WellPD — Privacy Notice — United States
HOW EMPATICA PROCESSES YOUR PERSONAL DATA
Last updated: 20 October 2026
1. Who we are and what this Notice covers
This Privacy Notice (“Notice”) explains how Empatica processes personal data — including health data — of people who purchase and use WellPD: the Embrace Mini wearable, the WellPD mobile application (“App”), the User Portal and the Subscription Service (together, the “Services”).
Empatica is the data controller for all processing described in this Notice: we decide why and how your personal data are processed, and we are responsible for that processing. Your controller is Empatica Care, Inc., 1 Broadway, 14th Floor, Cambridge, MA 02142, USA, the entity you contract with under the WellPD Terms and Conditions (“Empatica”, “we”, “us”). Other companies of the Empatica group process your data on our behalf, as described in section 6.
This Notice should be read together with the WellPD Terms and Conditions and the Instructions for Use. It does not cover data processed by your healthcare professionals: WellPD is a product you buy and use yourself; no healthcare professional receives your data through WellPD unless you export a report and share it yourself (section 6(d)).
Where used in this Notice, “you” means the person who holds a WellPD account and wears the Embrace Mini.
2. Personal data we process
Identity and contact data — name, date of birth (used, together with the Wearable’s serial number, to sign you in to the App, and to verify that you are at least 18), gender, postal and email address, phone number, the e-mail address and password you use for the User Portal, language and country of residence.
Health-related data — physiological signals recorded by your Wearable (for example movement data from its accelerometer; the signals depend on the Wearable model), wearing time, Parkinson’s-related measures computed from them (tremor, bradykinesia and dyskinesia scores), sleep and activity measures (including non-wear or “no data” time), the medication plan you enter in the App (medication names, doses and schedule) and your medication log (taken, skipped, as-needed), the WellMove motor measure and the daily PD insights narrative generated from your recordings, monitoring time, symptoms and notes you record, and your prescription (section 16). Health-related data are “sensitive” data and “consumer health data” under the state laws described in section 16 and receive additional protection.
Insights — summaries, trends and interpretations generated from your Wearable data and App entries, some of them automatically by artificial intelligence (section 5).
Order, payment and subscription data — orders, shipping details, subscription status, payment method reference and transaction records (card details are collected and stored by our payment service provider, Stripe, not by Empatica — section 6(b)).
Device and technical data — Embrace Mini serial number, firmware and App version, phone model and operating system, IP address, identifiers, Bluetooth and connectivity status, battery, crash and diagnostic logs, timestamps, App usage events.
Usage and analytics data — which screens you open and which features you use in the App and the User Portal, and pairing/onboarding events, recorded with a pseudonymous identifier.
Support and communications data — your requests to customer support, adverse-event reports, survey answers, feedback and other User Submissions, and our records of communications with you.
Marketing data — your consent choices, subscription status to newsletters and interaction with our messages.
We do not process data of children: WellPD is intended for adults aged 18 and over (section 9).
3. Where the data come from
Mostly from you and your use of the Services: what you enter at purchase and registration, what the Embrace Mini records while you wear it, and what the App and Portal record while you use them. We also receive data from an authorized representative acting for you, from your payment service provider (payment confirmation), from the app stores (purchase and installation status), and from the prescription you upload in the User Portal and, where we need to clarify it, from the healthcare provider who issued it. If you contact us on social media, we may receive the data those platforms share with us.
4. Why we process your data and on what legal basis
The table lists each purpose, the data used and why we may use it; section 16 sets out your rights under the laws of your state.
Purpose | Data | Why we may use it | What happens if you do not provide the data |
|---|---|---|---|
Providing WellPD — selling and shipping the Embrace Mini, creating and managing your account and subscription, pairing the Wearable, recording and displaying your measurements, sleep, activity, medication log and Insights, sending service messages by e-mail, text message, phone call or push notification (for example the reminder we send at least 7 days before your subscription renews) | Identity and contact, order/payment/subscription, device and technical, health-related data, Insights | Necessary to provide the product and services you request under the Terms and Conditions; for health data, your consent, requested in the App before the Wearable records data | Without the contract data we cannot sell or deliver WellPD; without your consent to health data the Wearable cannot record and the App cannot display measurements |
Customer support — answering your requests, troubleshooting, warranty and returns | Identity and contact, support, device and technical, and — where needed to help you — health-related data | Necessary to provide the services you request; for health data, your consent when you ask us to look at your recordings | We may be unable to resolve your request |
Safety and vigilance — monitoring the performance and safety of the Embrace Mini and the App, investigating incidents, handling adverse-event reports, corrective actions, reporting to authorities | Health-related, device and technical, support data, adverse-event records | Required by medical-device law (FDA requirements for complaint handling, medical device reporting and corrections) | Mandatory — we cannot exempt you |
Regulatory and quality management — records required by medical-device law and our quality management system, audits and inspections | Device usage, calibration and validation records, health-related data where the record requires it | Required by medical-device law (FDA quality management system requirements) | Mandatory |
Security — protecting our systems, detecting and preventing fraud and security incidents, logging access | Device and technical, account and usage data | Necessary to keep the Services and your data secure and to prevent fraud | Mandatory for the operation of the Services |
Improving WellPD and research — analytics and research on pseudonymized data to evaluate and improve the algorithms, develop new features and digital biomarkers, and support future regulatory and clinical submissions | Health-related, device and usage data in pseudonymized or aggregated form; demographic data | Your consent, requested separately in the App | Optional — you can refuse or withdraw at any time; WellPD works the same |
Marketing — news about Empatica products and services, surveys, educational content, by email or in-app | Identity and contact, marketing preferences, interaction data | Your consent; you can opt out at any time | Optional |
Legal claims — establishing, exercising or defending legal claims | Whatever data the dispute concerns | Necessary to establish, exercise or defend legal claims | — |
Corporate transactions — assessing and carrying out mergers, acquisitions, financing or sale of assets | Whatever data the transaction concerns | Necessary for the transaction; health data related to an identified or identifiable individual will not be shared | — |
Accounting and tax — invoices, payments, statutory records | Identity, order and payment data | Required by tax and accounting law | Mandatory |
Consent. Where the table says we rely on your consent, we ask for it separately in the App or on the website, with a clear description of what you are agreeing to. Accepting the Terms and Conditions is not consent. You can withdraw consent at any time in the App settings or by writing to privacy@empatica.com; withdrawal does not affect processing carried out before it. If you withdraw consent to the processing of health data for providing WellPD, the Wearable stops recording and the App stops displaying measurements; you may keep your account and export your data (section 7).
5. Insights, artificial intelligence and automated processing
Some Insights are generated automatically, without human review, by algorithms — including artificial-intelligence models — that analyze the data recorded by your Wearable and the entries you make in the App. The App labels AI-generated Insights as such. Insights are for your information: they are not medical advice, and no decision producing legal or similarly significant effects on you is taken by automated means. The PD insights narrative is produced on our servers by a language model from a summary of your recordings for the period; the model runs within our cloud infrastructure (Amazon Web Services), which acts as our processor and does not use your data for its own purposes or to train its models. Generated insights are stored with your account so that they stay the same each time you open them. Empatica does not use your data to train models that could identify you; models are trained on pseudonymized or aggregated data, and only from users who have consented to research and improvement (section 4).
6. Who receives your data
We disclose personal data only to the extent necessary for the purposes in section 4.
(a) Empatica group. Empatica S.r.l. (Italy) operates the WellPD platform; Empatica, Inc. (United States) provides hosting operations, technical support and customer success; Global Kinetics UK Corporation Limited (United Kingdom) provides support and account administration for UK users; Empatica Care, Inc. (United States) sells WellPD in the United States. Your controller is Empatica Care, Inc.; the other group entities act as its processors, under the intercompany data-processing agreement that binds them.
(b) Service providers (processors) acting on our documented instructions: cloud hosting and storage; identity and access management; infrastructure monitoring and logging; customer-support ticketing; SMS, email and push-notification delivery; payment processing (Stripe, LLC, United States, which also acts as an independent controller for its own legal obligations, such as fraud prevention and anti-money-laundering checks, under its own privacy notice); shipping and logistics; tax calculation; surveys; AI infrastructure (within our cloud provider); audit and certification. Our current list of service providers, with their location, is published at https://www.empatica.com/wellpd/privacy-policy/sub-processors and updated when it changes; you can also ask us for it.
(c) Authorities and regulators — medical-device competent authorities (for example for vigilance reporting), supervisory authorities, courts and law enforcement, where the law requires or permits it, limited to what is necessary.
(d) People you choose to share with. You can export a report from the App or the User Portal and share it with your healthcare professional or anyone else you choose. We do not send it on your behalf; once you have shared it, the recipient is responsible for how it is used.
(e) Professional advisers and successors — auditors, lawyers and, in a corporate transaction, the acquiring or successor entity, under confidentiality and with equivalent safeguards.
We do not sell your personal data and we do not share it with third parties for their own marketing.
7. Your rights and how to exercise them
Depending on the law that applies to you (section 16), you have the right to: access your personal data and obtain a copy; rectify inaccurate data; erase your data (we may have to keep data that medical-device or other law requires us to retain — we will tell you); restrict processing in the cases the law provides; port the data you provided to us, in a machine-readable format, where processing is based on consent or contract and carried out by automated means — the App and the User Portal include an export function; object to processing based on legitimate interests and, at any time, to direct marketing; withdraw consent at any time; not be subject to a solely automated decision with legal or similarly significant effects; obtain information about international transfers and a copy of the safeguards; and lodge a complaint with the authorities identified in section 16.
Write to privacy@empatica.com or use the in-App privacy settings. We may ask you to verify your identity. We respond within the time the applicable law sets (within 45 days, extendable once by a further 45 days where reasonably necessary) and free of charge, unless a request is manifestly unfounded or excessive. An authorized representative may exercise rights on your behalf with your written authorization.
Privacy contact. Write to privacy@empatica.com or to the postal address in section 15.
8. How long we keep your data
Data / purpose | Retention |
|---|---|
Account, contract and subscription data; measurements, medication log and Insights | For the duration of the contract and for 10 years thereafter (the limitation period for contractual liability), unless a longer period is required by litigation, requests of competent authorities or applicable law. You may ask for earlier erasure (section 7); we then delete what no legal obligation requires us to keep |
Safety, vigilance and quality-management records (including the pseudonymized device data those records require) | For the period medical-device law prescribes — up to 25 years after pseudonymization |
Research and improvement (with your consent) | Pseudonymized data up to 25 years after pseudonymization, unless you withdraw consent earlier; anonymized data indefinitely |
Marketing | Until you withdraw consent or object and, in any event, no longer than 24 months after your last interaction with our communications |
Security logs | 7 days to 1 year depending on the log, unless needed to investigate an incident |
Support records and adverse-event reports | Support: 3 years after closure; adverse-event reports: as vigilance records above |
Legal claims | Until the applicable limitation period expires |
After the retention period we securely delete or irreversibly anonymize the data in accordance with our data-retention procedures.
9. Children
WellPD is intended for adults aged 18 and over and is not intended for children. We do not knowingly process children’s personal data; if we learn that we have, we delete it.
10. International transfers
Empatica S.r.l. is established in Italy; Empatica, Inc. and Empatica Care, Inc. in the United States; Global Kinetics UK Corporation Limited in the United Kingdom. Our service providers operate in the European Economic Area, the United States and other countries. Your data are stored in the United States (AWS, Virginia).
Empatica group entities and service providers may access your data from Italy, the United Kingdom and other countries for support and operations; this access is covered by contractual safeguards, including the Standard Contractual Clauses between Empatica S.r.l. and Empatica, Inc. You can ask us for a copy of the safeguards (section 7).
11. Security
We apply technical and organizational measures appropriate to the sensitivity of health data, under an information-security management system certified to ISO/IEC 27001: encryption in transit and at rest, pseudonymization of research data, access control and multi-factor authentication, logging and monitoring, secure development, backups and business continuity, staff training and confidentiality obligations, and contractual security obligations on our service providers. No system is perfectly secure; keep your Wearable, your phone and your User Portal password secure — anyone who holds your Wearable and knows your date of birth can sign in to the App — and tell us at once if your Wearable is lost or stolen or if you suspect misuse of your account.
12. Cookies and tracking
The App and the User Portal use only the technical cookies and identifiers necessary to operate them and, with your consent, analytics. Our websites use cookies, including Google Analytics for marketing, as described in the Empatica Cookie Notice at https://www.empatica.com/legal/cookie_policy.
13. Third-party links
The Services may contain links to third-party websites or apps. Their privacy practices are governed by their own notices; we are not responsible for them.
14. Changes to this Notice
We may update this Notice to reflect changes in the law or in the Services. We post updates in the App and on our website and update the “Last updated” date; for material changes we notify you in advance by email or in the App and, where the law requires it, ask for your consent again.
15. Contact
privacy@empatica.com — Empatica Care, Inc., 1 Broadway, 14th Floor, Cambridge, MA 02142, USA (attention: Privacy).
16. Information for users in the United States
Controller (business): Empatica Care, Inc., 1 Broadway, 14th Floor, Cambridge, MA 02142, USA. Empatica S.r.l. and Empatica, Inc. provide the platform and support on its behalf. Prescription. Federal law restricts WellPD to sale by or on the order of a physician, so WellPD is available in the United States by prescription only. You upload your prescription in the User Portal; before dispatch an automated internal system checks it, Empatica staff review the cases it flags, and we may contact you or your prescriber to clarify it. We use your prescription and your prescriber's details only to verify your order, as the law requires, and keep them with your order records for the period in section 8; if we cannot verify a valid prescription, we cancel the order and refund you. Your privacy choices. Marketing: opt out using the unsubscribe link or by writing to us; push notifications: in your device settings; research and improvement: withdraw consent in the App. Your privacy rights and state-specific disclosures. Depending on your state you may have the right to know/access, correct, delete and port your personal information, to opt out of certain processing, and to appeal our decision; requests to privacy@empatica.com; we verify your identity and respond within 45 days (extendable once). We do not sell personal information and do not share it for cross-context behavioral advertising; we do not process sensitive data or consumer health data for purposes other than those in section 4, which you have consented to or which the law permits.
16.1 Consumer health data (Washington and Nevada). If you live in Washington or Nevada, or your consumer health data are collected there, our Consumer Health Data Privacy Policy at https://www.empatica.com/wellpd/privacy-policy/us-wa-en also applies. It describes the consumer health data we collect, why we collect them, where they come from, with whom we share them, and your rights.
16.2 California Privacy Addendum (CCPA/CPRA). Applies to California residents. Categories collected in the last 12 months (section 2): identifiers; customer records; commercial information; internet/electronic activity; inferences (Insights); sensitive personal information — health data and account credentials. Sources, purposes and disclosures: sections 3, 4 and 6; disclosures are to service providers under written contracts and to the parties in section 6. Sale / sharing: none; we do not “sell” or “share” personal information and have not done so in the last 12 months, and we have no actual knowledge of selling or sharing data of consumers under 16. Sensitive personal information is used only for the purposes permitted by Cal. Code Regs. tit. 11 §7027(m); you may nonetheless limit its use by writing to us. Retention: section 8. Your rights: to know/access, delete, correct, and port; to limit use of sensitive personal information; to non-discrimination. Authorized agents may submit requests with your written permission. Contact: privacy@empatica.com (as a business operating exclusively online with a direct relationship with you, we accept requests by e-mail).
16.3 Other states. Residents of states with a comprehensive consumer privacy law — currently Colorado, Connecticut, Delaware, Indiana, Maryland, Minnesota, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas and Virginia — have, where that law applies to us, the rights described under “Your privacy rights”, including the right to appeal our decision. Several of these laws treat health data as sensitive data that we process only with your consent; Connecticut also protects consumer health data specifically. WellPD is not sold in Alabama, Iowa, Kentucky, Michigan, Montana, North Dakota or Utah.