Privacy Policy

1. Introduction

Sentia Holdings Inc. (“Sentia,” “we,” “our,” or “us”) operates BAiO+™ (our enterprise health intelligence platform) and BAiO™(our consumer health and wellness platform). Together, these platforms are referred to in this Policy as the “Sentia Platforms.”

This Privacy Policy describes how Sentia collects, uses, shares, and protects personal and health-related data processed through the Sentia Platforms. It applies to all users, including athletes, dancers, military personnel, corporate wellness participants, and any other individuals onboarded by their respective organizations or accessing the consumer platform directly.

2. Information We Collect

Data collected or entered into the Sentia Platforms may include:

• Biometric and physiological data from wearable devices and integrated sensor systems (e.g., heart rate, HRV, SpO2, activity levels, sleep metrics, biomechanical movement data)
• Medical and health records, injury history, incident logs, and clinical notes provided by authorized medical or team staff
• Performance, recovery, and readiness data, including AI-generated health indices, risk scores, and readiness assessments
• Demographic information relevant to health analytics (e.g., age, role, physical profile)
• Account and profile information such as name, email address, and organizational affiliation
• Usage data related to platform interactions, session activity, and feature engagement

3. How We Use This Information

We use the information we collect to:

• Provide AI-powered health analytics, recovery tracking, risk assessments, and performance insights through the Sentia Platforms
• Generate reports and actionable insights accessible to authorized personnel and individual users
• Customize platform experiences based on organizational type and user role (e.g., athlete, dancer, military, corporate)
• Improve, validate, and enhance Sentia’s algorithms and scoring models using de-identified and aggregated data
• Fulfill our contractual obligations to organizations and individual subscribers
• Support compliance with applicable health data and privacy regulations
• Communicate platform updates, security notices, and service-related information

4. How We Share This Information

Authorized Personnel

Within enterprise deployments (BAiO+), user data is accessible only to organizational staff explicitly authorized through the platform’s role-based access controls.

Service Providers

Sentia works with cloud infrastructure and data processing providers under signed data processing agreements. These vendors process data solely on Sentia’s behalf and have no independent right to use it.

Integrated Third-Party Systems

Where organizations utilize third-party sensor or data systems that integrate with the Sentia Platforms, limited data may be shared as necessary to facilitate that integration. Such sharing is governed by applicable agreements and is restricted to the minimum data required.

Legal Requirements

We may disclose data as required by applicable law, court order, or regulatory obligation.

De-Identified and Aggregated Data

Sentia may use de-identified and aggregated data for research, product improvement, and reporting purposes. Such data cannot reasonably be used to identify any individual.

5. HIPAA Compliance

Sentia is committed to compliance with the Health Insurance Portability and Accountability Act (HIPAA) where applicable. Our practices include:

• Implementing administrative, technical, and physical safeguards for protected health information (PHI)
• Entering into Business Associate Agreements (BAAs) with covered entities and subcontractors as required
• Restricting access to PHI to authorized individuals on a need-to-know basis
• Maintaining audit trails for access to and modification of health data
• Conducting periodic risk assessments and security reviews

Organizations that are covered entities or business associates under HIPAA should contact Sentia to discuss applicable agreements and compliance requirements.

6. Data Security

Sentia implements industry-standard security measures to protect user data, including:

• Role-based access controls limiting data access to authorized personnel only
• Encryption of data in transit and at rest
• Audit logging of all data access and modifications
• Regular security assessments and monitoring
• Incident response procedures for potential data breaches

7. Data Retention

User data is retained for the duration of the organization’s or individual’s active subscription, and for a reasonable period thereafter as required by applicable law, regulatory obligation, or as specified in the applicable service agreement. Users or organizations may request earlier deletion subject to legal and contractual requirements.

8. User Rights

Enterprise Users (BAiO+): Because data is entered into BAiO+ by organizations, individuals seeking to access, correct, or request deletion of their data should do so through their organization. Sentia will cooperate with organizations to honor such requests in accordance with applicable law and the organization’s service agreement.

Consumer Users (BAiO): Individual users of the BAiO consumer platform may directly request access to, correction of, or deletion of their personal data by contacting Sentia at the address below.

Sentia will respond to verified requests in accordance with applicable privacy laws, including but not limited to the California Consumer Privacy Act (CCPA) where applicable.

9. Compliance

The Sentia Platforms are designed to support organizations’ and users’ compliance with applicable health data regulations, including HIPAA, state health privacy laws, and other relevant frameworks. Organizations remain responsible for ensuring their use of the Sentia Platforms complies with their own regulatory obligations.

10. Updates to This Policy

Sentia may update this Policy as the Sentia Platforms evolve or as legal requirements change. The current version will always be available at baio.io/privacy-policy. Material changes will be communicated through the platform or via email to active users.

11. Contact

For questions about this Policy or data handling practices:

Sentia Holdings Inc.
Email: contact@sentiaholdings.com
Phone: (450) 288-3668