# Healthily Accessibility

Healthily is committed to making sure our website can be used by as many people as possible. Improving the accessibility of our website is a process that we update and fine-tune on a regular basis.

We do so by following the principles of the [World Wide Web Consortium’s (W3C)](https://www.w3.org/)  [Web Content Accessibility Guidelines (WCAG) 2.1](https://www.w3.org/TR/WCAG21/), where possible. In addition, our designs have been tested for accessibility using the [Stark plug-in](https://www.getstark.co/plug-in) with an overall rating of AAA compliance on all text.

We aim to deliver the information on our website in a way that allows users to:
- clearly consume the information, such as by seeing or hearing it
- find what they need with ease
- understand the information
- use the site in combination with other technologies that may improve their experience

## How we make information easy to see or hear
We aim to provide text alternatives for all non-written content. This includes text transcripts and captions for audio and video content. 

Text and images (including colour and contrast) have been optimised for people with visual impairments, such as colour blindness. That's why we place all text on solid colour backgrounds with maximum contrast.

Our website is compatible with assistive technologies that allow users with limited vision to consume our written content. These technologies include screen readers, video and screen magnifiers, and braille displays.

You can use the following Royal National Institute of Blind People (RNIB) guides to learn more about setting up and using assistive technologies.

1. [Braille displays ](https://www.rnib.org.uk/sight-loss-advice/technology-and-useful-products/technology-resource-hub-latest-facts-tips-and-guides/braille-displays)
2. [Screen readers](https://www.rnib.org.uk/sight-loss-advice/technology-and-useful-products/technology-resource-hub-latest-facts-tips-and-guides/screen-reading-software)
3. [Screen magnifiers](https://www.rnib.org.uk/sight-loss-advice/technology-and-useful-products/technology-resource-hub-latest-facts-tips-and-guides/screen-magnification)

## How we help users find the information they need
We aim to make our site as easy to move around as possible by using many strategies, including the following:

1. Headings and labels that describe the topic or purpose of a given piece of information.
2. Section headings that clearly describe the topic or purpose of sections of text.
3. Content tables for long-form articles.
4. Page titles that describe the topic and purpose of each page.
5. A website layout that allows the user to clearly see the part of the screen that they can control (by typing).
6. When content must be read in a specific order to make sense, users are given the information in that order.
7. Clearly described links to other pages in our website or other websites.
8. Multiple ways for users to find a web page within a set of web pages. For example, they can use our main navigation menu, secondary navigation and sitemap.
9. Providing information about the user's location within a set of web pages.

## How we make our information easy to understand
Our content is produced in keeping with the principles of the [Plain English Campaign](http://www.plainenglish.co.uk/). This keeps our content free from complicated sentences and jargon. When we use medical words, acronyms or technical language, we explain what they mean. 

We produce content for a global audience with a lay understanding of health information and  a reading age of 7 to 11 years (lower secondary education level).

Other ways we make our information easy to understand include:

1. Making sure our web pages appear and operate in a predictable way.
2. If an input error is automatically detected, the item that is in error is identified, described to the user in text and suggestions for correction (if known) are given to the user, unless it would jeopardize the security or purpose of the content.
3. Using labels or instructions when users need to input content to use a feature.

We also have a [frequently asked questions (FAQs) section](/faq) that provides answers to common questions users of our website may have.


How Your.MD/Healthily helps makes sure its website is accessible to everyone.

Accessibility

### Legal Manufacturer
Healthily LTD (formerly YOUR.MD LTD)
36 Egerton Road,
Bournemouth,
BH8 9AY,
England,
United Kingdom
![Legal manufacturer](//images.ctfassets.net/iqo3fk8od6t9/73awTStEX3buYQvFm8YNL3/b38238a50d48523d52e022402af90134/Legal_manufacturer-svg.svg)

---

### EU Authorised Representative
ETHOS Digital Health Ltd, Inniscarra, 
Main Street, Rathcoole, 
Co. Dublin, DUBLIN, Ireland

Tel: +353 1 575 6019 
Email: eu.operations@ethos.co.im 
![EU Authorised Representative](//images.ctfassets.net/iqo3fk8od6t9/4nTWWSiPs5LWaTGSEjX9Zj/e2cd34ed73bf71ef83f76d734621bed4/EC_REP-svg.svg)

---

### Medical Device
DOT™ Symptom Checker 
![Medical Device](//images.ctfassets.net/iqo3fk8od6t9/3JkArZ2c6biNkV4Q6skEHo/acc5547f7468a196af242f5719459f6a/MD-svg.svg)

#### Serial Number
Version 4.0 
![Serial Number](//images.ctfassets.net/iqo3fk8od6t9/2BtiCNQLLrHUHL3hVzYeRd/6997beabdd7152a6ac4c5f379e19ad97/SN-svg.svg)

---

### Instructions for Use
[How to use Healthily safely](https://www.livehealthily.com/legal/safe-use "How to use Healthily safely")
![Instructions for use](//images.ctfassets.net/iqo3fk8od6t9/7vSq0hKQIX90eXoYupKObI/5912cfd6829b58b75455cfcb3e7e66a1/dbfb2d46-18b3-4267-be5b-eb94c196b755-svg.svg)

---

### Patient Information Website
[DOT™ Symptom Checker for trusted information from Healthily](https://www.livehealthily.com/symptom-checker "DOT™ Symptom Checker for trusted information from Healthily")
![Patient information website](//images.ctfassets.net/iqo3fk8od6t9/65V7smiWtbHFaxI4oJWAXI/149170e054a6bf79a13a2cabd50ffea7/954e842f-7cdd-4482-abb1-8e5be331683e.svg)

---

__Healthily Smart Symptom Checker is a self-certified Class I medical device on EU market, marked with CE mark.__

## Healthily's CE Mark

Smart Symptom Checker meets the essential requirements of relevant European Medical Device Regulation.

### About

---

#### Version

1.0

#### Date of Manufacture
2/04/18

![ce mark vector](//images.ctfassets.net/iqo3fk8od6t9/43CLeFSAMY0GvYzxNf5prx/82fa2a43925b84ca98e388055d8f3555/CE_test_2.svg)

#### Manufacture contact details

Healthily LTD (formerly YOUR.MD LTD)
36 Egerton Road,
Bournemouth, BH8 9AY, England, United Kingdom

[support@healthily.ai](mailto:support@healthily.ai)

### Use

---

Smart Symptom Checker (Healthily Services) is intended for use via a [website](https://www.livehealthily.com/), an App for the Android and iOS smartphone platforms, and web-based application (Web App). Components of this service enable the following functionalities ‘Smart Symptom Checker’.

### Warnings

---

##### Please read before starting to use our services

The Smart Symptom Checker  is designed and intended to support the user (lay persons) to decide if there is a need to see a healthcare professional and does not provide diagnoses, medical advice or treatment. The Smart Symptom Checker cannot be used for information about babies, children under the age of 16, pregnant women, people on immunosuppressive treatment and people with complex or long term conditions.

Please see our [Terms of Service](/legal/terms) and our [Safe Use Instructions](/legal/safe-use) for further information.


Your.MD meets the essential requirements of relevant European Medical Device Regulation for EU market and UK Medical Device Regulations for UK market. Find more information on our CE and UKCA mark here.

Certificates

# Clinical Governance

Looking around the digital health space I see a few new start-ups and even mature companies sticking their head in the sand in order to ignore expensive and time consuming clinical governance.

Some companies take the view that because they don’t employ doctors to directly consult with patients they’re immunised against the need to be accountable for their content and tools.

Your.MD could have taken that view. It sets out to provide accessible and high quality decision support for citizens across the globe in how and when to access healthcare. No doctors, no diagnosis. “Our hands are clean,” could have been the company’s attitude.

But one of the things that enticed me to Chair the Your.MD clinical advisory board was that founder Matteo Berlucchi saw clinical quality and safety as a core company principle. In many ways this approach is born out of the values that make up the foundation of Your.MD. The first being: “Patients come first.”

Clinical governance is a systematic approach to maintaining and improving the quality and safety of care within a health system and that is exactly the approach we are adopting within Your.MD.

Your.MD’s approach mirrors the clinical governance framework you would expect to see in a traditional healthcare organisation. In our case, it has been recast in a digital context. There is therefore a strong emphasis on safety as a critical part of the development cycle.

We have adopted a formal clinical quality and safety management system in order to ensure it becomes everyone’s business in the company and an intrinsic part of how we operate. The clinical team in Your.MD is also now supported by a clinical advisory board that has been established to provide an oversight and assurance function for the organisation.

The opportunities to learn from other safety critical industries in the formal adoption of clinical risk management is key. There are well established international standards and processes designed to support the management and accreditation of clinical risk. Our belief is that good clinical quality and safety is also good business.

We are putting a lot of effort into ensuring the values that these activities are built upon are an intrinsic part of the culture of Your.MD.

We are taking the task of ensuring that the continuous improvement in quality and reliability is an essential part of what we do, given the obvious link with a better user experience and better outcomes for patients, carers and their families.

We know from international evidence which approaches to quality improvement yield the most sustainable results and it is those approaches we are using in Your.MD. We are also not taking anything for granted: we endeavour to be evidence based and measuring how we are doing and learning from our mistakes are intrinsic to what we do. Changing how healthcare is delivered is enormously challenging but Your.MD is clear that this will disrupt how people make decisions about accessing healthcare.

Clinical governance will ensure that the disruption our technology will bring is done in a responsible way.


Dr Mark Davies,    
Chair of Your.MD’s Clinical Advisory Board

Clinical governance is a systematic approach to maintaining and improving the quality and safety of care within a health system. Learn more about how we adopt this approach at Your.MD

Clinical Governance Policy

## What are cookies?

Cookies are small files of letters and numbers that are stored on your browser or the hard drive of your computer or mobile device if you agree to accept them. They contain information that is transferred to your computer or mobile device’s hard drive. Cookies collect information about you, such as your preferences, the number of times you have visited a website. The cookie allows the website to “remember” your actions or preferences over time. While cookies and the information they transmit may not identify a living individual on their own, they may be able to do so in combination with other information held by the online provider or a third party.

## Different types of cookies

A cookie can be classified by its lifespan, the domain to which it belongs and by its function. Please note that we don’t use all types of cookies described in the list below. To see which cookies from the list we use and why, see section “What cookies do we use and why”.

By lifespan, a cookie is either a:

**Session cookie**, which is erased when the user closes the browser. They allow website operators to link your actions during a single browser session for you to use the website most efficiently. As these cookies are not usually stored beyond the browser session, they are usually considered less privacy intrusive.

**Persistent cookie**, which remains on the user’s computer or mobile device for a pre-defined period of time. They enable the website to "recognise" you on your return, to remember your preferences and to tailor services to them. They may also be used to track your browsing activity across different websites and to build up a detailed profile of your browsing behaviour for targeted advertising. For this reason, persistent cookies are generally considered to be more privacy-intrusive than session cookies.

As for domain to which it belongs, there are either:

**First-party cookies**, which are planted by the web server of the visited page and share the same domain. This involves assigning a unique identity to the user by setting the cookies to either the user's browser and/or their hard drive with a view to track the user's journey on the website. First-party cookies are commonly used by website operators for session management, personalisation and recognition purposes. This means the information transmitted by the cookie is later combined with the personal information the internet user has supplied to the provider in the course of a sale or other contact. In these cases, your cookie is retrieved each time you visit the site which planted it, making it unnecessary to re-enter registration data on each visit. Although cookies provide you with some benefits, they also enable online providers to build profiles of you, your online behaviour and your interests.

**Third-party cookies** are cookies planted by parties other than the owner of the website you visit. (Example when the webpage references a file, such as JavaScript, located outside its domain).

By its function:

**Strictly necessary cookies.** These are cookies that are required for the operation of a website. They include, for example, cookies that enable you to log into secure areas of a website, use a shopping cart or make use of e-billing services.

**Analytical/performance cookies.** These types of cookies allow providers to recognise and count the number of visitors and to see how visitors move around their website when they are using it. They assist providers in improving the way their website works, for example, to help users find what they are looking for easily.

**Functionality cookies.** These are used to recognise you when you return to a website. They enable the personalisation of content and the recognition of you and your preferences (for example, their choice of language or region).

**Targeting cookies.** These cookies record your visit to a website, the individual pages visited and the links followed. If the cookie is set by a third party (for example, an advertising network) which also monitors traffic on other websites, this type of cookie may also be used to track a user's movements across different websites and to create profiles of their general online behaviour. Information collected by targeting cookies is commonly used to serve users with targeted online advertising.

## What cookies do we use and why?

We use analytical/performance, session and persistent cookies.

We engage Google, a third party to help us with analytics (Google Analytics, hereinafter referred to as ‘’Google Analytics’’). Google Analytics is a tool that helps us understand how our visitors engage with Cold, Flu and COVID-19 Checker (‘’Checker’’) or our website (“Site”). It may use a set of cookies to collect information and report Checker usage statistics without personally identifying individual visitors. We use the data collected by Google Analytics to help us improve the quality of the Checker and to analyse Checker usage. Google Analytics processes the information we share - namely various information on how you use the Checker by their own unique user IDs, but they also have access to your IP address and any other data which they collect from you directly.

**Google Analytics Cookies**

Google Analytics mainly uses first-party cookies to report on user interactions on websites, for example, our Checker uses Google Analytics. Google Analytics stores cookies on your computer to keep track of how you use our Checker. We use cookies to analyse your activity to improve the Checker. For example, by using cookies, we can look at aggregate patterns like the average number of symptom checks that were not finished. We can use such analysis to gain insights about how to improve the functionality and experience of the Checker.

For more information on Google Analytics and their cookie usage, visit [https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage](https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage)

Below you can find a list of the Google Analytics cookies we use on our website and Web App:

| Name of the cookie | Description                                                                                                                                                                           | Category of use | Expiration time |
|--------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|-----------------|-----------------|
| NID                | The NID cookie contains a unique ID Google uses to remember your preferences and other information. This cookie helps Google customise ads on Google proprieties, like Google search. | Preferences     | 6 months        |
| _ga                | Used to distinguish users.                                                                                                                                                            | Analytics       | 2 months        |
| _gid               | Used to distinguish users.                                                                                                                                                            | Analytics       | 24 hours       |
| _gat               | Used to throttle request rate.                                                                                                                                                        | Analytics       | 1 minute        |

The cookies will not be used for any other purpose than the one stated above.

## How long will cookies remain on your computer or device?

The length of time that a cookie remains on your computer or mobile device depends on whether it is a “persistent” or “session” cookie. Session cookies last until you stop browsing and persistent cookies last until they expire or are deleted. To find out how long cookies will remain on your computer you should visit third-party cookies websites mentioned in section What cookies do we use and why above. See the section below on how to control cookies and more information on removing them before they expire.

## How to opt-out of Google Analytics cookies:
You can opt out of Google Analytics cookies by clicking Privacy Settings on the Privacy Matters screen. If you opt out, we won’t place analytic cookies on your device.


# Healthily Cold, Flu and COVID-19 Checker Cookie Policy

(December 2021)


cold-flu-covid-19-checker-cookies

# Healthily Cold, Flu and COVID-19 Checker Privacy Policy

(December 2021)

Healthily respects your privacy and is committed to protecting your personal data. This policy, alongside our [Healthily Cold, Flu and COVID-19 Checker Terms of Service](https://www.livehealthily.com/legal/cold-flu-covid-19-checker-terms), explains how we process your data when you use our services.


cold-flu-covid-19-checker-privacy

# How to use Healthily Cold, Flu and COVID - 19 Checker safely

(December 2021)

Your health is important to us, so before you start we'd like to make sure you understand how our Cold, Flu and COVID-19 Checker (the “Checker”) can help you.

**We are here to inform**

The Checker gives you useful information and **does not constitute professional medical advice, diagnosis, treatment recommendation or endorsement of any products.**

The information provided regarding the likelihood of having a cold, flu or COVID-19 does not mean that you have any of these conditions or that you do not have any other worrying conditions.

Cold, flu and COVID-19 and other respiratory illnesses can have similar symptoms. The difference between them cannot be made based on symptoms alone. COVID-19 can also have non-respiratory symptoms we are not able to consider. Testing and/or confirmation of a medical professional is needed to get the diagnosis.

The **Centers for Disease Control and Prevention (CDC)** currently recommends that anyone with the following symptoms gets a COVID-19 test: Fever or chills, cough, shortness of breath or difficulty breathing, fatigue, muscle or body aches, headache, new loss of taste or smell, sore throat, congestion or runny nose, nausea or vomiting or diarrhea. Please visit CDC official page for latest information regarding COVID-19 [https://www.cdc.gov/coronavirus/2019-ncov/symptoms-testing/symptoms.html](https://www.cdc.gov/coronavirus/2019-ncov/symptoms-testing/symptoms.html)

You can use the Checker only if you had the symptoms for less than 2 weeks. If your symptoms started more than 2 weeks ago you should see a medical professional and not use the Checker.

We use information about your symptoms to advertise third party products. Please note that we are not recommending or endorsing any such products. The advertisements are not based on the most likely condition as we can’t diagnose and therefore do not constitute treatment. 

**Always consult a medical professional:**

·   	to confirm the identified most/less likely condition
·   	before making medical decisions or omissions based on information provided by the Checker
·   	before taking any medications, drugs, vitamins, supplements or herbal alternatives
·   	if you are in doubt, your symptoms get worse or don’t improve

Remember, the Checker is only a chatbot and not a real medical professional, which means it can’t:

·   	consider all the information a medical professional can when interacting with you
·   	identify other condition that may be causing your symptoms
·   	always understand the information you give us

If your situation feels serious, always call the emergency services.

Healthily is not liable for any decisions, acts or omissions you make. The Checker can't be used to get information about babies, children aged 15 or younger, pregnant women, people who are immunosuppressed or on immunosuppressive treatment, and people with long-term conditions, such as, but not limited diabetes, asthma or chnronic obstructive pulmonary disease.

For more information, please read our [Terms of Service](https://www.livehealthily.com/legal/cold-flu-covid-19-checker-terms), section “Our liability and disclaimer of warranties”.

Stay healthy, stay happy.

Matteo Berlucchi, CEO


cold-flu-covid-19-checker-safe-use

cold-flu-covid-19-checker-terms

Cookies are small files of letters and numbers that are stored on your browser or the hard drive of your device if you agree to accept them. Read our cookie policy here.

Cookie Policy

# Cookie Policy
---

**Please read this Cookie Policy carefully so that you understand what type of cookies we and third parties place on your device and why. By continuing to surfing [Healthily website](https://www.google.com/url?q=https://www.livehealthily.com/&sa=D&source=docs&ust=1681830303637029&usg=AOvVaw3HL-W-x9rBoRwt7joQcthq) (“Site”) and using the [Smart Symptom Checker](https://www.google.com/url?q=https://www.livehealthily.com/symptom-checker&sa=D&source=docs&ust=1681830303638522&usg=AOvVaw1d6EnWGyddizkIUeC6TCV2) (“Web App”) (altogehter referred to as “Services”) you agree to such placement of the cookies. If you don’t agree you shouldn’t use our Services.**

---

## What are cookies?

Cookies and similar technologies (such as scripts, tracking pixels and plugins) (altogether referred to as “cookies”) are small files of letters and numbers that are stored on your browser or the hard drive of your device. They contain information that is transferred to your computer's or mobile device’s hard drive. Cookies collect information about you, such as your preferences, the number of times you have visited a website or personal information, such as e-mail address when creating profile. The cookie allows the website to “remember” your actions or preferences over time. While cookies and the information they transmit may not identify a living individual on their own, they may be able to do so in combination with other information held by the online provider or a third party.

## Different types of cookies

A cookie can be classified by its lifespan, the domain to which it belongs and by its function. To see which cookies from the list we use and why, see section “What cookies do we use and why”.

By lifespan, a cookie is either a:

- Session cookie, which are erased when you close the browser. They allow websites to recognise and link your actions during single browser session for you to use the website most efficiently (e.g. remembering what you have put in the shopping basket while browsing around the site). As these cookies are not usually stored beyond the browser session, they are usually considered less privacy intrusive.

- Persistent cookie, which remains on your device for a pre-defined period of time. They enable the websites to remember your preferences and to tailor services to them. They may also be used to track your browsing activity across different websites and to build up a detailed profile of your browsing behaviour for targeted advertising. For this reason, persistent cookies are generally considered to be more privacy-intrusive than session cookies.

As for domain to which it belongs, there are either:

- First-party cookies, are set directly by the website you are visiting, i.e. the URL displayed in the browser’s address bar. This involves assigning a unique identity to you by setting the cookies to either your browser and/or your hard drive with a view to track the your journey on the website. First-party cookies are commonly used by websites for session management, personalisation and recognition purposes. This means the information transmitted by the cookie is later combined with the personal information you have supplied to the website provider in the course of a sale or other contact. In these cases, your cookie is retrieved each time you visit the website which planted it, making it unnecessary to re-enter registration data on each visit. Although cookies provide you with some benefits, they also enable online providers to build profiles of you, your online behaviour and your interests.

- Third-party cookies are set by a domain other than the one you are visiting. This typically occurs when the website incorporates elements from other sites, such as images, social media plugins or advertising. When the browser or other software fetches these elements from the other sites, they can set cookies as well.

By its function:

- __Strictly necessary cookies.__ These are cookies that are required for the operation of a website. They include, for example, cookies that enable you to log into secure areas of a website, use a shopping cart or make use of e-billing services.

- __Statistics (analytical)/performance cookies.__ These types of cookies allow providers to recognise and count the number of visitors and to see how visitors move around their website when they are using it. They assist website providers in improving the way their website works, for example, to help you find what they are looking for easily.

- __Functionality cookies.__ These are used to recognise you when you return to a website. They enable the personalisation of content and the recognition of you and your preferences (for example, your choice of language or region).
- __Targeting (marketing) cookies.__ These cookies record your visit to a website, the individual pages visited and the links followed. If the cookie is set by a third party (for example, an advertising network) which also monitors traffic on other websites, this type of cookie may also be used to track your movements across different websites and to create profiles of your general online behaviour. Information collected by targeting cookies is commonly used to serve users with targeted online advertising.

## What cookies do we use and why?
We use cookies on our Site and Web App (‘’Services’’). We use first party and third-party cookies that are strictly necessary, statistics (analytical), performance, functionality, targeting, session and persistent cookies.

We engage third parties for:

- Statistic (analytical) purpose on our Site and Web App (Google Analytics, Hotjar) and for

- Authentication on our web app (Firebase Authentication).

Please see our [Privacy Policy](https://www.livehealthily.com/legal/privacy), section ‘’Collection of Information’’ namely ‘’Analytical Information’’ and section ‘’Analytics Providers’’ for a more detailed description on how we use gathered analytical data.

Google Analytics (‘’GA’’) is Google’s analytics tool that help us understand how you with our Services. It may use a set of first-party cookies to collect information and report Site/Web App usage statistics without directly personally identifying you. GA stores cookies on your computer to keep track of how you use our Site/Web App. We use the data collected by GA to help us improve the quality of our Site/Web App and to analyse Site/Web App usage. For example, by using these type of cookies, we can look at aggregate patterns like the average number of consultations that were not finished. We can use such analysis to gain insights about how to improve the functionality and experience of the Site/Web App. GA processes the information we share - namely various information on how you use the website and/or Web App by your own unique user ID’s, however they also have access to your IP address and any other data that they collect from you directly.
For more information on Google Analytics and their cookie usage, visit https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage
https://policies.google.com/technologies/cookies
https://policies.google.com/technologies/types
Firebase Authentication (‘’FA’’). These cookies are used to enable a faster login process. FA supports authentication using passwords, popular federated identity providers like Google and Facebook. Knowing your identity allows them to securely save your data in the cloud and provide the same personalised experience across all of your devices. When you log in to our Services, you explicitly request access to the content or functionality to which you are authorised. Without the use of an authentication token stored in a cookie you would have to provide a username/password on each page request. These cookies identify who you are for the length of the session and are only used on our Web App. For more information about Firebase and their cookies usage, visit https://www.firebase.com/terms/privacy-policy.html

### NECESSARY

Necessary cookies help make our website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies.

|Name    | Provider   | Purpose  | Expiry     | Type    |
| ---------- | ---------- | ---------- | ---------- | ---------- |
| CONSENT      | [YouTube](https://policies.google.com/privacy)      | Used to detect if the visitor has accepted the marketing category in the cookie banner. This cookie is necessary for GDPR-compliance of the website.     | 2 years     | HTTP Cookie      |
| CookieConsent [x2]      | [Cookiebot](https://www.cookiebot.com/en/privacy-policy/)     | Stores the user's cookie consent state for the current domain      | 1 year       | HTTP Cookie|
| hjViewportId       | www.livehealthily.com       | Saves the user's screen size in order to adjust the size of images on the website.       | Session       | HTML Local Storage       |
| lvapp_session       | app.involve.me       | Used to implement forms on the website.       | 1 day       | HTTP Cookie       |
| rc::a       | [Google](https://policies.google.com/privacy)       | This cookie is used to distinguish between humans and bots. This is beneficial for the website, in order to make valid reports on the use of their website.       | Persistent       | HTML Local Storage       |
| rc::c       | [Google](https://policies.google.com/privacy)       | This cookie is used to distinguish between humans and bots.       | Session       | HTML Local Storage       |
| selected-locale       | www.livehealthily.com       | Stores the user's language       | 399 days       | HTTP Cookie       |
| XSRF-TOKEN       | app.involve.me       | Ensures visitor browsing-security by preventing cross-site request forgery. This cookie is essential for the security of the website and visitor.       | 1 day       | HTTP Cookie       |

### STATISTICS
Statistic cookies help us understand how you interact with our Site by collecting and reporting information on how you use it.

|Name    | Provider   | Purpose  | Expiry     | Type    |
| ---------- | ---------- | ---------- | ---------- | ---------- |
| _ga      | [Google](https://policies.google.com/privacy)      | Registers a unique ID that is used to generate statistical data on how the visitor uses the website.     | 399 days    | HTTP Cookie     |
| _ga_#      | [Google](https://policies.google.com/privacy)      | Used by Google Analytics to collect data on the number of times a user has visited the website as well as dates for the first and most recent visit.     | 399 days    | HTTP Cookie     |
| _gat     | [Google](https://policies.google.com/privacy)      | Used by Google Analytics to throttle request rate   | 1 day    | HTTP Cookie     |
| _gid    | [Google](https://policies.google.com/privacy)      | Registers a unique ID that is used to generate statistical data on how the visitor uses the website.   | 1 day    | HTTP Cookie     |
| _hjAbsoluteSessionInProgress    | [Hotjar](https://www.hotjar.com/legal/policies/privacy/)      | This cookie is used to count how many times a website has been visited by different visitors - this is done by assigning the visitor an ID, so the visitor does not get registered twice.   | 1 day    | HTTP Cookie     |
| _hjFirstSeen    | [Hotjar](https://www.hotjar.com/legal/policies/privacy/)      | This cookie is used to determine if the visitor has visited the website before, or if it is a new visitor on the website.   | 1 day    | HTTP Cookie     |
| _hjIncludedInPageviewSample   | www.livehealthily.com     | Used to detect whether the user navigation and interactions are included in the website’s data analytics.   | 1 day    | HTTP Cookie     |
| _hjIncludedInSessionSample_#   | [Hotjar](https://www.hotjar.com/legal/policies/privacy/)      | Collects statistics on the visitor's visits to the website, such as the number of visits, average time spent on the website and what pages have been read.  | 1 day    | HTTP Cookie     |
| _hjRecordingEnabled   | www.livehealthily.com     | Collects data on the user’s navigation and behavior on the website. This is used to compile statistical reports and heatmaps for the website owner.  | Session    | HTML Local Storage     |
| _hjRecordingLastActivity  | www.livehealthily.com     | Sets a unique ID for the session. This allows the website to obtain data on visitor behaviour for statistical purposes. | Session    | HTML Local Storage     |
| _hjSession_# | [Hotjar](https://www.hotjar.com/legal/policies/privacy/)    | Collects statistics on the visitor's visits to the website, such as the number of visits, average time spent on the website and what pages have been read. | 1 day   | HTTP Cookie     |
| _hjSessionUser_# | [Hotjar](https://www.hotjar.com/legal/policies/privacy/)    | Collects statistics on the visitor's visits to the website, such as the number of visits, average time spent on the website and what pages have been read. | 1 year   | HTTP Cookie     |
| _hjTLDTest | [Hotjar](https://www.hotjar.com/legal/policies/privacy/)    | Registers statistical data on users' behaviour on the website. Used for internal analytics by the website operator. | Session   | HTTP Cookie     |
| collect | [Google](https://policies.google.com/privacy)    | Used to send data to Google Analytics about the visitor's device and behaviour. Tracks the visitor across devices and marketing channels. | Session   | Pixel Tracker    |
| muxData | www.livehealthily.com   | This cookie is used in context with a video-player, so that if the visitor is interrupted while viewing video content, the cookie remembers where to start the video when the visitor reloads the video. | 399 days   | HTTP Cookie    |
| YSC | [YouTube](https://policies.google.com/privacy)    | Registers a unique ID to keep statistics of what videos from YouTube the user has seen. | Session  | HTTP Cookie    |

### PREFERENCES
Preference cookies enable our Site to remember information that changes the way our website behaves or looks, like your preferred language or the region that you are in.

|Name    | Provider   | Purpose  | Expiry     | Type    |
| ---------- | ---------- | ---------- | ---------- | ---------- |
| CookieConsentBulkSetting-#     | [Cookiebot](https://www.cookiebot.com/en/privacy-policy/)       | Maintains settings and outputs when using the Developer Tools Console on current session.   | Persistent   | HTML Local Storage    |
| loglevel     | www.livehealthily.com      | Enables cookie consent across multiple websites   | Persistent   | HTML Local Storage    |
| VISITOR_INFO1_LIVE     | [YouTube](https://policies.google.com/privacy)       | Tries to estimate the users' bandwidth on pages with integrated YouTube videos.  | 179 days   | HTTP Cookie    |
| yt-remote-cast-installed     | [YouTube](https://policies.google.com/privacy)       | Stores the user's video player preferences using embedded YouTube video  | Session   | HTML Local Storage   |
| yt-remote-connected-devices    | [YouTube](https://policies.google.com/privacy)       | Stores the user's video player preferences using embedded YouTube video  | Persistent   | HTML Local Storage   |
| yt-remote-device-id   | [YouTube](https://policies.google.com/privacy)       | Stores the user's video player preferences using embedded YouTube video  | Persistent   | HTML Local Storage   |
| yt-remote-fast-check-period   | [YouTube](https://policies.google.com/privacy)       | Stores the user's video player preferences using embedded YouTube video  | Session   | HTML Local Storage   |
| yt-remote-session-app  | [YouTube](https://policies.google.com/privacy)       | Stores the user's video player preferences using embedded YouTube video  | Session   | HTML Local Storage   |
| yt-remote-session-name  | [YouTube](https://policies.google.com/privacy)       | Stores the user's video player preferences using embedded YouTube video  | Session   | HTML Local Storage   |

### MARKETING COOKIES
Marketing cookies are used for targeted advertising. The intention is to display ads that are relevant and engaging for you and thereby more valuable for publishers and third-party advertisers.

|Name    | Provider   | Purpose  | Expiry     | Type    |
| ---------- | ---------- | ---------- | ---------- | ---------- |
| ads/ga-audiences    | [Google](https://policies.google.com/privacy)       | Used by Google AdWords to re-engage visitors that are likely to convert to customers based on the visitor's online behaviour across websites.  | Session   | Pixel Tracker    |
| azk   | [Adzerk](https://dev.kevel.com/docs/privacy-policy-customers)       | Presents the user with relevant content and advertisement. The service is provided by third-party advertisement hubs, which facilitate real-time bidding for advertisers.  | 1 year   | HTTP Cookie    |
| NRBA_SESSION_ID  | app.involve.me       | Collects user data through quiz/survey-like content. This allows the website to promote relevant products or services.  | Session  | HTML Local Storage    |
| ytidb::LAST_RESULT_ENTRY_KEY  |  [YouTube](https://policies.google.com/privacy)       | Stores the user's video player preferences using embedded YouTube video  | Persistent  | HTML Local Storage    |
| yt-remote-cast-available  |  [YouTube](https://policies.google.com/privacy)       | Stores the user's video player preferences using embedded YouTube video  | Session  | HTML Local Storage    |

## How long will cookies remain on your device?
The length of time that a cookie remains on your computer or mobile device depends on whether it is a “persistent” or “session” cookie. Session cookies last until you stop browsing and persistent cookies last until they expire or are deleted. To find out how long will cookies remain on your computer you should visit third-party cookies websites mentioned in section What cookies do we use and why above. See the section below on how to control cookies and more information on removing them before they expire.

## How to control cookies?
You can control and manage cookies in various ways.
Most third-party cookies can be blocked by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our site. Some people prefer not to allow cookies, which is why most browsers give you the ability to manage cookies to suit you. For more information on how to modify your browser settings or how to block, manage, delete or filter cookies can be found in your browser’s help file or through such sites as: https://www.aboutcookies.org.uk/

## How to opt-out of Google Analytics:
You can opt-out of having making your site activity available to Google Analytics by installing the Google Analytics opt-out browser add-on available here https://tools.google.com/dlpage/gaoptout. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) that is running on websites from sharing information with Google Analytics about visit activity. For more information visit: Analytics Help

## How to opt-out from Hotjar:
You can request that Hotjar not process your information across any site on the web that has installed the Hotjar Tracking Code. For more information on this and to make a request, visit [Hotjar Do Not Track](https://www.hotjar.com/policies/do-not-track/) page.

## How to opt-out of ads from Google:
For more information how to disable cookies from Google please visit:
Ads help
Google browser plugins

## How the consent given can be withdrawn?
You can always withdraw your consent by sending us an email to [privacy@livehealthily.com](mailto:privacy@livehealthily.com). 


Cookie Policy 

# Cookie Settings

::: cookie-declaration
declarationId:: b7b0501a-0044-42dd-81b8-97a2c6da4328
language:: en
:::

Cookie Settings

# Editorial Policy and Principles

Healthily provides easy-to-understand and trusted health information for a global audience of non-healthcare professionals. We aim to give our readers the information they need to help them make the best decisions for their health through self-assessment. 

The information we provide on all Healthily platforms is not intended to replace the direct relationship between our readers and healthcare professionals. 

Our content is:
- accessible
- actionable
- easy to understand
- fact checked by qualified writers and editors
- reviewed for medical safety and accuracy by qualified medical doctors ([read more about our medical team](https://www.livehealthily.com/team/medical))

To achieve this, we adhere to a process that maintains the highest editorial and ethical standards throughout.

## 1.0 Principles
In order to create high quality, reliable and accurate health information for our users, our content is produced in keeping with 2 highly reputable patient information frameworks: [NHS Information Standard principles](https://digital.nhs.uk/data-and-information/information-standards) and the [Patient Information Forum’s](https://pifonline.org.uk/) Toolkit for Accuracy and Guide to Sourcing. 

### 1.1 NHS Information Standard Principles
Healthily follows 6 principles outlined by the NHS Information Standard. These are:

__Information production__

We have a defined process in place to produce high-quality health information in a consistent manner. This includes the production process and the knowledge level of those producing the content.

__Evidence sources__ 

We only use high-quality evidence obtained from medically-relevant and recognised sources, and health sources that are approved by the Information Standard. We strive to always present this information in a balanced manner. Sometimes, our content addresses topical health claims that readers may want to know about. In these instances, if there is no evidence to back up these claims, this is made clear to the reader. 

The information we publish is reviewed by qualified doctors before publication and reviewed for currency when the article is updated.

__User understanding and involvement__

We have a clear understanding of who our content is (and is not) suitable for and engage in regular user testing to ensure our content and services are well aligned with the needs of our readers. 

We produce content for a global audience with a lay understanding of health information. As such, we write in keeping with the principles of the [Plain English Campaign](http://www.plainenglish.co.uk/) to ensure our content is easy to understand. We avoid using jargon and we explain medical terms if we have to use them. 

__End product__

The information we produce is created in keeping with a rigorous quality-control process that is optimised for medical safety and accuracy. Our published content has a clear date of publication and/or last review.

We retain a list of references used to create all articles and in many cases publish a list within the relevant article.

Our information signposts our readers to additional sources of internal or external information we believe they may find useful.

__Feedback__

We encourage feedback from our readers and users. This can be done by emailing __support@healthily.ai__. This information is clearly signposted on our products.

__Review__

Our content is reviewed on a 3-yearly basis or when there has been a change in any guidelines used to create our content. This review process is clearly defined and accessible by all interested parties. It is conducted by writers, editors and our team of qualified medical doctors. 

### 1.2 Patient information forum (PIF) guidance
Healthily follows the principles outlined in the Patient Information Forum’s Toolkit for Accuracy and Guide to Sourcing (otherwise known as Finding the Evidence). These principles are very similar to the Information Standard principles outlined.

They include:

1. Using current, high quality research, guidelines and literature reviews when producing health information.
2. Keeping a clear record of the evidence used to create health information.
3. Producing content using an explicitly defined process.
4. Making sure published information communicates all relevant risks, benefits and uncertainties in a non-judgmental and unbiased way.
5. Using consistent language.
6. Including clinical experts in the creation of health information.
7. Having a system that allows people to provide feedback on potential inaccuracies in all content.

We follow the [PIF guide to communicating benefits, risks and uncertainties](https://pifonline.org.uk/resources/how-to-guides/communicating-benefits-risks-and-uncertainties/).

## 2.0 Processes
Every piece of clinical content produced by Healthily undergoes a rigorous writing and review process that involves:
- research and writing by trained health writers
- editing and fact checking by experienced senior sub editors
- review of content for medical accuracy and safety** by a qualified doctor
- clinical sign off by the reviewing doctor
- final editorial checks by Content Lead 
- adherence to policy by Head of Content

** Healthily’s medical safety checks involve verifying if the information given is deemed medically safe. 

This includes ensuring that:
- important medical information has not been omitted
- content has not been written in a way that its meaning may be misinterpreted
- the information obtained from the sources used has been correctly interpreted
- the medical information provided is current

Healthily’s final editorial checks involve checking for:
- factual accuracy
- use of plain English 
- adherence to Healthily style guide
- correct grammar and spelling
- logical and coherent flow and order of content
- delivery of the information promised to the reader (via their title or introduction)
- sufficient context provided for all information
- content and tone that is well-matched to the Healthily target audience

We use conscious, respectful language that promotes inclusivity and compassion for everyone regardless of gender, faith, or socioeconomic status. We use empathetic language to tell judgment-free stories, and we make intentional choices to remove stigma, stereotypes, and to avoid injecting bias.

Inclusive language is an ongoing commitment. We regularly engage with communities and research language trends within health communities. We choose our words carefully, seeking to combat stigmas and empower our readers.

### 2.1 Use of AI in Content Creation
At Healthily, we are committed to delivering trusted, accurate, and accessible health information.
We use artificial intelligence (AI) tools to develop our health content but AI does not replace the expertise of our health writers, editors, or medical reviewers.

AI technologies may support tasks such as helping writers phrase complex medical information in plain English, optimizing grammar and readability, assisting with translation followed by a human medical review, and suggesting references. In some cases, AI-generated images may be used when no suitable real-world image is available. 

However, every piece of content that uses AI support is subject to careful editorial and medical review to ensure it meets our rigorous quality, safety, and inclusivity standards.

All content creators document when and how AI has been used during the process. Our editorial and clinical teams review all content to validate its medical accuracy, readability, cultural sensitivity, and compliance with our editorial principles.

We regularly review and update our AI practices to mitigate risks such as bias, inaccuracies, and outdated information, and we remain aligned with guidelines from trusted organizations such as the National Institute for Health and Care Excellence (NICE), and the Patient Information Forum (PIF). Through responsible use of AI and human oversight, we continue to put the health and trust of our users first.

## 3.0 Advertising policy
While the majority of the information published on Healthily platforms is non-commercial in nature, some of our content includes commercial advertising of the products and services of third-party providers. These third-parties have no input or influence over non-promotional content published elsewhere on our platforms.

We strive to only select promotional content we believe is of interest to our user. All promotional content is clearly marked with ‘advertisement’ or ‘promotional post’.

Healthily will not accept adverts, sponsorship or promote products from companies that generate income from the following sources: arms manufacturing, pornography, gambling, tobacco, illegal drugs, homoeopathy and violence.

## 4.0 Feedback 
Healthily is committed to providing our readers with the best experience possible. We encourage feedback on the information we produce -- from what we are doing well, to what we could do better.

If you have any questions or comments about our content, please share them with us by emailing __support@healthily.ai__.

## 5.0  Funding 
Healthily LTD is incorporated and registered in the UK. It is funded by private shareholders and companies with the same principles, objectives and aspirations as Healthily. Major shareholders include RB Plc and Orkla AS.

The shareholders have no influence on Healthily editorial policy.


Healthily uses a stringent set of principles and polices to ensure we provide medically accurate, trustworthy health information across all of our platforms.

Editorial Policy and Principles

# Sorry to see you go

You have successfully been unsubscribed from receiving our emails.

If this was an accident, you can re-subscribe within the My account section of your Healthily app, in the settings section.

[Go to homepage](/)

You have successfully been unsubscribed from receiving our emails.

Email unsubscribe

__Please find some general information about Healthily data processing below.__

## I. GENERAL INFORMATION

**Purposes of processing**. We process your data to offer our Services such as Smart Symptom Checker (where you can access past consultations), Health Library (where you can view articles about diseases/conditions), Health Tracker (to track health, fitness metrics and your feelings), Symptom Tracking functionality (to enable you to track your symptoms over time), to display Alerts/Reminders (to help you manage your health), Goals (to receive articles about topics of your interest), Notes (to insert your notes), Push Notifications (contextual, event based and Health Goals you choose to receive), to enable you to use our assessments, quizzes and tools, to show you third-party health and wellbeing products and services (advertisements). We use the information collected to constantly improve our Services and personalise your experience. We use your data to recommend third party products and services in your location based on your consultation/searches. We use your email to send you newsletters (if you have subscribed and consented to receive this type of communications) and content based on your activity within the Apps (for example, if you have created a health plan we will send you emails with content relevant to selected health plan).

**How is your data kept private?** We store your personally identifiable data and health data in separate databases, meaning that whatever you enter and do in our App is not connected to data that could personally identify you. This way we can make improvements to our Services without knowing anything personal about you. In limited cases, authorised personnel can access personal data along with health data solve technical errors, ensure security and clinical safety. Push Notifications are sent in an anonymised manner using push tokens, which allow messages to be sent to you but do not directly identify you. We do not share your health data with advertiswers and we enable the usage of IP addresses only for the purposes of our Services, but is normally masked (hashed) when stored on our backend. We securely encrypt, limit, and restrict access to your personal details. We encrypt all your data at rest when stored and any directly identifiable data is double encrypted with two keys at both the infrastructure and application level.

**Third Parties**. We check how you use our Services to improve them and personalise your experience with the help of analytic providers. We use third-party providers for surveys, email verification and sending newsletters.

**Categories of personal data concerned**. Directly identifiable personal data (only for users who decide to create a profile, such as name, email, Facebook/Google account name and email address), indirectly identifiable personal data (first name or nick name, age, gender, location (country level not specific enough to identify a street), identifiers (Profile ID, IP address and other identifiers, such as analytics IDs), special categories of data (data concerning health).

**Retention period**. We store your information for as long as needed to provide our Service. We may store the information longer, but only in a way that it cannot be tracked back to you. We process your request to
delete/access data within thirty (30) days. We delete the logs we keep of the IP addresses you have used after approximately 6 months.

**Right to erasure**. 

**Apps**. You can delete your data at any time by visiting Your account settings/Your data and choosing ‘Delete your account’ option. When you select the ‘Delete your account’ option, we anonymise your data by deleting all directly identifiable personal data from our databases and you won't be able to retrieve them. Please make sure you ask for a copy of the data before you request us to erase it, should you want to keep it.

For **Research**, please send an email to [privacy@livehealthily.com](mailto:privacy@livehealthily.com) (subject: deletion request for research).

We will delete the personally identifiable data within 30 days of receiving your request. We reserve the right to delete your profile after a long period of inactivity.

As a guest user using our Web App, you should be aware that we do not store any data that could personally identify you, so if you stop using our Services, we will delete all data as stated in our [Privacy Policy](https://www.livehealthily.com/legal/privacy).

If you provided your email when subscribing to our **newsletter or consenting to receive marketing communications** you can unsubscribe at any time by clicking the unsubscribe link available in the footer of every Healthily email. If you have created a Health plan within the App you can stop receiving emails by opting out from within “Your account settings”. 

**Right to withdraw consent**. You can withdraw your consent for the use of your Health history in account settings’ at any time by visiting Your account Settings/Your health history/Delete your health history. Once you have done so, we won't use this data for our Services, and it will be deleted from your account (in-App profile).

You can change notification preferences within Your account settings and choosing ‘Manage your trackers’ option. By clicking the button next to the tracked symptom, the health tracker history in the App will be deleted and you will no longer receive tracking reminders.

To withdraw consent for general notifications you can choose ‘Get notification’ option within Your account settings/Your settings or you can use the notification settings within your mobile device (please see section “Your rights”, 'Opt-Out of this within [Privacy Policy](https://www.livehealthily.com/legal/privacy)').

To **unsubscribe from our newsletters** you can click the 'unsubscribe' link which is present in every email you receive.

You can withdraw your consent for email collection for research purpose by sending us an email to [privacy@livehealthily.com](mailto:privacy@livehealthily.com), subject: withdrawal consent for research.

**Right to object and to restriction of processing**. We process your data based on a legitimate interest basis when you use our Services as a Guest (Web App), when you use our Website or when
you receive business emails. By using these Services, you have the right to object to our processing. We limit the amount of data we collect and cannot directly identify you. To exercise your right to object or restrict processing, please send us an email to [privacy@livehealthily.com](mailto:privacy@livehealthily.com).

**Right to access, copy, rectification**. You can **request your data** by visiting Your account settings/Your data and choosing the ‘Export data’ option. You will be able to download your data to your device. We will send your data within 30 days of receipt of your request. If we need to acquire your data from a third party, this might take longer.

You can use the ‘Your personal details’ section within ‘Your account settings’ to change the data you added to your account.

You have the right to request **rectification** of inaccurate personal data that cannot be rectified within our Services
by sending an email to [privacy@livehealthily.com](mailto:privacy@livehealthily.com).

**Please see our [Privacy Policy](https://www.livehealthily.com/legal/privacy) for detailed information.**

## II. USING HEALTHILY SERVICES AS A GUEST 

If you use our Services as “Guest” (without signing in with your Google, Facebook/email account) you should be aware that we are not able to accommodate your request for the deletion/access/copy of your data because we do not store any data that could directly personally identify you. We collect the minimum amount of data we need to provide the Services without directly identifying you. We collect temporary location data so that we can show you relevant health and wellbeing providers in your country. As a Guest, you can use limited Services.

## III. ABOUT OUR SERVICES

Your health is important to us, so before using Healthily we'd like to make sure you understand how our products and services can help you.

If you're generally healthy and don’t have any ongoing or rare medical conditions, we can help you spot less serious conditions you can usually manage yourself. Healthily provides medically safe information about specific conditions to help you decide on your best next steps. This includes if you need to see a doctor or not.

But Healthily isn't a real-life doctor, which means we can't:
●	consider all the information a doctor can when interacting with you
●	identify every possible condition or symptom you may have
●	always understand the information you give us

We often give suggestions about what you can do next, but you should only act on these if you think it’s appropriate for you to do so.

Always visit a doctor if:
●	you’re in doubt
●	your symptoms get worse
●	your symptoms don’t improve

If your situation feels serious, always call the emergency services.

Remember, always consult with your doctor before making medical decisions based on information provided by Healthily. Healthily is not liable for any decisions, acts or omissions you make.

Our products and services can't be used to get information about babies, children under the age of 16, pregnant women, people who are immunosuppressed or on immunosuppressive treatment, and people with complex or long-term conditions.

For more information read our [Terms of Service](/legal/terms), section “Our liability and disclaimer of warranties”.

Please find some general information about Your.MD’s data processing.

GDPR Right of Access Request

# HEALTHILY RESEARCH PRIZE DRAW TERMS AND CONDITIONS

(v.1. March, 2022)

**Please read these Healthily Research Prize Draw Terms and Conditions (the “Terms”) carefully before participating in the Prize Draw and the Study (as defined below). If you do not agree to these Terms, you should not participate in Prize Draw.**

**If there is anything that you do not understand, please contact us at [uxresearch@livehealthily.com](mailto:uxresearch@livehealthily.com).**

##  1. THE ORGANISER

The organiser of this prize draw (the “**Prize Draw**”) and the follow up research study (the "**Study**") is **Your.MD Limited**, incorporated and registered in the UK with the company number 08727263 whose registered office is at 5th Floor, Lincoln House, 296-302 High Holborn, London WC1V 7JH, the UK (hereinafter referred to as “Healthily”, "we”, “our”, us").

The Prize Draw means any promotional mechanics used for promotional activities that give away a prize (e.g. giveaways), organised by us and posted on any website, application or similar electronic means by which we are able to create and share information, ideas, direct messages, and other content or to participate in social networking (e.g. Instagram) (altogether referred to as “Platforms”).

By participating in the Healthily Research Prize Draw and the Study, you fully accept these Terms.

## 2. ENTRY REQUIREMENTS 

### 2.1. PRIZE DRAW

To enter the Prize Draw you must be at least 18 years old, UK resident, complete the survey (the "Survey") and submit name and email address (the “**Valid Entry**”).

We will allow only one Valid Entry per person, unless we explicitly state otherwise. Entries submitted on behalf of another person will not be accepted and joint submissions are not allowed. Incomplete, illegible, misdirect or late entries will not be accepted.

We reserve the right to discount any inappropriate or offensive entries and to disqualify any entries if we, at our sole discretion, believe that there has been an attempt to manipulate or tamper with the operation of the Prize Draw (including, and without limitation, by setting up multiple social media accounts in order to submit multiple entries).

All entries will be reviewed and tracked during the promotion period in order to ensure inclusion of all entries. For this purpose, we might ask you to provide us with proof of address or age, and you might be excluded from the Prize Draw participation if you fail to provide us with such proof.

There is no entry fee and no purchase necessary to enter a Prize Draw. 

Incomplete, illegal, misdirected or late entries will not be accepted. Proof of sending will not be accepted as proof of receipt. 

### 2.2. THE STUDY

To participate in the follow up research study (the “Study”) you need to agree (tick the box) at the time of providing your email address for the participation in the Prize Draw. Our  Research Team will contact you only if they find you suitable for the follow up research based on information provided within the Survey. The Research Team will select the participants at its sole discretion. 

## 3. ELIGIBILITY

The Prize Draw is open to all interested participants, except:
(a)	employees of Healthily or its holding or subsidiary companies and members of their immediate families or households;
(b)	persons who do not fulfil the Entry Requirements.

## 4. PROMOTION PERIOD

This Prize Draw starts on the **22nd of March** and ends on the **21st of April** at 00:00 GMT.  Entries before the start date and entries after the end date will not be accepted.

## 5. PRIZE DRAW WINNER DETERMINATION AND ANNOUNCEMENT

The winner will be selected at random from all Valid Entries received during the promotion period by using a random selection software. 

The winner(s) will be publicly announced within a comment to the original Prize Draw post and/or within a new public post created by us for this purpose.

The Winner(s) will be contacted via email within two weeks after the end of the Prize Draw date using the contact details provided with Valid Entry. The winner will have to reply to our email within 10 days to claim the prize. If the winner does not respond to our email within 10 days or declines the prize, we reserve the right to withdraw the prize from the winner and offer the prize to the next eligible participant using the same random selection software from Entries receive

Every Valid Entry may win only one Prize. 

## 6. PRIZE

### 6.1. PARTICIPANTS OF THE PRIZE DRAW

Prizes available:
1st PRIZE - £50 Amazon.co.uk Gift Card* (2x winner)
2nd PRIZE -  £25 Amazon.co.uk Gift Card* (4x winners)
3rd PRIZE - £10 Amazon.co.uk Gift Card* (10x winners)

### 6.2. SELECTED PARTICIPANTS IN THE STUDY

All selected participants in the Study will receive a 50£ Amazon.co.uk Gift Card* after the completion of the Study.

*Restrictions apply, see [www.amazon.co.uk/gc-legal](https://www.amazon.co.uk/gp/help/customer/display.html?nodeId=200272910).

### 6.3.
The prize is non-refundable, non-transferable  and non-exchangeable, and there are no cash alternatives offered. We reserve the right to offer an alternative prize of equal value at our sole discretion. The terms and conditions of individual prizes may stipulate an expiry date.

## 7. PRIZE DELIVERY
The Winner will receive the prize within thirty (30) days of being contacted by us. In the event the prize contains multiple elements, including third-party products and services, it might take longer.

## 8. PERSONAL DATA
When participating in our Prize Draw and the Study, we collect personal data, such as contact details (email, phone number), delivery address, and full name. We use this information to administer the Prize Draw, to communicate results where relevant, and to deliver prizes. When we use your personal data for these purposes, we do so because it is necessary for us to collect and use this information for the performance of our contract with you in accordance with this Terms. The same information is shared with Sponsors involved in the Prize Draw for the same purposes (if applicable).

We might also write to you to obtain consent for the use of your surname, country of residence, and any images made as part of that publicity (e.g. photos) to publicise your win and our brand on our website and any of our social media accounts. We will use your information for publicity purpose only after obtaining your consent. You can withdraw your consent at any time by sending us an email to [privacy@livehealthily.com](mailto:privacy@livehealthily.com). Please bear in mind that due to the nature of social media, once the information becomes public it may be potentially copied or otherwise further distributed beyond our control.

We will not share your information with any third party unless:
(a) we have your consent;
(b) we are required to do so by law.

Any information that we hold about you is processed in the United Kingdom and stored in AWS services in the United States. We keep your information for as long as we need it to perform the Prize Draw and as required by law. 

If there is anything that you do not understand or you have a question regarding our data processing practices, or you would like to exercise any of your rights (data access, deletion, correction), please send us an email to [privacy@livehealthily.com](mailto:privacy@livehealthily.com), subject: Prize Draw. 

For more information on how we process personal data at Healthily, please read our [Privacy Policy](https://www.livehealthily.com/legal/privacy).

## 9. LIMITATION OF LIABILITY

Nothing in these Terms excludes Healthily liability for death or personal injury caused by its negligence or for fraud, or any other liability that Healthily may not exclude by law.  Subject to that, Healthily will not be liable for any loss (including, and without limitation, indirect, special or consequential loss or loss of profits), expense or damage which is suffered or sustained in connection with any Prize Draw or accepting or using any prize, including any loss incurred as a result of any delay and/or failure to perform any obligation to the winner or other participants that is caused by:
(a) technical problems of any kind which may limit or prevent any person's participation in the promotion;
(b) any loss or damage arising from or in connection with the allocation or enjoyment of a prize;
(c) any act or omission of any third party, particularly any Sponsor involved in the provision of products and services relevant to the prize; or
(d) any other events beyond the Healthily control that may cause the Prize Draw to be disrupted or corrupted or may lead to loss of, or damage to, the winner or to the prize.

Your.MD assumes no responsibility or liability for any faulty or failed electronic data transmissions or other errors or difficulties of any kind whether human, mechanical, electronic, computer, network, typographical, printing or otherwise relating to or in connection with the prize draw.

## 10. MISCELLANEOUS

Any decisions relating to the Prize Draw or the Study are final and shall not be subject to review or appeal by any participant or by any third party. No correspondence will be entered in respect of our decision.
In the event of unforeseen circumstances or circumstances outside reasonable control, we reserve the right to modify or discontinue, temporarily or permanently, any Prize Draw without prior notice.

Any amendments or cancellations to these Terms will be posted by means of a reasonably prominent link on the Prize Draw post and your continued participation in the Prize Draw will constitute acceptance of the revised Terms. If you do not accept the revised Terms, it is your responsibility to notify us immediately.

You are solely responsible for any taxes that may be applicable in connection with winning a prize.

If any provision of these terms and conditions (or part of any provision) is found by any court or other authority of competent jurisdiction to be invalid, illegal or unenforceable, that provision or part-provision shall, to the extent required, be deemed not to form part of these Terms, and the validity and enforceability of the other provisions of these Terms shall not be affected.

These Terms are governed by the laws of England and Wales, and the courts of England and Wales shall have exclusive jurisdiction for any disputes relating to a Prize Draw.


Healthily Research Prize Draw Terms and Conditions

# Healthily's Explainability Statement

This is the Healthily Explainability Statement. This document is intended to provide users of the Healthily platform with information on how our Artificial Intelligence  works, including when, how and why we use this technology. 

Please note that this is a ‘living document’ which will be updated from time to time, based on updates to our systems. This statement provides ‘meaningful information on the logic involved’ in our automated decision-making, as part of our compliance with laws including the EU / UK GDPR. 
Please click **[here](//assets.contentful.com/iqo3fk8od6t9/4Sy7OZIAdH65Kl2OmkAG9a/7e7e18ef63e464936b08f5c6cfc3fda7/FINAL_Short_Form_Explainability_Statement__-_17_Sep_2021.pdf)** to see the statement.

If you want more information or you want to talk to us about licencing our smart symptom checker email **[support@livehealthily.com](mailto:support@livehealthily.com).**

This document is intended to provide users of the Healthily App with information on how the Artificial Intelligence in our App works, including when, how and why we use this technology. 

Healthily's Explainability Statement

# Healthily's Vulnerability Disclosure Policy

---

## Introduction

This vulnerability disclosure policy applies to any security vulnerabilities you are considering reporting to us (the "Organisation"). We recommend reading this vulnerability disclosure policy fully before you report a vulnerability, and that you always act in compliance with it.

We value those who take the time and effort to report security vulnerabilities according to this policy. However, we do not currently offer monetary rewards for vulnerability disclosures.

## Reporting a security vulnerability
If you believe you have found a security vulnerability, please submit a brief overview to us, using the following email address:

[disclosure@your.md](mailto:disclosure@your.md)

If we believe your report warrants more investigation and/or detail, we will invite you to a Signal Group where you can share more details openly and communicate with our engineers directly. These details may include:

- the website, IP or page where the vulnerability can be observed
- steps to reproduce. These should be a benign, non-destructive proof of concept. This helps to ensure that the report can be triaged quickly and accurately. It also reduces the likelihood of duplicate reports or malicious exploitation of some vulnerabilities, such as subdomain takeovers

## What to expect after you have submitted your report

After you have submitted your report, we will respond to you within 5 working days. We will aim to keep you informed of our progress.

Priority for remediation is assessed by looking at the impact, severity and exploit complexity. Vulnerability reports may take some time to triage or address. You are welcome to inquire about the status, but avoid doing so more than once every 14 days. This allows our teams to focus on the remediation.

We will notify you when the reported vulnerability is remediated, and you may be invited to confirm that the solution covers the vulnerability adequately.

Once your vulnerability has been resolved, we welcome requests to disclose your report. We’d like to unify guidance to affected users, so please do continue to coordinate public release with us.

## Guidance

Please do NOT:
- break any applicable law or regulations
- access unnecessary, excessive or significant amounts of data
- modify data in the Organisation's systems or services
- use high-intensity, invasive or destructive scanning tools to find vulnerabilities
- attempt or report any form of denial of service, e.g. overwhelming a service with a high volume of requests
- disrupt the Organisation's services or systems
- talk or post about any vulnerability on public forums, social media, etc.
- share, redistribute or fail to properly secure data retrieved from the Organisation's systems or services. Please securely delete all data retrieved during your research as soon as it is no longer required or within 1 month of the vulnerability being resolved, whichever occurs first (or as otherwise required by data protection law)


This vulnerability disclosure policy applies to any vulnerabilities you are considering reporting to us (the "Organisation").

Healthily's Vulnerability Disclosure Policy

# How to use the Dot Platform Safely

## Intended use

---

The DOT™ Symptom Checker is part of the Healthily DOT™ platform.

The DOT™ System Checker is an AI-based health assessment software application intended to provide personal health insights and guidance.

The insights and guidance provided include and overview of possible conditions and navigation to the appropriate type and level of care.

After an assessment the user can obtain their results to share with healthcare providers, who may consider this is information as part of clinical decision making.

The Dot™ Symptom Checker is not a substitute for advice from a healthcare professional nor is it intended to provide a final medical diagnosis.

__Intended Users:__

- People over the age of 16
- People who are not pregnant
- People not suffering any specific, chronic or rare medical conditions that the SSC cannot account for
- People who are immunocompromised

__Dot™ Symptom Checker takes account of:__

- Obesity
- Smoking
- Hypertension
- Diabetes
- Asthma
- Coronary Heart Disease
- Chronic kidney disease
- Previous stroke

__Do not use Dot™ Symptom Checker for such conditions as, but not limited to:__

- Acute airway obstruction or choking
- Animal/human bites
- Assault
- Burns (such as chemical, electrical, thermal)
- Cardiac or respiratory arrest
- Dental emergencies (such as avulsed tooth, extruded tooth, fracture tooth, tooth luxation)
- Pregnancy related conditions
- Electrical, inhalation or lightning injuries
- Eye injuries
- Inserted foreign bodies (such as in rectum)
- Trauma (such as amputation or road traffic accidents)
- Overdose/poisoning 
- Self-harm or suicide
- Seizures
- Uncontrolled bleeding
- Withdrawal of drugs
- Unconscious / difficult to wake up
- Extreme sports and activities 

## How to use Healthily safely

---
Your health is important to us, so before using Healthily we'd like to make sure you understand how our products and services can help you.

If you're generally healthy and don’t have any ongoing or rare medical conditions, we can help you spot less serious conditions you can usually manage yourself. Healthily provides medically safe information about specific conditions to help you decide on your best next steps. This includes if you need to see a doctor or not.

But Healthily isn't a real-life doctor, which means we can't:

- consider all the information a doctor can when interacting with you
- identify every possible condition or symptom you may have
- always understand the information you give us.

We often give suggestions about what you can do next, but you should only act on these if you think it’s appropriate for you to do so. 

Always visit a doctor if:

- you’re in doubt
- your symptoms get worse
- your symptoms don’t improve.

If your situation feels serious, always call the emergency services.

Remember, always consult with your doctor before making medical decisions based on information provided by Healthily. Healthily is not liable for any decisions, acts or omissions you make. 

Our products and services can't be used to get information about babies, children under the age of 16, pregnant women, people who are immunosuppressed or on immunosuppressive treatment, and people with complex or long-term conditions.

For more information, please read our [Terms of Use](https://www.livehealthily.com/legal/terms), section “Our liability and disclaimer of warranties”.

Stay healthy, stay happy.

How to use the Dot Platform Safely. The Healthily Smart Health Guide & Symptom Checker

How to use the Dot Platform Safely

# How to use Healthily COVID-19 risk assessment tool safely

Before you get started, take a moment to read this page. It explains all you need to know about how this tool can help you.

If you're generally healthy and don’t have an ongoing or rare medical condition, our risk assessment tool can give you the safe COVID-19 information you need to help you decide on the best next steps for you.

While we'll suggest some next steps you can take, you should only act on these if you think it’s the best action for you. Always speak to a doctor if you’re in doubt or if your symptoms get worse or don’t improve. And if your symptoms feel serious, call the emergency services.

Always follow local guidelines on what you should and shouldn't do to stay safe during the COVID-19 outbreak.

Healthily isn't liable for any decision, act or omission you make.

The COVID-19 risk assessment tool shouldn't be used to get health information for anyone under 16, pregnant women, people with a weakened immune system (e.g. because of a health condition or medication), people with complex or ongoing conditions, or anyone who works, volunteers or lives in a healthcare or long-term care facility (e.g a nursing home, detention centre or homeless shelter).

For more information read the section "Our liability and disclaimer of waranties" in our [Terms of Service](/terms).

Your health is important to us, so before you start we need to make sure you understand how the service can help you.

How to use Your.MD coronavirus (COVID-19) risk assessment safely

# Your.MD Thyroid Checker demo on PETRA platform Privacy Policy

(v.1. May, 2019)

---

## **WHO WE ARE**

Your.MD is a trademark of YOUR.MD AS, incorporated and registered in Norway with the company number 999260993. The registered office is at c/o Advokatfirmaet Simonsen Vogt Wiig AS, Filipstad Brygge 1, 0252 Oslo, Norway. It offers a demonstration of the Thyroid Checker on PETRA platform (&quot;Thyroid Checker&quot;, &quot;Chatbot&quot;, &#39;&#39;Service/s&#39;&#39;) via its subsidiary Your.MD Limited, incorporated and registered in the UK with the company number 08727263. The registered office is Your.MD Ltd, 5th Floor, 43 Whitfield Street, London, W1T 4HD, UK (hereinafter collectively referred to as: &#39;Your.MD&#39; or &#39;we&#39;).

Should you have any privacy-related questions, please contact us at [privacy@your.md](mailto:privacy@your.md), subject: PETRA.

This privacy policy is to be used only for a demo version of the Thyroid Checker to be showcased on the 10th International Thyroid Awareness Week (ITAW), which runs from May 21 to 27 in Darmstadt.

## **HOW WE USE YOUR DATA**

**LEGAL BASIS**

**Consent.** Where you have consented to our use of your data.

**Legitimate interests**.This covers data processed by us for the purposes that can be reasonably expected within the context of your use of our service to pursue our legitimate interests, in order to improve our service and your experience, for general social benefits to enable free access to health information,to enable us to offer a safe and secure service.

**FOR PROVIDING OUR SERVICE**

We use your data so the chatbot can calculate the most likely condition based on your reported symptoms. **Legal basis:** legitimate interests and explicit consent.

**FOR MEDICAL TESTING**

We use your data in an anonymised form to conduct medical testing of the demonstration version of the Symptom Checker which will help us in clinical assessment of the Thyroid Checker carried out before the commercial launch.

**FOR SAFETY AND SECURITY**

We also use your data to improve the safety and security of our service. **Legal basis:** legitimate interests, to enable us to offer safe and secure service.

**FOR COMMUNICATION PURPOSES**

We will use your email to respond to any queries you send to [privacy@your.md](mailto:privacy@your.md). Please do not share any health data when sending emails to us as we do not respond to any case-specific health issues. **Legal basis:** legitimate interests, to enable us to respond to your queries.

## **THE DATA WE COLLECT**

**Indirectly identifiable data:** age, gender, time zone, acquisition channel, identifiers (profile ID attached to your profile data, analytics IDs, conversation ID and Furhat identifier (face ID).

**Health data:** any type of health data you share when using our Thyroid Checker.

**Technical information:** Your.MD&#39;s unique identifiers (profile ID, conversation ID), Furhat unique identifiers (face ID), records of events with Technical information and your interaction with our service. For example logs on your usage of the service, which include chat information.

## **WHO HAS ACCESS TO YOUR DATA**

We cannot provide all service necessary for the successful operation of our service by ourselves. We therefore share collected information with third-party providers for the purpose of offering and improving our service. The information we share will not identify you personally, and the providers will only use the data to offer service to us. However, we will use your email to answer your queries. For privacy-related requests, see section 6 of this Policy or send an email to [privacy@your.md](mailto:privacy@your.md), subject: PETRA.

**THIRD PARTY TECHNOLOGY PROVIDERS**

**Zendesk.**  We use Zendesk® (Zendesk, Inc.) as a support ticketing system which enables Your.MD employees who respond to your emails to streamline communications in a single ticket, all within an organised workflow. This allows individual requests to be dealt with more quickly. Any information you share with us via email will be received by a Your.MD support employee who will have access to information you share. This includes statistics such as when you last requested support, the nature of the issue, how it was resolved, and how long you had to wait for a resolution. Please refer to the [Zendesk Privacy Policy](https://www.zendesk.com/company/customers-partners/privacy-policy/), [Zendesk Ticketing System](https://www.zendesk.com/help-desk-software/features/ticketing-system/), [Zendesk EU Data Protection](https://www.zendesk.com/company/customers-partners/eu-data-protection/) and [How Zendesk Protects Personal Data](https://help.zendesk.com/hc/en-us/articles/229138227-Privacy-and-Data-Protection-How-Zendesk-Protects-Personal-Data-?_ga=2.267538446.1019750681.1528789576-842600331.1528789576) for more information.

**LAWFUL PURPOSES**

Your data will be disclosed only when necessary for lawful purposes, our legal obligations and rights as stated herein, and will be limited to such purposes: a) if required by law, for example to comply with a court order, subpoena, regulation, legal process or other governmental request b) to exercise or protect the rights, property or personal safety of our company, our users or others c) to enforce this privacy statement, including investigation of potential violations d) upon fulfilling legal requirements of local legislation to supply certain service a third-party might legally request from us e) to detect, prevent, or otherwise address fraud, security, or technical issues f) if we are involved in a merger, acquisition, or sale of all or a portion of its assets, you will be notified of any change in ownership or uses of your data g) to respond to claims that any content published within our Service or our Service violate any right of a third-party.

## **HOW LONG DO WE KEEP YOUR DATA**

We follow generally accepted industry standards and internal procedures to protect the data submitted to us during transmission, storing, and processing. The Furhat identifier (face ID) that enable us to recognise users that come from Furhat, as well as the profile and conversation ID are new for each session you make and get deleted after the conversation ends. This means that the data is anonymized and that we are not able to attribute the data you share with us to you personally.

We store conversation data that cannot be tracked back to you for medical testing purposes. When the data is no longer needed, we delete it using reasonable measures to protect the information from unauthorised access or use.

Any information you send to [care@your.md](mailto:care@your.md) and/or [privacy@your.md](mailto:privacy@your.md) will be deleted as soon as we respond to your enquiry and/or the information is no longer needed.



## **YOUR RIGHTS**

You can exercise your rights:

- to object and to restriction of data processing,

by sending an email to [privacy@your.md](mailto:privacy@your.md), subject: PETRA.

We will process your request **within 30 days** of receiving it.

We may decline to process requests that are unreasonably repetitive, require disproportionate technical effort, jeopardise the privacy of others, are impractical, or if we are required to retain such information by law or for legitimate business purposes. In the event of a suspicious request made in bad faith or accompanying unlawful behavior, we reserve the right to deny any request you make. We will not respond to any enquiry emails which we do not understand, where the request is not clearly specified, or pertains to health questions as we do not offer case-specific advice. We reserve the right to delete your data  after a long period of inactivity.

You should be aware that we are not able to accommodate your **request for the deletion/access/copy of your data** because we delete all data that could indirectly personally identify you after finishing the consultation.

**OPTING OUT**

**Zendesk**. Correcting, updating and removing your information. If you seek to exercise your data protection rights in respect of personal information stored or processed by Zendesk on our behalf (including to seek access to, or to correct, amend, delete or restrict processing of such personal information) you should direct your query to us by sending an email to [privacy@your.md](mailto:privacy@your.md), subject: PETRA.We will then instruct Zendesk to remove the personal information and they will respond within 30 days. They will retain personal information which they process and store on our behalf for as long as is needed to provide service to us.

## **STORING OF INFORMATION, SECURITY AND DATA TRANSFERS**

We follow generally accepted industry standards and internal procedures to protect Information submitted to us.

**STORING**

We process your data with the help of identifiers, namely profile ID, consultation/ conversation ID, Furhat ID (face ID) to avoid personal identification.

We store your information for as long as needed to provide our service. We delete all identifiers which could indirectly identify you after each consultation. We may store the information longer, but only in a way that it cannot be tracked back to you.

We use  **AWS**  and  **Google Cloud Platform**  for storing of information.

**AWS.**  AWS has multiple security certificates [https://aws.amazon.com/security/](https://aws.amazon.com/security/).The data we collect from you may be transferred to, and stored at, a destination outside and inside of the European Economic Area (EEA), namely the AWS regions in the US and EU. It may also be processed by staff operating outside the EEA who work for us, or for one of our Providers. Your data will still be safe - we have entered into the AWS data processing addendum to make sure your personal information is safe, namely:

a) that the AWS will use the data only to provide its storing service

b) that it will not disclose data to any third-party

c) that the AWS restricts its personnel to process your data without their authorisation

d) that we stay in control of correcting, blocking, deleting, retrieving your data

e) that AWS is responsible for implementing and maintaining the technical and organisational measures

f) that AWS is certified under ISO 27001 and agrees to maintain an information security program for the service that complies with the ISO 27001 standards or such other alternative standards as are substantially equivalent to ISO 27001 for the establishment, implementation, control, and improvement of the AWS Security Standards

g) that AWS may use subcontractors, but will restrict their access only for the purposes of offering AWS service. By using and downloading our Service, you agree to the transfer, storing and processing, as stated herein. We will take all the reasonably necessary steps to ensure that your data is treated securely and in accordance with this privacy policy. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your data, we cannot guarantee the security of your data transmitted to our Site; any transmission is at your own risk.

**Google Cloud Platform.**  We store all analytical data on Google Cloud Platform (GCP). We control the stored data while Google is the processor. This means that Google processes the data only for the purposes of providing GCP service and technical support to us, in accordance with data processing and security terms [https://cloud.google.com/terms/data-processing-terms](https://cloud.google.com/terms/data-processing-terms). We control what happens to the data and can access it at any time. We have chosen to store the data in the US. Google stores data in a multi-tenant environment on Google-owned servers. The data and file system architecture are replicated in multiple geographically dispersed data centres. Google also logically isolates stored data. We have control over specific data sharing policies. Those policies, in accordance with the functionality of the Service, enable us to determine the product sharing settings applicable to this privacy policy. We may choose to make use of certain logging capability that Google may make available via the service. Google complies with legal frameworks relating to the transfer of data such as EU-US and Swiss-US Privacy Shield. Get more information on Google Cloud Platform and the terms: [https://cloud.google.com/product-terms](https://cloud.google.com/product-terms%5D).

**SECURITY**

To guarantee your privacy, we securely encrypt, limit, and restrict access to your personal details.

We encrypt all your data at rest. The information is encrypted and key protected, and we have integrated commercially reasonable efforts to make sure your information remains secure when processed by us. However, please be aware that no security measures are impenetrable. If you have any concerns about the security of our service, please contact us at [privacy@your.md](mailto:privacy@your.md).

**TRANSFERS**

**EU Territory** We store your indirectly identifiable personal data for the duration of consultation and delete it afterwards. This section shall not prevent any technical storage or access to information for the sole purpose of carrying out the transmission of a communication, or as strictly necessary for us to provide the Service you requested. We reserve the right to delete your profile after an extended period of inactivity.

**US Territory**  We store your indirectly identifiable personal data for the duration of consultation and delete it afterwards. We will retain collected information for the period necessary to fulfill the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by applicable legislation. Storing might be different depending on which territory is collecting the information and the applicable legislation, but we always strive to store the information only if it is needed for the purposes of providing our Service.

## **GENERAL**

Should you have any privacy-related questions, please contact us at [privacy@your.md](mailto:privacy@your.md), subject: PETRA. If we are not able to help, we will forward your enquiry to our external **Data Protection Officer (DPO)**, ePrivacy GmbH, represented by Prof. Dr. Christoph Bauer, Große Bleichen 21, 20354 Hamburg. Should you have any concerns or complaints that our DPO is not able to resolve, you have the right to lodge a complaint with our supervisory authority Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Prof. Dr. Johannes Caspar, Kurt-Schumacher-Allee 4, 20097 Hamburg. If you are a UK customer, you can lodge a complaint with the Information Commissioner&#39;s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

**CHANGES TO THIS PRIVACY POLICY.**

We may update this privacy policy to reflect the changes in our data processing practices. Because we are constantly adding new service and features, we might not make an immediate upgrade of the privacy policy, unless in case of material changes to our data processing practices. The most current version of this privacy policy will govern our use of the data we collect from you and it is available at https://www.your.md/petra-privacy/. Because we do not create your profile account you will need to consent to the most recent version each time you use the service.

Your.MD,

Matteo Berlucchi, CEO

Your.MD Thyroid Checker demo on PETRA platform Privacy Policy

Petra Privacy Policy

Your.MD Thyroid Checker demo on PETRA platform Terms of Service

Petra Terms of Service

#  Privacy Policy

*(last update: September 2024)*

---

We respect your privacy and are committed to protecting your personal data. This policy, alongside our [Terms of Service](https://www.livehealthily.com/legal/terms), explains how we process your data when you use our services through Healthily website, mobile apps and web app. 

This policy, alongside our Terms of Service, explains how we process your data when you use our services.

Privacy Policy

Healthily LTD, incorporated and registered in the UK with the company number 08727263 whose registered office is at 36 Egerton Road, Bournemouth, BH8 9AY, England, UK, represented by Jonathon Carr-Brown, provides Services (hereinafter collectively referred to as: ‘Healthily’, ‘we’ or ‘us’).

Your personal data is controlled by Healthily LTD who is the data controller in regard to its Services. Should you have any privacy-related questions, please contact us at privacy@healthily.ai.

We use your data to personalise your experience when you use our Services. We also use your data to improve the safety and security of the Services we provide, and for the purpose of analytics, marketing and communications.

__LEGAL BASIS__

__Contract performance.__ This covers data that is processed by us in order to provide you with the Services that you have requested, by initiation of the Services.

__Consent.__ Where you have consented to our use of your personal data, including health data.

__Legitimate interests.__ This covers data processed by us for the purposes that can be reasonably expected within the context of your use of our Services to pursue our legitimate interests, in order to improve our Services and your experience, for general social benefits to enable free access to health information, for exploring business opportunities, for scientific research and to enable us to offer a safe and secure service.

__PROVIDING OUR SERVICES AND PERSONALISING YOUR EXPERIENCE__

We use your data to understand your health so that we can provide relevant information personalised to your needs. You can personalise your experience by adding health data to your account, completing assessments, or using other services we offer. We will use this data to personalise Services such as the Smart Symptom Checker, and to recommend health plans, track your symptoms, assess your health, and display articles of interest to you.

__APPS__ for users who create an account. __Legal basis:__ contract performance and consent for processing health data. __Data collected:__ as stated in ‘The data we collect’ section of this Policy.

__Dot Platform.__ We use your data so the chatbot can calculate the most likely condition based on your reported symptoms. We might use the Smart Symptom Checker's results to show you relevant care options from third party providers ("Advertisers"), or to offer follow-up notifications for relevant conditions, symptom tracking, Health plans, and receive articles about specific topics. 

__Health library.__ You can search the Health library and save your preferred articles. Some articles include a 'When to see a doctor', which helps you assess the need to visit a health professional. We might show you relevant care options from third party providers based on your Health library search. For example, if you read an article about asthma, we will show you to a third party provider that offers services for this condition.

[You can access our Dot™ symptom checker](https://www.livehealthily.com/symptom-checker)

__Report__

If you request us to send you the Assessment report (Report) to your email address we will ask you to choose a 6 digits PIN number to secure the Report. This way we make sure that the Report is shared only with you and that no health data is stored together with your email address, meaning that the processing is still private and secure.

__FOR INTERNAL ANALYTICS__

We collect data on how you use our Services so we can make improvements to the service we offer you. We use identifiers but do not link these to your name or email address, and we carry out troubleshooting, testing, research, and surveys. We also analyse your activities to understand how you use and interact with our Services. __Legal basis:__ consent and/or legitimate interests, to help us improve our Services (Site) and for general social benefits to enable free access to health information for users who do not create a profile. __Data collected:__ Analytical information, Technical Information, as stated in ‘The data we collect’ section of this policy.

For example, we look at whether you click on an Advertisement, conduct an assessment, view articles, use the health tracker, engage with notifications, and we will analyse the screens you use and if you added data to your profile. We check how you use our Services with the help of analytics providers (Amplitude and Google Analytics) and by processing Analytical Information (please see section “The data we collect” of this Policy). With the help of the analytics ID assigned to you, we can use the data that you enter when talking to our chatbot (age and location, but not your name or email address) for our internal analytics and research. We do not process any information which could directly identify you in our analytical databases unless you use a service that requires us to do so. For example, we check how many users have finished an assessment or have visited our Site.

__FOR SAFETY AND SECURITY__

We usually process your data based on IDs attached to your account, so we do not see your name or email address. To safeguard your privacy, we store health data and data which could personally identify you in separate databases. We do store technical logs of your activities in the app. In line with best practice, only authorised staff members can access personal data, and only when required for user safety or critical systems issues. __Legal basis:__ legitimate interests, to enable us to offer a safe and secure service. __Data collected:__ As stated in Technical Information of this Policy; in ‘The data we collect’ section.

__EMAIL REQUESTS.__ We will use your email to respond to any queries you send to support@healthily.ai and/or privacy@healthily.ai. Please do not share any health data when sending emails to support@healthily.ai and/or privacy@healthily.ai as we do not respond to any case-specific health issues.

**DIRECTLY IDENTIFIABLE PERSONAL DATA** (only for users who decide to create a profile): name, email address, Facebook/Google account name and email address.

**INDIRECTLY IDENTIFIABLE PERSONAL DATA:** First name or nickname, age, gender, location (country, region - not specific enough to identify the street), time zone, service preferences, acquisition channel), identifiers (profile ID attached to your profile data, IP address, analytics IDs, conversation/consultation ID, device ID).

**HEALTH DATA.** Any type of health data you share when using our Services and when participating in research projects and research surveys, such as health data collected through the Smart Symptom Checker, and Health data provided through specific services such as the Trackers.

**TECHNICAL INFORMATION.**  User agent (web browser type and version), device model, screen information, mobile service provider, installed app version, OS version, location (country and city), time zone, IP address at the time of usage, Healthily unique identifiers (profile ID, conversation ID/consultation ID), records of events with Technical Information and your interaction with our App/Services. For example, logs on your usage of the Services, which include chat information, quizzes, self-assessments and tools, the BMI calculator, and the articles you have viewed in the Health Library.

**ANALYTICAL INFORMATION.** Hashed IP address, hashed profile ID or guest profile ID, hashed conversation/consultation ID, analytics provider's unique user ID (Amplitude ID), user's device ID (Amplitude analytics) or client ID (Google Analytics ID), Hotjar ID (Hotjar), third-party cookies.

Information on how you use our Services:

**General Activity** (e.g. the screens you view, time spent, if you added data to your profile, whether you are in test groups, items on your home feed and interaction)

**Sessions** (e.g. when you started the session, duration)

**App info** (e.g. if you deleted/upgraded the App, version)

**Authentication** (e.g. whether you authenticated and which type of authentication)

**Acquisition channel** (e.g. which ad you clicked on to get to our Services)

**Notification activity** (e.g. whether you opted in or out of notifications)

**Activity within our Services and features** (e.g. your data and activities, assessment outcomes and feedback, whether you sent an input that failed to be understood by our chatbot, clicks on articles, whether you opened an assessment report, viewed assessment history, articles you view, share, whether you view/click on the partner, whether you are logging your feelings, tracking symptoms, receiving follow ups, syncing data with third-parties, whether you sign up for Health plans and your interactions, logs on your usage of our Services).

We cannot provide all services necessary for the successful operation of our Services by ourselves. We, therefore, share collected information with third-party providers for the purpose of offering and improving the Services. The information we share will not identify you personally, and the providers will only use the data to offer services to us. However, we will use your email to send you newsletters and surveys. For privacy-related requests, see section “Your rights” of this Policy or send an email to privacy@healthily.ai

__THIRD-PARTY TECHNOLOGY AND PROVIDERS__

Third party providers are data processors. This means they process your information on our behalf, in accordance with our instructions. We only allow your information to be used by them to offer services to us. How third party providers' use of information is controlled by the terms of their contract with us and any settings enabled by us through the user interface of their product. 

__Mailchimp.__ We use[ Mailchimp](https://mailchimp.com/?currency=GBP) to send out transactional emails for our mobile app. MailChimp uses your data to host an email marketing service for us, and may share your data with third-parties for the same purpose. Your data is stored on a secure Mailchimp server. Mailchimp is not allowed to sell your data. Mailchimp will give access to/delete any personal information they hold about you within 30 days of a request. Please refer to the [Mailchimp Privacy Policy](https://www.intuit.com/privacy/statement/) for more information.You can unsubscribe from these emails by clicking the 'unsubscribe from the list' link in the footer of every email you receive from us.

__ADVERTISING PROVIDERS__

We use third-party providers to show native ads on our Site and Web App.

__Kevel.__ We use Kevel for advertising purposes of our Services by setting APIs infrastructure needed to build custom ad platforms for features such as sponsored listings, internal promotions and native ads. You can find more information on those features [here](https://www.kevel.com/). For more information regarding data collection and usage as part of the ad serving platform, please read [Kevel Privacy Policy on Ad Serving](https://dev.kevel.com/docs/privacy-policy-ad-server).

__COMMUNICATION PROVIDERS__

We use third-party services for our internal communications and communication with external partners, namely:

__Skype__ www.skype.com/en/, [Skype Legal Policies, Terms and Conditions](https://www.skype.com/en/legal/) 

__Slack__ [AI Work Management & Productivity Tools](https://slack.com/) ,[Privacy Policy | Legal ,](https://slack.com/privacy-policy)

__Google Hangouts__ https://hangouts.google.com/, [Privacy Policy – Privacy & Terms – Google ,
](https://policies.google.com/privacy?gl=SI&hl=en-GB)
__Gmail__ https://www.google.com/gmail, [Privacy Policy – Privacy & Terms – Google ,](https://policies.google.com/privacy?gl=SI&hl=en-GB)

__Zoom__ [One platform to connect | Zoom](https://zoom.us/) , [Zoom Trust Center | Zoom .](https://zoom.us/docs/en-us/trust.html)

We do not share directly identifiable personal data with these services.

__MANAGING PROJECTS, HOSTING, SOFTWARE DEVELOPMENT AND CLOUD STORAGE__

__Gatsby__ [The Best React-Based Framework | Gatsby ,](https://www.gatsbyjs.org/)

__Github__ [GitHub: Let’s build from here ](https://github.com/), [GitHub General Privacy Statement - GitHub Docs](https://help.github.com/articles/github-privacy-statement/),

__Jira__ [Collaboration software for software, IT and business teams ](https://www.atlassian.com/), [Privacy Policy | Atlassian ](https://www.atlassian.com/legal/privacy-policy),

__Google drive__ www.google.com/drive/, [Privacy Policy – Privacy & Terms – Google ](https://policies.google.com/privacy?hl=en&gl=US)

__Dropbox__ [Previous Privacy Policy - Dropbox](https://www.dropbox.com/privacy2016),

__Tableau__ [Tableau Software Site Usage Agreement](https://www.tableau.com/tos), __Privacy Page __

__ANALYTICS PROVIDERS__

With the help of analytics providers, we collect Analytical Information to help us improve our Services for you. We chose our providers carefully and set the most restrictive controls available to ensure they do not use your data for any purpose other than providing services to us.

__[Amplitude Privacy Policy](https://amplitude.com/privacy)__

__Google BigQuery__
We can draw and analyse data from GAF using __Google BigQuery__. For more information, please see [Google Service Specific Terms](https://cloud.google.com/terms/service-terms#13-google-bigquery-service). We use Tableau Software for graphic visualisations of the data extracted from Firebase Analytics and BigQuery. For more information, please see the [Tableau Software Privacy Policy](https://www.salesforce.com/company/legal/privacy/).

__AWS Analytics__ does not access or use your data for any purpose other than to provide services to us, as legally required, and to maintain AWS services. Strong encryption of your data is in place. You can refer to the AWS Privacy Notice for more information. Please note, AWS Analytics is only used in our iOS App.

__Google Analytics (GA)__ is used on our Site and Web App. When you visit the Web App or our Site, your web browser automatically sends your IP address and information on how you use the Service to GA. Processing is based on a GA-created browser ID by using cookies. GA uses IP addresses to provide and protect the security of the service, and for us to know the country you use our Services in. GA anonymises the IP address before any storage or processing takes place by obfuscating the last few digits. Please refer to the [IP Anonymisation in Analytics](https://support.google.com/analytics/answer/2763052). GA processes the data based on a GA identifier called Client ID, which is stored in a cookie. Identifiers such as cookies and GA user IDs measure and report statistics about your interactions on our Site and/or Web App. GA stores cookies on your device to keep track of how you use our Site/Web App statistics without personally identifying you. We use the data collected by GA to improve the quality of our Site and Web App and to analyse Site/Web App usage. For more information, please read [How Google uses cookies](https://support.google.com/analytics/answer/2763052). Google uses [Standard ISO 27001](https://www.iso.org/standard/27001) security measures. For more information on operational security and disaster recovery, please visit: [How Google analytics secures](https://support.google.com/analytics/answer/6385009) your web traffic and [Safeguarding your data](https://support.google.com/analytics/answer/6004245). For general information, please read the following: [How Google uses information from sites or apps that use their services](https://policies.google.com/technologies/partner-sites), and the [Google Privacy Policy.](https://policies.google.com/privacy)

[Fabric Privacy](https://firebase.google.com/#identifiable-data-collected) and [Security Google Privacy Policy.](https://policies.google.com/privacy)

[The Facebook pixel.](https://www.facebook.com/business/tools/meta-pixel)

[Facebook](https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0), [X](https://x.com/en/privacy), [Instagram](https://help.instagram.com/155833707900388), [LinkedIn](https://www.linkedin.com/legal/privacy-policy)

__LAWFUL PURPOSES__

Your data will be disclosed only when necessary for lawful purposes, our legal obligations and rights as stated herein, and will be limited to such purposes:
a) if required by law, for example to comply with a court order, subpoena, regulation, legal process or other governmental request
b) to exercise or protect the rights, property or personal safety of our company, our users or others
c) to enforce this privacy statement, including investigation of potential violations 
d) upon fulfilling legal requirements of local legislation to supply certain services a third party might legally request from us
e) to detect, prevent, or otherwise address fraud, security, or technical issues
f) if we are involved in a merger, acquisition, or sale of all or a portion of its assets, you will be notified of any change in ownership or uses of your data
g) to respond to claims that any content published within our Services or our Services violates any right of a third party.


We follow generally accepted industry standards and internal procedures to protect the data submitted to us during transmission, storage, and processing. We store your data for as long as is needed to provide our Services. We may store it for longer, but only in a way that it cannot be tracked back to you. We delete all personally identifiable data we have about you within 30 days of receiving your data deletion request. Please make sure you request a copy of your data before you ask to delete your data, as your data will not be retrievable afterwards.

We delete the logs we keep of the IP addresses you have used after approximately six months. When the data is no longer needed, we delete it using reasonable measures to protect the information from unauthorised access or use. Any information you send to [privacy@livehealthily.com](mailto:privacy@healthily.ai) will be deleted as soon as we respond to your enquiry and/or the information is no longer needed.

We store your data,
•	if you have consented to the processing, at most until you revoke your consent;
•	if we need the data for the execution of a contract, at most for as long as the contractual relationship with you exists;
•	if we use the data on the basis of a legitimate interest, at most for as long as your interest in deletion or anonymisation does not outweigh the data;
•	insofar as statutory storage obligations exist, until the end of the storage periods.


We are committed to keeping your data up-to-date. You can exercise your rights within our App or ask us to do so for other services by sending an email to [privacy@healthily.ai](mailto:privacy@healthily.ai). We may decline to process requests that are unreasonably repetitive, require disproportionate technical effort, jeopardise the privacy of others, are impractical, or if we are required to retain such information by law or for legitimate business purposes. In the event of a suspicious request made in bad faith or accompanying unlawful behaviour, we reserve the right to deny any request you make. We will not respond to any enquiry emails which we do not understand, where the request is not clearly specified, or pertains to health questions as we do not offer case-specific advice.

As a data subject, you have the following rights: 

•	To request information about the processing of your data, as well as to receive a copy of your personal data. Among other things you may request information on the purposes of the processing, the categories of personal data processed, the recipients of the data (if a transfer is made), the duration of the storage or the criteria for determining the duration;
•	To receive personal data relating to you in a structured, common and machine-readable format or to transfer it to another person in charge;
•	To correct your data. If your personal data is incomplete, you have the right to complete the data, taking into account the purposes of the processing;
•	To have your data deleted or blocked;
•	To have the processing restricted;
•	To object to the processing of your data;
•	To revoke your consent to the processing of your data for the future
and
•	To complain to the responsible supervisory authority about unauthorised data processing.

**RIGHT TO WITHDRAW YOUR CONSENT**

You can withdraw your consent for **email collection for research purposes** by sending us an email to [privacy@healthily.ai](mailto:privacy@healthily.ai), subject: withdrawal consent for research.

**RIGHT TO OBJECT AND TO RESTRICTION OF PROCESSING**

We process your data on a legitimate interests basis when you use our Site, or when sending out business emails. We limit the amount of data we collect, and this data cannot directly identify you. To exercise your right to object or restrict processing, please send us an email to [privacy@healthily.ai](mailto:privacy@healthily.ai).

**RIGHT TO ACCESS, COPY, RECTIFICATION**

You can **request your data** by visiting Your account settings/Your data and choosing the ‘Export data’ option. You will be able to download your data to your device. We will send your data within 30 days of receipt of your request. If we need to acquire your data from a third party, this might take longer.

You can use the Your personal details section within the App to change the data you added to your Account.

You have the right to request the **rectification** of inaccurate personal data that cannot be rectified within our Services by sending an email to [privacy@healthily.ai](mailto:privacy@healthily.ai).

**USERS OF OUR SMART SYMPTOM CHECKER**

If you use our Smart Symptom Checker you should be aware that we are not able to accommodate your request for the deletion/access/copy of your data because we do not store any data that could directly personally identify you. Similarly, we cannot carry out such a request if you are a Site visitor as we do not store any data that could personally identify you. If you stop using our Services, we will delete all collected data within six months.

**OPTING OUT**

We make sure we do not collect more information than is needed to provide our Services and we strive to limit our Providers to do so as well. We have integrated protocols to allow us to process Health Data in a way that does not directly identify you. However, you are always free to opt out of data collection by not using our Services or by uninstalling the app.

**Analytics**. You can opt out of our information processing by sending an email to [privacy@healthily.ai](mailto:privacy@healthily.ai) and/or opt out of Google Analytics by installing this browser add-on

[Google Analytics Opt-out Browser Add-on Download Page](https://tools.google.com/dlpage/gaoptout).

**CALIFORNIA RESIDENCE PRIVACY INFORMATION**

This section of our Privacy Policy contains information required by California Consumer Privacy Act (hereinafter the "**CCPA**") that came into force on January 1st, 2020.

If you are a California resident (as defined in section 17014 of Title 18 of the California Code of Regulations), California law requires us to provide you with some additional information regarding your rights with respect to your “personal information”.

We may transfer your personal data to third party processors in order to achieve the purposes of the processing listed in section ‘How we use your data’ above. Please see section ‘Who has access to your data’ to learn about what third party processors do we use.

CCPA provides Californian consumers with the following rights (which do not interfere with GDPR):

**Right to request disclosure of any personal information we collected.** This means in particular that you have:

- the right to request disclosure of the categories of personal information we collected from you, together with the categories of sources from which it was collected (please see section “The data we collect”),
- the purpose of the collection (please see section “How we use your data”),
- the categories of third parties with whom we shared your personal information (please see section “Who has access to your data”), and
- the specific pieces of personal information that have been collected please see section “The data we collect”).

Please see “Right to reassure/access/copy” section to learn how we process your request.

**Right to request deletion of any personal information that we collected from you.** Please see section “Right to erasure/access/copy”.

**Right to non-discrimination.** We will not discriminate against you for exercising your CCPA rights. This generally means that we will not deny you Services or provide a different level of Service or quality of Services. However, please bear in mind that, if you ask us to delete your data, it may impact your experience with us, and you may not be able to use our Services which require usage of your personal information to function properly.

**Right to Opt-Out of Sale.**
Under the CCPA placing third party behavioural advertising cookies on your device could be considered a “sale” of your personal data. For this purpose we are providing an opt-out option on our Site (“Do Not Sell My Personal Information") where you are able to opt out from such placement by clicking on the [Cookie Settings](https://www.livehealthily.com/legal/cookie-settings) link available in the footer of our Site.


We follow generally accepted industry standards and internal procedures to protect the information submitted to us.

**STORING**

We store identifiable personal data and health data in separate databases. This means that whatever you enter or do when using our Services, is not connected to data that could personally identify you. We normally process your data with the help of identifiers, namely profile ID, consultation/ conversation ID and analytic identifiers to avoid personal identification. In limited cases when required for user safety or critical systems issues, authorised personnel can access personal data along with Health Data. Your IP address is used to determine location, but it is normally masked (hashed) when stored on our backend.

We store your information for as long as needed to provide our Service. We may store the information longer, but only in a way that it cannot be tracked back to you. We use **AWS** and **Google Cloud Platform** for storing information.

**AWS.** AWS has multiple security certificates [Cloud Security  – Amazon Web Services (AWS)](https://aws.amazon.com/security/). The data we collect from you may be transferred to, and stored at, a destination outside and inside of the European Economic Area (EEA), namely the AWS regions in the US and EU. It may also be processed by staff operating outside the EEA who work for us, or for one of our Providers. Your data will still be safe - we have entered into the AWS data processing addendum to make sure your personal information (IP address) is safe, namely:

a) that the AWS will use the data only to provide its storing services

b) that it will not disclose data to any third-party

c) that the AWS restricts its personnel to process your data without their authorisation

d) that we stay in control of correcting, blocking, deleting, and retrieving your data

e) that AWS is responsible for implementing and maintaining the technical and organisational measures

f) that AWS is certified under ISO 27001 and agrees to maintain an information security program for the service that complies with the ISO 27001 standards or such other alternative standards as are substantially equivalent to ISO 27001 for the establishment, implementation, control, and improvement of the AWS Security Standards

g) that AWS may use subcontractors, but will restrict their access only for the purposes of offering AWS services. By using and downloading our Services, you agree to the transfer, storing and processing, as stated herein. We will take all the reasonably necessary steps to ensure that your data is treated securely and in accordance with this privacy policy. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your data, we cannot guarantee the security of your data transmitted to our Site; any transmission is at your own risk.

**Google Cloud Platform.** We store all analytical data on the Google Cloud Platform (GCP). We control the stored data while Google is the processor. This means that Google processes the data only for the purposes of providing GCP services and technical support to us, in accordance with data processing and security terms [Cloud Data Processing Addendum | Google Cloud](https://cloud.google.com/terms/data-processing-addendum). We control what happens to the data and can access it at any time. We have chosen to store the data in the US. Google stores data in a multi-tenant environment on Google-owned servers. The data and file system architecture are replicated in multiple geographically dispersed data centres. Google also logically isolates stored data. We have control over specific data sharing policies. Those policies, in accordance with the functionality of the Services, enable us to determine the product sharing settings applicable to this privacy policy. We may choose to make use of certain logging capabilities that Google may make available via the services. Google has updated their data processing terms for GCP to reflect various models of the E.U Standard Contractual Clauses (SCCs) regarding International Data Transfers. Get more information on Google Cloud Platform and the terms: [How Google Cloud helps E.U companies under new data transfer rules | Google Cloud Blog](https://cloud.google.com/blog/products/identity-security/how-google-cloud-helps-eu-companies-under-new-data-transfer-rules)

**SECURITY**

To guarantee your privacy, we securely encrypt, limit, and restrict access to your personal details.

We encrypt all your data at rest and any directly identifiable personal information is double encrypted with two keys at both the infrastructure and application level. We have restricted access to production environments and monitoring of your activities. The information is encrypted and key protected, and we have integrated commercially reasonable efforts to make sure your information remains secure when processed by us. However, please be aware that no security measures are impenetrable. If you have any concerns about the security of our Services, please contact us at [privacy@healthily.ai](mailto:privacy@healthily.ai).

To ensure the security of processing we engage third-party providers for penetration testing (security testing) - a controlled form of hacking in which a professional tester, working on behalf of an organisation, uses the same techniques as a criminal hacker to search for vulnerabilities in the company's networks or applications. During security testing, the third-party provider may have access to your personally identifiable data. Security testing providers are contractually bound to take all necessary technical and organisational measures to protect data, and they are not allowed to transfer it to third parties or  use it for any other purpose besides security testing for us.

**TRANSFERS**

Data is being transferred to countries outside the United Kingdom and the European Economic Area. We only transfer personal data to third countries where the ICO and the EU Commission have confirmed an adequate level of protection, or where we can ensure the careful handling of personal data by means of contractual agreements or other suitable guarantees, such as certifications or proven compliance with international security standards, which you can review on request.

**EU and UK Territory** We delete logs we keep of the IP address within six months. We store your personally identifiable data for the duration of the provision of our Services or up to 30 days after your deletion request. This section shall not prevent any technical storage or access to information for the sole purpose of carrying out the transmission of a communication, or as strictly necessary for us to provide the Services you requested. We reserve the right to delete your profile after an extended period of inactivity.

**US Territory** We will retain collected information for the period necessary to fulfil the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by applicable legislation. We reserve the right to delete your profile after an extended period of inactivity.

Storing might be different depending on which territory is collecting the information and the applicable legislation, but we always strive to store the information only if it is needed for the purposes of providing, improving or personalising our Services.

For information about cookies, please see our [Cookie Policy](https://www.your.md/legal/cookie-policy/) which is hereby incorporated into this Policy. You can manage cookies on our **Site** at any time by visiting the [Cookie settings](https://www.livehealthily.com/legal/cookie-settings) section available in the footer of our Site. You can turn off cookies by changing your specific browser settings. You may disable cookies or delete any individual cookie set by **Google Analytics.** Google Analytics supports an optional browser add-on that - once installed and enabled - disables measurement by Google Analytics for any site you visit. This add-on only disables Google Analytics measurement. You can use Ads Settings to manage the **Google ads you see** and disable personalisation. Even if you opt out of personalised ads, you may still see ads based on factors such as your general location derived from your IP address, your browser type, and your search terms. You can also manage many companies' cookies used for online advertising via the consumer choice tools created under self-regulation programs in many countries, such as the US-based [aboutads.info](https://youradchoices.com/) choices page or the EU-based Your Online Choices. Finally, you can manage cookies in your **web browser**. For more information visit [Advertising – Privacy & Terms – Google](https://policies.google.com/technologies/ads?hl=en) and read our [Cookie Policy](https://www.your.md/legal/cookie-policy).

Should you have any privacy-related questions, please contact us at [privacy@healthily.ai](mailto:privacy@healthily.ai). If we are not able to help, we will forward your enquiry to our **External Data Protection Officer (DPO)**, ePrivacy GmbH, represented by Prof. Dr. Christoph Bauer, Große Bleichen 21, 20354 Hamburg. Should you have any concerns or complaints that our DPO is not able to resolve, you have the right to lodge a complaint with our supervisory authority Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Kurt-Schumacher-Allee 4, 20097 Hamburg. If you are a UK customer, you can lodge a complaint with the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Our **EU Representative** is ePrivacy, Holding GmbH, Große Bleichen 21, 20354 Hamburg, Germany. For more information, click [Legal](https://www.eprivacy.eu/en/legal).

We update this Privacy Policy to reflect changes in our data processing practices. Because we are constantly adding new services and features, we may not make an immediate upgrade of the Privacy Policy unless material changes occur. We encourage you to periodically review [https://www.livehealthily.com/legal/privacy](https://www.livehealthily.com/legal/privacy) or the Simply legal section of our Services for the latest information on our privacy practices. You will be informed about material changes to our data processing practices with a push notification, or by other means. 

Matteo Berlucchi, CEO

# Healthily Prize Draws Terms and Conditions

(May 2021)

---

**Please read these Healthily Prize Draws Terms and Conditions (the “Terms”) carefully before participating in any Prize Draw (as defined below). These Terms apply to all Prize Draws organised by us. If you do not agree to these Terms, you should not participate in Prize Draws.**

**If there is anything that you do not understand, please contact us at [support@livehealthily.com](mailto:support@livehealthily.com).**

**THE ORGANISER**
The organiser of the Prize Draws is Your.MD Limited, incorporated and registered in the UK with the company number 08727263 whose registered office is at 5th Floor, Lincoln House, 296-302 High Holborn, London WC1V 7JH, the UK (“Healthily”, “we”, “us”).

The Prize Draw means any promotional mechanics used for promotional activities that give away a prize (e.g. giveaways), organised by us and posted on any website, application or similar electronic means by which we are able to create and share information, ideas, direct messages, and other content or to participate in social networking (e.g. Instagram) (altogether referred to as “Platforms”).

By participating in any Healthily Prize Draws, you fully accept these Terms.

**ENTRY REQUIREMENTS**
To enter a Prize Draw you must be at least 18 years old, resident of the country specified in the Prize Draw, and fulfil the steps required and determined therein (e.g., ‘follow Healthily’s profile’ or ‘tag a friend’). Fulfilling all the requirements constitutes a valid entry (the “Valid Entry”).

We will allow only one Valid Entry per person, unless we explicitly state otherwise in a particular Prize Draw. Entries submitted on behalf of another person will not be accepted and joint submissions are not allowed. Incomplete, illegible, misdirect or late entries will not be accepted. 

We reserve the right to discount any inappropriate or offensive entries and to disqualify any entries if we, at our sole discretion, believe that there has been an attempt to manipulate or tamper with the operation of the Prize Draw (including, and without limitation, by setting up multiple social media accounts in order to submit multiple entries).

All entries will be reviewed and tracked during the promotion period in order to ensure inclusion of all Valid Entries. For this purpose, we might ask you to provide us with proof of address or age, and you might be excluded from the Prize Draw participation if you fail to provide us with such proof.

There is no entry fee and no purchase necessary to enter a Prize Draw.

**ELIGIBILITY**
The Prize Draw is open to all interested participants, except:
(a)	employees of Healthily or its holding or subsidiary companies and members of their immediate families or households;
(b)	persons who do not fulfil the Entry Requirements.

**PROMOTION PERIOD**
The start date and the end date of a Prize Draw are specified in each particular Prize Draw. Entries before the start date and entries after the end date will not be accepted.

**WINNER DETERMINATION AND ANNOUNCEMENT**
The winner will be selected at random from all Valid Entries received during the promotion period by using a random selection software. 

The winner will be publicly announced within a comment to the original Prize Draw post and/or within a new public post created by us for this purpose and will be contacted via direct message within three (3) business days after the end date of the Prize Draw using the contact details provided with the Valid Entry. Direct messages will be sent via platform used to post the Prize Draw.

Winner’s contact details will be shared with all third parties involved in the provision of products and/or services for the prize (the “Sponsors”).

If the winner declines the prize or cannot be contacted or does not respond to our announcement or direct message within 48 hours, we reserve the right to withdraw the prize from the winner and offer the prize to the next eligible participant using the same random selection software from the Valid Entries received by the end date.

**PRIZE**
The prize is specified in each Prize Draw and includes Healthily and/or Sponsors’ products and services.

The prize is non-refundable, non-transferable and non-exchangeable, and there is no cash alternatives offered. We reserve the right to offer an alternative prize of equal or equivalent value.

**PRIZE DELIVERY**
The winner will receive the prize within thirty (30) days of being contacted by us. In the event the prize contains multiple elements, including third-party products and services, it might take longer.

**PERSONAL DATA**
When participating in our Prize Draw, we collect personal data, such as contact details, delivery address, and full name. We use this information to administer the Prize Draw, to communicate results where relevant, and to deliver prizes. When we use your personal data for these purposes, we do so because it is necessary for us to collect and use this information for the performance of our contract with you in accordance with this Terms. The same information is shared with Sponsors involved in the Prize Draw for the same purposes.

We might also write to you to obtain consent for the use of your surname, country of residence, and any images made as part of that publicity (e.g. photos) to publicise your win and our brand on our website and any of our social media accounts. We will use your information for publicity purpose only after obtaining your consent. You can withdraw your consent at any time by sending us an email to [privacy@livehealthily.com](mailto:privacy@livehealthily.com). Please bear in mind that due to the nature of social media, once the information becomes public it may be potentially copied or otherwise further distributed beyond our control.

We will not share your information with any third party unless:
(a) we have your consent;
(b) we are required to do so by law.

Any information that we hold about you is processed in the United Kingdom and stored in AWS services in the United States. We keep your information for as long as we need it to perform the Prize Draw and as required by law. 

If there is anything that you do not understand or you have a question regarding our data processing practices, or you would like to exercise any of your rights (data access, deletion, correction), please send us an email to [privacy@livehealthily.com](mailto:privacy@livehealthily.com), subject: Prize Draw. 

For more information on how we process personal data at Healthily, please read our [Privacy Policy](https://www.livehealthily.com/legal/privacy).

**LIMITATION OF LIABILITY**

Nothing in these Terms excludes Healthily's liability for death or personal injury caused by its negligence or for fraud, or any other liability that Healthily may not exclude by law.  Subject to that, Healthily will not be liable for any loss (including, and without limitation, indirect, special or consequential loss or loss of profits), expense or damage which is suffered or sustained in connection with any Prize Draw or accepting or using any prize, including any loss incurred as a result of any delay and/or failure to perform any obligation to the winner or other participants that is caused by:
(a) technical problems of any kind which may limit or prevent any person's participation in the promotion;
(b) any loss or damage arising from or in connection with the allocation or enjoyment of a prize;
(c) any act or omission of any third party, particularly any Sponsor involved in the provision of products and services relevant to the prize; or
(d) any other events beyond the Healthily’s control that may cause the Prize Draw to be disrupted or corrupted or may lead to loss of, or damage to, the winner or to the prize.

**MISCELLANEOUS**

Any decisions relating to the Prize Draw are final and shall not be subject to review or appeal by any participant or by any third party. No correspondence will be entered in respect of our decision.

In the event of unforeseen circumstances or circumstances outside reasonable control, we reserve the right to modify or discontinue, temporarily or permanently, any Prize Draw without prior notice.

Any amendments or cancellations to these Terms will be posted by means of a reasonably prominent link on the Prize Draw post and your continued participation in the Prize Draw will constitute acceptance of the revised Terms. If you do not accept the revised Terms, it is your responsibility to notify us immediately.

These Terms are governed by the laws of England and Wales, and the courts of England and Wales shall have exclusive jurisdiction for any disputes relating to a Prize Draw.

Your.MD
Matteo Berlucchi, CEO

Prize draw terms and conditions

# Safe use instructions for VHI 
**(Your.MD Symptom Checker for VHI)**

---

I’m here to help, but I’m just a chatbot and not a real doctor.

I’m good at identifying less serious conditions that can improve with your simple actions and understanding even if the symptoms you report suggest seeing a doctor in case you’re normally healthy and don’t have any chronic, complex or rare conditions. I can also provide useful information about specific conditions to help you decide on the next steps. 

You should act on the suggested next steps if you think you have any of the presented conditions or symptoms. Always visit a doctor if you’re in doubt of the consultation outcome, if your symptom worsen or don’t improve. Call an emergency service in case of emergency.

Although  I have information about many health problems, I’m not perfect and can’t consider all the information your doctor can. Although I’m a quick learner, I’m not able to identify all conditions or symptoms and might not be able to understand complex sentences.

I cannot be used for information about babies, children, pregnant women, people on immunosuppressive treatment and people with long term conditions such as, but not limited to diabetes.

Last updated: April 2019

Your.MD Symptom Checker safe use instructions for VHI

Safe use instructions for VHI

# Safety at Healthily

__V1.0 - September 2020__
*Author: Professor Maureen Baker, CBE, Chief Medical Officer*

---

At Healthily your safety is our primary concern. We’ve invested a great deal of time and resources to ensure that our products and services are medically assured and safe.

Our Smart Symptom Checker (SSC) is developed by our in-house team of  10 medically certified doctors who all practice medicine in the UK’s National Health Service and a team of data scientists who are experts in augmented intelligence. We do not use patient data to create the tool.

This team uses a combination of [decision trees](https://en.wikipedia.org/wiki/Decision_tree), [bayesian networks](https://en.wikipedia.org/wiki/Bayesian_network), [neural networks](https://en.wikipedia.org/wiki/Neural_network) and [natural language programming](https://en.wikipedia.org/wiki/Natural-language_programming) to create one of the safest self-assessment triage tools on the market. All the data on symptoms, conditions and prevalence is taken from reputable sources where available.

The purpose of Healithly’s SSC tool is to calculate probable outcomes based on your reported symptoms and then to guide you to your best next steps.
For example, if Healthily calculates the possible cause of your symptoms is worrying, it will suggest seeing a doctor within 12 or 48 hours, depending on the seriousness of the condition. If Healthily calculates you are safe to care for yourself we will also give you information on what to do if your symptoms change or get worse.

In healthcare this is called triage and should not be confused with diagnosis. Healthily cannot diagnose you and is not attempting to replace a doctor. Instead we are using mathematics to simulate the thought process of the doctor in order to provide you with information appropriate to your symptoms. Diagnosis requires testing, physical examination and observation.
Always consult with your doctor or other appropriate health professional before relying or making health or well-being decisions based on information provided.

Research suggests Healthily offers appropriate “next steps/triage” recommendations between 92% to 98% of the time. The independent studies this statement is based on have been conducted by Imperial College, London can be found [here](https://drive.google.com/file/d/1e5sT5s2rnDp6Vwgq3_s3izfY48Mb5F_T/view?usp=sharing) and the Brown University, USA, study can be found [here](https://drive.google.com/file/d/1D6wFGmKcWjrwgBXRvDf8SyVmoh6Mo9O-/view?usp=sharing).

Healthily has reached this standard by implementing rigorous clinical safety protocols, aligned with NHS safety standards, overseen by [Professor Maureen Baker, CBE](https://www.linkedin.com/in/maureen-baker-cbe-9a2b421/) FRCGP, Healthily’s Chief Medical Officer - who led the creation of the UK NHS’s digital safety standards.

Maureen is supported by [Stuart Harrison](https://www.linkedin.com/in/stuart-harrison-beng-hons-ceng-fiet-254b9a13/), Healthily’s independent clinical safety auditor and NHS Digital’s former Head of Safety Engineering.

The interests of our users are safeguarded by our Clinical Advisory Board. Information about its members can be found [here](https://www.your.md/blog/meet-your-mds-advisory-board).

This team of senior executives, independent advisors and practicing clinicians has supported Healthily to recive from the UK’s [Medicines Healthcare products Regulatory Authority (MHRA)](https://www.gov.uk/government/organisations/medicines-and-healthcare-products-regulatory-agency) a class I Medical Device certificate, meaning that our app complies with the European Union’s (EU)  Medical Device Directive and the EU’s new Medical Device Regulation (2020).

As part of this classification Healthily confirms it conforms to the recommendations of the following international standards:

- DCB0129 - Clinical Risk Management
- IS0 13845 (2016) - Medical devices - quality management systems - requirements for regulatory purposes
- ISO 14971 (2019) - Medical devices - application of risk management to medical devices

At its heart Healthily has a clinical safety management process which every employee is trained in and a safety incident reporting process. If you have any concerns about safety while using the app please contact us at [support@livehealthily.com](mailto:support@livehealthily).

Underpinning our standards and safety  approach is the rigorous documentation of our clinical source material. We have created a medical database that holds all the information used by our augmented intelligence and where the information was sourced from. This process is subject to regular audit and refinement.

The primary sources we use to inform our AI are:

- [BMJ Best Practice](https://bestpractice.bmj.com/info/)
- [Uptodate](https://www.uptodate.com/home)
- [NICE Clinical Knowledge Summaries](https://cks.nice.org.uk)
- [Dynamed](https://www.dynamed.com/home)
- Guidelines of international societies i.e. [World Health Organisation](https://www.who.int/publications/guidelines/en/)
- Reputable peer reviewed publications e.g. [JAMA](https://jamanetwork.com), [BMJ](https://www.bmj.com)

## Example methodology

Using this methodology a typical condition citation list looks like this:

__Condition name: Acute coronary syndrome__
*Source list for Symptoms:*

1. [Uptodate - Diagnosis of acute myocardial infarction](https://www.uptodate.com/contents/diagnosis-of-acute-myocardial-infarction?search=myocardial%20infarction&source=search_result&selectedTitle=2~150&usage_type=default&display_rank=2#H8)

2. [BMJ Best Practice - History exam](https://bestpractice.bmj.com/topics/en-us/150/history-exam)

3. [Patient UK - Acute Coronary Syndrome](https://patient.info/doctor/acute-coronary-syndrome-pro)

4. [E-medicine](https://emedicine.medscape.com/article/155919-clinical)

5. [Dynamed](https://www.dynamed.com/condition/st-elevation-myocardial-infarction-stemi#GUID-364DBE99-DB27-43E8-91DC-A2BBB07692B6)

6. [BMJ paper](https://bmjopen.bmj.com/content/9/2/e027081)

7. [NICE CKS](https://cks.nice.org.uk/chest-pain#!diagnosisAdditional)

8. JAMA - *Ferry, Amy V et al. “Presenting Symptoms in Men and Women Diagnosed With Myocardial Infarction Using Sex-Specific Criteria.” Journal of the American Heart Association vol. 8,17 (2019): e012307. doi:10.1161/JAHA.119.012307*

The majority of our medical content is supplied and indemnified by the UK’s NHS. It is checked by two practicing and written under the principles of the NHS Information Standard. Healthily’s own medical content follows the same standard and approach and is checked by at least two practicing doctors. 

For more information about our medical team and content team take a look at their biographies [here](https://www.your.md/blog/our-editorial-medical-team).

For more information about our editorial standards, policies and principles please see our guidelines [here](https://www.your.md/legal/editorial-policy-principles).

Healthily also has a quality management system that has been independently audited by [Professional Records Standards Body (PRSB)](https://theprsb.org). The PRSB has conducted an audit of all our internal processes to assess the safety of our operations. The report is available [here](https://drive.google.com/file/d/1ZDt8Vg7WNcVPTvJM460uJ4zrJSgDHSAU/view?usp=sharing).

ORCHA is an independent reviewer of medical apps working with the UK National Health Service. Our app was reviewed and achieved ORCHA’s app Quality Mark with a score of 76% (Level 4 - the highest). The ORCHA App review process is outlined [here](https://www.orcha.co.uk/our-solution/the-orcha-review/).

Our App has also received the [ePrivacyseal](https://www.eprivacy.eu/en/customers/awarded-seals/company/yourmd-ltd/) data protection seal of approval following an in-depth audit. The ePrivacyseal attests to a product’s compliance with the list of ePrivacyseal criteria, which reflects the security requirements imposed by EU data protection legislation in accordance to EU General Data protection Regulation.

We also follow the principles set out by the [NHS Information Standard](https://www.england.nhs.uk/tis/) for the creation of content.

We hope this information is helpful and reassures you that we are taking your safety seriously.

Thank you for using Healthily. See you soon.

At Healthily your safety is our primary concern. We’ve invested a great deal of time and resources to ensure that our products and services are medically assured and safe.

Safety at Healthily

## Summary

The more data you share, the more helpful we can be in managing your health. 

To safeguard your privacy, we process your health data with the help of identifiers that change every time you use the symptom checker, meaning that we are not able to recognise you or if you return to use this Service. 

With your consent, we will personalise your experience and show you relevant ads by linking identifiers with your health data. 

**SHOW YOU THE REPORT**

**To enable you to learn information about your health**, we process the **health data** (e.g. symptoms, health history, vital signs) you share with us. 

For example, when you enter your symptoms in the symptom checker we process this information to help you identify the possible causes of your reported symptoms. 

We will do this with the help of identifiers, such as consultation ID.

**SEND THE REPORT**

**If you request us to send you the Report to your email address** we will ask you to choose a PIN number to secure the Report. This way we make sure that the Report is shared only with you. 

**SHOW PERSONALISED ADS FROM THIRD-PARTY HEALTH AND WELLBEING PROVIDERS**

**To inform you about third-party health and wellbeing providers that might help** we will show you personalised ads. 

For example, when the possible cause in the assessment outcome (Report) is anxiety, we will show you ads for meditation services providers. **We will never share your health data with advertisers. 

For this purpose, we will use your **health data** (possible condition within the Report) and your **location** (not specific enough to identify a street) and link this information with the help of identifiers (one or multiple ad zone ID) to show you ads. 

To learn more, please read our [Privacy Policy](https://www.livehealthily.com/legal/privacy).  If you still have any questions, please send us an email at [privacy@livehealthily.com](mailto:privacy@livehealthily.com).

To safeguard your privacy, we process your health data with the help of identifiers that change every time you use the symptom checker, meaning that we are not able to recognise you or if you return to use this Service. 

Summary

# Terms of Use

The Dot™ Platform and Health Library (together the Services) are operated by Healthily LTD. Healthily LTD is a company incorporated in England and Wales with the company number 08727263 and registered address at 36 Egerton Road, Bournemouth, BA8 9AY.

These terms of use govern your use of the Services. We may amend these terms of use from time to time, and the revised version will be effective when displayed here.  

__If you do not accept and agree to be legally bound by these terms you must not use the Services.__ If there is anything in these terms that you do not understand, please contact us at [support@healthily.ai](mailto:support@healthily.ai). You should not use this email address to request medical assistance.  

## Usage terms

The Services are intended for use only by people:

over the age of 16; 

- not pregnant
- not suffering any specific, chronic or rare medical conditions; and 
- not immunocompromised.  

The Services are not intended for use by medical professionals.  

The Services are not provided by a human medical professional. The DOT Smart Symptom Checker is an artificial intelligence based health assessment software application (or “chatbot”).  The Symptom Checker can’t (i) consider all the information your doctor can (ii) identify all conditions or symptoms or (iii) understand complex sentences. 

The Services are provided for information purposes only and are not intended to replace a consultation with an appropriately qualified health professional. 

We cannot guarantee that the Services will meet your health or medical requirements so you should not (i) rely on or make health or well-being decisions which are based solely on our Services without consulting an appropriate health professional or (ii) ignore any professional medical advice on the basis of the Services.  

We aim to ensure that the Services are accurate and up to date.  However, medical knowledge and practice are constantly evolving and the Services may not reflect the latest knowledge or practice.

We only provide the Services for domestic and private use. You agree not to use this Services for any commercial or business purposes, or for any other purpose outside personal and domestic use.

## Limitation of Liability 

Your use of the Services is at your own risk.  The Services are provided “as is” and we do not make any warranty as to accuracy, quality or suitability of the Services.    

You acknowledge and agree that Healthily will not be responsible for any injury, loss, or damage (whether direct or indirect and including loss of profit, loss of business, business interruption, or loss of business opportunity) arising out of, or relating to the use of, inability to use, or reliance on, the Services, except to the extent that such liability cannot be excluded by law.

Nothing in these terms of use shall exclude our liability to you for fraudulent misrepresentation by us or our employees or for death or personal injury resulting from our negligence or that of our employees.

## Availability and Security

We do not guarantee uninterrupted access to the Services. We accept no responsibility for any damage arising from the unavailability of the Services.

We do not guarantee that the Services will be secure or free from bugs or viruses. You should use your own virus protection software. You must not misuse the Services by knowingly introducing viruses or other material that is malicious or technologically harmful. You must not attempt to gain unauthorised access to the Services, the server on which the Services are stored, or any server, computer or database connected to the Services. You must not attack the Services via a denial-of-service attack or a distributed denial-of service attack. By breaching this provision, you would commit a criminal offence under the Computer Misuse Act 1990. We will report any such breach to the relevant law enforcement authorities and we will cooperate with those authorities by disclosing your identity to them. 

## Privacy

If you submit personal information to us while using the Services, it will be used in accordance with our [privacy notice.](https://www.livehealthily.com/legal/privacy)

## Licence

The content of the Services, including text, images, trademarks, trade names and logos are either owned by Healthily or licensed for use in the Services by third parties. We are the owner or the licensee of all intellectual property rights in the Services. 

Those works are protected by copyright and other worldwide intellectual property rights laws. All such rights are reserved. You may use the Services, print off one copy, and may download extracts of any page(s) from the Services solely for your personal and domestic use. 

## Governing Law

These terms of use shall be governed by and interpreted in accordance with the laws of England.  You and we agree to the exclusive jurisdiction of the courts of England in respect of any disputes which may arise in relation to the Services.

## Regulatory

The Dot™ Smart Symptom Checker is a Class 1 Medical Device.  Compliance information can be found here. 

## Contact Us

If you need technical assistance or wish to send us feedback you can email [support@healthily.ai](mailto:support@healthily.ai). You should not use this email address to request medical help.


These Terms of Service and any documents referred to within it (collectively, the ''Terms'') govern your use of Your.MD Services and your relationship with us. It is important that you read and understand the Terms before you start using our Services.

Terms of Service

# Healthily Thyroid Checker Cookie Policy

---

Cookies are small files of letters and numbers that is stored on your browser or the hard drive of your computer or mobile device if you agree to accept them. They contain information that is transferred to your computer's or mobile device’s hard drive. Cookies collect information about you, such as your preferences, the number of times you have visited a website or personal information, such as e- mail address when creating profile. The cookie allows the website to “remember” your actions or preferences over time. While cookies and the information they transmit may not identify a living individual on their own, they may be able to do so in combination with other information held by the online provider or a third party.

---

## Different types of cookies

A cookie can be classified by its lifespan, the domain to which it belongs and by its function. Please note that we don’t use all types of cookies described in the list below. To see which cookies from the list we use and why, see section “What cookies do we use and why”.

### By lifespan, a cookie is either a:

* **Session cookie**, which is erased when the user closes the browser. They allow website operators to link your actions during single browser session for you to use the website most efficiently. As these cookies are not usually stored beyond the browser session, they are usually considered less privacy intrusive.

* **Persistent cookie**, which remains on the user’s computer or mobile device for a pre-defined period of time. They enable the website to "recognise" you on your return, to remember your preferences and to tailor services to them. The may also be used to track your browsing activity across different websites and to build up a detailed profile of your browsing behaviour for targeted advertising. For this reason, persistent cookies are generally considered to be more privacy-intrusive than session cookies.

### As for domain to which it belongs, there are either:

* **First-party cookies**, which are planted by the web server of the visited page and share the same domain. This involves assigning a unique identity to the user by setting the cookies to either the user's browser and/or their hard drive with a view to track the user's journey on the website. First-party cookies are commonly used by website operators for session management, personalisation and recognition purposes. This means the information transmitted by the cookie is later combined with the personal information the internet user has supplied to the provider in the course of a sale or other contact. In these cases, your cookie is retrieved each time you visit the site which planted it, making it unnecessary to re-enter registration data on each visit. Although cookies provide you with some benefits, they also enable online providers to build profiles of you, your online behaviour and your interests.

* **Third-party cookies** are cookies planted by parties other than the owner of the website you visit. (Example when the webpage references a file, such as JavaScript, located outside its domain).

### By its function:

* **Strictly necessary cookies.** These are cookies that are required for the operation of a website. They include, for example, cookies that enable you to log into secure areas of a website, use a shopping cart or make use of e-billing services.

* **Analytical/performance cookies.** These types of cookies allow providers to recognise and count the number of visitors and to see how visitors move around their website when they are using it. They assist providers in improving the way their website works, for example, to help users find what they are looking for easily.

* **Functionality cookies.** These are used to recognise you when you return to a website. They enable the personalisation of content and the recognition of you and your preferences (for example, their choice of language or region).

* **Targeting cookies.** These cookies record your visit to a website, the individual pages visited and the links followed. If the cookie is set by a third party (for example, an advertising network) which also monitors traffic on other websites, this type of cookie may also be used to track a user's movements across different websites and to create profiles of their general online behaviour. Information collected by targeting cookies is commonly used to serve users with targeted online advertising.

---

## What cookies do we use and why?

We use analytical/performance, session and persistent cookies third-party cookies.

We engage Google, a third party to help us with analytics (Google Analytics, hereinafter referred to as ‘’Google Analytics’’). Google analytics is a tool that help us understand how our visitors engage with Thyroid Checker (‘’Thyroid Checker’’ or ‘’Website’’). It may use a set of cookies to collect information and report Thyroid Checker usage statistics without personally identifying individual visitors. We use the data collected by Google Analytics to help us improve the quality of the Thyroid Checker and to analyse Thyroid Checker usage. Google Analytics process the information we share - namely various information on how you use the Thyroid Checker by their own unique user ID’s, but they also have access to your IP address and any other data which they collect from you directly.

### Google Analytics Cookies

Google Analytics mainly uses first-party cookies to report on user interactions on websites, for example, our Thyroid Checker uses Google Analytics. Google Analytics stores cookies on your computer to keep track of how you use our Thyroid Checker. We use cookies to analyse your activity to improve the Thyroid Checker. For example, by using cookies, we can look at aggregate patterns like the average number of symptom checks that were not finished. We can use such analysis to gain insights about how to improve the functionality and experience of the Thyroid Checker.

For more information on Google Analytics and their cookie usage, visit [https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage](https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage)

Below you can find a list of google analytics cookies we use on our Website:

| Name of the cookie | Description                                                                                                                                                                           | Category of use | Expiration time |
|--------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|-----------------|-----------------|
| NID                | The NID cookie contains a unique ID Google uses to remember your preferences and other information. This cookie helps Google customise ads on Google proprieties, like Google search. | Preferences     | 6 months        |
| _ga                | Used to distinguish users.                                                                                                                                                            | Analytics       | 2 months        |
| _gid               | Used to distinguish users.                                                                                                                                                            | Analytics       | 24 years        |
| _gat               | Used to throttle request rate.                                                                                                                                                        | Analytics       | 1 minute        |

The cookies will not be used for any purpose other than the one stated herein.

**Please bear in mind** that we do not have any control over the third-party cookies and are therefore not liable for any third-party cookie processing. Please visit Google Analytics site for more information about the third-party cookies and use the available opt-out options explained in ‘’How to Control Cookies’’ Section below.

## How long will cookies remain on your computer or device?
The length of time that a cookie remains on your computer or mobile device depends on whether it is a “persistent” or “session” cookie. Session cookies last until you stop browsing and persistent cookies last until they expire or are deleted. To find out how long will cookies remain on your computer you should visit third-party cookies websites mentioned in section What cookies do we use and why above. See the section below on how to control cookies and more information on removing them before they expire.**

## How to control cookies?

You can control and manage cookies in various ways. Most third-party cookies can be blocked by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our site. Some people prefer not to allow cookies, which is why most browsers give you the ability to manage cookies to suit you. For more information on how to modify your browser settings or how to block, manage, delete or filter cookies can be found in your browser’s help file or through such sites as: [www.aboutcookies.org](https://www.aboutcookies.org)

## How to opt-out of Google Analytics:

You can opt-out of making your site activity available to Google Analytics by installing the Google Analytics opt-out browser add-on available here [https://tools.google.com/dlpage/gaoptout](https://tools.google.com/dlpage/gaoptout). The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) that is running on websites from sharing information with Google Analytics about visit activity. For more information please visit [https://support.google.com/analytics/answer/181881?hl=en](https://support.google.com/analytics/answer/181881?hl=en)

## How the consent given can be withdrawn?

You will be asked to accept or reject cookies when using the Thyroid Checker. You can accept or decline cookies by ticking a box. You can withdraw your consent by sending us an email to [privacy@livehealthily.com](mailto:privacy@livehealthily.com).

Cookie Policy for Your.MD Thyroid Checker

Thyroid Checker Cookie Policy

# How to use Healthily Thyroid Checker safely

---

Your health is important to us, so before you start we need to make sure you understand how the service can help you.

Our Thyroid Checker can provide useful health information that is calculated by an artificially intelligent chat bot, based on the limited inputs provided. 

While our chat bot strives to give you the best possible information about the likelihood of hypothyroidism and/or hyperthyroidism it cannot consider all factors that your doctor can, and is not able to identify all conditions or symptoms. The likelihood of having a hypothyroidism and/or hyperthyroidism does not mean that you have/do not have any of these conditions or that you do not have any other worrying conditions our chat bot did not manage to calculate due to the limited information it uses for the calculation. We may not always understand information you give us.

Always visit a doctor if you are in doubt, or if your symptoms get worse or don’t improve. If your situation is serious, always call the emergency services.

Healthily is not liable for any of your decisions, acts or omissions you make.

Healthily Thyroid Checker cannot be used for information about babies, children aged 15 and under, pregnant women, people on immunosuppressive treatment and people with long term conditions. 

For more information read [Healthily Thyroid Checker Terms of Service](https://www.your.md/legal/thyroid-checker-terms), section “Our liability and disclaimer of warranties”.

Last updated: April 2021

Thyroid Checker Disclaimer

Privacy Policy for Your.MD Thyroid Checker

Thyroid Checker Privacy Policy

Terms of Service for Your.MD Thyroid Checker

Thyroid Checker Terms of Service

# Privacy Notice for Recruitment

(last update October 2020)

---

__YOUR.MD AS__, incorporated and registered in Norway with the company number 999260993 whose registered office is at c/o Advokatfirmaet Simonsen Vogt Wiig AS, Filipstad Brygge 1, 0252 Oslo, Norway and its subsidiary Your.MD Limited, incorporated and registered in the UK with the company number 08727263 whose registered office is at __Your.MD Ltd__, 5th Floor, 43 Whitfield Street, London, W1T 4HD, UK (“We”, “Us”, “Your.MD”) are committed to protecting and respecting your privacy. This Privacy Notice (together with any other documents referred to herein) sets out the basis on which the personal data collected from you, or that you provide to Us, will be processed by Us in connection with Our recruitment processes. Please read the following carefully to understand Our views and practices regarding your personal data and how We will treat it.

For the purpose of the General Data Protection Regulation (“GDPR”) the Data Controller is Your.MD

We use Workable, an online application provided by [Workable Software Limited](https://www.workable.com/) to assist with Our recruitment process. We use Workable to process personal information as a data processor on Our behalf. Workable is only entitled to process your personal data in accordance with Our instructions.

We will process your personal data in accordance with this Privacy Notice.

Where you apply for a job opening via the application function on a job site or similar online service provider (“Partner”), you should note that the relevant Partner may retain your personal data and may also collect data from Us in respect of the progress of your application. Any use by the Partner of your data will be in accordance with the Partner’s Privacy Notice.

## Your Personal Information

### Information we collect from you

We collect and process some or all of the following types of information from you:
- Information that you provide when you apply for a role. This includes information provided through an online job site, via email, in person at interviews and/or by any other method.
- In particular, We process personal details such as name, email address, address, telephone number, date of birth, qualifications, experience, information relating to your employment history, skills experience that you provide to Us, as well as your video in case you conduct your interview using the Video Interview feature.
- If you contact Us, We may keep a record of that correspondence.
- Results from your expertise tests, if applicable.
- A record of your progress through any hiring process that We may conduct.
- Details of your visits to Workable’s Website including, but not limited to, traffic data, location data, weblogs and other communication data, the site that referred you to Workable’s Website and the resources that you access.

### Information we collect from other sources

Workable provides Us with the facility to link the data you provide to Us, with other publicly available information about you that you have published on the Internet – this may include sources such as LinkedIn and other social media profiles.

Workable’s technology allows Us to search various databases – some publicly available and others not, which may include your personal data (include your CV or Resumé), to find possible candidates to fill Our job openings. Where We find you in this way We will obtain your personal data from these sources.

We may receive your personal data from a third party who recommends you as a candidate for a specific job opening or for Our business more generally.

## Uses Made Of Your Information
### Lawful basis for processing

We rely on legitimate interest as the lawful basis on which We collect and use your personal data. Our legitimate interests are the recruitment of staff for Our business.

### Purposes of processing

We use information held about you in the following ways:
- To consider your application in respect of a role for which you have applied.
- To consider your application in respect of other roles.
- To communicate with you in respect of the recruitment process.
- To enhance any information that We receive from you with information obtained from third party data providers.
- To find appropriate candidates to fill Our job openings.
- To help our service providers (such as Workable and its processors and data providers) and Partners (such as the job sites through which you may have applied) improve their services.

### Automated decision making/profiling

We may use Workable’s technology to select appropriate candidates for Us to consider based on criteria expressly identified by us, or typical in relation to the role for which you have applied. The process of finding suitable candidates is automatic, however, any decision as to who We will engage to fill the job opening will be made by our staff.

## Disclosure of Your Information

As set out above, We pass your information to Our third party service providers, including Workable, who use it only in accordance with Our instructions and as otherwise required by law.

Where you have applied to a job opening through another service provider, We may disclose data similar to the Disposition Data defined above to such service provider. The service provider shall be the data controller of this data and shall therefore be responsible for complying with all applicable law in respect of the use of that data following its transfer by Us.

## How We Store Your Personal Data
### Security

We take appropriate measures to ensure that all personal data is kept secure including security measures to prevent personal data from being accidentally lost, or used or accessed in an unauthorised way. We limit access to your personal data to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.

We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where We are legally required to do so.

Unfortunately, the transmission of information via the internet is not completely secure. Although We will do our best to protect your personal data, we cannot guarantee the security of your data transmitted through any online means, therefore any transmission remains at your own risk.

### Where we store your personal data

The data we collect from you may be transferred to, and stored at, a destination outside and inside of the European Economic Area (EEA), namely the AWS regions in the US and EU. Whenever we transfer your personal information outside of the EEA or the UK, we will put appropriate measures in place to ensure that any personal information transferred is subject to adequate legal protections through a mechanism approved by the European Commission and/or the UK Government, as applicable.

The data that We collect from you and process using Workable’s Services may be transferred to, and stored at, a destination outside the European Economic Area ("EEA"). It may also be processed by staff operating outside the EEA who work for Us or for one of Our suppliers. Such staff maybe engaged in, among other things, the fulfilment of your orders, the processing of your payment details and the provision of support services. By submitting your personal data, you agree to this transfer, storing or processing.

In particular, your data may be accessible to i) Workable’s staff in the USA or ii) may be stored by Workable’s hosting service provider on servers in the USA as well as in the EU. The USA does not have the same data protection laws as the United Kingdom and EEA. A Data Processor Agreement has been signed between Workable Software Limited and its overseas group companies, and between Workable Software Limited and each of its data processors. These data processor agreements are designed to help safeguard your privacy rights and give you remedies in the unlikely event of a misuse of your personal data.

If you would like further information please contact Us (see ‘Contact’ below).  

### How long we keep your personal data

If you are successful in your application and you accept the role, We will retain your information in accordance with Our GDPR Compliance Form for Employees/Contractors that will be provided to you to inform you how we process your data through our on-boarding process and as an employee/contractor.

If you are an unsuccessful applicant we, unless you advise Us otherwise (e.g. by deleting your profile data we process under Workable’s Services), will retain your personal data (e.g. CV) to consider you for potential jobs at Your.MD which may be of interest to you in the future.

### Your rights

Under the General Data Protection Regulation you have a number of important rights free of charge. In summary, those include rights to:
- access to your personal data and to certain other supplementary information that this Privacy Notice is already designed to address
- require Us to correct any mistakes in your information which We hold
- require the erasure of personal data concerning you in certain situations
- receive the personal data concerning you which you have provided to Us, in a structured, commonly used and machine-readable format and have the right to transmit those data to a third party in certain situations
- object at any time to processing of personal data concerning you for direct marketing
- object to decisions being taken by automated means which produce legal effects concerning you or similarly significantly affect you
- object in certain other situations to Our continued processing of your personal data
- otherwise restrict Our processing of your personal data in certain circumstances
- claim compensation for damages caused by Our breach of any data protection laws.

For further information on each of those rights, including the circumstances in which they apply, see the [Guidance from the UK Information Commissioner’s Office (ICO) on individuals rights under the General Data Protection Regulation.](https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/)

If you would like to exercise any of those rights, please:
- contact us using Our Contact details below,
- let Us have enough information to identify you,
- let Us have proof of your identity and address, and
- let Us know the information to which your request relates.

## How to complain
We hope that We can resolve any query or concern you raise about Our use of your information.

The [General Data Protection Regulation](https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32016R0679&from=EN) also gives you right to lodge a complaint with a supervisory authority, in particular in the European Union (or European Economic Area) state where you work, normally live or where any alleged infringement of data protection laws occurred. The supervisory authority in the UK is the Information Commissioner who may be contacted at [http://ico.org.uk/concerns/](https://ico.org.uk/make-a-complaint/) or telephone: 0303 123 1113.

## Contact
All questions, comments and requests regarding this Privacy Notice should be addressed to [legal@livehealthily.com](mailto:legal@livehealthily.com)

We will process your personal data in accordance with this Privacy Notice

# Your.MD Symptom Checker Privacy Policy for VHI

(April 2019)

---

## WHO WE ARE 
Your.MD is a trademark of YOUR.MD AS, incorporated and registered in Norway with the company number 999260993. The registered office is at c/o Advokatfirmaet Simonsen Vogt Wiig AS, Filipstad Brygge 1, 0252 Oslo, Norway. It offers the Your.MD Symptom Checker (“symptom checker”, “chatbot”) via its subsidiary Your.MD Limited, incorporated and registered in the UK with the company number 08727263. The registered office is Your.MD Ltd, 5th Floor, 43 Whitfield Street, London, W1T 4HD, UK (hereinafter collectively referred to as: ‘Your.MD’ or ‘we’).

Should you have any privacy-related questions, please contact us at [privacy@your.md](mailto:privacy@your.md?subject= Vhi Health Assistant app).

---

## HOW WE USE YOUR DATA

### LEGAL BASIS

**Consent.** Where you have consented to our use of your data. 

**Legitimate interests.** This covers data processed by us for the purposes that can be reasonably expected within the context of your use of our service to pursue our legitimate interests, in order to improve our service and your experience, for general social benefits to enable free access to health information, to enable us to offer a safe and secure service.

### FOR PROVIDING OUR SERVICE
We use your data so the chat-bot can calculate the most likely condition based on your reported symptoms. **Legal basis:** legitimate interests.

### FOR INTERNAL ANALYTICS
We collect data on how you use our service so we can make improvements and to understand how you use and interact with our service. We collect analytical and technical information (as stated in section 3 of this privacy policy) and use identifiers to carry out troubleshooting, testing and research. **Legal basis:** legitimate interests, to help us improve our service.

With the help of analytics ID assigned to you, we can use the data that you enter when talking to our chatbot (health data, age and gender) for our internal analytics and research. We do not process any information which could directly identify you in our analytical databases. For example, we check how many users have finished a consultation.

### FOR SAFETY AND SECURITY
We also use your data to improve the safety and security our service. To safeguard your privacy, we store health data and data which could personally identify you in separate databases. In line with best practice, only authorised staff members can access personal data, and only when required for user safety or critical systems issues. **Legal basis:** legitimate interests, to enable us to offer safe and secure service.

### FOR COMMUNICATION PURPOSES
We will use your email to respond to any queries you send to [privacy@your.md](mailto:privacy@your.md). Please do not share any health data when sending emails to us as we do not respond to any case-specific health issues. **Legal basis:** legitimate interests, to enable us to respond to your queries.

### FOR REPORTS
We will send reports to our partner VHI, who is hosting our chatbot on VHI Health Assistant App. We provide information such as, how many users used the symptom checker, have finished the consultation, to VHI on monthly basis, all in an aggregated and anonymised form, meaning that your personal data is never disclosed. VHI has the right to appoint an independent auditor to verify the data. In such case, we might need to disclose more data, but don’t worry, your data will be anonymised should this need to happen. **Legal basis:** legitimate business interests.

---

## THE DATA WE COLLECT
**Indirectly identifiable data:** age, gender, time zone, acquisition channel, identifiers (IP address, profile ID attached to your profile data, analytics IDs, conversation ID and session ID.

**Health data:** any type of health data you share when using our Symptom Checker.

**Technical information:** installed app version, IP address at the time of usage, Your.MD’s unique identifiers (profile ID, conversation ID, session ID), records of events with Technical information and your interaction with our service. For example logs on your usage of the service, which include chat information.

**Analytical information:** hashed IP address, hashed profile ID, hashed conversation ID, analytics provider’s unique ID (Firebase ID), various information on how you use our service: selected symptoms, duration, rejected symptoms, questions and answers to clarify symptoms, factors that affect the diagnosis (age and gender), other information about our service you may voluntarily provide, symptom checker’s results.

---

## WHO HAS ACCESS TO YOUR DATA

We cannot provide all service necessary for the successful operation of our service by ourselves. We therefore share collected information with third-party providers for the purpose of offering and improving our service. The information we share will not identify you personally, and the providers will only use the data to offer service to us. However, we will use your email to answer your queries. For privacy-related requests, see section 6 of this Policy or send an email to [privacy@your.md](mailto:privacy@your.md), subject: Vhi Health Assistant App.

### THIRD PARTY TECHNOLOGY PROVIDERS

**Zendesk.** We use Zendesk® (Zendesk, Inc.) as a support ticketing system which enables Your.MD employees who respond to your emails to streamline communications in a single ticket, all within an organised workflow. This allows individual requests to be dealt with more quickly. Any information you share with us via email will be received by a Your.MD support employee who will have access to information you share. This includes statistics such as when you last requested support, the nature of the issue, how it was resolved, and how long you had to wait for a resolution. Please refer to the [Zendesk Privacy Policy](https://www.zendesk.com/company/customers-partners/privacy-policy/), [Zendesk Ticketing System](https://www.zendesk.com/help-desk-software/features/ticketing-system/), [Zendesk EU Data Protection]() and [How Zendesk Protects Personal Data](https://help.zendesk.com/hc/en-us/articles/229138227-Privacy-and-Data-Protection-How-Zendesk-Protects-Personal-Data-?_ga=2.267538446.1019750681.1528789576-842600331.1528789576) for more information.

### ANALYTICS PROVIDERS

With the help of analytics providers, we collect analytical information to help us improve our service for you. We chose our providers carefully and set the most restrictive controls available to ensure they do not use your data for any purpose other than providing service to us.

**Google Analytics** 
Google Analytics (“GA”) allows us to collect data on how you use our Symptom Checker, as described under 'Analytical information' in section 3 of this policy. When you install the VHI app and then click on Symptom Checker within the Vhi App, GA send information on how you use our Symptom Checker. We use your information only for the purposes of our internal analytics to improve our services. Google can share your information only in limited situations where a) it concludes that it is required by law or has a good faith belief that access, preservation or disclosure of customer data is reasonably necessary to protect the rights, property or safety of Google, its users or the public; or b) in certain limited circumstances when third parties carry out tasks on Google's behalf (e.g., data storage) with strict restrictions that prevent the data from being used or shared except as directed by Google. For more information, please read [How Google uses cookies](https://policies.google.com/technologies/cookies). Google has an EU [Privacy Shield certificate](https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI) and uses [Standard ISO 27001 security measures](https://www.iso.org/isoiec-27001-information-security.html). For more information on operational security and disaster recovery, please visit: [How Google analytics secures your web traffic](https://support.google.com/analytics/answer/6385009) and [Safeguarding your data](https://support.google.com/analytics/answer/6004245). For general information, please read the following: [How Google uses information from sites or apps that use their services](https://www.google.com/policies/privacy/partners), [Safeguarding your data](https://support.google.com/analytics/answer/6004245?hl=en) and the [Google Privacy Policy](https://www.google.com/policies/privacy/).

### LAWFUL PURPOSES

Your data will be disclosed only when necessary for lawful purposes, our legal obligations and rights as stated herein, and will be limited to such purposes: a) if required by law, for example to comply with a court order, subpoena, regulation, legal process or other governmental request b) to exercise or protect the rights, property or personal safety of our company, our users or others c) to enforce this privacy statement, including investigation of potential violations d) upon fulfilling legal requirements of local legislation to supply certain service a third-party might legally request from us e) to detect, prevent, or otherwise address fraud, security, or technical issues f) if we are involved in a merger, acquisition, or sale of all or a portion of its assets, you will be notified of any change in ownership or uses of your data g) to respond to claims that any content published within our Service or our Service violate any right of a third-party.

---

## HOW LONG DO WE KEEP YOUR DATA

We follow generally accepted industry standards and internal procedures to protect the data submitted to us during transmission, storing, and processing. The session ID that enable us to recognise users that come from Vhi, as well as the profile and conversation ID are new for each session you make and get deleted after the conversation ends. This means that we are not able to attribute the data you share with us to you personally. 

We store data and analytics ID that cannot be tracked back to you for internal analytics purpose. When the data is no longer needed, we delete it using reasonable measures to protect the information from unauthorised access or use. 

Any information you send to [care@your.md](mailto:care@your.md) and/or [privacy@your.md](mailto:privacy@your.md) will be deleted as soon as we respond to your enquiry and/or the information is no longer needed.

---

## YOUR RIGHTS

You can exercise your rights: 

* to object and to restriction of data processing, by sending an email to [privacy@your.md](mailto:privacy@your.md?subject= Vhi Health Assistant App).

We will process your request **within 30 days** of receiving it. 

We may decline to process requests that are unreasonably repetitive, require disproportionate technical effort, jeopardise the privacy of others, are impractical, or if we are required to retain such information by law or for legitimate business purposes. In the event of a suspicious request made in bad faith or accompanying unlawful behavior, we reserve the right to deny any request you make. We will not respond to any enquiry emails which we do not understand, where the request is not clearly specified, or pertains to health questions as we do not offer case-specific advice. We reserve the right to delete your data  after a long period of inactivity. 

You should be aware that we are not able to accommodate your **request for the deletion/access/copy of your data** because we delete all data that could indirectly personally identify you after finishing the consultation.

### OPTING OUT

**Zendesk.** Correcting, updating and removing your information. If you seek to exercise your data protection rights in respect of personal information stored or processed by Zendesk on our behalf (including to seek access to, or to correct, amend, delete or restrict processing of such personal information) you should direct your query to us by sending an email to [privacy@your.md](mailto:privacy@your.md). We will then instruct Zendesk to remove the personal information and they will respond within 30 days. They will retain personal information which they process and store on our behalf for as long as is needed to provide service to us.

---

## STORING OF INFORMATION, SECURITY AND DATA TRANSFERS

We follow generally accepted industry standards and internal procedures to protect Information submitted to us.

### STORING

We store identifiable personal data and health data in separate databases. This means that whatever you enter our chatbot, it is not connected to data that could personally identify you. We normally process your data with the help of identifiers, namely profile ID, consultation/ conversation ID, Vhi ID and analytic identifiers to avoid personal identification. 

We store your information for as long as needed to provide our service. We delete all identifiers after each consultation. We may store the information longer, but only in a way that it cannot be tracked back to you. 

We use **AWS** and **Google Cloud Platform** for storing of information.

**AWS.** AWS has multiple security certificates <https://aws.amazon.com/security/>.The data we collect from you may be transferred to, and stored at, a destination outside and inside of the European Economic Area (EEA), namely the AWS regions in the US and EU. It may also be processed by staff operating outside the EEA who work for us, or for one of our Providers. Your data will still be safe - we have entered into the AWS data processing addendum to make sure your personal information (IP address) is safe, namely:
a) that the AWS will use the data only to provide its storing service
b) that it will not disclose data to any third-party
c) that the AWS restricts its personnel to process your data without their authorisation
d) that we stay in control of correcting, blocking, deleting, retrieving your data
e) that AWS is responsible for implementing and maintaining the technical and organisational measures
f) that AWS is certified under ISO 27001 and agrees to maintain an information security program for the service that complies with the ISO 27001 standards or such other alternative standards as are substantially equivalent to ISO 27001 for the establishment, implementation, control, and improvement of the AWS Security Standards
g) that AWS may use subcontractors, but will restrict their access only for the purposes of offering AWS service. By using and downloading our Service, you agree to the transfer, storing and processing, as stated herein. We will take all the reasonably necessary steps to ensure that your data is treated securely and in accordance with this privacy policy. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your data, we cannot guarantee the security of your data transmitted to our Site; any transmission is at your own risk.

**Google Cloud Platform.** We store all analytical data on Google Cloud Platform (GCP). We control the stored data while Google is the processor. This means that Google processes the data only for the purposes of providing GCP service and technical support to us, in accordance with data processing and security terms <https://cloud.google.com/terms/data-processing-terms>. We control what happens to the data and can access it at any time. We have chosen to store the data in the US. Google stores data in a multi-tenant environment on Google-owned servers. The data and file system architecture are replicated in multiple geographically dispersed data centres. Google also logically isolates stored data. We have control over specific data sharing policies. Those policies, in accordance with the functionality of the Service, enable us to determine the product sharing settings applicable to this privacy policy. We may choose to make use of certain logging capability that Google may make available via the service. Google complies with legal frameworks relating to the transfer of data such as EU-US and Swiss-US Privacy Shield. Get more information on Google Cloud Platform and the terms: <https://cloud.google.com/product-terms>.

### SECURITY

To guarantee your privacy, we securely encrypt, limit, and restrict access to your personal details.

We encrypt all your data at rest and any directly identifiable personal information is double encrypted with two keys at both the infrastructure and application level. We have restricted access to production environments and monitoring of your activities. The information is encrypted and key protected, and we have integrated commercially reasonable efforts to make sure your information remains secure when processed by us. However, please be aware that no security measures are impenetrable. If you have any concerns about the security of our service, please contact us at [privacy@your.md](mailto:privacy@your.md).

### TRANSFERS

**EU Territory** We delete logs we keep of the IP address within six months. We store your personally identifiable data for the duration of the provision of our Service or up to 30 days after your deletion request. This section shall not prevent any technical storage or access to information for the sole purpose of carrying out the transmission of a communication, or as strictly necessary for us to provide the Service you requested. We reserve the right to delete your profile after an extended period of inactivity.

**US Territory** We will retain collected information for the period necessary to fulfill the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by applicable legislation. We reserve the right to delete your profile after an extended period of inactivity.
Storing might be different depending on which territory is collecting the information and the applicable legislation, but we always strive to store the information only if it is needed for the purposes of providing, improving or personalising our Service.

---

## GENERAL

Should you have any privacy-related questions, please contact us at [privacy@your.md](mailto:privacy@your.md). If we are not able to help, we will forward your enquiry to our external **Data Protection Officer (DPO)**, ePrivacy GmbH, represented by Prof. Dr. Christoph Bauer, Große Bleichen 21, 20354 Hamburg. Should you have any concerns or complaints that our DPO is not able to resolve, you have the right to lodge a complaint with our supervisory authority Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Prof. Dr. Johannes Caspar, Kurt-Schumacher-Allee 4, 20097 Hamburg. If you are a UK customer, you can lodge a complaint with the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

**CHANGES TO THIS PRIVACY POLICY**. We may update this privacy policy to reflect the changes in our data processing practices. Because we are constantly adding new service and features, we might not make an immediate upgrade of the privacy policy, unless in case of material changes to our data processing practices. The most current version of this privacy policy will govern our use of the data we collect from you and it is available at [Your.MD Symptom Checker Privacy Policy for Vhi](https://www.your.md/vhi-privacy). Because we do not create your profile account you will need to consent to the most recent version each time you use the service.  

Your.MD,
Matteo Berlucchi, CEO 

VHI Privacy Policy for Your.MD Symptom Checker

Your.MD Symptom Checker Privacy Policy for VHI

Your.MD Symptom Checker Terms of Service for VHI