1.1. User Profile Information

• Full name
• Email address
• Date of birth
• Gender
• Height and weight

1.2. Health and Wellness Data

• Health information as disclosed by the User
• Health Monitoring Data
• Medical conditions
• Exercise movements and performance data
• Information related to day-to-day activities which concerns the health and wellness of the user

1.3. Geographical Location
We may collect and use your geographical location to provide location-specific services and personalized content.

1.4. App Usage Information
We collect data related to your usage of the Vive Now app to improve and customize our services.

We use the information we collect for the following purposes:

2.1. To provide and operate our proactive healthy lifestyle management solution, tailored to your needs.
2.2. To continuously improve our services, develop new features and enhance the user experience.
2.3. To send you push notifications and other relevant communications
regarding your health, wellness and other announcements including app
updates.
2.4. To contact you with updates and to respond to your
queries, provide user support, and address complaints or issues you may
encounter.
2.5. To enforce our Terms of service and prevent any misuse or unauthorized access to our application.
2.6. To comply with applicable laws and regulations, assist law enforcement agencies.
2.7. To resolve disputes as required.

We may share the information we collect with the following parties:

3.1. Third-Party Service Provide
We may share the collected information with trusted third-party service providers who assist us in delivering our services. These providers are contractually bound to handle your data securely and are prohibited from using it for any other purposes. We may also share the collected information with our contractual associates outside of your jurisdiction that includes our current and future international associates or contractual partners.
3.2. Our Professionals, experts, and advisors listed on the App with whom you choose to communicate through the App’s chat functions.
3.3. Your health insurance provider if you have linked your account.
3.4. We may aggregate and anonymize the collected information to generate an
analytical insight and may share it with our associates for the same purposes. This data will not personally identify you and may be shared for research or marketing purposes.
3.5. In the event of a merger, acquisition, or any form of sale of some or all of our assets, your personal information may be transferred to the acquiring entity.
3.6. We may disclose your information if required by law or to protect our rights, privacy, safety, or property.

It is your choice whether to let us access Third-Party Platforms that contain your personal data. You may opt-out of sharing certain information generated from Third-Party Platforms, and you can revoke your permission for us to access Third-Party Platforms at any time.

We implement measures to reduce the risks of unauthorized access, use, and disclosure of information. However, please note that no security measures are perfect or impenetrable.

We retain personal data for as long as necessary to provide and enhance our service or as required by law. We will also retain aggregated or anonymous information for statistical, development, and other purposes indefinitely.

We use cookies and similar tracking technologies on our website or app. By using the Service, you consent to the use of cookies and tracking technologies as described in our separate Cookie Policy.

We are committed to ensuring the highest levels of security and confidentiality for your personal information. To this end, we have implemented a robust array of industry-standard security measures, including:

8.1. Secure Socket Layer / Transport Layer Security (SSL/TLS)
We utilize SSL/TLS protocols to create an encrypted and secure communication channel between your web browser and our servers. This cryptographic process is crucial in safeguarding data during
transmission by protecting sensitive information, including Personally Identifiable Information (PII), login credentials, and payment data from being intercepted or tampered with by unauthorized parties.

• Data Integrity:
  The SSL/TLS protocols guarantee that the data exchanged between the
  client browser and our servers is transmitted without unauthorized
  alteration. This ensures that the data received is exactly as sent,
  maintaining its integrity throughout the transmission process.
• Authentication:
  SSL/TLS protocols authenticate our servers to your browser, ensuring
  that your communication is with our legitimate website. This mechanism
  prevents man-in-the-middle attacks and impersonation by malicious sites,
  thereby safeguarding your interactions with our services.

8.2. Data Encryption at Rest
To protect your data when it is stored, we implement advanced encryption
techniques using Amazon Key Management Service (KMS). Our encryption strategy includes:

• Database Storage Encryption:
  All data within our databases is encrypted with robust encryption
  algorithms, such as AES-256. This means that, even in the unlikely event
  of unauthorized access, the encrypted data remains unreadable and secure.
• Encrypted Backups: We regularly perform backups of our databases, and these backups are encrypted using Amazon KMS. This ensures that backup data is protected with the same level of security as live data, providing comprehensive protection against data breaches.
• Access Control Mechanisms: Access to encrypted data is tightly controlled and monitored. Only personnel who
  have been granted explicit authorization and who have legitimate
  business needs are permitted to access this data. All access attempts
  are logged and subject to regular audits to ensure compliance with our
  stringent security policies.

8.3. Additional Security Measures
Beyond encryption, we employ a suite of comprehensive security practices to further safeguard your personal information:

• Regular Security Audits:
  We conduct thorough and regular security audits and vulnerability
  assessments. These audits help us identify potential security risks and
  vulnerabilities, allowing us to proactively address them before they can
  be exploited.
• Secure Software Development Lifecycle (SDLC):
  Our development team follows rigorous secure coding standards
  throughout the software development lifecycle. This includes regular
  code reviews, static and dynamic application security testing
  (SAST/DAST), and adherence to the Open Web Application Security Project
  (OWASP) Top Ten vulnerabilities list.
• Real-time Monitoring and Incident Response:
  We have implemented advanced monitoring systems that operate in
  real-time to detect potential security incidents. In the event of a
  security breach, we have a well-defined incident response plan that
  includes procedures for containment, eradication, and recovery, as well
  as prompt notification of affected users.

8.4. Compliance with Data Protection Laws
Our security practices align with various global data protection regulations to ensure compliance and protect your data:

• General
  Data Protection Regulation (GDPR): We implement appropriate technical
  and organizational measures, including data encryption and
  pseudonymization, to protect the personal data of EU citizens. Regular
  testing, assessment, and evaluation of our security measures are
  conducted to ensure their effectiveness (The SSL Store) (The SSL Store).
• California Consumer Privacy Act (CCPA):
  While the CCPA does not explicitly mandate encryption, it recognizes
  encryption as a critical measure to protect consumer data. We employ
  encryption to mitigate risks and protect personal information from
  unauthorized access (The SSL Store).
• Health Insurance Portability and Accountability Act (HIPAA):
  For any health-related data, we adhere to HIPAA’s technical safeguards,
  which include the encryption of Protected Health Information (PHI) to
  prevent unauthorized access during storage and transmission (The SSL
  Store).
  By implementing these extensive security measures and
  ensuring compliance with relevant data protection laws, we aim to
  provide a secure and trustworthy environment for your personal
  information. Our security practices are continuously reviewed and
  enhanced to stay ahead of evolving threats and to maintain the highest
  standards of data protection.

You have the right to access, update, correct, or delete your personal information held by us. You can do this within the app’s settings or by contacting our support team. The following are the rights of the user:

• Access and obtain a copy of your personal data
• Update or correct your personal data
• Delete your personal data
• Restrict the processing of your personal data
• Object to our reliance on legitimate interests for processing your personal data
• Exercise data portability rights
• Opt-out of marketing communications

Vive Now is not intended for use by children under the age of 17 without parental consent. Use of Vive Now by anyone under 17 years of age is prohibited.

You represent that you are at least the age of majority in the jurisdiction where you live or, if you are not, your parent or legal guardian must consent to these Terms and affirm that they accept these Terms on your behalf and bear responsibility for your use.

If you are accepting these Terms on behalf of someone else, you confirm that you have the legal authority to bind that person or entity to these Terms.

If you are a parent or guardian and believe we have collected personal information from a child without your consent, please contact us immediately.

Our Service may include links to third-party websites or integrate with third-party services. This Policy does not apply to those third-party websites or services. We recommend reviewing the privacy policies of those third parties before providing any personal data to them.

We may update this Privacy Policy from time to time to reflect changes in our practices and services. The updated Policy will be effective as of the date stated at the beginning of the Policy. We encourage you to review the Policy periodically for any changes.

If you have any questions, comments, or requests regarding this Policy or our privacy practices, please contact us at:

Vive Health

app@vivehealth.com

8955 Fontana Del Sol Way

Naples, FL 34109