Privacy Policy

1. Our Commitment to You

We handle your data based on four key commitments:

• Transparency: We are clear about what data we collect and why.
• Purpose Limitation: We use your data only for the purposes stated here.
• Security: We implement strong safeguards to protect your data.
• Your Control: We respect your rights and provide you with control over your information.

2. Information We Collect

We collect information necessary to provide, secure, and improve our Services.

3. How We Use Your Information

We use your information for the following purposes:

• To run the app and website: To provide features, send reminders, and show your health data.
• To improve our services: To fix bugs, analyze usage, and develop new features.
• To communicate with you: To send important service alerts and updates.
• For marketing (with your consent): To send health tips and partner offers. You can turn this on or off anytime in your Settings.
• For special programs (with your consent): If you join a corporate or care support program, we use your data only for that specific purpose, as explained when you join.
• For research: We create anonymized, non-identifiable insights that may be shared with research partners to improve healthcare.

For legal and safety reasons: To comply with laws, respond to legal requests, and protect everyone's safety.

4. How We Share Your Information

We do not sell your personal data. We only share it in the following limited circumstances:

• Within a Family Account: The information of a Dependent (a child's profile) is accessible to the Primary User (parent/guardian) who manages that account, as this is a fundamental part of delivering the Service.
• With Your Explicit Direction: When you choose to use features that share data with a family Guardian, your healthcare provider, or a caregiver.
• With Trusted Service Providers: We engage companies to help us operate (e.g., for cloud hosting, payment processing, and analytics). They are bound by strict contracts to protect your data and use it only as we instruct.
• For Corporate & Care Support Programs: As part of a corporate-sponsored or Care Support program for which you have given explicit consent, we may share necessary data with the sponsoring organization or designated care team, as disclosed to you at the time of consent.
• For Technical Support: A restricted number of authorized staff may access your data on a need-to-know basis solely to provide technical support, troubleshoot issues, or maintain the security of our Services.
• For Legal Reasons: If we are required to share data by law, regulation, or a valid legal process (e.g., a court order).
• During Corporate Changes: In connection with a merger, sale of company assets, financing, or acquisition of all or part of our business.

As Aggregated, Anonymized Data: We may share or publish insights that are derived from user data but have been aggregated and anonymized so they cannot be used to identify any individual. This data may be shared with research partners or the public.

5. Your Rights and Choices

You have significant control over your personal data. Depending on your location, your rights may include:

• Access: The right to know what personal data we hold about you.
• Correction: The right to correct inaccurate or incomplete data.
• Deletion: The right to request we delete your data, where legally permitted.
• Restriction or Objection: The right to limit or object to how we use your data in certain circumstances.
• Withdraw Consent: The right to withdraw your consent for marketing, corporate programs, or other consent-based processing at any time.
• Data Portability: The right to receive your personal data in a structured, common, and machine-readable format (applicable in the EU/UK and some other regions).

How to Exercise Your Rights:
You can manage key preferences, such as marketing consents and notification settings, directly in the app under Settings. You can also request the deletion of your account and data in the Account section in the app. For all other requests, or if you are unable to use the in-app tools, please contact our Data Protection Officer using the details provided in Section 13.

6. International Data Transfers

• We store your data primarily in Singapore.
• To provide a reliable global service, we use international cloud providers (like AWS or Microsoft Azure).
• This means your data might be stored or processed in other countries for things like backups and system performance.
• When we transfer your data internationally, we use legal safeguards (like standard contractual clauses) to protect it, as required by law.

7. Data Security and Retention

Security:We implement industry-standard technical and organizational measures designed to protect your data from unauthorized access, disclosure, alteration, or destruction. These measures include encryption, strict access controls, and regular security assessments. Access to personal data by our staff is restricted to a need-to-know basis and is granted only for specific purposes such as providing technical support. Please note that no method of electronic transmission or storage is 100% secure.

Retention: We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, or as required to comply with legal, tax, or regulatory obligations. Aggregated, anonymized data used for research may be retained indefinitely.

8. Compliance with Local Laws

We design our data processing activities to comply with the data protection laws applicable in the regions where we operate and where our users are located.

This includes, but is not limited to, compliance with:

• Singapore's Personal Data Protection Act (PDPA).
• The European Union's General Data Protection Regulation (GDPR) and the United Kingdom's UK GDPR, where applicable.
• Other national data protection laws in jurisdictions where we offer our Services.

The rights and mechanisms described in this Privacy Policy, including your rights in Section 5 and our transfer safeguards in Section 6, are designed to meet the requirements of these laws.

9. Family Accounts and Data of Minors (Dependents)

Our Services are intended for users who are 18 years of age or older. Individuals under 18 are not permitted to create an independent account.

10. Cookies and Similar Technologies

We use cookies and similar tracking technologies to remember your preferences, understand how our Services are used, and to personalize content. You can control cookie settings through your browser. Please note that disabling certain cookies may affect the functionality of our website.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business. We will post the updated policy on this page and update the "Last Updated" date at the top. If we make changes that significantly affect your rights, we will provide a more prominent notice, such as a message within the Services or an email notification. Your continued use of the Services after the effective date of the updated policy constitutes your acceptance of the changes.