Privacy Policy for the Envoy App.

Hi, we’re CHESS Health, the company that makes and supports the Envoy App. In this Privacy Policy, the company will be referred to as “CHESS”.

At CHESS, we don’t sell or give the Envoy App to individuals directly; you’re getting the Envoy App through a provider or other type of organization that has a contract with us for our eIntervention or eRecovery solution. Throughout the rest of this document, this other organization who is enabling your use of the Envoy App will be referred to as the “Provider”.

Please read this Privacy Policy closely and, if you have any more questions after reading this, please contact us at CHESS (privacy@chess.health) or discuss with your Provider.

This Privacy Policy will describe the following:

• The data about you that will be stored by CHESS
• Who has access to this dat
• Who else might get access to the data
• Optional notifications outside of the App
• Where your data is stored
• How we protect and secure your data
• How long data is stored
• What to do if you want your identifiable data erased or deleted
• Our policy regarding children
• Your consent
• How you can contact us

Very important… If you use the Envoy App, then we assume you’re giving us consent to store your data, to give access to this data to your Provider, and you consent to everything in the Privacy Policy. You will also have to accept our End User License Agreement (EULA) before you can start using the App. We will update the Privacy Policy from time to time; you can always read it on our website or from within the App (under Settings).

The data about you that will be captured and stored by CHESS

In the course of creating or getting an account, your use of the Envoy App, and the Provider’s use of the eIntervention or eRecovery solutions, personally identifiable information (“PII”) about you will be captured and stored by CHESS.

The PII that may be stored through your interactions with the Envoy App and through the use of eIntervention and eRecovery by your Provider includes, without limitation, your name, alias name, email address, physical address, IP address, gender, date of birth, telephone numbers, payer type, payer name, member ID, current situation, any referrals entered for you and the reasons for this referral.

The Envoy App may also collect certain information automatically, including, without limitation, the type of mobile device you use, your mobile devices unique device ID, the IP address of your mobile device, your mobile operating system, the type of mobile Internet browsers you use, and information about the way you use the App (“Automatically Collected Information”).

Who has access to this data

Your Provider has access to all of the PII.

CHESS, which operates and supports the eRecovery solution for the Provider, has access to all the PII and the Automatically Collected Information.

Who else might get access to the data

CHESS may disclose your data to other organizations when (1) required to by law, such as to comply with a subpoena, or similar legal process; or (2) when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

Optional notifications outside of the App

The Envoy App has an optional capability to push notifications to the home screen of your mobile device when a new message is sent to you within the App. This feature is optional. To be enabled, you must first allow notifications from Envoy on your mobile device. At any time, notifications can be turned off through the settings within the Envoy App and/or through the settings on your mobile device.

If enabled, a push notification is a message that pops up on a mobile device and can be sent at any time, even when you are not using the app. Please be aware that these notifications will indicate that they are from the Envoy App and may be seen by others who have access to your phone.

Where your data is stored

CHESS stores your data on secure Amazon Web Services (“AWS”) servers. You can learn more about AWS and how it helps us protect your information here:

https://aws.amazon.com/compliance/hipaa-compliance/

How we protect and secure your data

We are committed to safeguarding the confidentiality of your data. We provide physical, electronic, and procedural safeguards to protect information we process and maintain. For example, we limit access to this information to authorized employees and contractors who need to know that information in order to operate, develop or improve the Envoy App. In addition, CHESS employs a variety of technical safeguards to protect the confidentiality, integrity, and availability of your data including encryption of the data in transit and at rest and other industry best practices. Please be aware that, although we strive to provide reasonable security for information we process and maintain, no security system can prevent all potential security breaches.

How long data is stored

Your data will be stored by CHESS as long as your Provider remains a customer of CHESS.

What to do if you want your identifiable data erased or deleted

If you have stopped using the Envoy App, have deleted the app from all mobile devices, and want to be sure your identifiable data is cleared from all databases, you can reach out to your Provider to get your identifiable data erased or deleted from the CHESS servers.

Our policy regarding children

The Envoy App is not for patients under the age of thirteen. If a parent or guardian becomes aware that his or her child has entered their own personal data into the Envoy App or somehow been given an account by a Provider, please contact us at support@chess.health.

Your consent

As stated earlier, your use of the Envoy App is an acknowledgement that you understand and consent to this Privacy Policy. CHESS may modify this Privacy Policy at any time effective upon its posting. Your continued use of the Envoy App constitutes your acceptance of this Privacy Policy and any updates.

You will also have to accept our End User License Agreement (EULA) before you can create an account and start using the App. Read it carefully too.

How you can contact us

If you have any questions regarding the Privacy Policy, please contact us at privacy@chess.health.