The Legal Stuff

Privacy Policy

Last updated September 15, 2023

This Privacy Policy governs the privacy terms of the MedSplain mobile app(s) (each a “Licensed Application”) and the MedSplain website located at medsplain.com (“Website”). The Licensed Applications and Website are collectively referred to as the “MedSplain Services.”

1. YOUR PRIVACY

MedSplain’s Website and Licensed Application follow all legal requirements to protect your privacy. Our Privacy Policy is a legal statement that explains how MedSplain may:

  • Collect information from you
  • Share your information
  • How you can limit sharing of your information

You will see terms in our Privacy Policy that are capitalized. These terms have meanings as described in the Definitions section below, as well as in the section they relate to.

2. DEFINITIONS

Cookies: Files with small amounts of data stored on a User’s device

Data: Information in a digital form that can be transmitted or processed

Personal Data: Information that can be used to contact or identify you

Service: Website or Licensed Application

Usage Data: Information collected automatically during the use of Service

User: Individual using MedSplain Services

3. WHAT INFORMATION IS COLLECTED AND HOW CAN I MANAGE IT?

MedSplain collects several different types of information for various purposes to provide and improve Service to you.

  1. Personal Data

What is Personal Data?

Personal Data is information that can be used to contact or identify you. MedSplain may ask you to provide certain personally identifiable information while using the Licensed Application, which may include, but is not limited to: Email address, Name, Address, State, Province, ZIP/Postal code, City, Cookies and Usage Data.

MedSplain may use your Personal Data to contact you with notifications, marketing or promotional materials as well as other information that may be of interest to you. You may opt out of receiving any, or all, of these communications from us by turning off notifications in the Licensed Application or clicking the unsubscribe link provided in any email from MedSplain.

  1. Usage Data

What is Usage Data?

Usage Data is information collected automatically during the use of the Website or Licensed Application (together the “Service”). For example, this can include information from the Service (such as what MedSplanation terms are searched/viewed) or from the Service infrastructure (such as how much time was spent during a page visit).

MedSplain may collect information about how the Website and Licensed Application are accessed and used. This Usage Data may include information such as your computer’s Internet Protocol address (e.g. IP address), browser type, browser version, which pages of the Licensed Application you visit, the time and date of your visit, the time spent on those pages, search history, information you save to MedStash (favorites), unique device identifiers and other diagnostic data.

You can choose whether to save, turn off, and otherwise manage your search history, favorites, and other data for certain features of the Licensed Applications (within the “Data” section). You can clear saved and favorited data by opening the Settings feature on your phone and selecting the Licensed Application from the list.

  1. Tracking & Cookies Data

MedSplain may use Cookies and similar tracking technologies to track the activity on the Licensed Application and hold certain information, including as set out in any cookie policies or related terms for the Licensed Application or Website.

What are Cookies?

Cookies are files with small amounts of data stored on a User’s device, which may include an anonymous unique identifier. Cookies are sent to your browser from a website or to your mobile application and stored on your device to improve your Service experience.

MedSplain may use session Cookies to help the Service operate (such as by recognizing your login information) or preference Cookies to personalize your experience (such as remembering your settings). Tracking technologies may be also used (such as beacons, tags, and scripts) to collect and track information as well as to analyze and improve the Service.

You can instruct your browser and device to refuse all cookies or to notify you when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Website or Licensed Application. To clear your cookies, open the Settings feature on your phone and select the Licensed Application from the list.

4. HOW IS COLLECTED INFORMATION USED?

MedSplain uses the information collected for various purposes related to MedSplain Services (Website and Licensed Application), including (but not limited to):

  • Providing, maintaining, and notifying about changes to MedSplain Services
  • Allowing participation in interactive features when you choose to do so
  • Providing customer support
  • Assisting in continual improvements to MedSplain Services
  • Ability to detect, prevent and address technical issues
  • Delivering notifications, news, special offers and general information about other goods, services and events which you may be interested in unless you have opted not to receive such information

5. HOW LONG IS COLLECTED INFORMATION STORED?

MedSplain will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. MedSplain will also retain and use your Personal Data to the extent necessary to comply with legal obligations (for example, if MedSplain is required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

MedSplain will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen security or to improve the functionality of Service, or when MedSplain is legally required to retain this data for longer time periods.

6. WHERE IS COLLECTED INFORMATION STORED?

Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction.

MedSplain will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy, and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place, including the security of your data and other personal information.

Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

7. WHEN WOULD COLLECTED INFORMATION BE RELEASED?

  1. Business Transaction: If MedSplain is involved in a merger, acquisition or asset sale, your Personal Data may be transferred. MedSplain will provide notice before your Personal Data is transferred and becomes subject to a different Privacy Policy.
  2. Disclosure for Law Enforcement: Under certain circumstances, MedSplain may be required to disclose your Personal Data if required to do so by law or in response to valid requests by public authorities (for example, a court or a government agency).
  3. User Data Request: To fulfil your request for a copy of your data, which is provided only to you.

8. IS THE COLLECTED INFORMATION SECURE?

The security of your data is important! MedSplain will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy. However, it is important to remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While MedSplain strives to use commercially acceptable means to protect your Personal Data, MedSplain cannot guarantee its absolute security.

MedSplain’s legal basis for collecting and using the personal information described in this Privacy Policy depends on the Personal Data MedSplain collects and the specific context in which it is collected.

MedSplain may process your Personal Data because:

  • You have given permission to do so
  • The processing is in MedSplain’s legitimate interests and is not overridden by your rights
  • For payment processing purposes
  • To comply with the law

10. YOUR DATA PROTECTION RIGHTS

Under data protection laws, you have certain data protection rights. MedSplain aims to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data. If you wish to be informed what Personal Data MedSplain hold about you and if you want it to be removed from our systems, please contact us.

You have the following data protection rights:

  • The right to access, update or to delete the information MedSplain has on you
  • The right to have your information rectified (corrected) if that information is inaccurate or incomplete
  • The right to object to MedSplain’s processing of your Personal Data
  • The right to request that MedSplain restricts the processing of your Personal Data
  • The right to be provided with a copy of your Personal Data in a structured, machine-readable and commonly used format
  • The right to withdraw your consent at any time where MedSplain relied on your consent to process your personal information

MedSplain will delete a User account and User Data without undue delay when:

  1. You request your User Data be deleted
  2. You delete your account or no longer have an account (unless the User Data has been obscured, or de-identified so that it cannot be associated with a particular user, browser or device)
  3. When deletion is requested by the platform provider
  4. When deletion is required by applicable law or regulations

“User Data” is any data, information, or content that is about or associated with a person, device, or unique identifier (including anonymized or hashed user IDs) obtained from the platform provider.

You can notify MedSplain to delete your data or submit other requests by contacting us at https://medsplain.com/contact. MedSplain will delete your data, except as required by law. Deleted accounts and their respective information will be made non-identifiable.

Please note that MedSplain may ask you to verify your identity before responding to such requests. You have the right to complain to a Data Protection Authority about the collection and use of your Personal Data.

11. REGION- SPECIFIC PRIVACY TERMS; CALIFORNIA PRIVACY NOTICE.

See the Data Processing Addendum at medsplain.com/dpa for additional terms, including Region-Specific Terms.

“DO NOT SELL MY PERSONAL INFORMATION” NOTICE FOR CALIFORNIA CONSUMERS UNDER CALIFORNIA CONSUMER PRIVACY ACT (CCPA)

Under the CCPA, California consumers have the right to:

  • Request that a business that collects a consumer’s Personal Data disclose the categories and specific pieces of personal data that a business has collected about consumers
  • Request that a business delete any Personal Data about the consumer that a business has collected
  • Request that a business that sells a consumer’s Personal Data, not sell the consumer’s Personal Data
  • If you make a request, MedSplain has 30 days to respond to you. If you would like to exercise any of these rights, please contact us.

12. SERVICE PROVIDERS

MedSplain may employ third party companies and individuals to facilitate our Licensed Application (“Service Providers”), to provide the Licensed Application on our behalf, to perform Licensed Application-related services or to assist us in analyzing how our Licensed Application is used.

These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

13. ANALYTICS

MedSplain may use third-party Service Providers to monitor and analyze the use of our Licensed Application.

14. GOOGLE ANALYTICS

Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Website and Licensed Application. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network.

You can opt-out of having made your activity on the Website available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sharing information with Google Analytics about visits activity.

For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: http://www.google.com/intl/en/policies/privacy/

15. PAYMENTS

MedSplain provides paid products and/or services within the Licensed Application and/or the Website and uses third-party services for payment processing (e.g. payment processors).

MedSplain will not store or collect your payment card details. That information is provided directly to our third-party payment processors whose use of your personal information is governed by their Privacy Policy. These payment processors adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of payment information.

The payment processors MedSplain works with are:

• Apple App Store. Their Privacy Policy can be viewed at https://www.apple.com/legal/privacy/data/en/app-store/

• Google Play. Their Privacy Policy can be viewed at

https://policies.google.com/privacy?hl=en

Our Website and Licensed Applications may contain links to other sites that are not operated by us. If you click on a third-party link, you will be directed to that third party’s site. MedSplain strongly advises you to review the Privacy Policy of every site you visit.

MedSplain have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

17. CHILDREN’S PRIVACY

MedSplain does not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your Children has provided us with Personal Data, please contact us. If MedSplain becomes aware that MedSplain has collected Personal Data from children without verification of parental consent, MedSplain take steps to remove that information from our servers.

18. CHANGES TO THIS PRIVACY POLICY

MedSplain may update our Privacy Policy from time to time. MedSplain will notify you of any changes by posting the new Privacy Policy on this page.

MedSplain will let you know via email and/or a prominent notice on our Website and Licensed Application, prior to the change becoming effective and update the “effective date” at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

19. CONTACT US

If you have any questions or concerns about this Privacy Policy or our practices, please contact us at privacy@medsplain.com.