The application of this Policy is subject to applicable laws, regulations, and the orders or lawful requests of courts or legal authorities.
We take commercially reasonable steps to protect the integrity and confidentiality of personally identifiable and health information that you may share with us. We have complied with the HIPAA security rule for administrative, technical, and physical security safeguards and have third party assessments of our controls performed annually. However, please be aware that no security measures are perfect or impenetrable and we cannot guarantee the absolute security of your information.
We will do our part to protect your information, but it is important for you to protect your information as well. Additionally, we do not control the actions of anyone with whom you or any other Unlonely user may choose to share information. As such, you should be cautious about the access you provide to others when using Unlonely, and the information you choose to share when using the Unlonely Platform.
“Personal Information” is anything that identifies, relates to, describes, is capable of being associated with, or could be reasonably linked, directly or indirectly, to you. Examples of Personal Information include your:
Personal Information we collect might include, but is not limited to, your name, email address, telephone number, race, sex, date of birth, marital status, physical or emotional characteristics, bank account number, any identifier we may use to contact you, other personally identifiable information that you may choose to add to your User account profile in our App, records, and copies of your correspondence with us and with your Authorized Provider through our App.
Protected Health Information
“Protected Health Information” is a subset of Personal Information that is protected by the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations (collectively, “HIPAA”). As stated above, we may receive Protected Health Information about you from Health Plan Customers and, if you are a member under a Health Plan Customer plan, then information that you provide to us in connection with services that we provide or arrange for our Health Plan Customers (such as the specific home care services that you receive from one of our network providers) may be Protected Health Information, and, as such, will be protected in accordance with the Customer Agreement that we have entered into with the Health Plan Customer.
“Non-Personal Information” means information that does not permit us to identify, contact or locate you. For example, your device model number and manufacturer, and state of residence are Non-Personal Information unless linked to your Personal Information. If we combine or link your Non-Personal Information with Personal Information (such as combining your name with your device model), we will treat the combined information as Personal Information so long as it is combined.
Cookies and IP Addresses
The Services may use “cookie” technology and similar technology to gather information from our visitors such as which pages are used and how often they are used, and to enable certain features on the Services. In some jurisdictions, this is considered Personal Information.
Your “IP Address” (a number that is automatically assigned to the computer or other device that you are using by your internet service provider) may be identified and logged automatically in our server log files whenever you access the Services, along with the time of the visit and the page(s) that were visited. IP Addresses are automatically collected by many websites, applications, and other services. We may use IP Addresses for purposes such as calculating usage levels of the Services, helping diagnose server problems, and administering the Services.
“Location Information” is a subset of Personal Information that can be used to locate the device you use to access the Services. Location Information may include: (i) with your consent, the location of the device you used to access the Services; (ii) the IP address of the device or internet service used to access the Services, and (iii) other information made available by a user or others that indicates the current or prior location of the user. If you do not want us to collect Location Information from your device, please disable the location setting(s) on your device or delete the Apps. Please note that disabling the location setting may affect certain features of the Services.
“Usage Data” is information that we automatically collect about your use of the Services and your device. This type of information does not usually, by itself, uniquely identify an individual, and may include your web browser and operating system, device model and manufacturer, and your activity on the Services. If Usage Data is combined with or linked to Personal Information, then we treat it as Personal Information. If the Usage Data cannot be used to identify, contact or locate you, then it is Non-personal Information and will not be treated as Personal Information.
Do Not Track
Some web browsers have “Do Not Track” or similar features that allow you to tell each website you visit that you do not want your activities on that website tracked. Presently, the Services do not respond to “Do Not Track” signals and, consequently, the Services will continue to collect information about you even if your browser’s “Do Not Track” feature is activated. The only way to completely “opt out” of the collection of any information through cookies or other tracking technology is to actively manage the settings on your browser or mobile device to delete and disable cookies and other tracking/recording tools.
Unlonely uses a third-party service provider, Amazon Web Services (“AWS”) to host servers in Canada; track and prevent errors in our software; and to send, receive and track emails and User login invitations. These third-party service providers may have access to Personal Information and Personal Health Information as an incidental result of the services provided by such third parties to Unlonely, but the access of such third parties to such information is strictly controlled in accordance with the safeguards detailed below.
Your Authorized Provider may record in our Platform, information such as interactions with you, test results, evaluations, records and notes consistent with treatment and other information related to your mental health. By using our Platform, you agree that your chosen Authorized Provider are authorized to disclose your Personal Information and Personal Health Information to us.
We may use information you provide for various purposes, which include:
We may also de-identify your information or aggregate your information with other users of the Services (“Aggregate Information”). This Aggregate Information is not Personal Information, because it cannot be used to identify you and may be used by us for any lawful purpose. If Aggregate Information is re-identified, it will be treated as Personal Information.
We may share your information with other parties for various business purposes:
Unlonely does not sell any Personal Information we collect about you. We may, however, share Aggregate Information about our users in all legally permissible ways.
The safety and security of your Personal Information and Personal Health Information is very important to Unlonely. While we cannot guarantee complete protection of your Personal Information or Personal Health Information, we follow commercially reasonable practices to protect Personal Information and Personal Health Information collected from you against accidental loss and unauthorized access, use, alteration, disclosure and destruction.
We store all Personal Information and Personal Health Information with AWS. AWS is responsible for the hosting and security of all servers, databases and applications in a secure cloud and are certified as compliant with ISO Standard 27018 Code of Practice for personal identifiable information (PII) protection in public clouds acting as PII processors. In addition to the independent certification process under ISO27018, the ISO Standard also includes the right to audit AWS for compliance.
When you purchase our App, Apple may collect your credit card information (“Payment Information”) in order to process your payments on our behalf.
Because the transmission of information via the Internet is not completely secure, any transmission of Personal Information or Personal Health Information is at your own risk. Although we maintain security measures to maintain the integrity of the date in our care, including the encryption of all Personal Information and Personal Health Information, while in transit or at rest, we are not responsible for circumvention of any of our privacy settings or security measures. Your Personal Information and Health Information may be transmitted over various networks and may be subject to changes to confirm and adapt to technical requirements of connected networks or devices. We urge you to be cautious about giving out information in any public areas of our Platform.
Safeguard measures to ensure authorized access to your account on our Platform include the use of a username and a password for authentication. You are responsible for keeping your personal password and username private. Please contact us immediately if you believe that your password has been compromised or misused.
Access to private, sensitive and confidential information, including your Personal Information and Personal Health Information, is restricted to Unlonely, Authorized Providers, and other independent contractors or employees of Unlonely, who are required to abide by our privacy standards.
Our Platform may contain links or references to other websites and services owned or operated by third parties. These third-party platforms and websites are not governed by this policy. This policy does not extend to the collection of information by third parties, and we are not responsible for the privacy practices, policies or actions of third parties. When visiting third party websites or platforms, you do so at your own risk, and you assume all responsibility associated with the same. We encourage you to review the privacy policies and terms and conditions of each website and platform visited prior to using them or disclosing information to third parties.
You may opt out of receiving email marketing by unsubscribing using the unsubscribe link provided in all of our marketing email communications.
Unlonely believes it is particularly important to protect the privacy of minors online. Unlonely defines a “minor” as any person less than 13 years of age. Unlonely does not knowingly collect Personal Information about minor users without a parent’s or legal guardian’s permission or knowingly share Personal Information about minor users with third parties without a parent’s or legal guardian’s permission. If we learn we have received Personal Information directly from a child under age 18, we will use that information only to respond directly to that child (or his or her parent or legal guardian) to inform the child that he or she cannot use the Services and will make commercially reasonable efforts to delete such information.
The California Consumer Privacy Act (CCPA), effective January 1, 2020, grants California residents certain privacy rights with respect to their Personal Information. If you are a California resident subject to the protections of the CCPA, you have the following rights to the extent required by law:
The right to know. You have the right to know (i) the Personal Information that we collect, use, disclose or sell; and (ii) the categories of Personal Information that we collected about you in the preceding 12 months, the sources for that Personal Information, the business purpose for which that Personal Information was collected, the categories of such Personal Information that was shared or sold, the categories of third parties with whom that Personal Information was shared or sold, and the business purpose for which that Personal Information was shared or sold.
The right to access. You have the right to access a copy of the specific Personal Information that we have collected about you to the extent required under the CCPA. You may request this copy to be delivered either by mail or electronically.
The right to deletion. You have the right to request that we delete the Personal Information that we or a third party with whom we shared your Personal Information maintain about you to the extent required under the CCPA. There may be circumstances under which we or the third party are unable to delete your Personal Information, such as if we need to comply with our legal obligations or complete a transaction for which your Personal Information was collected or we cannot verify your identity. If we are unable to comply with your request for deletion, we will let you know the reason why.
The right to opt out of the sale of your Personal Information. Please note that Unlonely does not and will not sell any Personal Information we collect about you.
The right to equal service. If you choose to exercise any of your rights under the CCPA, we will not discriminate against you in any way. If you exercise certain rights, such as deleting your account, you may be unable to use or access certain features of the Services.
If you are a California resident and would like to exercise any of these rights, please send an email to firstname.lastname@example.org. An authorized representative may exercise these rights on your behalf so long as they present a power of attorney or other legally binding document evidencing the representative’s authority. Please note that we will require you or your authorized representative to provide us with certain personal identifiers in order to verify your/your representative’s identity when your rights are exercised. Please note further that: (a) if we maintain your Personal Information on behalf of a third party, we may refer you to that third party in order to exercise your rights; and (b) certain health care providers and information, such as Protected Health Information and “Medical Information” (as defined under California’s Confidentiality of Medical Information Act), may be exempted from the CCPA. This means that we and certain health care providers may not be required to honor the above rights and instead we comply with our obligations under other laws, such as HIPAA and the Confidentiality of Medical Information Act. We will respond to a request to exercise rights under the CCPA in accordance with the timeframe and process required under the CCPA. If we deny a request, we will explain the basis for the denial.
Unlonely does not offer financial incentives or price differences in exchange for retention or sale of Personal Information.
By continuing to access or use the Services following such changes, you will be deemed to have agreed to such changes. You are responsible for ensuring that we have an up-to-date, active and deliverable email address for you and for periodically visiting this Policy to check for any changes.
It is important that the Personal Information and Personal Health Information we hold about you is accurate and current. The accuracy, integrity and completeness of your Personal Information and Personal Health Information you input into our App or allow someone to input into our App on your behalf, is your responsibility. Please keep us informed if your information changes. By law, you have the right to request access to and to correct the Personal Information and Personal Health Information that we hold about you. You may contact us if you would like to review, verify, correct or withdraw consent to the use of your Personal Information or Personal Health Information. We may request certain Personal Information for the purposes of verifying the identity of the individual seeking access to their Personal Information or Personal Health Information records.
We may not accommodate a request to view or change information if we believe that:
Where a request for access to information is made, to protect vulnerable populations, Unlonely reserves the right to verify communications, including with your Authorized Provider, before taking action. Where a request for access or alteration of Personal Information or Personal Health Information is declined, the individual making the request will be provided with the reason(s) for declining the request, subject to any legal or regulatory restrictions.
Unlonely has appointed a designated privacy contact who acts as Chief Privacy Officer (“CPO”) responsible for information system monitoring and information security policy and procedure management by (i) undertaking privacy impact assessment and threat and risk assessments on a regular basis and (ii) adopting policies and procedures based on privacy impact assessment and threat and risk assessments to mitigate all identified risks, updated as necessary.