1. Purpose
This policy exists to protect users, Alva Health, and the integrity of our platform. It should be read alongside our Terms of Use, Privacy Policy, and Medical Disclaimer.
2. Permitted Use
- Monitor and understand your personal metabolic health patterns
- Receive personalised wellness insights and recommendations from EVA
- Manage your CGM sensor subscription and device data
- Access educational content about metabolic health
- Communicate with our support team
- Share your own data with healthcare professionals of your choosing
3. Prohibited Conduct
3.1 Platform integrity
- Reverse engineer, decompile, disassemble, or attempt to derive source code of any part of the platform
- Interfere with or disrupt the operation of the platform, servers, or networks
- Upload or transmit viruses, malware, or any other malicious code
- Conduct denial-of-service attacks or any other attack on platform infrastructure
3.2 Data and scraping
- Conduct automated scraping, crawling, or data harvesting of any part of the platform
- Use bots, spiders, or other automated tools to access the platform without our prior written consent
- Aggregate or extract data from the platform for any commercial purpose
- Attempt to gain unauthorised access to any account, system, or network
3.3 Account conduct
- Create multiple accounts to circumvent restrictions or bans
- Share your account credentials with another person
- Use another person’s account without their express authorisation
- Provide false information during account registration
- Impersonate Alva Health, our staff, or any other person or entity
3.4 Commercial misuse
- Use the platform for commercial purposes without prior written consent
- Resell, sublicense, or distribute access to the platform
- Use EVA’s outputs as the basis for a commercial health product without a separate licence agreement
4. AI-Specific Conduct
4.1 AI prompt abuse
- You must not submit inputs to EVA designed to manipulate, deceive, or override EVA’s safety guardrails
- You must not use adversarial prompting techniques to cause EVA to generate outputs outside its designed wellness scope
- You must not submit inputs designed to cause EVA to produce content that violates these terms or applicable law
4.2 Model extraction
- You must not systematically query EVA in a manner designed to extract, replicate, or reconstruct its underlying model, training data, or proprietary architecture
- You must not use EVA outputs to train, fine-tune, or develop a competing AI model
- You must not attempt to identify the structure, parameters, or training methodology of EPIC 22 through any means
4.3 API and automated access
- You must not access EVA or any platform API by automated means without a separate API access agreement
- You must not use automation to generate artificial usage patterns that misrepresent real user behaviour
- Excessive automated API calls that impose unreasonable load on our systems are prohibited
5. Health Data Conduct
- You must only enter your own health data, or data from a person for whom you are a legal guardian
- You must not enter falsified or deliberately inaccurate health data
- You must not use EVA’s recommendations as the sole basis for clinical decisions without healthcare professional consultation
- You must not share another user’s health data without their explicit consent
6. CGM Sensor Use
- CGM sensors must be used in accordance with the manufacturer’s instructions for use
- Sensors must not be shared between individuals
- You must not tamper with, modify, or reverse engineer CGM sensor hardware or firmware
- Sensors must not be used beyond their stated wear period
- Adverse reactions must be reported to both Alva Health and your healthcare provider
7. Account Security
- Use a strong, unique password for your Alva Health account
- Enable two-factor authentication where available
- Log out of shared devices after each session
- Notify us immediately at security@alva.health if you suspect unauthorised access
8. Consequences of Breach
- Warning
- Temporary account suspension
- Permanent account termination without refund
- Report to law enforcement or regulatory authorities where applicable
- Civil legal action to recover damages or injunctive relief
Where a breach involves health or safety risks, we will act immediately and without prior warning.
9. Reporting Violations
Conduct violations: support@alva.health
Security vulnerabilities: security@alva.health
AI abuse or model extraction concerns: ai@alva.health
10. Contact
Legal enquiries: legal@alva.health
Data protection / DPO: dpo@alva.health
General support: support@alva.health
Security issues: security@alva.health