Epsy Privacy Policy
Last Updated: July 10th, 2026
This Epsy Privacy Policy describes how we, LivaNova USA, Inc., collect, use, disclose, and otherwise process your personal information when you use the Epsy mobile application (“App”) or our website epsyhealth.com (the “Site”) (collectively, the “Platforms”), and the choices available to you regarding our use of the information.
If you reside in California, please also see our Supplemental California Privacy Disclosures further below. If you are located in Nevada or Washington, please also refer to our Nevada and Washington Consumer Health Data Privacy Statement.
Click on one of the links below to jump to the listed section:
- Information We Obtain
- How We Use the Information We Obtain
- Information We Disclose
- Targeted Advertising
Your Rights and Choices- How We Protect Personal Information
- Children’s Privacy
- Links to Third-Party Services and Features
- Updates to Our Epsy Privacy Policy
- How to Contact Us
- Supplemental California Privacy Disclosures
1. Information We Obtain
The types of personal information we may obtain when you use the Platforms include:
- Contact information (such as name, telephone number and postal and email address);
- Account information (such as login information, account preferences, and whether you are a patient or a caregiver);
- Demographic information (such as gender and date of birth);
- Clinical and medical history (such as date and nature of diagnosis, date of electroencephalography, seizure type, seizure frequency, seizure intensity and recovery time, seizure duration, seizure logs, allergies, and information about your treating physician);
- Medication history (such as medication types, dosages and changes to medications or dosages, medication adherence, medication schedule, medication side effects, and medication refill timings);
- Physiological and other seizure-related information (such as vital signs, symptoms, epilepsy triggers, mood ratings, sleep-related information, heart rate, menstrual cycle data, and information about motions you make);
- Information about social, psychological, behavioral and medical interventions (such as information about any implanted medical devices, medical appointments and discussions with your medical care team, and details about treatments);
- General location information;
- Precise geolocation information;
- Device and network information, including your IP address, unique device identifier (such as advertising identifier), web browser characteristics, device characteristics, operating system, language preferences, referring URLs, clickstream data, device type used, mobile operating system, device settings and configurations, WiFi network identifier and signal, battery and signal strength, App diagnostic and other performance data, usage statistics, referring emails and web addresses, dates and times of Platform usage, and actions taken on the Platforms;
- Social media information;
- Sensory information (such as photographs and audio and video recordings);
- Inferences about individual preferences and characteristics, such as inferences drawn from and related to your seizure activity or use of the Platforms; and
- Other information you choose to provide, such as responses to questionnaires or feedback you provide about the Platforms or your experience using them.
When you use the Platforms, we may collect the device and network information described above by automated means, such as through cookies, web beacons, device logs, server logs, and other technologies. A “cookie” is a text file that websites send to a visitor’s computer or other internet-connected device to uniquely identify the visitor’s browser or to store information or settings in the browser. A “web beacon,” also known as an internet tag, pixel tag or clear GIF, links web pages to web servers and cookies and may be used to transmit information collected through cookies back to a web server.
Your browser and device may tell you how to be notified about certain types of automated collection technologies and how to restrict or disable them. For mobile devices, you can manage how your device and browser share certain device data by adjusting the privacy and security settings on your mobile device. However, if we are unable to collect certain types of personal information from you, you may not be able to use all of the features of the Platforms.
In addition, we may collect your device’s geolocation information through GPS, Bluetooth, WiFi signals and other technologies. Your device’s operating platform may provide you with a notification when the App attempts to collect your precise geolocation; please note that if you decline to allow the App to collect your precise geolocation, you may not be able to use all of the App’s features or the offers available through the App
Our Platforms are not designed to respond to “do not track” signals from browsers, but our Sites respond to Global Privacy Signals as described further below.
2. How We Use the Information We Obtain
We may use the personal information we obtain to:
- Authenticate your identity;
- Provide our products and services and manage your account;
- Communicate with you, respond to inquiries and offer user support and assistance;
- Personalize your experience with the Platforms, including providing features that allow you to take actions such as (1) tracking and viewing your inputted seizures, triggers and medications; (2) viewing factors such as stress, diet and sleep that could be impacting your seizures; and (3) displaying your medical information that may be used for discussions with your care providers;
- Determine eligibility to participate in market research, product testing or other similar programs;
- Administer research studies;
- Provide you with content or other opportunities to learn more about available therapy;
- Conduct automated decision making based on algorithms that may provide you with opportunities to learn more about available therapy;
- Advertise and market our products and services;
- Administer participation in surveys, sweepstakes, promotions or other programs;
- Perform analytics and market, trend or statistical research and solicit user feedback regarding product research and development;
- Operate, evaluate and improve our and our affiliates’ business, products and services (including developing new products and services; improving and analyzing our and our affiliates’ products and services; managing and measuring the effectiveness of our communications; providing technical support; and performing accounting, auditing and other internal functions);
- Maintain and enhance the safety and security of our products and services, prevent misuse, protect against fraud, and troubleshoot technical issues;
- Verify your identity and protect against fraud and other criminal activity, claims and other liabilities;
- Exercise our rights and remedies, respond to requests from government entities, and defend against legal claims;
- Comply with and enforce applicable legal requirements, relevant industry standards and LivaNova policies, including the Epsy Terms of Use and Epsy Website Terms of Use; and
- Evaluate and effectuate business transactions involving all or a portion of our business or assets, such as a merger, acquisition, joint venture, reorganization, divestiture, dissolution, or liquidation.
We also may use the information in other ways for which we provide specific notice at the time of collection.
We may disclose personal information we obtain about you to the following categories of third parties:
- Our affiliated companies, including those listed here.
- Our affiliated and third-party service providers, such as Internet service providers; operating systems and platforms; professional services organizations, such as auditors and law firms; IT support and communications providers; analytics services providers; and advertising and marketing service providers who act on our behalf.
- Social media platforms if you actively use those services to connect with us.
- Our joint marketing partners, including providers of advertising technologies that enable us to engage in targeted advertising of our products and services across third-party online services.
- Government agencies and other third parties: (1) if we are required to do so by law or legal process, such as a court order or subpoena; (2) in response to requests by government agencies, such as law enforcement authorities; (3) to establish, exercise or defend our legal rights; (4) when we believe disclosure is necessary or appropriate to prevent physical or other harm or financial loss; (5) in connection with an investigation of suspected or actual illegal activity; or (6) otherwise with your consent or as directed by your representative.
- Potential acquirers in the event of a potential or actual sale or transfer of all or a portion of our business or assets (including in the event of a merger, acquisition, joint venture, reorganization, divestiture, dissolution, or liquidation), or other business transaction.
4, Targeted Advertising
We work with joint marketing partners, such as Meta, Google, and TikTok, to serve targeted online ads of our products and services at users of other companies’ websites and online services. If we are permitted to target ads to you on third-party websites and applications, we may disclose your device, network and location information, and inferred preferences and characteristics to our joint marketing partners, so that they may target ads at you, measure the effectiveness of the ads, limit the number of times you see an ad, personalize the ads you see to make them more relevant to you, and for other purposes set forth in their respective privacy policies. To learn more about our joint marketing partners, please visit the following sites:
Meta: https://www.facebook.com/privacy/policy
Google Analytics: https://policies.google.com/technologies/partner-sites
TikTok: https://www.tiktok.com/legal/page/global/partner-privacy-policy/en
Joint marketing partners that process your personal information for their own purposes may combine the personal information that we disclose to them with data they may have collected about the same individuals elsewhere, such as when those individuals use other websites and online services that rely on the same companies. This Privacy Policy does not apply to the collection, use, and disclosure of your personal information by our joint marketing partners. We recommend that you review their privacy policies for more information.
Various states characterize these types of disclosures of personal information to marketing partners as “selling” personal information, and give you the right to opt out. You may opt out of our use and disclosure of your personal information for such targeted advertising within our Sites by activating Global Privacy Control (GPC) signals on your browser (see here for more information about GPC signals), or by clicking the following “Your Privacy Choices” link in our footer and following the opt-out prompt:
We will honor your opt-out request for your browser only, unless you provide us with additional information that would allow us to link your opt-out request to you personally. If you clear your cookies on a particular browser or device and we cannot otherwise reasonably identify you, you may need to re-submit your opt-out request.
If you opt out of targeted advertising on the Platforms, you may still see third-party advertisements when you use the internet, but those advertisements will not be personalized based on your personal information collected via the Platforms after the time that your opt-out request is processed.
5. Your Rights and Choices
We offer you certain choices in connection with the personal information we collect from you. You may update certain of your account details and settings, download a copy of certain of your personal information you provided in the App, or delete your account by logging into your account on the App and making the appropriate selection in the Settings menu. You also may unsubscribe from our marketing mailing lists by clicking the “Unsubscribe” link in our emails and following our prompts. For other requests, you can contact us as specified in Section 10 (How to Contact Us) below.
Depending on the privacy laws that apply to our use of your personal information, you may have some or all of the following privacy rights:
- Access to personal information: You may have the right to access your personal information that we use and, in some cases, in a portable format. You may also have the right to know certain details about how we process your personal information. In Oregon and Minnesota for example, you may have the right to request from us a list of the specific third parties, other than individuals, to whom we have disclosed your personal data or any personal data.
- Correction or deletion of personal information: You may have the right to ask us to correct or complete your personal information if it is wrong or incomplete. You may also have the right to ask us to delete your personal information when certain conditions apply.
- Right to opt out of targeted advertising and selling: Please see Section 4 (Targeted Advertising) above for information about our targeted advertising activities (which constitute “selling” in some states) and how to opt out.
- Right to non-discrimination: You may have the right not to receive discriminatory treatment for exercising these rights. However, please note that if the exercise of these rights limits our ability to process personal information (such as in the case of a deletion request), we may no longer be able to provide you with our products and services or engage with you in the same manner.
- Right to appeal: If we decline to take action on a request exercising one of your rights set forth above, you may have the right to appeal our decision. In these cases, we will notify you providing our reasons for denying the request and instructions for how you can appeal the decision.
- Right to withdraw consent: There are certain circumstances where we request your consent to process your personal information. In these instances, if you have provided consent, you may have the right to withdraw your consent at any time. If you withdraw your consent, this will not affect the lawfulness of our use of your personal information before your withdrawal.
To exercise these rights, please submit a request or email us at DataProtection@LivaNova.com.
California residents should also refer to the “California Consumer Privacy Statement” section of this Epsy Privacy Policy for more information about their privacy rights.
Nevada and Washington consumers should refer to the “Nevada and Washington Consumer Health Data Privacy Statement” for more information about their privacy rights with respect to consumer health data we collect in connection with your use of the Platforms.
6. How We Protect Personal Information
We maintain administrative, technical and physical safeguards designed to protect personal information against accidental, unlawful or unauthorized access, destruction, loss, alteration, disclosure or use.
7. Children’s Privacy
This section describes our personal information practices with respect to your child’s creation and use of the Platforms, and the services and features available to your child.
Information We Obtain from Children
When you first create an account for your child, we may ask for certain information such as your child’s name, telephone number, postal and email address, and birthdate.
When your child uses the Platforms and the available features and services, we may also collect the following information:
- Account information (such as login information and account preferences);
- Demographic information (such as your child’s gender and date of birth);
- Clinical and medical history (such as your child’s date and nature of diagnosis, date of electroencephalography, seizure type, seizure frequency, seizure intensity and recovery time, seizure duration, seizure logs, allergies, and information about your child’s treating physician);
- Medication history (such as your child’s medication types, dosages and changes to medications or dosages, medication adherence, medication schedule, medication side effects, and medication refill timings);
- Physiological and other seizure-related information (such as your child’s vital signs, symptoms, epilepsy triggers, mood ratings, sleep-related information, heart rate, menstrual cycle data, and information about motions that your child makes);
- Information about your child’s social, psychological, behavioral and medical interventions (such as information about any implanted medical devices, medical appointments and discussions with your child’s medical care team, and details about treatments);
- General location information;
- Precise geolocation information;
- Device and network information, including your child’s IP address, web browser characteristics, device characteristics, operating system, language preferences, referring URLs, clickstream data, device type used, mobile operating system, device settings and configurations, WiFi network identifier and signal, battery and signal strength, App diagnostic and other performance data, usage statistics, referring emails and web addresses, dates and times of Platform usage, and actions taken on the Platforms;
- Sensory information (such as photographs and audio and video recordings);
- Inferences about individual preferences and characteristics, such as inferences drawn from and related to your child’s seizure activity or use of the Platforms; and
- Other information you choose to provide on behalf of your child, such as responses to questionnaires or feedback you provide about the Platforms or your child’s experience using them.
The Platforms do not permit your child to make their personal information publicly available.
How We Use the Information We Obtain from Children
Once a parent has authorized an account for their child, our information use practices described above in Section 2 (How We Use the Information We Obtain) apply. We also may use the information in other ways for which we provide specific notice at the time of collection.
Parents’ Rights
You have the option at any time to review the personal information collected from your child. You may do so by submitting a review request here.
You can also delete your child’s account and/or refuse to permit our further collection or use of your child’s personal information. To do so, log in to your child’s account, and select “Delete account” in the Settings menu.
Sharing of Children’s Information
Once a parent has authorized an account for their child, our information sharing practices described above in Section 3 (Information We Disclose) apply.
Please contact us as indicated in Section 10 (How to Contact Us) below with questions about the operators’ privacy policies and collection and use practices.
8. Links to Third-Party Services and Features
For your convenience and information, the Platforms may provide links to other online services (such as other health apps, websites or social media platforms), and may include third-party features such as apps, tools, widgets and plug-ins. These online services and third-party features may operate independently from us. The privacy practices of the relevant third parties, including details on the information they may collect about you, are subject to the privacy statements of these parties, which we strongly suggest you review. To the extent any linked online services or third-party features are not owned or controlled by LivaNova, we are not responsible for these third parties’ information practices.
9. Updates to Our Epsy Privacy Policy
We may update this Epsy Privacy Policy from time to time and without prior notice to you to reflect changes in our personal information practices. We will indicate at the top of the policy when it was most recently updated. If we make material changes to this Privacy Policy, we will notify affected users by updating the “Last updated date” at the top of the document, posting the revised Privacy Policy in the Platforms, and, where required by law, providing additional notice and obtaining consent to and from users.
10. How to Contact Us
You can update your preferences, ask us to remove your information from our mailing lists, submit a request, or ask us questions about this Epsy Privacy Policy by contacting us at:
LivaNova USA, Inc.
100 Cyberonics Boulevard
Houston, TX 77058
(866) 518-0999
11. Supplemental California Privacy Disclosures
These Disclosures supplement the Epsy Privacy Policy and apply solely to personal information collected about California residents on the Platforms. These Disclosures do not apply to (1) personal information collected about our personnel or job applicants, (2) medical information subject to the California Confidentiality of Medical Information Act that is collected through the Platforms, or (3) personal information that is subject to an exception under the California Consumer Privacy Act of 2018 (as amended by the California Privacy Rights Act of 2020) and its implementing regulations (collectively, the “CCPA”). Where these Disclosures use a term that the CCPA defines, the term has the meaning defined in the CCPA.
- Notice of Collection and Use of Personal Information
We may collect (and may have collected during the 12-month period prior to the Last Updated date of this Privacy Policy) the following categories of personal information about you:
- Identifiers: identifiers such as a real name, alias, postal address, unique personal identifier (such as a device identifier; cookies, beacons, pixel tags, mobile ad identifiers, and similar technology; customer number, unique pseudonym, or user alias; telephone number and other forms of persistent or probabilistic identifiers), online identifier, IP address, email address and other similar identifiers;
- Protected Classifications: characteristics of protected classifications under California or federal law, such as medical condition;
- Commercial Information: commercial information, including records of personal property, products or services purchased, obtained, or considered, and other purchasing or consuming histories or tendencies;
- Online Activity: Internet and other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding your interaction with websites, applications or advertisements;
- Geolocation Data; and
- Inferences: inferences drawn from any of the information identified above to create a profile about you reflecting your preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.
We may use (and may have used during the 12-month period prior to the Last Updated date of this Privacy Policy) your personal information for the purposes described in Section 2 above.
On the Platforms, we do not collect or process sensitive personal information pursuant to the CCPA for purposes of inferring characteristics about consumers. To the extent we process deidentified information, we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.
- Retention of Personal Information
We will retain your personal information for the time period reasonably necessary to achieve the purposes described in this Privacy Policy, or any other notice provided at the time of collection, taking into account applicable statutes of limitation and records retention requirements under applicable law.
- Sources of Personal Information
During the 12-month period prior to the Last Updated date, we may have obtained personal information about you from the following categories of sources:
- Directly from you, such as when you contact us
- Your devices, such as when you visit our Platforms
- Our affiliates
- Service providers, contractors and other vendors who provide services on our behalf
- Our joint marketing partners
- Online advertising services
- Data analytics providers
- Internet service providers (“ISPs”)
- Operating systems and platforms
- Social networks
- Sale or Sharing of Personal Information
We do not sell your personal information in exchange for monetary compensation. We may disclose your personal information by allowing our joint marketing partners to collect personal information via automated technologies on the Platforms for cross-context behavioral advertising purposes. Under California law, these kinds of disclosures may be considered a “sale” when the personal information is exchanged for non-monetary consideration, or “sharing” when the personal information is disclosed for cross-context behavioral advertising purposes. You have the right to opt out of these types of disclosures of your information.
We may sell or share for cross-context behavioral advertising purposes (and may have sold or shared during the 12-month period prior to the Last Updated date) the following categories of personal information about you to online advertising and analytics services:
- Identifiers;
- Commercial Information;
- Online Activity; and
- Inferences.
We do not have actual knowledge that we sell or share the personal information of minors under 16 years of age
- Disclosure of Personal Information
During the 12-month period prior to the Last Updated date, we may have disclosed the following categories of personal information about you for a business purpose to the following categories of third parties:
In addition to the categories of third parties identified above, during the 12-month period prior to the Last Updated date, we may have disclosed personal information about you to government entities and third parties in connection with corporate transactions, such as mergers, acquisitions or divestitures.
- Privacy Rights
You have rights regarding your personal information, as described below.
- Access: You have the right to request, twice in a 12-month period, that we disclose to you the personal information we have collected, used, disclosed, and sold or shared about you.
- Correction: You have the right to request that we correct the personal information we maintain about you, if that information is inaccurate.
- Deletion: You have the right to request that we delete certain personal information we have collected from you.
- Opt-Out of Sale or Sharing: You have the right to opt out of the sale of your personal information or the sharing of your personal information for cross-context behavioral advertising purposes.
How to submit a request
- To submit an access, correction, or deletion request, or a request to limit the use and disclosure of your sensitive personal information to certain purposes permitted by law, please click here or call us at 1-866-332-1375.
- To submit a request to opt-out of sale or sharing for cross-context behavioral advertising, please see the instructions at Section 4 above.
Verifying Requests. To help protect your privacy and maintain security, we will take steps to verify your identity before granting you access to your personal information or complying with your deletion or correction request. If you do not have an account with us, or an email address on file with us (such as if you signed up to receive our newsletters), then there may not be a reasonable method by which we can verify your identity to the level of certainty required by the CCPA to fulfil rights to access, correct, or delete. This is because historically we have not linked device identifiers to named actual persons.
Accordingly, if you do not have an account with us, or an email address on file, and you request access to, correction of or deletion of your personal information, we may not be able to process your request at this time. If you have an account with us, we will verify your request either when you log in to your account or if you confirm your email address in our records. In addition, if you ask us to provide you with specific pieces of personal information, we may require you to sign a declaration under penalty of perjury that you are the consumer whose personal information is the subject of the request.
Additional Information. If you choose to exercise any of your rights under the CCPA, you have the right to not receive discriminatory treatment by us. To the extent permitted by applicable law, we may charge a reasonable fee to comply with your request.