Your Privacy Matters

We collect information you provide directly, including: - Personal identification information (name, email, phone number) - Health information related to your recovery journey - Device information and usage data - Communication preferences

We also automatically collect certain information when you use our services, including device type, operating system, and usage patterns to improve our service.

Your information is used to:

• Provide and personalize your recovery experience
• Enable communication with caregivers and healthcare providers
• Send important alerts and reminders
• Improve our services and develop new features
• Comply with legal obligations and healthcare regulations
• Generate anonymized, aggregate analytics (never selling individual data)

We share your information only with:

• Healthcare providers involved in your care (with your consent)
• Designated caregivers you authorize
• Service providers who help us operate (bound by strict confidentiality)
• When required by law or to protect safety

We never sell your personal health information to third parties for marketing purposes.

We protect your data with:

• 256-bit AES encryption for data at rest
• TLS 1.3 encryption for data in transit
• Regular security audits and penetration testing
• SOC 2 Type II certified infrastructure
• HIPAA-compliant data handling procedures
• Multi-factor authentication options

We retain your data for:

• Active accounts: As long as your account remains active
• Inactive accounts: 7 years after last activity (healthcare compliance)
• Anonymized analytics: Indefinitely for service improvement

You can request data deletion at any time, subject to legal retention requirements.

You have the right to:

• Access your personal data
• Correct inaccurate information
• Request deletion of your data
• Export your data in a portable format
• Opt out of non-essential communications
• Revoke caregiver or provider access at any time

Exercise these rights through your account settings or by contacting privacy@distal.health