VIVE NOW - PRIVACY POLICY
Welcome to Vive Now, thank you for choosing us! We understand that the health is the most precious jewel and it needs to be monitored regularly. We also understand that the health privacy is completely personal information and should only be disclosed to someone in confidence. Vive Now works on this basic principle and is very cautious while obtaining and storing your personal data. In order to provide you more accurate services, we do require some important information to analyze your health conditions and to monitor the health risks.
This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights. We use Your Personal data to provide and improve the Service. By accessing and using Vive Now, you agree to the collection and use of information in accordance with this Privacy Policy.
Vive Health is committed to protecting your privacy and providing you with a secure experience when using our Service. By accessing or using the Vive Now in any way, or by registering as a user, you agree to the collection and use of information in accordance with this Privacy Policy.
1. Information We Collect from Our Users
1.1. User Profile Information
- Full name
- Email address
- Date of birth
- Gender
- Height and weight
1.2. Health and Wellness Data
- Health information as disclosed by the User
- Health Monitoring Data
- Medical conditions
- Exercise movements and performance data
- Information related to day-to-day activities which concerns the health and wellness of the user
1.3. Geographical Location
We may collect and use your geographical location to provide location-specific services and personalized content.
1.4. App Usage Information
We collect data related to your usage of the Vive Now app to improve and customize our services.
2. Use of Collected Information
We use the information we collect for the following purposes:
2.1. To provide and operate our proactive healthy lifestyle management solution, tailored to your needs.
2.2. To continuously improve our services, develop new features and enhance the user experience.
2.3. To send you push notifications and other relevant communications regarding your health, wellness and other announcements including app updates.
2.4. To contact you with updates and to respond to your queries, provide user support, and address complaints or issues you may encounter.
2.5. To enforce our Terms of service and prevent any misuse or unauthorized access to our application.
2.6. To comply with applicable laws and regulations, assist law enforcement agencies.
2.7. To resolve disputes as required.
3. Data Sharing and Disclosures
We may share the information we collect with the following parties:
3.1. Third-Party Service Provide
We may share the collected information with trusted third-party service providers who assist us in delivering our services. These providers are contractually bound to handle your data securely and are prohibited from using it for any other purposes. We may also share the collected information with our contractual associates outside of your jurisdiction that includes our current and future international associates or contractual partners.
3.2. Our Professionals, experts, and advisors listed on the App with whom you choose to communicate through the App’s chat functions.
3.3. Your health insurance provider if you have linked your account.
3.4. We may aggregate and anonymize the collected information to generate an analytical insight and may share it with our associates for the same purposes. This data will not personally identify you and may be shared for research or marketing purposes.
3.5. In the event of a merger, acquisition, or any form of sale of some or all of our assets, your personal information may be transferred to the acquiring entity.
3.6. We may disclose your information if required by law or to protect our rights, privacy, safety, or property.
4. Choice And Consent to Access Data from Third-Party Platforms
It is your choice whether to let us access Third-Party Platforms that contain your personal data. You may opt-out of sharing certain information generated from Third-Party Platforms, and you can revoke your permission for us to access Third-Party Platforms at any time.
5. Information Security
We implement measures to reduce the risks of unauthorized access, use, and disclosure of information. However, please note that no security measures are perfect or impenetrable.
6. Data Retention
We retain personal data for as long as necessary to provide and enhance our service or as required by law. We will also retain aggregated or anonymous information for statistical, development, and other purposes indefinitely.
7. Cookies and Tracking Technologies
We use cookies and similar tracking technologies on our website or app. By using the Service, you consent to the use of cookies and tracking technologies as described in our separate Cookie Policy.
8. Security and Encryption
We are committed to ensuring the highest levels of security and confidentiality for your personal information. To this end, we have implemented a robust array of industry-standard security measures, including:
8.1. Secure Socket Layer / Transport Layer Security (SSL/TLS)
We utilize SSL/TLS protocols to create an encrypted and secure communication channel between your web browser and our servers. This cryptographic process is crucial in safeguarding data during transmission by protecting sensitive information, including Personally Identifiable Information (PII), login credentials, and payment data from being intercepted or tampered with by unauthorized parties.
- Data Integrity: The SSL/TLS protocols guarantee that the data exchanged between the client browser and our servers is transmitted without unauthorized alteration. This ensures that the data received is exactly as sent, maintaining its integrity throughout the transmission process.
- Authentication: SSL/TLS protocols authenticate our servers to your browser, ensuring that your communication is with our legitimate website. This mechanism prevents man-in-the-middle attacks and impersonation by malicious sites, thereby safeguarding your interactions with our services.
8.2. Data Encryption at Rest
To protect your data when it is stored, we implement advanced encryption techniques using Amazon Key Management Service (KMS). Our encryption strategy includes:
- Database Storage Encryption: All data within our databases is encrypted with robust encryption algorithms, such as AES-256. This means that, even in the unlikely event of unauthorized access, the encrypted data remains unreadable and secure.
- Encrypted Backups: We regularly perform backups of our databases, and these backups are encrypted using Amazon KMS. This ensures that backup data is protected with the same level of security as live data, providing comprehensive protection against data breaches.
- Access Control Mechanisms: Access to encrypted data is tightly controlled and monitored. Only personnel who have been granted explicit authorization and who have legitimate business needs are permitted to access this data. All access attempts are logged and subject to regular audits to ensure compliance with our stringent security policies.
8.3. Additional Security Measures
Beyond encryption, we employ a suite of comprehensive security practices to further safeguard your personal information:
- Regular Security Audits: We conduct thorough and regular security audits and vulnerability assessments. These audits help us identify potential security risks and vulnerabilities, allowing us to proactively address them before they can be exploited.
- Secure Software Development Lifecycle (SDLC): Our development team follows rigorous secure coding standards throughout the software development lifecycle. This includes regular code reviews, static and dynamic application security testing (SAST/DAST), and adherence to the Open Web Application Security Project (OWASP) Top Ten vulnerabilities list.
- Real-time Monitoring and Incident Response: We have implemented advanced monitoring systems that operate in real-time to detect potential security incidents. In the event of a security breach, we have a well-defined incident response plan that includes procedures for containment, eradication, and recovery, as well as prompt notification of affected users.
8.4. Compliance with Data Protection Laws
Our security practices align with various global data protection regulations to ensure compliance and protect your data:
- General Data Protection Regulation (GDPR): We implement appropriate technical and organizational measures, including data encryption and pseudonymization, to protect the personal data of EU citizens. Regular testing, assessment, and evaluation of our security measures are conducted to ensure their effectiveness (The SSL Store) (The SSL Store).
- California Consumer Privacy Act (CCPA): While the CCPA does not explicitly mandate encryption, it recognizes encryption as a critical measure to protect consumer data. We employ encryption to mitigate risks and protect personal information from unauthorized access (The SSL Store).
- Health Insurance Portability and Accountability Act (HIPAA): For any health-related data, we adhere to HIPAA’s technical safeguards, which include the encryption of Protected Health Information (PHI) to prevent unauthorized access during storage and transmission (The SSL Store).
By implementing these extensive security measures and ensuring compliance with relevant data protection laws, we aim to provide a secure and trustworthy environment for your personal information. Our security practices are continuously reviewed and enhanced to stay ahead of evolving threats and to maintain the highest standards of data protection.
9. User Rights and Choices
You have the right to access, update, correct, or delete your personal information held by us. You can do this within the app’s settings or by contacting our support team. The following are the rights of the user-
- Access and obtain a copy of your personal data
- Update or correct your personal data
- Delete your personal data
- Restrict the processing of your personal data
- Object to our reliance on legitimate interests for processing your personal data
- Exercise data portability rights
- Opt-out of marketing communications
10. Children’s Policy
Vive Now is not intended for use by children under the age of 17 without parental consent. Use of Vive Now by anyone under 17 years of age is prohibited. You represent that you are at least the age of majority in the jurisdiction where you live or, if you are not, your parent or legal guardian must consent to these Terms and affirm that they accept these Terms on your behalf and bear responsibility for your use. If you are accepting these Terms on behalf of someone else, you confirm that you have the legal authority to bind that person or entity to these Terms. If you are a parent or guardian and believe we have collected personal information from a child without your consent, please contact us immediately.
11. Third-Party Services and Links
Our Service may include links to third-party websites or integrate with third-party services. This Policy does not apply to those third-party websites or services. We recommend reviewing the privacy policies of those third parties before providing any personal data to them.
12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices and services. The updated Policy will be effective as of the date stated at the beginning of the Policy. We encourage you to review the Policy periodically for any changes.
13. Contact Us
If you have any questions, comments, or requests regarding this Policy or our privacy practices, please contact us at:
Vive Health
8955 Fontana Del Sol Way
Naples, FL 34109