Privacy Policy | Theraday

Theraday Privacy Policy

Updated: January 2025

At Theraday, we believe in empowering every individual to take control of their health journey. We understand that privacy is a fundamental part of this empowerment, which is why protecting your Personal Information is one of our top priorities. We invite you to read our full Privacy Policy to gain a comprehensive understanding of our practices, but here are the key principles that guide our approach:

1. Your Information is Not for Sale
We firmly believe that your identity and personal data are not commodities. We do not sell your Personal Information to third parties for financial gain.

2. Minimal Data Collection and Retention
We collect only the Personal Information necessary to provide you with our products and Services. We keep this information only for as long as required to fulfill our commitments to you, protect our members' interests, and comply with legal obligations.

3. Controlled Sharing of Test Results
To deliver our products and Services effectively, we may need to share certain information with our trusted Lab and Provider Partners. Rest assured, we only do this when these partners agree to strict limitations on the use of your personal information.

4. Transparency and Control
We strive to be transparent about our privacy practices and empower you to have control over certain aspects of your Personal Information.

We encourage you to review our complete Privacy Policy for a more detailed explanation of how we handle your data. At Theraday, we're committed to supporting your health journey while respecting and protecting your privacy every step of the way.

1. Personal Data We Collect
We collect personal data related to you (“Personal Data”) in the following ways:

Personal Data You Provide: We collect Personal Data when you create an account to use our Services or communicate with us, including:

• Account Information: When you create an account, we collect information associated with it, such as your name, contact details, account credentials, date of birth, payment information, and transaction history (collectively, “Account Information”).

• User Content: We collect Personal Data you provide through our Services, including prompts, uploaded files, images, audio, and other content depending on the features you use.

• Communication Information: If you communicate with us via email, social media, or other channels, we may collect your name, contact details, and the contents of your messages (“Communication Information”).

• Other Information You Provide: We collect additional information you provide, such as when participating in events, surveys, or providing identity or age verification details (collectively, “Other Information You Provide”).

Personal Data We Receive from Your Use of the Services: When you visit, use, or interact with our Services, we collect the following information (“Technical Information”):

• Log Data: Information automatically sent by your browser or device, including your IP address, browser type, settings, date and time of your request, and how you interact with our Services.

• Usage Data: Details about your use of the Services, such as the content you view, features you use, actions you take, time zone, country, access times, user agent, device type, and connection details.

• Device Information: Information about the device you use, including its name, operating system, device identifiers, and browser type.

• Location Information: We may determine your general location based on your IP address for security and product improvement purposes. Some Services allow you to provide precise location data, such as GPS information.

• Cookies and Similar Technologies: We use cookies and similar technologies to operate and improve our Services. For more details, please review our Cookie Notice.

Information We Receive from Other Sources: We may receive information from trusted partners, such as security vendors, to protect against fraud, abuse, and other threats. We also collect publicly available information to develop the models powering our Services.

2. How We Use Personal Data
We may use Personal Data for the following purposes:

• To provide, analyze, and maintain our Services, including responding to your inquiries.

• To improve and develop our Services, conduct research, and develop new features.

• To communicate with you, including sending information about our Services and updates.

• To prevent fraud, illegal activity, or misuse of our Services and protect the security of our systems.

• To comply with legal obligations and protect the rights, privacy, safety, or property of our users, Theraday, or third parties.

We may aggregate or de-identify Personal Data to analyze usage, improve features, and conduct research. De-identified data will not be reidentified unless required by law. We may use Content you provide to improve our Services, such as training the models powering THERA. You can opt out of this use as described in our instructions.

3. Disclosure of Personal Data
We may disclose your Personal Data in the following circumstances:

• Vendors and Service Providers: To assist with business operations, we may share Personal Data with vendors providing hosting, customer service, cloud services, analytics, payment processing, and other IT services.

• Business Transfers: In the event of a transaction (e.g., reorganization, bankruptcy), your Personal Data may be disclosed to counterparties and transferred as part of the transaction.

• Government Authorities or Third Parties: We may share Personal Data to comply with legal obligations, protect rights, prevent fraud, or ensure safety and security.

• Affiliates: We may share Personal Data with entities under common control with Theraday, who will use it in accordance with this Privacy Policy.

• Business Account Administrators: If you join a THERA Enterprise or business account, administrators may access your account and Content.

• Other Users and Third Parties: Certain features allow you to share information with other users or third parties, governed by their own terms and policies.

4. Retention
We retain Personal Data only as long as necessary to provide our Services or for legitimate business purposes, such as resolving disputes, ensuring security, or complying with legal obligations. Retention periods depend on factors like the purpose of processing, the nature of the data, potential risks, and legal requirements. For example, Theraday temporary chats are retained for up to 30 days for safety purposes.

5. Your Rights
Depending on your location, you may have certain rights regarding your Personal Data, including:

• Accessing, updating, or correcting your Personal Data.
• Deleting or transferring your Personal Data.
• Restricting or objecting to how we process your Personal Data.
• Withdrawing consent where applicable.
• Lodging a complaint with your local data protection authority.

You can exercise your rights through your Theraday account or by contacting us directly.

Note on Accuracy: THERA generates responses based on predictive models, which may not always be factually accurate. Do not rely on the factual accuracy of outputs. If you find inaccurate information about you, you may request correction or removal. Theraday processes Personal Data on servers in various jurisdictions, including the United States, and applies the protections described in this policy regardless of location.

6. Children
Our Services are not intended for children under 13. We do not knowingly collect Personal Data from children under 13. If you believe a child has provided Personal Data, please contact us. Users under 18 must have parental or guardian permission to use our Services.

7. Security
We implement reasonable measures to protect Personal Data from loss, misuse, and unauthorized access. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

8. Additional U.S. State Disclosures
Some U.S. state laws require specific disclosures. Below is a summary of the categories of Personal Data we collect and how we use and disclose it:

Categories of Personal Data:

• Identifiers (e.g., name, IP address, device identifiers).
• Commercial information (e.g., transaction history).
• Network activity information (e.g., Content, interactions with Services).
• Communication information (e.g., contact details).
• Geolocation data (e.g., IP-based location or GPS data).
• Account credentials and payment information.

Use of Personal Data:

• Providing, analyzing, and maintaining Services.
• Improving and developing Services.
• Communicating with you.
• Preventing fraud and ensuring security.
• Complying with legal obligations.

Disclosure of Personal Data:

• Vendors, service providers, and affiliates.
• Government authorities or third parties for legal reasons.
• Parties involved in transactions.
• Business account administrators.
• Other users or third parties you interact with.

Exercising Your Rights: Submit requests through your Theraday account or contact us directly. Verification may be required to protect your data.

Authorized Agents: You may use an authorized agent to submit requests, provided they have written permission and you verify your identity.

Appeals: Depending on your location, you may have the right to appeal decisions regarding your rights.

9. Changes to the Privacy Policy
We may update this Privacy Policy periodically. Updates will be posted on this page with the effective date, unless otherwise required by law.