The following is Humetrix's full statement of privacy practices for the WhatMeds™ mobile application (the "App"). A SHORTER PRIVACY NOTICE IS AVAILABLE HERE.

The WhatMeds™ mobile application allows App Users to easily create a record about their health on their smartphone that they can make available to their healthcare providers in pharmacies, hospitals, outpatient clinics, emergency departments and in telemedicine encounters as well as with individual caregivers. The App generates a QR code that can be stored in a smartphone wallet or printed so that the record can be displayed to a healthcare provider by scanning the QR code using a smartphone or tablet.

"Users" in this Policy refers to individuals who download and use the app, not to healthcare providers who use their own smartphones or tablets to read the QR code generated by the App.

Humetrix is dedicated to protecting the privacy rights of Users of the App. Our policies with respect to the handling of information we collect from or about Users with respect to the App are described within this Privacy Statement.

We may change, add, or remove portions of this Policy at any time, and such changes shall become effective immediately upon posting. When posting a new Policy, we will release an App upgrade which will require the User to accept the revised terms in order to continue using the App.

This Policy applies when you interact with the App. It does not apply to third party websites that may be linked to from the App; please review the privacy policies on those websites directly to understand their privacy practices.

Information We Collect

User-Provided Information

The User may provide Humetrix a list of current medications, the names of the pharmacies where the medications were dispensed and the names of the providers who prescribed the medications. Users who are enrolled in a Medicare Part D program or Medicare Advantage plan with prescription drug coverage can download a list of their medications onto the App from the CMS Blue Button 2.0 API.

Users may provide Humetrix with their contact information, e.g., name and telephone number.

User data - both the data entered by Users manually and CMS Blue Button 2.0 API data that Users download - is stored on Users' phones, encrypted. User selected data is also uploaded to Humetrix's servers and stored in encrypted form for the sole purpose of enabling the user to share their data with healthcare providers they choose.

The App enables Users to determine exactly what information they want to display to healthcare providers when their QR code is scanned. The information a User may make available includes a list of current medications and the names of the pharmacies where these medications were dispensed as well as the names of providers who prescribed the medications.

Information Collected Automatically

Humetrix automatically collects technical data and related information about the User's device, operating system and application software that is gathered periodically to understand how Users are using the App, facilitate the provision of App updates, identify problems with the App, and provide product support to the User of the App. This information does not personally identify the User.

Information We Do Not Collect

The App is not supported via advertising and does not use the data it collects for advertising purposes.

The App does not collect information about a User's online activities over time and across third-party Web sites or online services.

The App is configured to automatically back up the information a User chooses to make available about themselves to the User's iCloud or Google Drive. Users may disable this feature. No backup data is processed or stored by Humetrix.

How We Use Your Information

Humetrix may use any of the information we collect for the following purposes.

• Service functionality: Humetrix collects information provided by the User to provide the WhatMedsTM app's services, and conduct general business operations, such as accounting, recordkeeping, and audits.
• Service improvement: Humetrix uses automatically collected data to understand how Users are using the App, facilitate the provision of App updates, identify problems with the App, and provide product support to the User of the App.

How We Share Information We Collect

We may share the information Users provide to us or that we collect automatically from Users with the following entities and for the following purposes only:

• As required by law, such as to comply with a subpoena, or similar legal process;
• When we believe in good faith that disclosure is necessary to protect our rights, protect Users' safety or the safety of others, investigate fraud, or respond to a government request;
• We may change our ownership or corporate organization. We may transfer to another entity or its affiliates or service providers some or all information about you in connection with, or during negotiations of, any merger, acquisition, sale of assets or any line of business, change in ownership control, or financing transaction. If the circumstances of the transaction allow it, we will provide you with notification about the transaction and in that notification explain the choices you may be able to exercise;
• As otherwise provided in this Privacy Statement; or
• With Service Providers: including cloud host providers and text messaging partners. On the Android version of the App, Humetrix uses software called Firebase Crashlytics to identify and fix any programming issues which could result in the App crashing. Humetrix does not use Firebase Crashlytics for purposes other than the ones stated above. Our providers do not independently use the information we disclose to them.

Users may share information they record in the App with healthcare provider and other third parties authorized by the User, at the User's sole discretion.

Data Retention
Humetrix will retain information provided by the User until the User deletes or edits that information in their WhatMeds™ App record. Humetrix may retain information as required by law.

Users' Choices
A User may edit or delete any and all of the information they record in the App. Once the User edits or deletes information in an App profile and updates their Wallet card, outdated or deleted information is promptly removed from Humetrix's servers. To permanently remove all stored information from Humetrix servers, a user should delete the profile in the app used to create the Wallet card.

Security
Humetrix takes the security of our Users' information seriously. Humetrix takes such actions as are reasonably necessary to prevent unauthorized access to information that it collects. Humetrix uses security and/or encryption technology, including SSL/TSL encrypted endpoints using the HTTPS protocol to secure information collected from Users when that information is transmitted to Humetrix's servers or to transmit such information to a browser in response to the scanning of the QR code produced by the app. Humetrix restricts access to information stored on its servers and secures the content by use of encryption technologies and other security methods. However, Humetrix cannot guarantee that these practices will prevent unauthorized attempts to access, use, or disclose the information it stores. For example, an unauthorized party could access information about the User by breaking into the User's phone. Users enter information into the App at their own risk and should take appropriate steps to maintain the security of their information and the device.

Children
The App is intended for Users age eighteen and older. We do not knowingly collect information from children. If we discover that we have inadvertently collected information from anyone younger than the age of 18, we will delete that information.

California Privacy Rights Notice
Humetrix does not disclose personal information to third parties for those third parties' marketing purposes.

Due to the privacy and security-by-design features of the App, Humetrix does not view or manipulate the personal data that a User makes a part of their record. To access, rectify, delete, or port data, Users should open the App, make their desired changes, and republish their record. Users may contact us at the address below for technical support.

Please note: To process requests, we may need to verify identity, in which case we may require Users to provide us with personal information necessary for verification.

Data Protection Officer Contact, Questions, Complaints, and Other Contacts
If you have any questions about this Statement of Privacy Practices or Humetrix’s policies and practices concerning the App, you can contact Humetrix by telephone at +1-888-746-7203 or by mail at the address below:

Humetrix
1155 Camino Del Mar, #503
Del Mar, California 92014

The contact information for Humetrix's Data Protection Officer is:

Dr Christopher R. Burrow
Humetrix
1155 Camino Del Mar, #503
Del Mar, California 92014
Phone: +1-858-259-8987
Email: cburrow@humetrix.com

Updated: August 29, 2023