If you use ZYVO's daily check-in, we collect the information you choose to provide.

This may include:

Some check-in information may constitute health information or sensitive or special-category personal data under applicable law. Where required, we process such information based on your consent or another lawful basis and applicable condition permitted by law.

ZYVO allows you to upload, scan, organize, search, view, delete, and export health-related records and other documents that you choose to provide.

Depending on the feature, this may include:

We do not require you to upload health records to use unrelated ZYVO features.

If you choose to scan or capture a document using your device camera, ZYVO may request camera permission.

Camera access is used for the scanning or capture feature you initiate. We do not use the camera for continuous monitoring, background surveillance, advertising, or unrelated purposes.

Images and temporary files created during scanning may be processed to complete the requested scan, upload, security check, OCR, or document-processing operation.

ZYVO may support connections to Apple Health/HealthKit, Health Connect, and other supported health or information sources. Connecting a health source is optional. When you authorize a connection, ZYVO may access only the categories of information for which you grant permission and that are needed for the ZYVO features you choose to use.

Depending on the permissions you grant, these categories may include:

ZYVO uses this information to show recent activity and health information in the App and to support health-organization features. If you choose to import medications, ZYVO may use that information for medication reminders. ZYVO may synchronize authorized health information to our backend systems, including Microsoft Azure, when necessary to provide these features. We do not access all information available through Apple Health or another connected source merely because it is technically available.

ZYVO does not send connected health information to OpenAI simply because you connect a health source. Health-derived information may be sent to OpenAI only when you actively use a specific AI-assisted feature that requires that information and you provide the required consent before transmission. Before transmission, ZYVO limits the information sent to what is necessary for that feature and removes or redacts identifying information where applicable.

We do not sell connected health information or use it for advertising, targeted advertising, data brokerage, or unrelated profiling. You can manage or revoke HealthKit permissions through Apple's Health or device settings. You can manage or revoke Health Connect permissions through the applicable Android or Health Connect settings. Revoking permission stops ZYVO from obtaining new information through that connection, but does not automatically delete information ZYVO previously received and stored.

ZYVO may allow you to select information from your records, check-ins, or connected sources to help prepare for a healthcare visit. The information used for appointment preparation is based on the information you select or authorize for that purpose.

ZYVO may use that information to create organizational materials such as:

ZYVO does not automatically send these materials to healthcare professionals or other third parties. You decide whether to export or share them.

ZYVO may provide AI-assisted features to help you organize, summarize, find, structure, or prepare information.

AI processing occurs only when you actively use an AI-assisted feature. When you use an AI-assisted feature, we may process:

Where a third-party AI provider is used, information necessary to provide the requested feature may be transmitted to that provider.

If the feature uses information from your ZYVO records or a connected health source, that information is sent to the third-party AI provider only when you actively use the feature and provide the required consent before transmission. ZYVO limits the information sent to what is necessary for the requested task and removes or redacts identifying information where applicable.

We do not intentionally send health information or AI-assisted health content to general analytics or advertising services or use it for sale, unrelated profiling, or training general-purpose AI models.

If you enable reminders, we may process information necessary to schedule and deliver those reminders, including reminder settings, schedules, and delivery information.

If you choose to use the trusted-contact feature, we may collect information necessary to provide that feature, such as:

Trusted contacts do not receive your health records, uploaded documents, connected-source information, AI conversations, or appointment-preparation materials merely because they are designated as trusted contacts.

A missed-check-in notification may indicate that activity associated with your ZYVO account has occurred or that a scheduled check-in was missed.

Trusted-contact notifications are not medical alerts, emergency alerts, crisis-response services, or continuous safety monitoring.

We may automatically collect limited technical and usage information necessary to operate, secure, troubleshoot, and improve ZYVO.

This may include:

We do not collect your web-browsing history outside ZYVO merely because it is available on your device.

We use personal information for purposes reasonably necessary to provide, operate, secure, and improve ZYVO, including to:

We do not use health information for advertising, targeted advertising, sale, data brokerage, or unrelated profiling.

We do not use health information or AI-assisted health content to train general-purpose AI models.

We may disclose personal information in the following circumstances.

We use service providers that help us operate ZYVO, including providers of:

These providers receive information reasonably necessary to perform the services they provide to us and are subject to appropriate contractual obligations concerning confidentiality, security, and use of personal information.

We require service providers that receive ZYVO user information to provide protections consistent with this Privacy Policy and applicable law.

ZYVO may allow you to export, download, or share records, appointment-preparation materials, or other information.

When you initiate a sharing or export action, we transmit the information necessary to complete that action.

Once you intentionally share information with another person, healthcare professional, organization, platform, or service, that recipient may handle the information according to its own privacy practices.

We may disclose information when reasonably necessary to:

We seek to limit such disclosures to information reasonably necessary for the applicable purpose.

If WowSuite Software Ltd. or ZYVO is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, change of control, or similar transaction, personal information may be transferred as part of that transaction, subject to applicable law and appropriate privacy and security protections.

ZYVO uses service providers that help us operate the App, including providers of cloud hosting and storage, document processing, AI processing, security, authentication, customer support, notifications, analytics, diagnostics, and payment processing.

These providers receive information reasonably necessary to provide their services to ZYVO and are subject to appropriate confidentiality, security, and data-use requirements.

Purpose: Cloud infrastructure, application hosting, storage, backups, system operation, and related security and technical services.

Information: Information necessary to host and operate ZYVO, which may include account information, user content, uploaded records, and health information synchronized through features you have authorized.

Purpose: AI-assisted features such as organization, summarization, information finding, and appointment-preparation assistance.

Information: Information needed to provide the AI feature you choose to use, including prompts, messages, questions, selected ZYVO information, and health-derived information when the specific feature requires it.

ZYVO sends information to OpenAI only when you actively use an AI-assisted feature that requires a third-party AI service. Where the feature requires health-derived information, ZYVO obtains the required consent before transmission and limits the information sent to what is necessary for that feature. ZYVO does not send connected health information to OpenAI merely because you have connected Apple Health, HealthKit, Health Connect, or another health source.

ZYVO may use analytics, attribution, crash-reporting, and diagnostic services to understand App installation attribution, reliability, security, and general non-health usage.

These services are configured not to receive health check-in content, health records, connected health-source data, appointment-preparation content, AI conversations, private notes, or other health-related information.

ZYVO may use limited technical information, opaque identifiers, and general App events needed to operate, secure, troubleshoot, attribute, and improve the App, where permitted by applicable law. We do not use health information to create advertising profiles.

If you purchase a subscription or other paid feature through the Apple App Store, Google Play, or another authorized payment provider, that provider may process payment and transaction information according to its own privacy policy.

ZYVO may receive information needed to administer your subscription, such as product or plan information, transaction identifiers, subscription status, trial status, renewal status, or expiration information.

ZYVO does not receive or store full payment-card details processed directly by Apple or Google.

ZYVO may provide AI-assisted features to help you organize, summarize, find, structure, or prepare information.

AI processing occurs only when you actively use an AI-assisted feature. When you use an AI-assisted feature, we may process:

If the feature requires information from a connected health source, that information is processed only when you use the feature and provide the required consent before it is sent to OpenAI. ZYVO limits the information sent to what is necessary for the requested task and removes or redacts identifying information where applicable.

We do not use health information or AI-assisted health content for advertising, targeted advertising, sale, unrelated profiling, or training general-purpose AI models.

AI-generated content may contain errors and is provided for general informational and organizational purposes only. AI-assisted features are not a substitute for professional medical advice, diagnosis, or treatment.

Health information is particularly sensitive. When ZYVO accesses information from Apple Health/HealthKit, Health Connect, or another supported health source, access occurs only after you authorize the applicable connection and permissions. ZYVO uses connected health information only for the ZYVO features for which you authorized access, including showing recent activity and health information and supporting health-organization features.

ZYVO does not sell, use for advertising, or use for unrelated purposes health information obtained through HealthKit or Health Connect. We do not sell health information. We do not use health information obtained through HealthKit or another health API for advertising, marketing, targeted advertising, data brokerage, or unrelated profiling.

Where you revoke access to a connected health source, ZYVO stops obtaining new information through that connection. Previously received information remains subject to this Privacy Policy until deleted or otherwise disposed of under our retention and deletion practices.

ZYVO may use limited analytics, attribution, crash-reporting, and diagnostic technologies to operate, secure, troubleshoot, and improve the App.

These technologies may process limited technical information such as:

We do not intentionally send health check-in content, uploaded health records, connected health-source data, appointment-preparation content, or AI-assisted health conversations to general analytics or advertising services.

ZYVO does not use health information for targeted advertising or advertising profiles.

Depending on your location and the particular processing activity, we may process personal information based on:

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect processing that was lawful before withdrawal.

If you are located in the European Economic Area (“EEA”) or the United Kingdom (“UK”), your personal information is processed in accordance with applicable data-protection laws, including the EU General Data Protection Regulation (“GDPR”) and the UK General Data Protection Regulation (“UK GDPR”), together with applicable national data-protection laws.

Depending on the circumstances, WowSuite Software Ltd. may act as a data controller for your personal information.

Where required by the GDPR or UK GDPR, we rely on an applicable lawful basis for processing, including:

Health information may constitute special-category personal data under the GDPR and UK GDPR.

Where we process special-category personal data, we rely on an applicable condition permitted by applicable law, which may include explicit consent where required.

We do not process special-category personal data merely because it is available to us. Processing is limited to the purposes described in this Policy and the features you choose to use.

If you are located in the European Economic Area (“EEA”) or the United Kingdom (“UK”), you may have rights under applicable data-protection laws, including rights to access, correct, delete, restrict, or object to certain processing of your personal information, receive your information in a portable format, and withdraw consent where processing is based on consent.

You may also have the right to lodge a complaint with the applicable data-protection supervisory authority.

These rights are subject to applicable legal limitations and exceptions.

You may exercise applicable rights by contacting support@zyvohealth.com.

ZYVO and its service providers may process personal information outside the EEA or UK, including in the United States.

Where required by applicable law, we use legally recognized safeguards for international transfers, which may include:

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including providing requested features, maintaining security, preventing fraud or abuse, resolving disputes, and complying with legal obligations.

Different categories of information may be retained for different periods.

We generally retain account information while your account is active and for a limited period afterward where reasonably necessary for security, legal, accounting, fraud-prevention, or dispute-resolution purposes.

We retain records and files while they remain in your account or until you delete them, subject to applicable legal, security, backup, and other legitimate retention requirements.

We retain check-in information while it is needed to provide the associated ZYVO features or while it remains in your account, subject to applicable retention requirements.

AI conversation information may be retained while necessary to provide requested conversation history, maintain security, prevent abuse, troubleshoot the service, or comply with applicable law.

Connected-source information is retained only as reasonably necessary to provide the feature for which it was accessed or where retention is otherwise permitted or required by law.

Revoking access to a connected source prevents future access through that connection but does not automatically delete information previously received by ZYVO.

Trusted-contact information and notification logs may be retained while necessary to provide the feature and for limited security, troubleshooting, dispute-resolution, or legal purposes.

You may request deletion of your ZYVO account and associated personal information through available App controls or by contacting:

Where the App provides controls for individual records or other user-created information, you may also delete that information through the App.

When you request deletion, we will delete or schedule information for deletion from active systems in accordance with our applicable deletion procedures. We will also stop future collection or synchronization of information through connected health sources associated with the deleted account, subject to applicable legal or security requirements.

Some information may remain temporarily in:

When information no longer needs to be retained, it will be deleted, anonymized, or securely disposed of as appropriate.

Depending on where you live, you may have rights concerning your personal information, including the right to:

You may exercise applicable rights through available App controls or by contacting:

We may need to verify your identity before completing a request.

If you submit a request concerning another person's information, we may also need to verify that you have the necessary authority.

We will respond within the time required by applicable law.

If you are a California resident, you may have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”), including rights to know/access, correct, delete, and obtain information about the collection and use of personal information.

ZYVO does not sell personal information.

ZYVO does not share health information for cross-context behavioral advertising.

We do not use health information, health records, connected-source health information, AI-assisted health content, check-in information, or appointment-preparation content for targeted advertising.

Where applicable, California residents may exercise their privacy rights by contacting:

We honor Global Privacy Control signals where required by applicable law.

This Notice is provided pursuant to the California Consumer Privacy Act (as amended by the CPRA). It explains how we collect, use, share, and retain personal information and the privacy rights available to California residents, as described in this Policy.

We use this information to operate and improve our services, communicate with you, fulfill transactions, personalize your experience, and comply with legal and security obligations. We retain information only as long as reasonably necessary for the purposes described in this Policy.

We share information with OpenAI only when an applicable ZYVO AI-assisted feature is actively used and the processing requires a third-party AI service, as described in Sections 2.7, 5, and 6.

We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, loss, destruction, malware, and other security threats.

Depending on the information and service, these measures may include:

No method of transmission or storage is completely secure.

If you believe your information or account may have been compromised, contact:

Please do not include sensitive health information in ordinary email.

Where required by applicable law, we will provide legally required notices concerning security incidents or breaches.

The App may use software development kits (SDKs), tokens, local storage, cookies where applicable, and similar technologies for authentication, security, performance, diagnostics, fraud prevention, and App improvement. These technologies may collect limited technical and usage information, such as device information, error logs, crash reports, performance metrics, and general interactions with the App.

We do not use these technologies to track your activity outside the App. Analytics and diagnostic tools are configured not to access wellness check-in content, health records, connected health-source data, or AI-assisted health content.

ZYVO is a consumer health-organization and appointment-preparation service.

ZYVO is not represented by this Privacy Policy as a HIPAA-covered entity or as generally “HIPAA compliant.”

ZYVO does not represent that use of the App is subject to HIPAA or that information processed through the App is protected by HIPAA.

Nothing in this Privacy Policy constitutes a representation or warranty that ZYVO is HIPAA compliant.

ZYVO is designed for adults and is not directed to children.

We do not knowingly collect personal information from children where collection is prohibited without the required authorization.

If we learn that we have collected personal information from a child without required authorization, we will take reasonable steps to delete it unless applicable law requires us to retain it.

If you believe that a child has provided personal information to ZYVO, please contact:

ZYVO requests device and data permissions when needed for the features you choose to use.

Depending on the features available in the App, permissions may include:

You may decline optional permissions. If you decline a permission, the associated feature may not work, but unrelated ZYVO features may remain available.

ZYVO requests health-data permissions only for categories needed for the health features you choose to use. You can change or revoke permissions through your device or connected-service settings.

Where you withdraw consent or revoke a permission, ZYVO stops the affected future processing to the extent required by applicable law and technically practicable. Withdrawal or revocation does not automatically delete information already stored by ZYVO.

Where applicable law requires consent for sensitive personal information, special-category data, health-source access, or third-party processing, we obtain the required consent or other lawful authorization.

We reserve the right to modify this Policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the App. Material changes will be announced via an in-App banner or notification at least 30 days before the new Policy takes effect. Where required by applicable law, we will obtain your consent before applying material changes that affect how we process sensitive personal data. Continued use of the App after changes take effect may constitute acceptance of the revised Policy to the extent permitted by applicable law. This Policy is an integral part of our Terms and Conditions.

In the event of a merger, acquisition, or sale of assets, we may transfer personal data as part of that transaction, subject to appropriate safeguards and applicable law.

Residents of the European Economic Area: Our disclosure is limited to situations where we are permitted to do so under applicable European and national data protection laws and regulations.

For privacy questions, privacy-rights requests, deletion requests, complaints, or other privacy matters, contact:

291 Franklin Avenue, Ste 7

Wyckoff, NJ 07481

United States

Email: support@zyvohealth.com

Please do not include sensitive health information in ordinary email communications.