Privacy Notice

Version 1.0 | 23 September 2026

Effective date: 23 September 2026

1. Who we are

Maren Health Ltd (company number 17425009) ("Maren", "we", "us" or "our") provides the Maren Health mobile application and related website and services. Registered address: 89 Hersham Close, Roehampton, London SW15 4JQ, United Kingdom.

Privacy and data-protection contact: privacy@maren.health

2. What Maren does

Maren is a strength-training and wellness service designed for women in perimenopause and beyond. Each morning, Maren asks four check-in questions about sleep duration, sleep quality, muscle soreness and how the user felt the previous day. Those responses are used by a rule-based system to recommend a training level — Hard, Light or Rest — and explain the recommendation.

Maren is not a medical device and does not provide medical diagnosis or treatment. Its recommendations are fitness and wellness guidance, not medical instructions.

3. Information we collect

3.1 Account and authentication information

We may collect your name, email address, password credentials and authentication information needed to create and secure your account. On iOS, Maren supports Sign in with Apple.

3.2 Morning check-in information

We collect the information you provide through the four-question morning check-in: sleep duration, sleep quality, muscle soreness and how you felt the previous day.

3.3 Workout, training and symptom information

We collect information about workouts and training activity delivered or recorded through Maren, together with daily symptoms or other information you choose to log. Symptoms may include hot flashes, night sweats, fatigue, brain fog, anxiety, mood and joint pain.

3.4 Connected health data

If you connect Apple Health/HealthKit or Google Health Connect and grant the relevant permission, Maren reads sleep information on a read-only basis. Current technical processing stores aggregated sleep information such as total sleep duration and selected sleep-stage summaries, rather than raw health-platform samples. Connected sleep data is not currently used in the rule-based daily recommendation calculation.

3.5 HRT and medication information

You may provide HRT or medication information during onboarding. This information is stored in your profile when provided. The current daily recommendation engine does not use it to calculate the Hard, Light or Rest recommendation.

3.6 Technical and security information

We may process technical information needed to operate and secure the service, such as device and operating-system information, IP address, application logs and security events.

3.7 Push notifications

If you enable push notifications, Maren stores the push token needed to deliver notifications. Health information is not included in the notification payloads.

3.8 Payments and subscriptions

Subscriptions are intended to be purchased through Apple App Store or Google Play Billing. Maren does not store full payment-card details. We may receive subscription, transaction or entitlement information needed to provide the service and meet legal or accounting requirements.

3.9 Website forms and website tracking

If you submit your email address through a Maren website waitlist or launch-notification form, the form is processed using Formspree. The current Formspree form archives submissions for up to 30 days on the plan reviewed by Maren.

The website uses Meta Pixel for website event measurement, including PageView and Lead events. Non-essential tracking will be controlled through the website consent mechanism where consent is required.

4. How we use your information

create and administer your account;

authenticate and secure access to the service;

provide Maren’s daily training service;

use your morning check-in and relevant training information to personalise daily recommendations;

operate connected-health functionality where you have enabled it;

maintain and improve the service, including first-party product analytics;

respond to support requests and communications;

process subscriptions and related financial administration;

comply with legal obligations and establish, exercise or defend legal claims;

detect, investigate and prevent security incidents, fraud or misuse.

We will not use your health information for advertising or general marketing merely because it is processed for the Maren service.

5. Lawful basis and health information

Depending on the processing activity and applicable law, Maren may rely on performance of a contract, consent, legitimate interests or legal obligations. Where Maren processes health or other special-category information on the basis of consent, we will obtain the separate explicit consent required by applicable law and will not treat acceptance of these Terms as health-data consent.

Where processing relies on consent, you may withdraw that consent. Withdrawal does not make earlier lawful processing unlawful. Maren will stop new processing that depends on the withdrawn consent as soon as reasonably practicable.

6. Personalisation, profiling and automated recommendations

Maren uses the four morning check-in answers and relevant training information to personalise the daily workout recommendation. The current recommendation engine is rule-based and deterministic; no human reviews each recommendation before it is generated.

The recommendation is intended to provide fitness and wellness guidance. It is not intended to make decisions about employment, insurance, credit, access to healthcare or other legal rights or similarly significant matters. You retain control over whether to follow the recommendation and can choose rest or another available workout, subject to the options presented by the app.

7. Future features: Insight Engine and Personal Health & Training Report

Maren is being developed to evolve beyond daily recommendations. Future versions may analyse a user’s own historical check-ins, workouts and logged symptoms to identify personal patterns or generate a Personal Health & Training Report. These features are not currently part of the live production functionality described by this notice. Before materially new processing begins, Maren will update its privacy information and, where required, obtain additional consent or provide the relevant privacy choices.

8. Connected health platforms

Apple Health/HealthKit and Google Health Connect are optional integrations. Their platform permissions are separate from Maren’s own privacy choices. You can manage those permissions through your device or platform settings. Maren does not control the information held by Apple or Google in their own services.

9. Who we share information with

Hetzner — hosting and infrastructure;

Apple — Sign in with Apple, HealthKit/Apple Health and App Store services, as applicable;

Google — Google Health Connect and Google Play services, as applicable;

Expo / Expo Push Service — app update and push-notification infrastructure;

Formspree — website form and waitlist processing;

Meta — website event measurement and advertising/campaign measurement, subject to applicable consent requirements.

We do not sell your health information.

10. International transfers

Some service providers may store or access personal information outside the UK or EEA. Where a restricted transfer occurs, Maren will use an applicable lawful transfer mechanism and appropriate safeguards under the relevant data-protection law. The provider-level details and safeguards are maintained in Maren’s internal processor and transfer records.

11. Retention

Maren retains personal information for as long as reasonably necessary to provide the service and maintain your account, subject to legal and operational requirements.

As part of Maren’s retention policy, an account may be considered inactive after 12 months without meaningful use. Where appropriate, we may contact you and give you a further notice period before deleting an inactive account and associated personal information. Backup copies may persist for up to 30 days after primary deletion as part of the backup lifecycle.

Website waitlist submissions processed through the Formspree plan currently in use are archived for up to 30 days.

12. Security

Maren uses technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration and disclosure. These include encrypted communications, controlled server access, role-based permissions, secure device storage for authentication tokens and protected backups. Detailed internal security controls are maintained separately and reviewed as the service evolves.

13. Your rights

access your personal information;

correct inaccurate or incomplete information;

request deletion in applicable circumstances;

request restriction of processing in applicable circumstances;

receive certain personal information in a portable format where the legal conditions are met;

object to certain processing where the applicable legal conditions are met;

withdraw consent where processing relies on consent;

exercise rights relating to certain automated decision-making or profiling where applicable.

To exercise a right or ask a privacy question, contact privacy@maren.health. We may need to verify your identity before responding.

If you are in the UK and remain dissatisfied, you can complain to the Information Commissioner’s Office (ICO).

14. Account deletion

You may request deletion of your Maren account and personal information where the applicable legal conditions are met. Some information may need to be retained where required or permitted by law, including certain records needed for legal, accounting, security or dispute-resolution purposes.

15. Children

Maren is intended for adults aged 18 and over. We do not knowingly provide the service to children under 18. If we learn that an under-18 account has been created, we will take appropriate steps under applicable law.

16. Changes to this notice

We may update this notice when our services, processing activities or legal obligations change. We will publish the current version and effective date. Where required, we will provide additional information or seek fresh consent before new processing begins.

17. Contact

Maren Health Ltd 89 Hersham Close, Roehampton, London SW15 4JQ, United Kingdom privacy@maren.health