What we collect, how we use it, what your employer can and cannot see, and every right you have.
Effective August 24, 2026
This Privacy Policy explains what information OnPoint BioHealth collects through the OnPoint BioHealth mobile application, the on-site biometric scanner, the employer dashboard at hr.onpointbiohealth.com, and this website; how that information is used; who it is shared with; and the choices you have.
We built this product around one principle: your individual results are yours, and your employer never sees them. Everything below follows from that.
OnPoint BioHealth
Austin, Texas, United States
Contact: support@onpointbiohealth.com
The OnPoint BioHealth application is offered to employees through a voluntary wellness program sponsored by their employer. Participation is your choice, and you may stop at any time.
This policy covers three groups:
Many members access the Services through a wellness program sponsored by their employer or another organization (a "Program Sponsor"). Where a Program Sponsor contracts with OnPoint BioHealth to make the Services available, the Program Sponsor determines certain aspects of the program, and OnPoint BioHealth processes information on the Program Sponsor's behalf for those purposes. For information you provide directly to us, such as your account details and your use of the app, OnPoint BioHealth determines how that information is used as described in this Policy.
Regardless of program structure, one commitment does not change: your individual health measurements are never disclosed to your Program Sponsor. Section 8 describes exactly what Program Sponsors receive.
From you, directly.
From the biometric scanner.
When you step onto the scanner and enter your phone number, the device sends us your body composition results. This includes weight, body fat percentage and mass, skeletal muscle mass, total body water, intracellular and extracellular water, visceral fat level, segmental lean analysis, basal metabolic rate, and the device's own composite score. Derived values such as your OnPoint Score, trends, and percentile placement are calculated from these and form your personal results.
Automatically, as you use the app.
We do not use your information for automated decisions that produce legal or similarly significant effects.
We may create de-identified or aggregated data by removing information that identifies you. We may use and disclose such data for any lawful purpose, including analytics and service improvement, and we commit not to attempt to re-identify it.
If you opt in to receive text messages from OnPoint BioHealth, we will send messages related to your account and program, such as scan reminders and program updates, at the frequency disclosed at opt-in. Message and data rates may apply. You can opt out at any time by replying STOP, and reply HELP for help. Consent to receive text messages is not a condition of any purchase. No mobile information or SMS opt-in consent will be shared with or sold to third parties or affiliates for marketing or promotional purposes.
Where the GDPR or similar law applies, we rely on:
Your employer sees group statistics only. For example, overall participation, average trends, and how many people improved.
We use a small number of vetted, licensed third-party providers to operate the product. Each is bound by contract to protect your information, each receives only what it needs to do its job, and none of them may use your information for their own purposes.
| Purpose | What is shared |
|---|---|
| A verified cloud hosting and database provider | Application data, encrypted at rest |
| A licensed payment processor | Payment and billing details |
| A verified messaging provider | Your phone number, for sign-in codes |
| A verified push notification provider | A device notification token |
| The manufacturer of the biometric scanner | Your scan results and phone number |
| Verified fulfillment and shipping carriers | Name and shipping address, when you order |
| A verified email delivery provider | Email address and order details |
| A licensed telehealth provider | Only what you provide to them directly, and only if you choose clinical services |
We do not sell your personal information. We do not share it with anyone for advertising or marketing purposes, and we do not allow any provider to do so. We may disclose information if required by law, by subpoena or legal process, or to protect the rights and safety of our users. In connection with a merger, acquisition, financing or sale of assets, the receiving entity will continue to be bound by the commitments in this Policy or will provide you notice and any legally required choices.
If you would like to know the identity of any specific provider, email support@onpointbiohealth.com and we will tell you.
Your data is encrypted in transit and at rest using industry standard encryption. Access is restricted to personnel who need it, enforced by per-user access controls at the database level, with logging of administrative activity. Each employer's data is isolated from every other organization's at the database layer. Our infrastructure runs on providers certified to SOC 2 Type 2 and ISO 27001.
No system is perfectly secure. If a breach affects your personal information, we will notify you and the relevant authorities as required by law.
If you leave your employer's program or ask us to delete your data, we remove or de-identify your personal information as described below.
Depending on where you live, you may have the right to:
To exercise any of these, email support@onpointbiohealth.com with the subject line "Privacy Request." We verify your request using reasonable means and respond within 30 days. We will not discriminate against you for exercising any of these rights.
California. If you are a California resident, the California Consumer Privacy Act, as amended, grants you rights to know, access, correct, and delete personal information, and to opt out of "sales" or "sharing" of personal information. The categories of personal information we collect are described in Section 3; the purposes are described in Section 5; and the categories of recipients are described in Section 9. We do not sell personal information and do not share personal information for cross-context behavioral advertising. We do not use or disclose sensitive personal information for purposes requiring a right to limit under California law. You may exercise your rights, or authorize an agent to do so, by contacting us as described in Section 12.
Texas and other states. Residents of Texas and other states with comprehensive privacy laws may have similar rights of access, correction, deletion, and portability, and the right to appeal a refusal. We honor such requests as described in Section 12; to appeal a decision, reply to our response and your appeal will be reviewed by a different member of our team.
You can request deletion two ways:
What is deleted. Your name, phone number, email address, saved shipping address, profile details, scan results and history, personalized plans, challenge participation and nicknames, and your engagement points.
What is retained, and why. Order and payment records are kept for the period required by tax and accounting law, in a form separated from your health data. Aggregate statistics that cannot identify you may be retained. Records we are legally required to keep are retained for as long as the law requires.
Timing. Requests are processed within 30 days. Your account is recoverable during that window if you change your mind. After it completes, deletion cannot be undone, and any unredeemed rewards or store credit will be forfeited.
OnPoint BioHealth is intended for adults aged 18 and over participating in an employer wellness program. We do not knowingly collect information from anyone under 18. If you believe a minor has provided us with personal information, contact us and we will delete it.
We operate in the United States and your information is processed there. If you access the service from outside the United States, you understand that your information will be transferred to, stored and processed in the United States, where data protection law may differ from your own.
OnPoint BioHealth is a wellness product, not a medical device. It does not diagnose, treat, cure or prevent any disease. Body composition measurements are for general wellness and informational purposes, and are estimates affected by hydration, food intake, exercise and other factors. Always talk to a licensed healthcare provider about your health, and never disregard professional medical advice because of something you read in this application.
We may update this policy from time to time. If we make significant changes we will notify you in the app and update the date at the top of this page. Your continued use after a change means you accept the updated policy.
Questions about your privacy, or a request about your data?
Email: support@onpointbiohealth.com
Mail: OnPoint BioHealth, Austin, Texas, United States
We respond to privacy requests within 30 days.