Privacy Policy

1. Introduction

Welcome to Carelyze. This Privacy Policy describes how Carelyze ("we," "us," or "our") collects, uses, and discloses information about you when you use our website, mobile app, and services (collectively, the "Services").

2. Information We Collect

We collect different categories of information depending on how you use the Services. This includes information you provide directly and information collected automatically.

We may collect personal information you provide directly, such as:

• Name
• Email address
• Phone number
• Payment information (e.g., credit card details)
• Health information, including Protected Health Information ("PHI") as defined by the Health Insurance Portability and Accountability Act ("HIPAA"), when our Services are used in a healthcare context pursuant to a Business Associate Agreement ("BAA")
• User-generated content (e.g., reviews, comments)

We may also collect information automatically when you use our Services, including:

• IP address
• Device information (e.g., device type, operating system)
• Log data (e.g., access times, pages viewed)
• Cookies and similar tracking technologies

If you are a customer in the healthcare industry, please do not upload or otherwise disclose PHI to the Services unless we have executed a BAA with you. When a BAA is in place, we process PHI solely as your business associate in accordance with HIPAA and the terms of the BAA.

3. How We Use Your Information

• Provide, maintain, and improve our Services
• Process your transactions and send you related information
• Communicate with you about products, services, offers, and events
• Monitor and analyze trends, usage, and activities in connection with our Services
• Detect, investigate, and prevent fraudulent transactions and other illegal activities
• Comply with our legal obligations

We do not use your PHI to train generalized machine learning models, and we do not permit third-party model providers to use your PHI to train their models.

4. How We Share Your Information

• Service Providers: Third-party vendors, consultants, and service providers who need access to such information to carry out work on our behalf.
• Legal Compliance: We may disclose your information if required by law, regulation, or legal process.
• Business Transfers: In connection with a merger, sale of assets, financing, or acquisition.
• Your Consent: We may share your information with your consent or at your direction.

Where we act as a business associate, we enter into BAAs with applicable service providers that may handle PHI on our behalf and require them to implement safeguards consistent with HIPAA.

5. Your Choices and Rights

• Access and correct your information
• Request deletion of your information
• Opt-out of marketing communications

6. Data Security

We implement administrative, technical, and physical safeguards designed to protect your information, including encryption in transit and at rest where appropriate, access controls based on least privilege, and audit logging. However, no internet or email transmission is ever fully secure or error-free.

7. Children's Privacy

Our Services are not intended for children under the age of 13. We do not knowingly collect personal information from children without parental consent.

8. Data Retention

We retain personal information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. Where we process PHI as a business associate, retention and destruction will follow the BAA and applicable law.

9. International Transfers

If you access the Services from outside the United States, your information may be transferred to, stored, or processed in the United States or other jurisdictions where our service providers are located. We take steps to ensure appropriate safeguards are in place for such transfers as required by law.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version with a revised "Last Updated" date. Your continued use of the Services after an update constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at: