Your data powers your biological age score — not our business model. This policy explains exactly what we collect, why, and how we protect it.
Effective Date: 1 February 2026 • Last Updated: 23 August 2026
The data controller for the Hildor biological age measurement platform is:
Kyklos Entertainment SRL
Via Don Minzoni 11
40121 Bologna, Italy
P.IVA: 00870721206
Email: privacy@hildor.ai
Kyklos Entertainment SRL (“we,” “us,” or “the Company”) operates the website hildor.ai and all associated services collectively known as “Hildor” or “the Platform.” This Privacy Policy is governed by Regulation (EU) 2016/679 (the General Data Protection Regulation, “GDPR”) and Italian Legislative Decree 196/2003, as amended by Legislative Decree 101/2018.
Hildor operates a three-level biological age measurement system. The data we collect depends on which levels you choose to engage with. Each level is optional and additive.
When you take the Level 1 assessment, you provide self-reported responses to ten lifestyle questions covering exercise frequency, sleep quality, diet quality, body composition, smoking status, alcohol consumption, stress levels, chronic conditions, and family longevity. You also provide your chronological age, country, city, and urban environment type.
Before account creation: When you submit the Level 1 interview, your responses are transmitted to our servers for the purpose of computing your Hildor Age Rank™ score. Your individual answers are not stored on our servers at this stage. We retain only the computed results (score, estimated biological age, per-category results) together with the chronological age, country, city, and environment type you provided, in a temporary anonymous session that expires automatically 90 days after creation. This allows you to claim your score if you later create an account. A copy of your responses and the score is also retained locally in your browser (using local storage) so that you can review your result. Local storage data never leaves your device.
Level 2 uses objective metrics from a wearable device: heart rate variability, resting heart rate, step counts, sleep duration and quality, activity levels, readiness or recovery scores and, where available, estimated VO2 max. There are two ways to provide them:
Wearable data replaces corresponding self-reported estimates from Level 1 with objective measurements.
If you choose to connect an Oura Ring, you are redirected to Oura’s own authorisation page, where you log in to your Oura account and grant Hildor read-only access. We never see your Oura password. The connection uses the official Oura API operated by Oura Health Oy, Oulu, Finland, and requires an active Oura membership.
What we retrieve: daily summaries only — sleep (total duration, deep and REM proportions, lowest heart rate during sleep, average heart rate variability), readiness score, activity (steps, active minutes), estimated VO2 max and Oura’s cardiovascular age estimate. We do not retrieve your email, name, workouts, tags, guided sessions, blood-oxygen data or continuous raw heart-rate streams.
How often: once per day and whenever Oura notifies us that new or corrected data is available. On first connection we retrieve the previous 30 days so that your score reflects a full rolling window from day one.
What we do with it: the data is stored on our servers in the European Union, linked to your account, and used exclusively to compute and update your own Hildor Age Rank™ score on a 7-day rolling average. Your Level 2 score may therefore go up or down as your data changes. Oura data is never displayed publicly, never shared with third parties, never used for advertising, and never used to calibrate, train or improve our algorithm or any model (see Section 4).
Revoking the connection: you can disconnect at any time with the “Disconnect & erase” button in your Level 2 panel, or by removing Hildor from the connected applications in your Oura account. On disconnection we revoke our access token and erase all Oura data and Oura-derived history associated with your account immediately, and in any event within 72 hours. Your last published score remains on the leaderboard until it ages out under the normal freshness rules, unless you also delete your account.
Oura’s own processing of your data is governed by the Oura Privacy Policy. Hildor is not affiliated with, sponsored by or endorsed by Oura Health Oy. Oura is a trademark of Oura Health Oy.
As an alternative to the Oura connection, you may send wearable data from Apple Health using a third-party export application that you install and configure on your own iPhone (for example “Health Auto Export”). In that case Hildor gives you a personal, secret upload address; the export application sends your data directly from your device to our servers over an encrypted connection (HTTPS), on the schedule you choose. Hildor has no access to your Apple account or to Apple Health itself: we receive only what the export application sends.
What we receive: daily summaries of resting heart rate, heart rate variability (SDNN), sleep duration and stages, step count, exercise minutes and estimated VO2 max, depending on which metrics you choose to export. Any other metric contained in a payload is discarded on arrival and not stored.
What we do with it: the same as Section 2.2.1 — the data is stored on our servers in the European Union, linked to your account, and used exclusively to compute and update your own Hildor Age Rank™ score on a 7-day rolling average, under your explicit consent (Art. 9(2)(a) GDPR) given when you enable the bridge. If you also have an active Oura connection, Oura data takes precedence and Apple Health data does not change your leaderboard score. Apple Health data is never displayed publicly, never shared, never used for advertising, and never used to train or improve any algorithm or AI model.
Disabling the bridge: use “Disable & erase” in your Level 2 panel at any time. Your upload address stops working immediately and all Apple Health data and derived history are erased at once, and from backup copies within 72 hours. Keep your personal upload address private: anyone who knows it could send data to your account. You can regenerate it at any time by disabling and re-enabling the bridge.
The export application is third-party software, chosen, installed and configured by you, with its own licence and privacy terms; Hildor is not affiliated with its developer and does not receive any payment from it. Apple and Apple Health are trademarks of Apple Inc.; Hildor is not affiliated with, sponsored by or endorsed by Apple Inc.
If you choose to enter blood biomarker data, you manually input results from your own blood panel for six specific markers: HbA1c (glycated haemoglobin), fasting glucose, triglycerides, HDL cholesterol, total cholesterol, and hs-CRP (high-sensitivity C-reactive protein). Hildor does not order, perform, or provide blood tests. You obtain these results independently from your own physician or laboratory.
Data retention for registered accounts: Your raw health data (interview answers, wearable readings, blood values) is processed by the Hildor Age Rank™ algorithm to produce a score, and is stored securely in association with your account. We retain it so that your score can be recalculated consistently whenever the scoring methodology is refined, keeping the leaderboard comparable over time. Your raw health data is never displayed publicly, never accessible to other users, and never sold. It is deleted when your account is deleted (see Section 6).
When you create an Hildor account, we collect: your chosen username (which may be a pseudonym), email address, password (stored in hashed form only), country, city, and the date of account creation.
Recruiter referral: If you reach Hildor through another member's recruit link, we record which member referred you. This link between your account and the referring member's account is used solely to compute the public Recruiters ranking, which shows only the recruiter's username and the number of verified recruits — never who the recruits are. The referral record is deleted when either account is deleted.
When you visit our website, we automatically collect: IP address, browser type and version, operating system, referring URL, pages visited, time and date of visit, and session duration. This data is collected through standard server logs and, where applicable, analytics services.
We process your personal data for the following purposes, each with a corresponding legal basis under Article 6 of the GDPR:
| Purpose | Legal Basis |
|---|---|
| Calculate your Hildor Age Rank™ score across Levels 1, 2, and 3 | Performance of contract (Art. 6(1)(b)) |
| Display your score on public leaderboards (by username only) | Performance of contract (Art. 6(1)(b)) |
| Send service communications (score updates, platform changes) | Performance of contract (Art. 6(1)(b)) |
| Send marketing communications and newsletter | Consent (Art. 6(1)(a)) |
| Improve the Platform and algorithm accuracy | Legitimate interest (Art. 6(1)(f)) |
| Comply with legal obligations (tax, regulatory) | Legal obligation (Art. 6(1)(c)) |
| Prevent fraud and protect Platform security | Legitimate interest (Art. 6(1)(f)) |
Certain data you provide — particularly blood biomarker values (Level 3), wearable and Oura Ring data (Level 2) and health-related lifestyle responses (Level 1) — may constitute health data under Article 9 of the GDPR. We process this data exclusively on the basis of your explicit consent (Art. 9(2)(a)), which you provide when you voluntarily submit this data to the Platform or, for Oura, when you tick the dedicated consent box before authorising the connection. You may withdraw consent at any time (see Section 7).
Your data flows through the Hildor system as follows:
Input → Algorithm → Score → Leaderboard.
Hildor Age Rank™ algorithm processes your health data server-side to generate a single numerical score (0–1000 depending on your level). The algorithm applies proprietary weighting, geographic adjustments, and environmental corrections. After scoring, only the resulting score, your data level indicator (Level 1, 2, or 3), the scoring timestamp, and your account metadata are retained.
Your score is displayed on public leaderboards under your username only. Leaderboard categories include: global ranking, nation, city, age group, environment type, and most improved. No raw health data, blood values, or lifestyle answers are ever displayed publicly or accessible to other users.
We do not sell, rent, trade, or otherwise share your personal data with third parties for their own marketing or commercial purposes.
Oura data — purpose limitation. Data retrieved from your Oura account is used solely to compute and update your own score. It is excluded from the “improve the Platform and algorithm accuracy” purpose listed in Section 3: we do not use Oura data to calibrate, train, fine-tune or improve our algorithm, any statistical model or any artificial-intelligence system, nor do we aggregate it for research or publication.
We may share your data only in the following limited circumstances:
Oura Health Oy (Finland, EU) is a source of data, not a recipient: when you connect your ring, data flows from Oura to us under the authorisation you grant. We send Oura nothing about you other than the technical tokens needed to maintain the connection. We do not share your score, interview answers or blood values with Oura.
Where data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission under Article 46(2)(c) GDPR, or transfers to countries recognised as providing adequate protection under Article 45 GDPR.
We retain your data according to the following schedule:
| Data Type | Retention Period |
|---|---|
| Raw health data (interview answers, wearable metrics, blood values) | Duration of account existence, plus 30 days after deletion |
| Oura Ring data and Oura-derived score history (Section 2.2.1) | Duration of the connection; erased immediately on disconnection or account deletion, and in any event within 72 hours |
| Apple Health bridge data and derived score history (Section 2.2.2) | Duration of the bridge; erased immediately when you disable it or delete your account, and from backups within 72 hours |
| Anonymous session results (score, estimated biological age, demographics) | Until session expiry (90 days from creation) |
| Hildor Age Rank™ score and metadata | Duration of account existence, plus 30 days after deletion |
| Account data (username, email, hashed password) | Duration of account existence, plus 30 days after deletion |
| Historical scores (periodic snapshots) | Duration of account existence |
| Technical logs (IP, browser data) | 90 days from collection |
| Marketing consent records | Duration of consent, plus 3 years for compliance documentation |
As a data subject under the GDPR, you have the following rights, which you may exercise at any time by contacting us at privacy@hildor.ai:
We will respond to your request within 30 days, as required by Article 12(3) GDPR. If we are unable to comply, we will explain why and inform you of your right to lodge a complaint.
Hildor uses the following browser technologies:
We do not use third-party advertising cookies or tracking pixels. Hildor does not serve advertisements.
We implement appropriate technical and organisational measures to protect your personal data in accordance with Article 32 GDPR, including:
No system is completely secure. In the event of a data breach affecting your personal data, we will notify you and the Garante per la protezione dei dati personali within 72 hours as required by Article 33 GDPR and, where data obtained from a connected service is affected, the relevant provider (for example Oura Health Oy) within 24 hours.
Hildor is not directed at individuals under the age of 16. We do not knowingly collect personal data from children under 16 years of age. If we become aware that we have collected data from a child under 16, we will delete that data promptly. If you are a parent or guardian and believe your child has provided data to us, please contact us at privacy@hildor.ai.
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Italian Data Protection Authority:
Garante per la protezione dei dati personali
Piazza Venezia 11, 00187 Roma, Italy
Website: www.garanteprivacy.it
Email: garante@gpdp.it
We may update this Privacy Policy to reflect changes in our data practices or legal requirements. Material changes will be communicated via email to registered users and through a prominent notice on the Platform. The “Last Updated” date at the top of this page indicates the most recent revision. Continued use of the Platform after changes constitutes acceptance of the updated policy.
In accordance with Regulation (EU) 2024/1689 (the EU Artificial Intelligence Act), we inform you that your Hildor Age Rank™ score is generated by a proprietary algorithmic system that processes your data automatically, without human intervention in the calculation process.
Hildor Age Rank™ algorithm receives your input data and produces two outputs: a numerical score (within the range determined by your current Level) and an estimated biological age. The system does not make decisions with legal, financial, medical, or otherwise materially consequential effects on you. It is a voluntary wellness and competitive benchmarking tool.
Depending on your chosen Level, the algorithm may process the following categories of data:
Your input data is analysed by a server-side algorithm that evaluates your health indicators in context — accounting for your chronological age, geographical region, and the combination of factors reported. The algorithm assigns a score that reflects where you stand relative to the broader population within your age bracket.
The specific calculation methodology, weightings, normalisation curves, and adjustment factors constitute trade secrets and proprietary intellectual property of Kyklos Entertainment SRL. We are transparent about what data we collect and what outputs we produce; the internal logic of how the score is computed is not disclosed, in order to preserve the integrity and competitive value of the system.
Hildor Age Rank™ is not a medical diagnostic tool and has not been evaluated or approved as a medical device under Regulation (EU) 2017/745 (Medical Device Regulation). The score is intended for informational and motivational purposes only. It should not be used as a substitute for professional medical advice, diagnosis, or treatment. For further details, see our Medical Disclaimer.
Under Article 22 of the GDPR, you have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. While the Hildor Age Rank™ score does not produce such effects, we nonetheless offer you the following safeguards:
To exercise any of these rights, contact us at privacy@hildor.ai.
For any questions regarding this Privacy Policy or to exercise your rights, contact:
Kyklos Entertainment SRL — Privacy Department
Via Don Minzoni 11, 40121 Bologna, Italy
Email: privacy@hildor.ai
Take control of your biological age. Choose your level. All three are free.
Get Your Score →