CARDIOWELL by Welladapt INC.’S PRIVACY POLICY
Last Updated: May 13, 2024
Our Commitment to Privacy
Welcome to Cardiowell (“the Website”). Cardiowell is owned and operated by WellAdapt Inc., (“us”, “we”, or “our”). Your privacy is important to us, and we are committed to safeguarding the personal information you provide while using our services. This Privacy Policy outlines the types of information we collect, how we use and protect it, and the choices you have regarding your data. By using the Website, you consent to the practices described in this policy.
Welladapt Inc. operates the cardiowell.com, welladapt.com, cardiowell.io, and cardiowell.ai websites and the Cardiowell web & mobile applications (Cardiowell App), is located in San Francisco, CA. (USA). This privacy policy applies to all software, products, and services created, published and provided by WellAdapt Inc., including the Cardiowell App associated websites.
WellAdapt Inc. is committed to protecting the security and privacy of your personal information and as such conducts business in compliance with all applicable laws concerning data security and privacy. We will not share your information with anyone except as described in this Privacy Policy.
WellAdapt Inc.’s products and services, including the Cardiowell App, can be used to track and share your own health information. WellAdapt Inc. provides an option to store biometric data to the WellAdapt Inc. data centers that are manually entered, and/or provided directly from supported devices, such as a blood pressure monitor or weight scale. Data is available from our web-app located at www.cardiowell.com, or the Cardiowell iOS App which allows you to sync with Apple HealthKit so you can view certain Apple Health data in the Cardiowell App. Using the Cardiowell Apps, you are able to view the biometric data in the form of text and graphs. As of now, HealthKit biometric data is never stored on WellAdapt servers. Other data can be stored on WellAdapt servers for safe-keeping and remote analysis with your explicit authorization.
WellAdapt Inc. does not provide healthcare services of any type. The Cardiowell App only allows you to aggregate biometric data for self-analysis and understanding.
Our Privacy policy was created to explain what information we collect, why we collect it, and how the information is used. We also explain the choices we offer, including how to access and update information. Unless otherwise defined in this Privacy Policy, terms used in this Privacy Policy have the same meanings as in our Terms of Use Agreement.
Our confidentiality policy provides you with total transparency on how we process your personal data.
BY USING THE WELLADAPT INC WEB SITES, PRODUCTS, SERVICES AND THE CARDIOWELL APP, YOU APPROVE AND AGREE TO THE PRACTICES DESCRIBED IN OUR POLICY.
If you do not find the answer to your questions in this document, feel free to contact us at: privacy@welladapt.com
1. What types of data are collected?
2. How can I maintain control of my data?
3. What data is collected and when?
5. In which cases does WellAdapt Inc. share my personal data?
6. For how long do you retain my personal data?
7. Where is my personal data kept?
8. How do you protect my data?
9. How do I delete my Cardiowell App user account?
10. What third-party tools do you use?
11. What is the minimum age for the use of WellAdapt Inc.’s products and services?
12. Can the privacy policy change?
1. WHAT TYPE OF DATA ARE COLLECTED?
The End User of WellAdapt Inc. products and services requests data to be collected as part of the functionality that the Cardiowell Apps provide. The data identifies you either directly or indirectly.
Information We Collect: We collect the following types of information when you interact with our Website:
Information provided by you: Data that identifies you directly may include your first name, last name, date of birth, mobile number and e-mail address. We may also collect data that indirectly identifies you such as weight, blood pressure, and zip code.
Website usage data: To improve our services and ensure a seamless browsing experience for all users, we use Google Analytics, which automatically collects information about your computer, including your IP address, operating system, and browser type. Please note that this data is anonymous and does not identify any individual. You can learn more about Google Analytics' data collection here.
Our privacy policy is designed to protect your data by applying high-level security technology and processes.
How We Use Your Information: We use the information we collect for the following purposes:
a. Process transactions: Any information you provide during the ordering or registration process will only be used to deliver the product or service you requested. We will not sell, exchange, transfer, or give your information to any other company without your consent.
b. Send periodic emails: The email address you provide may be used to send you information, respond to inquiries, and handle other requests or questions.
c. Send regular marketing and follow-up campaign text updates: The phone number you provide may be used to send you updates, request additional information, provide property valuation, and other relevant inquiries related to buying or selling properties with us. You can unsubscribe from these text updates at any time by texting "STOP."
d. No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
2. HOW CAN I MAINTAIN CONTROL OVER MY DATA?
We believe you should have access to your data at anytime; to ensure your data remains secure and private at WellAdapt Inc, we support you and protect your privacy as fully as possible by guaranteeing you the following rights:
a.) Right to access your data
Your personal data is and shall remain yours. It must be accessible to you upon your request. This means that we will provide you a means to view your data and to export your data for you in an open format.
b.) Right to object to your data being processed
You may object to your personal data being processed and aggregated by contacting our customer service department. Please know that this might limit the scope of WellAdapt Inc.’s. products and services.
c.) Right to protect your data
We use various methods to safeguard your data. How do we protect your data?
First, you need to have a password-protected account to access your data.
Second, all data stored in our cloud database is encrypted.
Third, we de-identify all data used for statistical analysis and research.
d.) Right to control your data sharing
The Cardiowell App provides a sharing option that allows you to control with whom you have shared your data. This option allows you to begin and end sharing your data with WellAdapt Inc. or Apple HealthKit at any time. For your added protection we currently do not allow sharing with any third party apps other than Apple Health. WellAdapt Inc. does not sell, rent, share, or disclose personal information or biometric data with third parties. The system is not designed to enable access by physicians and/or third parties to your personal information.
e.) Right to be forgotten: Deletion of your account
At WellAdapt Inc. we give you the right to remove data that identifies you directly by deleting your account for you. Contact us anytime to have your account deleted
f.) Right to update your information
At any time you can update your personal information within the App. If you have registered or created an account, you may view, update, or delete certain personal information through that account. Please note that we reserve the right to retain personal information relating to you for a period of time as reasonably necessary to document our business activities, comply with applicable laws or regulations or as needed for required disclosures. If you wish to edit personal information but are unable to do so by visiting your account, please contact the WellAdapt Inc. customer service department.
3. WHAT DATA IS COLLECTED AND WHEN?
WellAdapt Inc. products and services, such as the Cardiowell App, do not share any data with third-party companies without your explicit permission. The Cardiowell App does collect data when used. This is a list and explanation of the data collected with your permission.
We receive data:
a.) When you visit and use our websites and services
b.) When you create a Cardiowell App account
c.) When you use the Cardiowell App.
d.) When you use a WellAdapt Inc. Product
e.) When you share data from Apple HealthKit
f.) When you share data with WellAdapt Inc.
g.) When you contact our customer service department
a.) When you visit and use our websites and services
When you use our website, take or reply to our questionnaires, we collect certain information even if you do not have a Cardiowell App account. This happens when you complete surveys, write a comment, share on a social network, order a product, etc.
When ordering Products and Services from our website, we collect information about your order such as mailing and billing address. However, WellAdapt Inc. will never have access or store your bank details as payment transactions are conducted and secured by our partners.
We may also collect information that your browser sends whenever you use the Cardiowell App, use our service or visit our websites by or through a mobile device or PC. ("Log Data").
This Log Data may include information such as your computer's Internet Protocol ("IP") address, browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages and other statistics.
When you access the Service by or through a mobile device, this Log Data may include information such as the type of mobile device you use, your mobile device unique ID, the IP address of your mobile device, your mobile operating system, the type of mobile Internet browser you use and other statistics. It can also include crash reports and logs related to the function or malfunction of the Cardiowell App.
WellAdapt Inc. analyses web traffic data and information gathered using cookies, web beacons and mobile device data to help better understand who is using the website and/or apps and how they are being used. This helps to identify patterns and trends in usage to allow WellAdapt Inc. to better meet user needs. “Cookies” are small files placed on your hard drive when you visit a web page that help to a) analyze page flow, b.) customize services, content and advertising, c) measure promotional effectiveness d.) promote trust and safety and e.) store user preferences and other information.
You can always disable cookies on your browser.
We do not support Do Not Track ("DNT"). Do Not Track is a preference you can set in your web browser to inform websites that you do not want to be tracked. You can enable or disable Do Not Track by visiting the Preferences or Settings page of your web browser.
This is the data that you may communicate to us by visiting and using our sites and services:
Identity Data
Cookies
Log Data
b.) When you create a Cardiowell App account
Creating a Cardiowell App End User account allows you to use the App and may allow you to use WellAdapt Inc.’s Products and Services. A unique user account will be created requiring us to collect certain identifiers about you. We will, therefore, collect any information you provide to identify and register yourself as a Cardiowell App user. This data may include demographic-type data including your name, user name and contact information. The Cardiowell App user account allows you to access and control your data. Data is collected when you first create an account and every time you login and use the Cardiowell App.
This is the data you may communicate to us when you create a Cardiowell user account:
Identity Data
Phone Number
c.) When you use the Cardiowell App
Using the Cardiowell App requires a user account. To create and maintain a user account certain data is shared with us when you download, install and use the Cardiowell App. This is also the case when you set a notification, reminder, share information, or respond to questionnaires.
This is the data that you may communicate to us by using our applications:
Identity Data
Body Metrics Data
d.) When you Use a WellAdapt Inc. product like Cardiowell
WellAdapt’s products, services and applications such as the Cardiowell App collect data, and enable biometric monitoring. When you activate a WellAdapt product, you will need to download the Cardiowell App and create an account.
When used, the device’s serial number and your biometric measurement (i.e. weight, pulse, blood pressure) data are automatically sent from supported devices to the WellAdapt Inc. data center whenever you use the device. No user identification information is sent. Cardiowell App uses the information to show measurement history and graphs.
This is the data that you may communicate to us by using our products:
1. Body Metric Data
2. Device Serial Number
e.) When you share data from Apple HealthKit
You have the option to share Apple HealthKit data with the Cardiowell App. Sharing with Apple HealthKit allows Cardiowell App to display certain biometric data in the Cardiowell App. The user must explicitly grant permission to read and write data from Apple HealthKit. Users can grant or deny permission separately for each type of data. No Apple HealthKit data is stored on WellAdapt Inc servers.
Sharing can be turned off by the user at anytime.
The Cardiowell app is using the Apple HealthKit framework, and will NOT store any users’ health information in iCloud.
This app will NOT use user data gathered from the Apple HealthKit API for advertising or other use-based data mining purposes other than improving health, medical, and fitness management, or for the purpose of medical research.
This app will NOT share user data acquired via the HealthKit API with third parties without user consent.
When you choose to connect and share your Apple HealthKit with the Cardiowell App, your Apple HealthKit information will be displayed in the Cardiowell App. The information you share from Apple HealthKit is then governed by the Apple Terms and Conditions and Privacy Policy. The unique information you choose to send from Apple HealthKit is not automatically made available to WellAdapt Inc., or any third-party affiliates. The data resides only on your iOS device and its backups. Apple HealthKit data is never used by WellAdapt Inc. for marketing and advertising or transferred by WellAdapt Inc. to third-parties for marketing and advertising.
This is the data that you may share from Apple HealthKit when you use the Cardiowell App:
- We do not transfer any AppleHealth Kit data to WellAdapt Inc servers or any third parties.
f.) When you share the data with WellAdapt Inc.
When you share data with WellAdapt Inc., some of your biometric data may be sent automatically and securely to our cloud-based data servers so that you can access the data online, sync your data with your other devices, and share the data with WellAdapt Inc. health coaches.
This is the data you may communicate to us when you share your data with WellAdapt Inc.
1. Body Metrics Data
2. Date of Birth
g.) When you contact our customer service department
As part of our customer service, we collect information about you. Customer support information remains confidential whenever you contact us or visit our Web site.
To better support you, some of your data is shared with our teams until we solve the problem. Our teams ensure your data is secure and comply with our confidentiality policy.
This is the data you may communicate to us when you reach our customer service department:
1. Identity Data
2. Body Metrics Data
4. HOW CAN MY DATA BE USED?
a.) To display your data to you
The data is displayed through the Cardiowell App in the form of graphs and historical trends. Data may be in raw format (weight, pulse, etc.), or averaged over time.
b.) To improve WellAdapt Inc. product and service offerings
In order to improve our products and services and ensure the availability of our platform, in accordance with Internet standards, we retain a record of operations conducted, in log form.
We never work with your data when it identifies you unless you have given us your consent; for example, in order to resolve a problem that you have pointed out to us when you contact our customer service department.
c.) To communicate information to you
We may use certain data in order to offer surveys, news, tips, promotions and other types of direct marketing and communications, such as new product and service offerings, at your discretion. Information can be communicated by email, and within the Cardiowell App.
If you do not wish to receive such information, please opt out by emailing privacy@welladapt.com
d.) To produce statistics and/or aggregated data analyses
We will never sell your personal data without your permission. At WellAdapt Inc., we whole-heartedly believe that data can serve the common good. We may create statistics and analysis using the data we collect. When conducted, all data is first anonymized to assure your privacy is protected.
Data anonymized and/or aggregated in this way are used to:
1. Improve Cardiowell App products and services so that we:
- Can better understand how our products and services are used and can be improved.
- Can improve the user experience of visitors on our websites and applications.
2. Demonstrate the effectiveness of our solutions:
- We participate in scientific studies to document benefits.
- We communicate through blogs, advertising or the press, to educate the public about the benefits of the products and solutions.
3. Educate the public on health issues:
- We publish websites and charts to present statistics and analyses.
- We may generate studies, analyses and general statistical analysis for the public, for companies or universities. We may at times produce studies on digital health and new applications (e.g., a research paper on effectiveness).
5. IN WHICH CASES DOES WELLADAPT INC. SHARE MY PERSONAL DATA?
WellAdapt Inc. never shares your data without your authorization. Data can only be shared between the Cardiowell App and Apple HealthKit and WellAdapt Inc. In each case, only with your explicit authorization. It is essential for us to gain your prior agreement when data that can identify you is shared.
a.) When it is on your own initiative
You can decide to share your data with Apple HealthKit
You can decide to share your data with WellAdapt Inc.
b.) When sharing your data is necessary to provide you with certain services
Some services require the involvement of other companies. This is the case, for example, for online payments on our www.welladapt.com Web site. In order for this service to work, we have to transmit certain data to our partners that allows you to be identified in order to process a secure payment.
c.) When we are obliged by law
We may disclose Personal Information in the good faith belief that we are required to do so by law. We fully cooperate with any law enforcement authority or court order requesting or directing us to disclose the identity, behavior or digital content of any user suspected to have engaged in illegal or infringing behavior. Certain laws, regulations, administrative or court rulings may compel us to communicate certain personal data to a third-party. Except when this is prohibited by law, we shall inform you as soon as possible if we have to transmit some of your data.
d.) Business Transaction
If WellAdapt Inc is involved in a merger, acquisition or asset sale, your Personal Information may be transferred as a business asset. In such cases, we will provide notice before your Personal Information is transferred and/or becomes subject to a different Privacy Policy.
6. FOR HOW LONG DO YOU RETAIN MY PERSONAL DATA?
We retain all data until the time your user account is deleted.
7. WHERE IS MY PERSONAL DATA KEPT?
WellAdapt Inc. has implemented and maintains reasonable security procedures and practices designed to protect against the unauthorized access, use, modification, destruction or disclosure of your Personal Information.
Data is stored locally on your iOS device and upon your authorization limited data can be stored on secure database servers hosted by Database-as-a-Service partner, Object Labs Corporation maker of mLAB.com. Cardiowell also uses Heroku Inc., which is a third-party cloud based data storage and management company. WellAdapt Inc. may also use other services provided by Object Labs and Heroku such as Push Notifications, Debugging Features or Analytics. All data is backed up and encrypted to preserve and secure your information. The Heroku servers are throughout the country and are subject to regulations that guarantee a high level of protection.
Heroku Terms of Service: https://www.heroku.com/policy/tos; and
Heroku Privacy Policy: https://www.heroku.com/policy/security
mLAb Terms of Service: https://mlab.com/company/legal/tos/
mLAB Privacy Policy: https://mlab.com/company/legal/privacy/
Heroku’s physical infrastructure is hosted and managed within Amazon’s secure data centers and utilize the Amazon Web Service (AWS) technology. Amazon continually manages risk and undergoes recurring assessments to ensure compliance with industry standards.
Amazon’s data center operations have been accredited under:
ISO 27001
SOC 1 and SOC 2/SSAE 16/ISAE 3402 (Previously SAS 70 Type II)
PCI Level 1
FISMA Moderate
Sarbanes-Oxley (SOX)
Heroku provides a high level of data security, including vulnerability management, backups, disaster recovery and redundancy.
However, as you probably know, third-parties may unlawfully intercept or access transmissions or private communications, and other users may abuse or misuse your personal information that they collect from the site. Therefore, although we work very hard to protect your privacy, we do not promise, and you should not expect, that your personal information or private communications will always remain private.
8. HOW DO YOU PROTECT MY DATA?
WellAdapt Inc. has put in place security measures in an effort to protect personal information from loss, misuse, or alterations while it is under our control. Your data is stored on industry-compliant cloud servers located within the Amazon Inc. hosting facilities. Amazon uses technical, contractual, administrative and physical measures in an effort to protect against unauthorized access. These include secure servers, SSL and encryption. The hosting facilities are equipped with the latest security technologies and advanced security technologies and procedures. Data is restricted using security controls consisting of security staff, security doors and biometric readers. Remote access to the servers is highly restricted and controlled.
To allow you to securely view your account and registration information you will be required to submit a username and password upon registration and log into the application.
9. HOW DO I DELETE MY CARDIOWELL APP USER ACCOUNT?
To delete your account, please contact our customer service department. Email privacy@welladapt.com for immediate action.
Data that identifies you directly will be deleted from our production servers. However, data may be retained within the security backups that we regularly make. In order to ensure free access to your data, we shall give you the option of retaining your data locally before deleting your account. This will be done following a secured procedure.
10. WHAT THIRD-PARTY TOOLS DO YOU USE?
Our Website may occasionally feature third-party products or services. These external sites have their own privacy policies, and we assume no responsibility or liability for their content or activities. We recommend reviewing the privacy policies of these third-party sites before engaging with them. Other than the use of Heroku and Object Labs Corp. for application managmenet and database storage we use Square Space for web site hosting and Google Analytics & Heap for user analytics. Heap allows us to track bugs, crashes, and user behavior to better understand issues and improve user experience.
Remarketing: We may use third-party vendor remarketing tracking cookies, including but not limited to Google AdWords tracking cookies, to show ads to previous visitors across the internet. These ads are meant to offer special offers and continue marketing our services to those who have shown interest in our service. However, we do not collect any personally identifiable information through these remarketing efforts.
11. WHAT IS THE MINIMUM AGE FOR THE USE OF WELLADAPT INC. PRODUCTS AND SERVICES?
All users must be over the age of thirteen (13) to create an account and use our products and services. Our Service does not address anyone under the age of 13 ("Children").
All individuals under the age of 13 must have a parent's or legal guardian's consent by contacting our customer service department. We do not knowingly collect personally identifiable information from children under 13. If you are a parent or guardian and you learn that your Children have provided us with Personal Information, please contact us. If we become aware that we have collected Personal Information from a child under age 13 without verification of parental consent, we take steps to remove that information from our servers.
12. CAN THE PRIVACY POLICY CHANGE?
We may change our privacy policy to adapt to your needs, to the evolution of the legal framework or when we develop our products and services. We shall inform you of any modification performed by making changes indicating at the top of the privacy statement the date it was last updated. We will make attempts to update you of any changes in the Policy. But know that this Policy may be changed at any time without prior notice to any visitors/users/customers. So please check this policy periodically for any changes.
Your continued use of the Service after we post any modifications to the Privacy Policy on this page will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified Privacy Policy.
APPLICABLE LAW
By visiting and using WellAdapt Inc. products, applications and services, you agree that the laws of the state of California, without regard to principles of conflict of laws, will govern any dispute of any sort that might arise between you and WellAdapt Inc. If you are located outside of the United States and choose to provide your information, your information will be transferred to the United States and processed there
YOUR CONSENT
By using WellAdapt Inc. Product, Applications and Services, you are consenting to our processing of user-provided and automatically collected information as set forth in this Privacy policy now, and as amended by us. "Processing," means using cookies on a computer/hand-held device or using information in any way, including, but not limited to, collecting, storing, deleting, using, aggregating and disclosing information, all of which activities will take place in the United States. By using our products and providing information to us, you consent to such transfer to, and processing in, the US.
DISCLAIMER OF WARRANTIES & LIMITATION OF LIABILITY
All information, content, materials, products (including applications) and services included on or otherwise made available to you through the Cardiowell App, Cardiowell Web sites and WellAdapt Inc. products and services are provided by WellAdapt Inc. on an “as is” and “as available” basis, unless otherwise specified in writing. WellAdapt Inc. makes no representations or warranties of any kind, express or implied, as to the operation of Web sites, or the information, content, materials, products (including Cardiowell App) or services included on or otherwise made available to you by WellAdapt Inc., unless otherwise specified in writing. You expressly agree that your use of the Cardiowell App and other WellAdapt Inc. products and services, including the websites is at your sole risk.
To the full extent permissible by applicable law, WellAdapt Inc. disclaims all warranties, express or implied, including, but not limited to, implied warranties of merchantability and health for a particular purpose. WellAdapt Inc. does not warrant that the Cardiowell App, or Web sites; information, content, materials, products (including software) or services included on or otherwise made available to you through this site; their servers; or e-mail sent from WellAdapt Inc., are free of viruses or other harmful components.
WellAdapt Inc. will not be liable for any damages of any kind arising from the use of its products or services or from any information, content, materials, products (including software) or services included on or otherwise made available to you, including, but not limited to, direct, indirect, incidental, punitive, and consequential damages, unless otherwise specified in writing.
Read the WellAdapt Terms of Use Agreement for more details.
Certain state laws do not allow limitations on implied warranties or the exclusion or limitation of certain damages. If these laws apply to you, some or all of the above disclaimers, exclusions, or limitations may not apply to you, and you might have additional rights.
The power to interpret and modify this privacy policy shall rest with WellAdapt Inc.
Contact us
If you have any questions regarding privacy while using our products, or have questions about our practices, please contact us via email at privacy@welladapt.com
Last updated: May 13, 2024