta pixel and the Google tag, which measure our ads.

Without an accept, we store only what the site needs in order to work: your choice, a note for this tab that our offer has already been shown to you, and, if you ask for investor access, that access and the email address you gave for it. You can change your choice at any time, here or at the foot of any page: Cookie choices. If you decline after accepting, replays stop, we remove what we stored, and the Meta and Google tags are told to stop.

Beyond the limit by email

If you sign up for Beyond the limit by email on astherion.com, we use your email address only to send you those letters. We first send a confirmation email, and we add you to the list only after you confirm. The list is kept by our email provider, Resend, which sends the letters on our behalf; we do not keep a copy of it in our own systems, and we never sell it or use it for anything else.

Every letter carries an unsubscribe link, and unsubscribing takes effect at once. Resend records whether each letter was delivered, so we can tell when letters do not arrive. To be removed from the list entirely, write to [email protected].

Your Rights and Choices

Depending on where you live, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Update or correct your information
• Deletion: Request deletion of your data (subject to legal requirements)
• Opt-Out of Data Sharing: Opt out of any sharing of your personal information; we do not sell data
• Data Portability: Request your data in a portable format
• Biometric Data Control: Delete all garment-collected biometric data from our systems at any time
• Connected-Service Control: Disconnect any connected service at any time and request deletion of its data - without losing access to the underlying third-party service
• Marketing Opt-Out: Unsubscribe from marketing communications at any time

We will not discriminate against you for exercising any of these rights. To exercise them, contact us at [email protected].

Data Security

We implement industry-standard security measures to protect your data, including encryption in transit and at rest, access controls, and regular security reviews. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Data Retention

We retain personal data only as long as necessary to provide our services and meet legal obligations. Specifically:

• Garment biometric data is retained while you actively use our products, and is deleted at your request at any time.
• Connected third-party-service data is processed transiently for your live session and is not kept in persistent stores beyond what is strictly necessary to deliver that experience. On a deletion request, it is removed within 72 hours.
• Other personal information (such as contact and order details) is retained as long as needed for the purposes described in this policy or as required by law.

Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect data from children. If you believe a child has provided us data, contact [email protected] and we will delete it.

International Data Transfers

Your data may be transferred to and processed in the United States or other countries where we or our service providers operate. We ensure appropriate safeguards are in place for such transfers.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through our website. Your continued use of our services after such changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

See also our Terms of Service.