Privacy Policy

Scope

This Privacy Policy applies to personal information processed through the current U.S. iOS version of MEDOZO, including information associated with:

• Your MEDOZO account
• Your use of BLO
• Wellness sessions
• Text and voice interactions
• Microphone functionality
• Self-reported wellness information
• App activity necessary to provide the Services
• Subscriptions and transactions
• Customer support
• Security and service operations

Information We Collect or Process

2.1 Account Information

Depending on how you sign in, we may process:

• Account identifier
• Name or profile information made available through the selected sign-in method
• Email address or relay email address
• Sign in with Apple information
• Google sign-in information
• Account settings
• Subscription status

Authentication providers may independently process information under their own terms and privacy policies.

2.2 Information You Provide to BLO

When you communicate with BLO, you may voluntarily provide:

• Conversation text
• Transcribed voice input
• Feelings and emotional experiences
• Wellness goals
• Stress or relaxation experiences
• Sleep-related information
• Relationship or lifestyle information
• Women’s wellness information
• Menstrual, reproductive, or sexual-wellness information
• Physical sensations
• Other information you choose to share about your wellbeing

Because BLO is conversational, information you voluntarily provide may include sensitive personal information or consumer health data.

BLO uses OpenAI technology to support AI-generated responses. Information necessary to generate a BLO response may therefore be processed through AI infrastructure used to provide the feature.

2.3 Local and Server-Side Conversation Storage

MEDOZO is designed to allow conversation information to remain on the user’s device unless the user chooses to save supported information to MEDOZO’s server-side systems.

When a user affirmatively chooses server-side saving, the selected information may be encrypted and retained on MEDOZO’s server-side infrastructure until the user deletes it or it is otherwise no longer reasonably necessary for the purposes described in this Policy.

Users may delete saved information through available MEDOZO controls.

2.4 Wellness and Session Information

MEDOZO may process information associated with wellness sessions, including:

• Selected mood or state
• Session type
• Session start and end time
• Session duration
• Completion status
• Pauses
• Interaction history
• Feedback
• Self-reported changes
• Wellness history or patterns generated from information the user chooses to retain

Information concerning physical or mental wellbeing, reproductive or sexual wellness, or inferences from such information may constitute sensitive personal information or consumer health data under applicable law.

2.5 Microphone and Voice Information

Certain MEDOZO features use the device microphone for voice interaction.

MEDOZO requests iOS microphone permission before accessing the microphone.

For MEDOZO V1.0:

• Raw microphone audio is not uploaded to MEDOZO’s server for storage.
• Voice input may be converted into text.
• Text derived from voice input may be processed to provide BLO functionality.
• Supported text information is saved server-side only when the user chooses server-side saving.

The iOS permission prompt and in-app disclosures should be read together with this Privacy Policy.

2.6 Subscription and Transaction Information

MEDOZO offers subscription options that may include monthly and annual plans and a seven-day trial, as presented in the App.

Where a subscription is purchased through Apple’s App Store, Apple processes the payment transaction.

MEDOZO may receive limited transaction information such as:

• Subscription status
• Product or plan
• Transaction identifier
• Renewal status
• Expiration information

MEDOZO does not ordinarily receive complete payment-card credentials from Apple.

2.7 Technical and Security Information

MEDOZO may process technical information reasonably necessary to operate, secure, authenticate, and deliver the Services, such as network requests, IP address, device or operating-system information made available in ordinary service communications, and security-related records.

MEDOZO V1.0 does not intentionally integrate a separate third-party analytics SDK or crash-reporting SDK for behavioral analytics or crash analytics.

How We Use Information

We may use information to:

• Create, authenticate, and maintain accounts
• Provide BLO and requested AI functionality
• Provide wellness sessions and user-selected personalization
• Maintain information the user chooses to save
• Convert voice input into text and provide requested voice functionality
• Administer subscriptions
• Respond to support requests
• Maintain security and prevent fraud or abuse
• Enforce age and safety restrictions
• Respond to safety-sensitive interactions
• Comply with applicable law
• Operate, maintain, and improve the reliability of the Services

Artificial Intelligence Processing

BLO is an artificial intelligence feature.

To provide BLO, information necessary to generate a response may be processed using OpenAI technology and related infrastructure used on MEDOZO’s behalf.

AI-generated responses may be inaccurate, incomplete, or inappropriate for an individual user’s circumstances.

MEDOZO does not use health, wellness, BLO conversation, or voice-derived information for targeted behavioral advertising.

Consumer Health Data and Sensitive Information

Information relating to physical or mental health, bodily functions, reproductive or sexual health, wellness state, or inferences derived from such information may be regulated as consumer health data or sensitive personal information under applicable U.S. state law.

MEDOZO:

• Does not sell consumer health data
• Does not use consumer health data for targeted behavioral advertising
• Does not use BLO conversations for targeted behavioral advertising
• Will provide additional notice, consent, or rights mechanisms where required by applicable law

How We Disclose Information

We may disclose or make information available to service providers only as reasonably necessary to operate the Services.

Current infrastructure may include:

These providers may process information according to the services they provide, applicable contractual arrangements, and their own legal obligations.

We may also disclose information when reasonably necessary to:

• Comply with applicable law or valid legal process
• Protect users or the public
• Investigate fraud, abuse, or security threats
• Establish, exercise, or defend legal claims
• Complete a merger, financing, acquisition, restructuring, or sale of business assets, subject to applicable law

No Sale, Advertising, or Cross-App Tracking

Data Retention

MEDOZO does not apply one universal retention period to every category of information.

Information stored only on the user’s device remains subject to the user’s device and app controls.

Information the user affirmatively chooses to save server-side may be retained until the user deletes it, deletes the applicable account, withdraws the applicable storage choice where supported, or the information is otherwise no longer reasonably necessary for the purposes described in this Policy.

Limited information may be retained where reasonably necessary for security, fraud prevention, transaction records, legal compliance, dispute resolution, or legal claims.

Deletion of Information and Accounts

MEDOZO provides users with controls to delete supported saved information and is intended to provide an in-app mechanism to initiate account deletion.

When a user requests deletion, information designated for deletion is placed into the applicable deletion process and is intended to be physically deleted from active MEDOZO systems as promptly as reasonably practicable, subject to technical processing and any legally permitted retention.

MEDOZO’s current product design does not rely on a separate user-data backup archive intended to preserve deleted user content.

Your Privacy Choices and Rights

Depending on your state of residence and applicable law, you may have rights to:

• Request access to certain personal information
• Request correction
• Request deletion
• Obtain information about certain collection or disclosure practices
• Withdraw consent where processing depends on consent
• Exercise applicable rights concerning sensitive personal information or consumer health data
• Appeal certain privacy decisions where required
• Exercise privacy rights without unlawful discrimination

We may take reasonable steps to verify a request before acting on it.

You may also control applicable microphone permissions through iOS settings.

U.S. State Privacy Laws

California Residents

California residents may have rights under applicable California privacy laws.

Where those laws apply to MEDOZO, applicable rights may include rights concerning access, knowledge, correction, deletion, sale or sharing, sensitive personal information, and non-discrimination.

Health information and information concerning sex life or sexual orientation may constitute sensitive personal information under California law.

Washington and Other State Consumer Health Laws

Washington’s My Health My Data Act and similar state laws may regulate certain health-related information outside traditional healthcare privacy laws.

Where such a law applies to MEDOZO or particular processing, MEDOZO will provide any additional notice, consent, authorization, deletion mechanism, or consumer-health-data rights process required by that law.

Children and Minors

MEDOZO does not knowingly seek to collect personal information from children under 13.

If we learn that information has been collected from an ineligible minor in circumstances requiring deletion, restriction, or other action under applicable law, we will take reasonable steps to address the account and information.

A parent or legal guardian who believes a minor has provided information to MEDOZO may contact us.

Data Security

MEDOZO uses reasonable administrative, technical, and organizational safeguards designed to protect information, including encryption for supported server-side saved information.

No internet transmission, software system, cloud service, or electronic storage system can be guaranteed to be completely secure.

U.S. Processing

MEDOZO V1.0 is offered through the U.S. Apple App Store.

Information may be processed using service-provider infrastructure in the United States or other jurisdictions as necessary to provide the Services and subject to applicable legal requirements.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in the Services, technology, service providers, data practices, or legal requirements.

Where required by law, we will provide appropriate notice of material changes and obtain additional consent where legally required.