Fold by Canary MedTech
Legal

Privacy Policy

How Canary MedTech collects, uses, shares, and protects information across the Fold and Slate products, our websites, our store, and the Fold Health app.

Effective date: [Effective date] Last updated: [Last updated] Applies to: Fold · Slate · Fold Health app · canarymedtech.com

At a glance

We collect only what we need to sell, ship, and support our products, run our websites, and operate the Fold Health app.
Your weight readings belong to you. We do not sell them, and we do not share them with your care team, an employer, or an insurer unless you choose to share them.
We do not sell or share personal information for cross-context behavioral advertising as those terms are defined under U.S. state privacy laws.
You can request access to, correction of, or deletion of your information at any time.

This summary is provided for convenience only. The sections below govern.

1. Who we are

This Privacy Policy is issued by Canary Medtech Corp. (“Canary MedTech,” “we,” “us,” or “our”), located at 263 Evante St., Las Vegas, NV 89138. It applies to our websites, our online store, the Fold at-home roll-on scale, the Slate advanced measurement platform, the Fold Health app, and our sales, support, and marketing activities (together, the “Services”).

For privacy questions, contact us at privacy@canarymedtech.com.

2. Information we collect

Information you give us

Name, email address, shipping and billing address, phone number (if you provide one), account credentials, order and pre-order details, and the contents of messages you send us. If you submit a professional inquiry or request a guide, we also collect your organization name, organization type, role, intended use environment, projected quantity, timeline, and your phone number and SMS consent preference.

Product and measurement information

Weight readings, stored chair weight, check-in timestamps, and any profile details you enter in the Fold Health app, along with device identifiers, firmware version, pairing status, and diagnostic logs from the scale and app.

Information collected automatically

IP address, browser and device type, pages viewed, referring URL, and campaign parameters (such as UTM values), collected through cookies and similar technologies described in Section 9.

Information from others

Our ecommerce platform (Shopify), payment processors, shipping carriers, our customer relationship platform (HubSpot), and analytics providers may share order, delivery, and engagement information with us. We do not receive full payment card numbers.

3. Weight and health data

Weight readings and related entries are treated as sensitive information. We use them to provide the product features you have asked for — showing your reading, subtracting your chair weight, and building your history and trends.

We do not sell weight or health data. We do not use it for advertising. We do not disclose it to employers, insurers, or your care team unless you affirmatively choose to share it or we are legally required to disclose it.

Fold is positioned as a General Wellness device. It does not diagnose, treat, cure, or prevent disease, and readings are not a substitute for clinical measurement or professional judgment.

4. How we use information

To process orders and pre-orders, take payment, ship products, and handle returns.
To provide the Fold Health app and its measurement, history, and trend features.
To provide customer and warranty support, and to send service and order notices.
To respond to professional inquiries about pricing, quotes, and bulk purchasing, and to route them to the right team.
To improve product design, reliability, and accessibility, using aggregated or de-identified information where practicable.
To send marketing communications you have asked for, and to measure how they perform.
To detect fraud, secure our systems, and comply with legal and regulatory obligations.

5. How we share information

We share personal information only as described here, and we require our service providers to protect it and use it solely for the services they provide to us.

  • Service providers: ecommerce and hosting (Shopify), payment processing, shipping and logistics, email delivery, customer relationship management (HubSpot), analytics, and customer support tooling.
  • At your direction: anyone you choose to share a reading, trend, or account with.
  • Legal and safety: where required by law, subpoena, or regulation, or to protect the rights, property, or safety of any person.
  • Corporate transactions: in connection with a merger, acquisition, financing, or sale of assets, subject to this policy.

We do not sell personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under applicable U.S. state privacy laws.

6. Our store and payments

Our online store is hosted by Shopify Inc. When you browse the store, place an order, or check out, Shopify collects and processes information on our behalf, including your contact details, shipping and billing address, order contents, device and browser information, and cookies used to keep your cart and session working. Shopify and our payment processors handle payment card details directly; we receive only limited information such as the card brand, the last four digits, and the authorization result.

Shopify may also process personal information for its own purposes as a business, including fraud prevention and platform improvement, under its own privacy policy. Where you pay through a third-party wallet or financing option, that provider's own terms and privacy policy apply to the payment.

7. Sharing with your care team

The Fold Health app is designed so that sharing is a choice you make, reading by reading or by granting ongoing access. Sharing is off by default. You can withdraw access at any time in the app; withdrawal stops future sharing but does not retrieve information already shared. Once a clinician or organization receives your information, their own privacy practices and legal obligations govern how they handle it.

8. Professional customers and HIPAA

Slate is offered to organizations through early access. When a health-care organization uses Slate in its own workflows, that organization — not Canary MedTech — determines what patient information it collects and how it is used, and remains responsible for its own obligations under HIPAA and other applicable laws.

Canary MedTech does not act as a business associate unless we have signed a written business associate agreement with your organization. Where such an agreement is in place, its terms govern our handling of protected health information and control over any conflicting term in this policy.

Please do not submit patient names, medical records, or other patient-specific information through our website forms or general support channels.

9. Cookies and tracking

We and our providers use cookies, pixels, and similar technologies that are strictly necessary (cart, checkout, session, security), functional (preferences), analytics (how the site is used), and — where you consent — marketing measurement. Our store's necessary cookies are set by Shopify and cannot be turned off without breaking checkout.

You can manage non-essential cookies through our cookie banner or preferences link, and control cookies generally through your browser settings. We honor Global Privacy Control signals where required by law.

10. Marketing communications

If you request a guide, join our list, or submit a quote or availability request, we may send you product updates and related information. Every marketing email includes an unsubscribe link, and you can also email privacy@canarymedtech.com. We will still send transactional messages about orders, shipping, safety, and support.

Text messages

If you check the SMS box on one of our forms, you consent to receive recurring automated text messages from us at the number you provide. Consent is not a condition of any purchase. Message and data rates may apply, and message frequency varies. Reply STOP to opt out at any time or HELP for help. We do not sell or share mobile numbers or SMS consent with third parties for their own marketing; we share them only with the messaging providers who deliver messages for us.

11. Retention

We keep personal information for as long as needed to provide the Services and for legitimate business purposes, including tax, accounting, warranty, and legal obligations. Order records are generally retained for the period required by applicable law. Account and measurement data is retained while your account is active and deleted or de-identified within a reasonable period after you close it or ask us to delete it, unless we must keep it by law.

12. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and vendor review. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately.

13. Your rights and choices

Subject to applicable law, you may request access to the personal information we hold about you, correction of inaccurate information, deletion, a portable copy, or restriction of certain processing. You may also withdraw consent where processing is based on consent.

To make a request, email privacy@canarymedtech.com. We will verify your identity before acting and will respond within the time required by law. We will not discriminate against you for exercising these rights.

14. U.S. state privacy rights

Residents of California, Colorado, Connecticut, Virginia, and other states with comprehensive privacy laws have the rights described in Section 13, including the right to opt out of the sale or sharing of personal information and of targeted advertising. As stated above, we do not sell or share personal information for those purposes.

Weight and health information is treated as sensitive personal information. We use it only to provide the Services you requested and for the purposes permitted by law, and we do not use it to infer characteristics about you. You may designate an authorized agent to submit a request on your behalf, and you may appeal a denied request by replying to our response.

15. International users

We operate in the United States, and our service providers may process information there and in other countries. If you are located outside the United States, you understand that your information will be transferred to and processed in the United States, where privacy laws may differ. Where required, we rely on appropriate safeguards such as standard contractual clauses.

16. Children

Our Services are not directed to children under 13, and we do not knowingly collect their personal information. Accounts and purchases require an adult. Where a caregiver or clinician uses our products to record a minor's weight, the caregiver or organization is responsible for having the appropriate authority to do so. If you believe a child has provided us information, contact us and we will delete it.

17. Changes to this policy

We may update this policy as our products and legal obligations change. We will post the revised version with a new “Last updated” date, and for material changes we will provide additional notice, such as an email or an in-app notice, before the change takes effect.

18. Contact us

Canary Medtech Corp.
263 Evante St., Las Vegas, NV 89138