Effective Date: April 9, 2025
This Privacy Notice describes how Alithos Health, Inc. ("we", "us", "our") collects, uses and discloses information about you when you use our website https://alithos.health/, applications, services, tools and features, or otherwise interact with us (collectively, the "Services"). For the purposes of this Privacy Notice, "you" and "your" means you as the user of the Services whether you are a patient, healthcare provider, administrator, application user, website visitor, representative of a company with whom we do business, or another individual whose data we have collected pursuant to this Privacy Notice. For the purpose of applicable data protection laws, we are the data controller.
Please read this Privacy Notice carefully to understand our policies and practices for processing and storing your personal data. By using any of the Services, you accept and consent to the collection, use, and disclosure of your information as described in this Privacy Notice. If you do not understand or agree to this Privacy Notice, please do not use or access the Services.
We may modify this Privacy Notice from time to time, in which case we will update the "Effective Date" at the top of this Privacy Notice. If we make material changes to how we use or disclose information we collect, we will use reasonable efforts to notify you (such as by emailing you at the last email address you provided us, by posting notice of such changes on the Services or by other means consistent with applicable law) and will take additional steps as required by applicable law. If you do not agree to any updates to this Privacy Notice, please do not continue using or accessing the Services.
When you use or access the Services, we collect certain categories of information about you from a variety of sources. In addition to the specific uses discussed below, we may use this information to provide, personalize and improve the Services and to maintain our business relationship, as a matter of our legitimate interests, including by enhancing the safety and security of our Services, providing customer support and troubleshooting, data analysis, research, complying with applicable legal obligations, enforcing any applicable terms of service, and protecting our rights and the rights of our employees, users or other individuals.
We and/or external researchers may use your information for research purposes, including to develop research projects or identify individuals who may potentially qualify to participate in research studies. We may obtain your consent or a HIPAA Authorization to use your "protected health information" or "PHI" for research purposes or may use such information once an institutional review board or privacy board has reviewed the research proposal and determined that your specific authorization or consent for the research use of your PHI is not needed in whole or in part.
Some features of the Services require you to directly provide certain information about yourself. You may elect not to provide this information, but doing so may prevent you from using or accessing these features. Information that you directly submit through our Services includes:
We may obtain information about you from outside sources, including information that we collect directly from third parties and information from third parties that you choose to share with us. Such information includes:
Any information we receive from outside sources will be treated in accordance with this Privacy Notice. We are not responsible for the accuracy of the information provided to us by third parties and are not responsible for any third party's policies or practices. For more information, see the section below, Third-Party Websites and Links.
We and third parties may also use cookies, pixels or other tracking technologies to automatically collect certain information about your interactions with the Services. This information is collected for example, to personalize the Services for you, and to target, deliver and measure interest-based advertising or to tailor your experience with the Services, provide you with offers or promotions, run analytics, better understand user interactions with the Services, etc. Such information includes:
Most browsers accept cookies automatically, but you may be able to control the way in which your devices permit the use of cookies. If you so choose, you may block or delete certain of our cookies from your browser; however, blocking or deleting cookies may cause some of the Services, including any portal features and general functionality, to work incorrectly. You may also opt-out of the collection and use of information for interest-based advertising by advertisers that are part of certain industry alliances, including through tools offered by the National Advertising Initiative, the Digital Advertising Alliance or the European Interactive Digital Advertising Alliance, by clicking the links provided. Your browser settings may also allow you to transmit a “Do Not Track” signal when you visit various websites. Like many websites, our website is not designed to respond to “Do Not Track” signals received from browsers.
In addition to the specific uses described above, we may use any of the above information as needed in complying with applicable legal obligations, enforcing any applicable terms of service, and protecting the Services, our rights, and the rights of our employees, users or other individuals.
In our legitimate interest (or with your consent, where required by applicable law), we may de-identify or anonymize your information such that it cannot reasonably be used to infer information about you or otherwise be linked to you (or we may collect information that has already been de-identified/anonymized), and we may use such de-identified/anonymized information for any purpose, in accordance with applicable law.
We may disclose your information subject to this Privacy Notice in our legitimate interest, to provide our services to you and, where required by applicable law, with your consent, including the following categories of third parties:
We may also disclose your information as needed to comply with applicable law or any obligations thereunder or to cooperate with law enforcement, judicial orders, and regulatory inquiries, to enforce any applicable terms of service, and to ensure the safety and security of our business, employees, and users.
We may provide links to third-party websites or platforms. If you follow links to sites or platforms that we do not control and are not affiliated with us, you should review the applicable privacy notice, policies and other terms. We are not responsible for the privacy or security of, or information found on, these sites or platforms. Information you provide on public or semi-public venues, such as third-party social networking platforms, may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators.
Our Services are not intended for children, and we do not seek or knowingly collect any personal information about children. If we become aware that we have unknowingly collected information about a child, in particular any child under 16 years of age or the age of majority in the relevant jurisdiction, we will make commercially reasonable efforts to delete such information from our database. If you are the parent or guardian of a child under 16 years of age who has provided us with their personal information, you may contact us using the below information to request that it be deleted.
Despite our reasonable efforts to protect your information, no security measures are impenetrable, and we cannot guarantee "perfect security." Any information you send to us electronically, while using the Services or otherwise interacting with us, may not be secure while in transit. We recommend that you do not use unsecure channels to send us sensitive or confidential information.
We retain your information for as long as is reasonably necessary for the purposes specified in this Privacy Notice. When determining the length of time to retain your information, we consider various criteria, including whether we need the information to continue to provide you the Services, resolve a dispute, enforce our contractual agreements, prevent harm, promote safety, security and integrity, or protect ourselves, including our rights, property or products.
We are based in the United States. If you are using the Services from outside the United States, please be aware that the information we collect from you may be transferred to, stored and processed in the United States or other countries outside your country of residence.
To the extent your information is subject to the GDPR, and we transfer such information outside the European Economic Area and/or United Kingdom, we will ensure that an appropriate transfer mechanism is in place such as the European Commission's standard contractual clauses for the transfer of personal data to third countries, or the UK Information Commissioner's international data transfer addendum to the EU standard contractual clauses, as relevant, unless the data transfer is to a country that has been determined by the European Commission or the relevant UK authorities, as applicable, to provide an adequate level of protection for individuals' rights and freedoms for their personal data. Please contact us at the details set out in Section 9 (How to Contact Us) below if you require more information.
Depending on where you live and applicable privacy law, you may have certain rights in relation to your personal information. Please note that a number of these rights only apply in certain circumstances, and these rights may be limited by law.
To exercise any of these rights, please contact us at the email address listed below in Section 9 (How to Contact Us).
You may also have the right to complain to the data protection authority in the country in which you live or work or where you think we have infringed data protection laws, about how we process your personal data. Of course, we hope you will contact us first so we can resolve any issues.
Should you have any questions about our privacy practices or this Privacy Notice, please email us at support@alithos.health.
Effective Date: April 9, 2025
This Consumer Health Data Privacy Policy ("Policy") supplements the Alithos Health Privacy Notice. It applies solely to personal information defined as "Consumer Health Data" subject to the Washington State My Health My Data Act ("MHMDA"), the Nevada Health Data Privacy Act ("NHDPA"), or other applicable state consumer health privacy laws.
This Notice describes what Consumer Health Data we collect, how we collect and use it, who we disclose it to and why, and the choices you may have regarding our use or disclosure of your Consumer Health Data. This Notice only applies to Consumer Health Data (which is a subset of personal information) that identifies your past, present, or future physical or mental health status. Examples of Consumer Health Data are provided below.
This Notice does not apply to any personal information other than Consumer Health Data subject to the applicable state consumer health privacy laws. Consumer Health Data does not include publicly available information, protected health information subject to HIPAA, or personal information that has been de-identified. To the extent we process de-identified information, we will maintain and use the information in de-identified form and will not attempt to re-identify the information unless permitted by applicable law.
We may collect or receive the categories of Consumer Health Data listed below. Not all categories will be collected or received for every individual.
We obtain Consumer Health Data from you and as directed by you (e.g., through an application made available by you), as described in the COLLECTION AND USE OF INFORMATION section of the Privacy Notice.
We collect and use Consumer Health Data for the purposes described in our Privacy Notice, such as to provide you with our Services (as defined in our Privacy Notice), communicate with you, and to respond to your inquiries.
We may also use this information to enhance the safety and security of our Services, comply with applicable legal obligations, and for other purposes with your consent.
We and/or external researchers may access your Consumer Health Data for research purposes, including to develop research projects. We may otherwise use your Consumer Health Data for research when it is de-identified, or once an institutional review board or privacy board has reviewed the research proposal and determined that your consent for the research use of your Consumer Health Data is not needed in whole or in part.
We share each of the categories of Consumer Health Data described above. In particular, we share your Consumer Health Data as described in the DISCLOSURE OF YOUR INFORMATION section of the Privacy Notice. For example, we may share Consumer Health Data with vendors, your health care providers, trial sponsors, or other service providers who help us provide the services, or with third parties in connection with or anticipation of an asset sale, merger, or other business transaction.
Third parties may not collect consumer health data over time and across different Internet websites or online services when the consumer uses any Internet website or online service of ours.
If you are covered by the MHMDA, the NHDPA, or other applicable consumer health privacy laws, then you may have certain rights with respect to Consumer Health Data, including the right to (1) request access to your Consumer Health Data; (2) confirm whether we have disclosed or sold your Consumer Health Data; (3) delete your Consumer Health Data; (4) withdraw your consent or authorization relating to such data, subject to certain exceptions.
To ensure the security of your account and your data, we will need to authenticate your request using the contact information you have already provided. Please allow up to 45 days for a response. If we deny your request, you may appeal that denial by following the instructions below. If your appeal is unsuccessful, you can file a complaint with the relevant government body in your state, including:
To submit a request to exercise your rights, and as applicable, to appeal a consumer rights action, please contact us using the information provided below.
We'll notify you before we make material changes to this Policy. You'll have the opportunity to review the revised Policy before you choose to continue using our Services.
If you have additional questions about this Policy, please contact us at: