Privacy Policy — LoveJoy Health Inc.

Effective: January 1, 2025
Last Updated: August 21, 2025

LoveJoy Health Inc. (“LoveJoy Health”, “we”, “us”) provides digital health tools that help patients connect with licensed providers and manage care. This Privacy Policy explains how we collect, use, share, and protect information when you use:

• Patient App (mobile)

• Provider App (mobile)

• Admin Portal (web)

• Telehealth services (audio/video visits, messaging, scheduling)

• Community & wellness content (including future offerings like meditation or yoga)

Not for emergencies. If you are experiencing a medical emergency, call your local emergency number immediately.

---

1) Information We Collect

A. Personal & Health Information (may include)

• Account & identity: name, email, phone, date of birth, address, profile photo.

• Care/health data (PHI): symptoms, medical history, medications, allergies, vitals, provider notes, care plans, images/documents you upload.

• Appointments & communications: visit details, messages with your provider, care instructions.

• Community content (if used): posts, comments, likes, reports/flags.

• Payments/insurance (future): billing details, payer/insurance information when enabled.

• Provider credentials (Provider App): licensing, NPI, specialties, affiliations.

B. Device & Usage Information

• Device identifiers, IP address, app version, OS, crash/diagnostic logs, and limited performance telemetry (no advertising identifiers).

We do not collect your contacts, SMS content, precise GPS location, or your personal call/audio content outside of telehealth visits.

---

2) How We Use Information

• Deliver care & run the service: scheduling, telehealth visits, secure messaging, care documentation.

• Communications: confirmations, reminders, and service notices.

• Personalization: streamline your in-app experience (e.g., showing relevant providers/slots).

• Security & compliance: protect accounts, prevent fraud/abuse, and meet legal obligations.

• Quality & reliability: improve call quality and app stability using de-identified or aggregated data when possible.

We do not use your health information for advertising or targeted marketing.

---

3) Recording of Telehealth Sessions

We do not record audio/video calls. We keep call metadata (e.g., timestamps, quality metrics) for quality and support. Chat/message threads with your provider may be retained per Section 6 (Retention).

---

4) How We Share Information

We do not sell personal information. We share only as needed:

• Your providers/care team to deliver care you request.

• Service providers (“processors”) such as cloud hosting, video calling (Agora RTC), email/SMS delivery, and customer support—bound by contracts and, where applicable, healthcare privacy obligations.

• Payments & insurance entities when enabled and authorized by you.

• Regulators/authorities when required by law or to protect rights and safety.

• At your direction/consent (e.g., sending a summary to another clinician).

• Corporate events (e.g., merger); we’ll notify you of material changes.

We may share de-identified or aggregated data that does not identify you.

---

5) Data Retention

We retain information only as long as needed for care, operations, and legal requirements, then delete or de-identify it. Typical periods:

• Account & profile: life of account + up to 24 months.

• Clinical records (PHI): per U.S. healthcare record laws (often 6–7 years, longer for minors in some states).

• Provider/patient messages: 24 months (or longer if part of the clinical record).

• Call metadata/quality logs: 12 months.

• Support tickets/logs: 18 months.

• Payments/insurance (future): per legal/tax requirements.

Actual periods may vary by record type and jurisdictional requirements.

---

6) Your Rights & Choices

• Access/Export: request a copy of your data or health records.

• Correct/Update: fix inaccuracies in your profile and, where permitted, in clinical records.

• Delete account & data: see below.

• Communications: opt out of non-essential emails/SMS.

Account & Data Deletion (in-app and web)

Delete your account and request deletion of associated personal data in-app:

• Patient App: Profile ▸ Settings ▸ Account ▸ Delete Account

• Provider App: Menu ▸ Settings ▸ Account ▸ Delete Account

• Admin Portal: Account ▸ Delete Account

We complete deletion within 30 days, except where we must retain records for legal, regulatory, or fraud-prevention purposes. To request deletion or export by email, contact business@lovejoy.health.
For PHI/clinical records, we may be required to retain certain information; once the retention period ends, we delete or de-identify it.

---

7) Security

We use administrative, technical, and physical safeguards, including:

• Encryption in transit (TLS) and encryption at rest for stored data;

• Secure authentication and role-based access controls;

• Network/application monitoring and regular security reviews.

No method is 100% secure, but we maintain industry-standard protections and continually improve them.

---

8) Children & Minors

We do not knowingly collect personal information from children under 13 without verified parental/guardian consent. When minors receive services, consent and record-keeping follow applicable laws.

---

9) U.S. Health Privacy (HIPAA)

Where LoveJoy Health acts as a HIPAA Covered Entity or Business Associate, we implement required HIPAA safeguards and use vendors that agree to appropriate contractual protections when they handle PHI.
For PHI uses/disclosures and your HIPAA rights, see our Notice of Privacy Practices (NPP): [link to your NPP]. If this Policy ever conflicts with the NPP for PHI, the NPP controls.

---

10) Device Permissions & Why We Ask

We request permissions at runtime and only when needed for a feature.

Android

• Camera & Microphone — live video/audio during telehealth visits (no recording).

• Access Network/Wi-Fi State — adjust video quality and diagnose connectivity issues.

• Wake Lock — keep the screen awake during an active session.

• Post Notifications (Android 13+) — appointment reminders and follow-ups.

• Read Phone State — detect whether a cellular call is active/ringing/idle so we can gracefully handle audio and avoid conflicts during a telehealth session. We do not access call audio or call logs content.

• Bluetooth (if requested by your OS) — route audio to a paired headset during a session. We do not scan for nearby devices or use Bluetooth for location; on newer Android versions this may use BLUETOOTH_CONNECT at runtime.

iOS

• Camera & Microphone — live video/audio during telehealth visits (no recording).

• Photo Library (optional) — only if you upload images/documents for care; add-only access if saving exports.

• Notifications — reminders and follow-ups.

• App Transport Security (ATS) — HTTPS/TLS is required; any exceptions are limited and secured.

---

11) Cookies & Similar Technologies

Our apps/portal may use cookies, local storage, and similar technologies for authentication, session management, and performance. We do not use ad tracking or cross-context behavioral advertising.

---

12) Third-Party Links

Our services may link to third-party sites or content. Their practices are governed by their own policies.

---

13) Changes to This Policy

We may update this Policy periodically. We’ll post updates with a new “Last Updated” date and provide prominent in-app notice for material changes. Your continued use after changes means you accept the updated Policy.

---

14) Contact Us

LoveJoy Health Inc.
Email: business@lovejoy.health

Annex: Store Disclosures Summary (for Play “Data safety” & iOS “Privacy Labels”)

• Data collected: identity/contact info, health/fitness (PHI), user content (messages, uploads), app activity (visit & message timestamps), and diagnostics (crash/performance).

• Purposes: app functionality, telehealth, communications, support, security/compliance, and service quality.

• Data sharing: with processors (e.g., Agora RTC for video, cloud hosting, email/SMS). No sale of personal data.

• Optional features at launch: Payments/insurance not enabled; when enabled, disclosures will be updated.

• User control: in-app account deletion, data export upon request, opt-out of non-essential communications.

• Security: TLS in transit; encryption at rest; access controls.

Labore voluptas nihil molestiae sint delectus sint sequi voluptatem.
Quia id omnis aliquid suscipit recusandae similique.
Vero natus sed animi reiciendis. Ips um voluptate et non.
Est velit et ex laboriosam dolor est inventore quo nquam.

Est velit et ex laboriosam dolor est inven tore quo numquam labore voluptas nihil molestiae sint delectus sint sequi volup tatem. Quia id omnis aliquid suscipit* recusandae similique. Vero natus sed animi reiciendis. Ipsum voluptate et non. Est velit et ex laboriosam dolor est inventore quo nquam. Labore voluptas nihil molestiae sint delectus sint sequi voluptatem. Quia id omnis aliquid nul suscipit recusandae similique. Vero natus sed animi reiciendis. Ips um voluptate et non. Est velit et ex laboriosam dolor est inventore quo nquam.Est velit et ex laboriosam dolor est inven tore quo numquam labore voluptas nihil molestiae sint delectus sint sequi volup tatem. Quia id omnis aliquid suscipit* recusandae similique. Vero natus sed animi reiciendis. Ipsum voluptate et non. Est velit et ex laboriosam dolor est inventore quo nquam. Labore voluptas nihil molestiae sint delectus sint sequi voluptatem. Quia id omnis aliquid suscipit recusandae similique. Vero natus sed animi reiciendis. Ips um voluptate et non. Est velit et ex laboriosam dolor est inventore quo nquam.Est velit et ex laboriosam dolor est inven tore quo numquam labore voluptas nihil molestiae sint delectus sint sequi volup tatem. Quia id omnis aliquid suscipit* recusandae similique. Vero natus sed animi reiciendis.

Terms of payment

Est velit et ex laboriosam dolor est inven tore quo numquam labore voluptas nihil molestiae sint delectus sint sequi volup tatem. Quia id omnis aliquid suscipit* recusandae similique. Vero natus sed animi reiciendis. Ipsum voluptate et non.

Est velit et ex laboriosam dolor est inventore quo nquam. Labore voluptas nihil molestiae sint delectus sint sequi voluptatem. Quia id omnis aliquid suscipit recusandae similique. Vero natus sed animi reiciendis. Ips um voluptate et non. Est velit et ex laboriosam dolor est inventore quo.

Methods of payment

Est velit et ex laboriosam dolor est inven tore quo numquam labore voluptas nihil molestiae sint dele ctus sint sequi volup tatem. Quia id omnis aliquid suscipit* recusandae similique. Vero natus sed animi reiciendis. Ipsum voluptate et non. Est velit et ex laboriosam dolor est inventore quo nquam. Labore voluptas nihil molestiae sint delectus sint sequi voluptatem. Quia id omnis aliquid suscipit recusandae similique. Vero natus sed animi reiciendis. Ips um voluptate et non. Est velit et ex laboriosam dolor est inventore quo nquam.Est velit et ex laboriosam dolor est inven tore quo numquam labore voluptas nihil molestiae sint delectus sint sequi volup tatem. Quia id omnis aliquid suscipit* recusandae similique.

Vero natus sed animi reiciendis. Ipsum voluptate et non. Est velit et ex laboriosam dolor est inventore quo nquam. Labore voluptas nihil molestiae sint delectus sint sequi voluptatem. Quia id omnis aliquid suscipit recusandae similique. Vero natus sed animi reiciendis. Ips um voluptate et non. Est velit et.