Platform Technologies

Privacy is Paramount

The LifeQ platform allows us to glue people and data together, in a very simple way, that ensures we comply with data security and privacy standards including GDPR, HIPAA, PII, POPi, and ISO27001.

Users have full control of their data. This means you get to select who, for what periods of time, can see how and when data is used. You get to decide when it is deleted, you can turn it on or off, and you get to decide who sees your name linked to your data.

We use the platform to manage all providers and consumers of information related to you through some very smart uses of technology components, some of them elaborated on below.

Privacy by Design

How we protect you and your information

We strongly believe in human-centric processing of personal data and the right to privacy, we actively ensure that we only collect the data we need, and that we only process it to enable us to make it meaningful to you and the services you subscribe to.  We at all times work to protect and hide any personally identifiable information provided by you. We take your privacy seriously.

This platform allows us to bring partners and customers together that provide you with consumer focused solutions.  We call this collection of companies our Ecosystem Participants.

The GDPR codifies and unifies data privacy laws across all European Union member countries and is being adopted by companies in the USA. GDPR is applicable to any business collecting personal data from a citizen of the EU including personal data such as any information related to a natural person that can be used to directly or indirectly identify that person. Failure to comply with GDPR can result in penalties for non-compliance that are potentially devastating.

To improve the efficiency and effectiveness of the healthcare system, the Health Insurance Portability and Accountability Act of 1996 (HIPAA), Public Law 104-191, included Administrative Simplification provisions that required companies to adopt national standards for electronic healthcare transactions and code sets, unique health identifiers, and security. At the same time, Congress recognized that advances in electronic technology could erode the privacy of health information. Consequently, Congress incorporated into HIPAA provisions that mandated the adoption of federal privacy protections for individually identifiable health information.

Personally identifiable information (PII) is information that can be used to distinguish or trace an individual’s identity, either alone or when combined with other information that is linked or linkable to a specific individual.

Learn more.

Safeguarding personal information when processed by a responsible party, subject to justifiable limitations that are aimed at balancing the right to privacy against other rights, particularly the right of access to information; and protecting important interests, including the free flow of information within South Africa and across international borders. The act regulates how personal information may be processed through establishing tight conditions (in lockstep with international policies).

A specification for an information security management system (ISMS) which is a framework of policies and procedures that includes legal, physical and technical controls involved in an organization's information risk management processes.

The GDPR codifies and unifies data privacy laws across all European Union member countries and is being adopted by companies in the USA. GDPR is applicable to any business collecting personal data from a citizen of the EU including personal data such as any information related to a natural person that can be used to directly or indirectly identify that person. Failure to comply with GDPR can result in penalties for non-compliance that are potentially devastating.

To improve the efficiency and effectiveness of the healthcare system, the Health Insurance Portability and Accountability Act of 1996 (HIPAA), Public Law 104-191, included Administrative Simplification provisions that required companies to adopt national standards for electronic healthcare transactions and code sets, unique health identifiers, and security. At the same time, Congress recognized that advances in electronic technology could erode the privacy of health information. Consequently, Congress incorporated into HIPAA provisions that mandated the adoption of Federal privacy protections for individually identifiable health information.

Personally identifiable information (PII) is information that can be used to distinguish or trace an individual’s identity, either alone or when combined with other information that is linked or linkable to a specific individual.

White House A130.pdf

Safeguarding personal information when processed by a responsible party, subject to justifiable limitations that are aimed at balancing the right to privacy against other rights, particularly the right of access to information; and protecting important interests, including the free flow of information within the Republic and across international borders. The act regulates how personal information may be processed through establishing tight conditions (in lock step with international policies).

A specification for an information security management system (ISMS) which is a framework of policies and procedures that includes legal, physical and technical controls involved in an organization's information risk management processes.

Ecosystem Participants

Our Ecosystem Participants are composed of partners and customers that we have merged together with LifeQ solutions to bring you offerings and solutions that you can leverage to change your world, your health, and your life.

Data suppliers

Produce and introduce a wide range of specifically relevant data into our ecosystem through a number of different entry points, such as your wearable, medical information, or pre-analyzed data.

Data Controllers / Registrar

Manages and maintains the trusted relationship between all the parties above, gives and takes access, and allows data to flow between the Ecosystem Partners. LifeQ fulfills this role.

Data transformers

Consume and process data from the ecosystem to add or extract valuable, personally relevant information in line with the services you have subscribed to, by yourself or your service providers.

Data consumers 

Consume information from the ecosystem toward a business outcome, or provision it as part of the services you may subscribe to. A data consumer may also be a company whose business provides services to other companies.

The platform requires a number of key functionalities to help protect your information and bring the Ecosystem Partners together.

Platform Components

The following are some of the key components LifeQ leverages that allow the platform to function seamlessly.

Distributed API Bridging Network (DBN)

Our DBN encrypts and coordinates the transfer of de-identified physiological data across the LifeQ ecosystem, and provides us the lock and key mechanism to your data, including the following capabilities:

  • Subscriptions
  • De-identification
  • Consent validation via data controllers
  • Coordination and facilitation of data flows
  • OpenID infrastructure to support anonymous authorizations
  • Authentication and authorization authority for notification and token security
Consulate

The Ecosystem Partners leverage our Consulate capabilities as the one stop seamless integration with our cloud solutions for our wearable device partners. Consulate is leveraged to integrate into existing Ecosystem Partner cloud infrastructures, with a primary focus on streaming information through simple data streams:

  • Seamless integration of LifeQ DBN functionality
  • Seamless integration of data exchanges between LifeQ and Ecosystem Partners
  • Facilitates partner device to partner cloud data flows (onboarding, data offload, settings, profile management, etc.) by leveraging an on-device and/or device companion application component called LifeQ Envoy.
Avatar

The LifeQ Avatar creates a virtual vault of your unique profile, your Avatar, which includes all de-identified biometrics (such as height, mass, and year of birth) needed to help us arrive at personally relevant health and wellness findings. This information is used by a wide variety of LifeQ algorithms, specifically to make sure any information provided to you is relevant to you, and not just more generalized guidance. Avatar does not store or process any personally identifiable information. Access to Avatar data is managed by the DBN. 

  • Stores each update to biometric attributes Individually encrypted
  • Used to initiate algorithms throughout the LifeQ Ecosystem
  • Access control coordinated via DBN
OAASIS

The LifeQ OAASIS, which can be a white labeled service or just an API, facilitates, manages and coordinates the onboarding of consumers and integration with ecosystem solutions with data controllers, or registrars, that provide ecosystem solutions to their customers. OAASIS encapsulates your information into a dedicated service that allows for a wide range of partners to, in the same way, bring you into the ecosystem, and start driving immediate shared value:

  • Easy integration with existing services
  • Proper subscription and consent management
  • Integrated with DBN, Avatar and ecosystem support tools
  • Proper OpenID adherence to enable client applications to connect data flow without sharing identifiable information

Platform Components

The following are some of the key components LifeQ leverages that allow the Platform to function seamlessly.

Distributed API Bridging Network (DBN)

Our DBN encrypts and coordinates the transfer of de-identified physiological data across the LifeQ ecosystem, and provides us the lock and key mechanism to your data, including the following capabilities.

  • Subscriptions
  • De-identification
  • Consent validation via data controllers
  • Coordination and facilitation of data flows
  • OpenID infrastructure to support anonymous authorizations
  • Authentication and Authorization authority for Notification and Token security
Consulate

The Ecosystem Partners leverage our Consulate capabilities as the onestop seamless integration with our cloud solutions for our wearable device partners.  Consulate is leveraged to integrate into existing Ecosystem Partner cloud infrastructures, with a primary focus on streaming information through simple data streams.

  • Seamless integration of LifeQ DBN functionality
  • Seamless integration of data exchanges between LifeQ and Ecosystem Partners
  • Facilitates Partner device to Partner cloud data flows (onboarding, data offload, settings, profile management, etc) by leveraging an on-device and/or device companion application component called LifeQ Envoy.
Avatar

The LifeQ Avatar creates a virtual vault of your unique profile, your Avatar, which includes all de-identified biometrics (such as height, mass, and year of birth) needed to help us arrive at personally relevant health and wellness findings.  This information is used by a wide variety of LifeQ Algorithms, specifically to make sure any information provided to you is relevant to you, and not just more generalized guidance.  Avatar does not store or process any personally identifiable information. Access to Avatar data is managed by the DBN. 

  • Stores each update to biometric attributes Individually encrypted
  • Used to initiate algorithms throughout the LifeQ Ecosystem
  • Access control coordinated via DBN
OAASIS

The LifeQ OAASIS, which can be a white labeled service or just an API, facilitates, manages and coordinates the onboarding of consumers and integration with ecosystem solutions with data controllers, or registrars, that provide ecosystem solutions to their customers.  OAASIS encapsulates your information into a dedicated service that allows for a wide range of partners to, in the same way, bring you into the ecosystem, and start driving immediate shared value. 

  • Easy integration with existing services
  • Proper subscription and consent management
  • Integrated with DBN, Avatar and ecosystem support tools
  • Proper OpenID adherence to enable client applications to connect data flow without sharing identifiable information.

LifeQ Central

LifeQ Central provides us with a central management engine for the LifeQ family of applications, dashboards and services. Our LifeQ app and LifeQ-enabled devices bring our latest understanding of human health and wellbeing to more people, faster.

LifeQ Central offers a wide range of services and health information so that you can get the best, most relevant, accurate care you want and need. Examples of specialist fields you will have access to include:

doctors
self help
frail care
care givers
wellness coaches
fitness coaches
parental care