Elle Santé
For every woman · Infinite journeys
Privacy & security

Your health data is yours.

At Elle Santé, privacy is built in, not bolted on — you decide what is shared, with whom, and when.

HIPAA PIPEDA PHIPA Québec Law 25 GDPR
Our principles

Privacy by design, not by exception.

Six commitments that hold true on every screen, for every woman, in every journey — no fine print required.

You own your data

Your records, symptoms, and history belong to you — not to us, and never to an advertiser. You're the account holder, always.

We never sell your data

Your information is not a product. We don't sell it, rent it, or trade it — and we never show you ads based on your health.

Encrypted in transit & at rest

Strong, modern encryption protects your data on the wire and in storage — so it stays unreadable to anyone it isn't meant for.

Data minimization

We collect only what improves your care. No mystery tracking, no data hoarding — if it doesn't help your journey, we don't ask for it.

You control sharing

Grant or revoke access to your care team anytime. Sharing is a switch you hold — turn it on for a clinician, turn it off whenever you like.

Export or delete anytime

Take your data with you in a portable format, or ask us to erase it for good. It's your record — leaving is as easy as joining.

These aren't settings buried in a menu — they're the defaults. Privacy is the starting point, for both the women we serve and the clinicians who care for them.
How your data is protected

Layered safeguards, quietly at work.

Protection doesn't depend on you remembering to switch it on. It runs underneath everything you do — continuously.

Encryption

Your data is encrypted in transit and at rest using strong, industry-standard algorithms.

Access controls & audit logs

Only authorized people reach your record, and every access is logged — so nothing happens in the dark.

Canadian / regional data residency

Data is stored in the region it belongs to, aligned with PHIPA and Québec Law 25 expectations.

Continuous monitoring

Systems are watched around the clock so unusual activity is caught early, not after the fact.

Reproductive health data

Cycle & symptom data, handled with care.

Women's health data is uniquely sensitive. Cycle, fertility, and symptom information receives extra protection — and is never sold, never used for advertising, and never used against you.

Elle Santé turns what you track into better, more personalized care — that is the only purpose it serves. Patterns surface for you and, when you choose to share, for your care team. It stays consented, controlled, and reversible. Powering your journey is the job; nothing else.

Consent-based Never for ads
Privacy questions, answered

The questions women and clinicians ask.

Only you, and the people you explicitly grant access to — typically the clinicians on your care team. You can see exactly who has access at any time, and grant or revoke it in a tap. No one else can view your record without your permission.
No. We never sell, rent, or trade your data, and we do not run health-based advertising. Your information exists to power your care — not to be monetized. That applies to cycle and symptom data just as strictly as everything else.
Your data is stored in regionally appropriate infrastructure with data-residency aligned to PHIPA and Québec Law 25 expectations. Canadian women's data is kept in line with Canadian privacy requirements.
Yes — in transit and at rest, using strong, industry-standard encryption. Access is restricted to authorized people, and every access is recorded in an audit log.
Yes. You can export your data in a portable format and request deletion of your record at any time. Leaving is as straightforward as joining — your data follows you, or disappears, on your terms.
Sharing is a switch you control, per person. Turn it on for a clinician and they can see the parts of your record relevant to your care; turn it off and access stops immediately. You can adjust or revoke sharing whenever you like — nothing is permanent without your say.
Elle Santé is designed to meet the frameworks that govern sensitive health data — HIPAA, PIPEDA, PHIPA, Québec Law 25 (Bill 25), and GDPR. Privacy and security are part of how the platform is built, not a policy added afterward.
We're happy to go deeper

Questions about privacy?

Talk to our team — whether you're a woman trusting us with your story or a clinician trusting us with your patients.