Version 1.5 — Last updated 2 November 2026

Terms of Service & Privacy Policy

This page covers the terms under which Lifeline Health ehf. ("Lifeline", "we", "our") provides its services, and how we handle personal data about individual users ("you") and business customers. It is written in plain language. A formal Icelandic translation is available on request.

1. Who we are

Lifeline Health ehf. is an Icelandic company providing digital health coaching, body composition tracking, and telemedicine services through the website lifelinehealth.is and the Lifeline mobile app.

2. Services we provide

Health assessments, programs, and coaching delivered by licensed Lifeline staff.
Body composition measurements. The results are recorded in Lifeline's secure electronic health record, where you can read them.
Optional in-app tracking (meals, weigh-ins, habits) and community features.
For business customers: employee onboarding and aggregate reporting.

3. Your account

To use Lifeline you must create an account. You're responsible for keeping your password safe and for activity on your account. You must be at least 18 years old, or have parental consent, to register.

4. Personal data we collect

When you register directly, we collect:

Name, email, phone number
Date of birth, sex, height, weight, activity level
Health goals you choose to share
Body composition measurements, if you visit a partner clinic
Meal logs, weigh-ins, program progress, and messages if you use those features

If you onboard through a business customer (your employer), the contact person at your company provides us your name, kennitala, email, and phone before inviting you. You then fill in the remaining fields yourself during onboarding. Lifeline never shares your health data back to your employer — only onboarding completion status.

5. How we store your kennitala

Your kennitala is encrypted at rest using industry-standard symmetric encryption. The encryption key is managed separately from the database. Only a narrow set of server processes — not individuals — can request a decryption, and every decryption is logged. Lifeline staff who need to identify you in a support context see only the last four digits by default.

6. What we use your data for

Service operation. Providing the features you requested.
Safety & quality. Detecting abuse, preventing fraud, debugging errors.
Research (opt-out). We may use non-identifiable versions of your data to improve Lifeline and for anonymised clinical research. You can opt out during onboarding or at any time from your account settings.
Marketing (opt-out). Occasional product updates and promotions by email. You can opt out during onboarding, from any email, or from account settings.

7. Who we share data with

Medalia ehf. — hosts and operates Lifeline's secure electronic health record (Icelandic Act no. 55/2009), where your formal medical record is held. Lifeline Health ehf. is the controller of health-record data and Medalia ehf. is Lifeline's processor under GDPR Art. 28.
Lifeline only stores the last four digits of your kennitala (data minimisation); we do not store the full number.
Supabase (our database and authentication provider) and Vercel (our web hosting provider), under GDPR-compliant data processing agreements.
Resend (our transactional email provider), which delivers invitations and notifications.
Icelandic health authorities and law enforcement, if legally required.

We never sell your personal data.

8. How long we keep your data

We keep your account and related health data while your account is active. If you delete your account, we delete personally identifying information within 30 days, except where retention is required by Icelandic health law. Anonymised aggregates may be kept indefinitely.

9. Your rights

Under the Icelandic Data Protection Act and the EU GDPR you have the right to access, correct, export, restrict, or delete your personal data. Email contact@lifelinehealth.is and we will respond within 30 days. You also have the right to lodge a complaint with the Icelandic Data Protection Authority (Persónuvernd).

10. Security

Lifeline uses TLS for data in transit, encryption at rest for sensitive fields, role-based access controls, and audit logging. No system is perfect — if you believe your account has been compromised, contact contact@lifelinehealth.is.

11. For business customers (B2B)

If your organisation onboards employees through Lifeline, the following applies in addition:

Lifeline acts as a data processor for health data that employees choose to share, and as a data controller for platform operations.
The contact person at your company can see the employee roster (name, email, phone, kennitala last-4) and onboarding completion status — not health data.
A full kennitala export is available to Lifeline staff only, for audit and regulatory purposes.
Your organisation represents that it has a lawful basis (employment contract, occupational-health programme, or employee consent) to share employee contact information with Lifeline.
Lifeline will delete employee records at your written request, except where retention is legally required.

When a company is created in the Lifeline portal, the authorised contact person separately accepts two dedicated agreements, each maintained and versioned on its own:

the Platform Terms of Service (Notkunarskilmálar, v1.1) governing portal access, and
the Data Processing Agreement (Vinnslusamningur, v1.0) under GDPR Art. 28.

Those documents — together with the company's separately signed service agreement and purchase order — are the binding instruments for B2B customers. This page is the general consumer-facing terms and privacy policy; its version number is independent of the B2B platform agreements above.

12. Payment and subscriptions

Consumer purchases — one-off health assessments and Lifeline app subscriptions — are governed by the dedicated Sales & Subscription Terms (Söluskilmálar in Icelandic), which set out pricing, auto-renewal, the 14-day right of withdrawal, refunds and the role of our payment processor. The Icelandic version is the legally binding original.

For B2B customers, billing is governed by your separate service agreement and the platform terms accepted by your organisation.

13. Medical disclaimer

Lifeline is a health coaching and wellness service, not a substitute for a licensed physician. Always consult a qualified clinician before making changes to medications, chronic-disease management, or if you are pregnant, nursing, or have a medical condition. In an emergency, call 112.

14. Changes to these terms

We may update this document occasionally. Material changes will be notified to you by email or in-app at least 14 days before they take effect. The current version is always available at lifelinehealth.is/terms.

15. Governing law

These terms are governed by Icelandic law. Disputes are subject to the exclusive jurisdiction of the courts of Reykjavík, unless consumer protection law provides otherwise.

16. Contact

Lifeline Health ehf. · Reykjavík, Iceland