Privacy Policy — Grapefruit Health

Grapefruit Health is committed to maintaining the privacy, integrity and security of any personal information about our users. This Privacy Policy ("Privacy Policy") explains how we protect personal information we collect in connection with your use of the Website and other Grapefruit Health Services and how we use and in some cases disclose that information. "Personal information" for purposes of this Privacy Policy means information that identifies you, such as your name, address, phone number, or email address.

What Personal Information We Collect

In order to access or use the Grapefruit Health Services, you need to create a user account on the Website (a "User Account"). You can alter and correct any personal information provided by you or generated by the Grapefruit Health Services by logging into your User Account.

When you sign up for a User Account, you are required to provide an email address (which will be used as your login ID), mobile phone number and to create an account password (collectively the "Registration Data").
We collect industry standard log data about the browser and operating system you are using, the address of the external or internal page that referred you, your IP address at the time of account creation and keep a log of the pages that you visit on the Website in association with your IP address.
Personal information that you provide to us (including a Student Patient Partner) directly or that we create on your behalf may not be “protected health information” for the purposes of the Health Insurance Portability and Accountability Act (“HIPAA”). This is because Grapefruit Health is not a “covered entity”, as described in HIPAA. However, if we collect health information from you or about you on behalf of your health care provider or health care system, such information may be “protected health information” because we may be a “business associate”, as described in HIPAA; in that case, we will protect your “protected health information” in accordance with HIPAA and our Privacy Policy.

How We Use Your Personal Information

Grapefruit Health will not use your personal information for purposes other than those listed in this Privacy Policy unless we obtain your consent first. Grapefruit Health uses your personal information to:

Provide you with the Grapefruit Health Services;
Analyze Website usage and improve the Website and other Grapefruit Health Services;
Deliver to you any administrative notices and communications relevant to your use of the Website and/or other Grapefruit Health Services;
Provide you with updates regarding Grapefruit Health Services;
Use de-identified data to perform research on program effectiveness;
Perform internal research, project planning, troubleshooting problems, and to detect and protect against error, fraud or other criminal activity; and
Enforce the Terms.

Disclosure to Third Parties

At times Grapefruit Health may make certain personal information available to strategic partners that work with Grapefruit Health to provide services to you. For example, we may share your personal information with: (i) any company or party that may be paying for your use of the Grapefruit Health Services, if applicable; or (ii) your health care provider; or (iii) the health care system associated with your health care provider. Grapefruit Health may also share your personal information with companies who provide services such as information processing, order fulfillment, product delivery, customer data management, customer research and the like; these companies are obligated to protect your information.

We may also disclose information about you if we determine that disclosure is reasonably necessary to enforce the Terms or protect our operations or users or if we are required to do so by any applicable law, rule, regulation, subpoena or other legal process. Additionally, in the event of a reorganization, merger, or sale we may transfer any and all personal information we collect to the relevant third party.

Use of Aggregated Anonymous User Data

We also collect data in a form that does not, on its own, permit direct association with any specific individual. We may collect, use, transfer, and disclose such non-personal information for any purpose. Aggregated data is considered non-personal information and thus is not subject to this Privacy Policy; it is owned exclusively by Grapefruit Health and may be used by Grapefruit Health for any purpose.

Cookies and Other Technology

The Website may use "cookies" and other technologies such as pixel tags and web beacons. Cookies are alphanumeric identifies in the form of text files that are inserted and stored by your Web browser on your computer's hard drive. These technologies tell us which parts of the Website you have visited, limit the number of times you see a Grapefruit Health offer, help us better determine which Grapefruit Health offers you may like to see or to alert you to software compatibility issues. They are also used to analyze and improve the Website’s and other Grapefruit Health Services’ design and functionality. If you choose to delete cookies from your device or block them from being stored on your device, please note that the full functionality of the Grapefruit Health Services may not be available to you. Pixel tags and web beacons are images embedded in the Website for the purpose of measuring and analyzing Website usage and activity. Grapefruit Health, or third party service providers acting on our behalf, may use web beacons to help us analyze Website usage and improve the Website and other Grapefruit Health Services.

We may use third party service providers to help us analyze certain online activities and improve our products and services. For example, these service providers may help us measure the performance of our online campaigns or analyze visitor activity on Grapefruit Health websites. We may permit these service providers to use cookies and other technologies to perform these services for Grapefruit Health. We do not share any personal information about our customers with these third party service providers, and these service providers do not collect such information on our behalf. Our third party service providers are required to comply fully with this Privacy Policy.

We may use search and display advertising so you can find opportunities to purchase Grapefruit Health products and retargeting cookies to present you with Grapefruit Health advertising on other sites based on your interaction on our Website.

We may use social media widgets and plugins so you can use social networking to share items from the Website with your Facebook and Twitter accounts. These interactive mini-programs run on the Website and collect your IP address, which page you are visiting on the Website, and sets a cookie to enable the widget to function properly. Your interactions with these widgets are governed by the privacy policy of the company providing them, not by this Privacy Policy.

Third Party Products or Services Offered Through the Grapefruit Health Website

There may be separate products and services offered by third parties advertised by us on our Website and through the Grapefruit Health Service that may be complementary to your use of the Grapefruit Health Services (collectively, "Grapefruit Health Offers"). If you choose to use these separate products or services, disclose information to the providers, or grant them permission to collect information about you, then their use of your information is governed by their privacy policies and not this Privacy Policy. You should evaluate the practices of external service providers before deciding to use their services. Grapefruit Health is not responsible for their privacy practices. If you click on a link to a third party site, Grapefruit Health encourages you to check the privacy policy of that site. Grapefruit Health may present links in a format that enables us to keep track of whether these links have been followed and whether any action has been taken on a third party web site. We use this information to improve the quality of the Grapefruit Health Offers and customized content on the Website and other Grapefruit Health Services.

We will not provide your personal information to third parties offering products or services without your explicit permission.

Contests, Giveaways and Surveys

From time to time, Grapefruit Health may offer you the opportunity to participate in contests, giveaways and other promotions. Any information submitted in connection with such activities will be treated in accordance with this Privacy Policy, except as specifically set forth in the rules for those contests, giveaways or promotions. From time to time, Grapefruit Health may also ask you to participate in surveys designed to help Grapefruit Health improve the Grapefruit Health Services. Any personal information provided to Grapefruit Health in connection with any survey will be used only in relation to that survey and as elsewhere set forth in this Privacy Policy.

Children

We do not knowingly collect any personal information from children under 18. If we discover that a child under the age of 18 has provided us with personally identifying information, we will take steps to delete the information as soon as possible.

Data Use Following Termination

Following cancellation or termination of your account, Grapefruit Health may continue to utilize de-identified and anonymized historical data associated with your use of the Grapefruit Health Services.

Email Communications From Us

We may provide you with summaries and email alerts. We may also allow users to subscribe to email newsletters and from time to time may transmit emails promoting Grapefruit Health or third-party goods or services. Grapefruit Health subscribers have the ability to opt-out of receiving our promotional emails by following the instructions provided in such emails. Opting out in this manner will not end transmission of service-related emails, such as email alerts.

Data Security

We use a combination of firewall barriers, encryption techniques and authentication procedures, among others, to maintain the security of your data and to protect Grapefruit Health accounts and systems from unauthorized access. When you register for the Grapefruit Health Services, Grapefruit Health requires a password from you for your privacy and security. This password is stored in an encrypted fashion on our systems. Please know that while these are industry-standard methods of data security, there is no fool-proof method of data security and we cannot guarantee that these methods or any other methods will prevent any and all unauthorized access. It is also important to understand that these precautions apply only to our Website and systems. We exercise no control over how your information is stored, maintained or displayed by third parties or on third party sites.

Your Responsibility for Maintaining the Confidentiality of Your Login ID and Password

You are responsible for maintaining the security of your login ID and password. If you believe that your login ID or password have been compromised you should immediately change your password and contact support. We are not responsible if someone else accesses your account through registration information they have obtained from you or through a violation by you of this Privacy Policy or the Terms.

International Data Transfer

Your data is stored in the United States and is subject to United States laws, which may differ from laws of other nations.

California Residents

The California Consumer Privacy Act (“CCPA”) does not currently apply to Grapefruit Health.

Updates to this Privacy Policy

We may update this Privacy Policy periodically. The date last revised appears at the bottom of the Privacy Policy. Changes take effect immediately upon posting.

If you have questions, comments, concerns or feedback regarding this Privacy Policy or any other privacy or security concern, send an email to eric@grapefruit.health.

This policy was last updated on April 3rd, 2022.