Privacy Policy - WeCare Apps | Mega Lifesciences PCL

Privacy of your data is very important to us at Mega Lifesciences PCL; it is your data, not ours! This privacy policy applies to all our applications including WeCare OneHealth, WeCare Diabetes, WeCare Mother & Child, and WeCare Wellness. Some sections apply only to certain apps; where that is the case, we say so. In this document, we describe what data we collect and why, how your data is handled, and your rights to your data. We never sell your data, and we never use your health data for advertising or marketing.

What do we collect and why?

Identity & access

Depending on the app, you can sign up with your email address (using a one-time code), your Apple account, your Google account, or your phone number.

When you sign up for a WeCare product, we ask for identifying information such as your name, age (date of birth), gender, email address, and phone number (in apps that use phone sign-in). These are the minimum information we collect to start using our application. Name, Age, and Gender are the basic requirements to correctly identify a person by the services and providers.

If you sign in with Apple or Google, we receive your name, email address and an account identifier from them. We never receive your Apple or Google password. If you choose "Hide My Email" with Apple, we receive a private relay email address from Apple instead of your real one.

You can optionally expand your profile and health profile to build your profile. We do not use your name or information in marketing statements without your permission. We collect additional information during the onboarding process of our apps to serve you better based on the nature of the application (such as diabetes type on WeCare Diabetes, or your health programs and height on WeCare OneHealth).

Our app use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the Limited Use requirements. The apps distributed on Google Play are also subject to the Google Play Developer Distribution Agreement.

Health and wellness data you enter

Depending on the app and the health programs you choose, you may enter health and wellness information, such as:

Weight and height (used to calculate BMI)
Blood pressure
Blood glucose readings with meal timing, and HbA1c
Mood
Sleep and physical activity
Period, fertility and pregnancy information (Women's Health)
Medications, reminders, and whether doses were taken or missed
Health to-dos and goals

We use this information only to show your history, trends, insights and reminders, and to run the features you choose. Health information is sensitive, and we collect it only with your consent.

Journal and documents

You can add journal entries as text, photos, audio or video, and upload health documents. This content stays private to your account. If you store documents for someone else (such as a child, parent or other dependent), you confirm that you have their permission or the legal authority to do so, and we process that information on your instruction.

Device and app information

We collect basic information about your device and the app, such as device type, operating system, app version, a notification token (to send you reminders) and crash reports, so the app works properly and we can fix problems.

Billing information

Some WeCare apps offer paid services (WeCare OneHealth currently does not). When you pay for a WeCare product, we ask for credit card or banking information. This is passed to our payment processors directly. We do not store your credit card information on our servers. We may store records of the payment transaction, including the last four digits of the credit card and as-of-billing address, for account history, invoicing, and billing support. We store your address to calculate taxes, detect fraudulent credit card transactions, and print your invoices. We may request your bank information to refund any payments you made for WeCare services.

Access logs (IP address)

We log all the account access with your IP address for auditing purposes and to detect any unauthorized access. This data is kept as long as your product account is active.

Physical Address

In apps that work with healthcare providers, we may request your address if you are a provider to enable transparency and trust in your services. We do not collect physical address information of a patient unless it is required to contact you or the address is required in such instances.

App and website interactions

We use Mixpanel to collect analytics data so we can understand how features are used and improve them. This is done by respecting your privacy: we do not collect your name, email address or phone number in analytics, and analytics data is linked to an account identifier instead. We never send health values (such as weight, blood pressure, glucose, mood or cycle data) or journal content to analytics. Analytics data may include coarse location.

Health Data Platform Integrations

When you choose to connect Google Health Connect or Apple Health with our WeCare applications, we may read and write the health and wellness data you approve, to enhance your experience and provide personalized health insights.

WeCare OneHealth may read and write the following data:

Weight and height
Blood pressure
Blood glucose
Sleep sessions
Physical activity and exercise (such as steps and workouts)

You will be asked to explicitly approve each data type before we read or write it. You maintain full control over what information is shared and can modify or revoke these permissions at any time through your device's health app settings. If you remove a permission, we stop reading and writing that data. Data already synced stays in your account until you delete it.

We use this data solely to provide personalized health insights, track your progress, and enhance the functionality of our WeCare applications. We do not use data from Apple Health or Health Connect for advertising, marketing or data mining, we do not sell it, and we do not share it with third parties except the service providers who help us run the app. This health data is subject to the same security and privacy protections outlined in this policy.

The use of information received from Health Connect will adhere to the Health Connect Permissions Policy, including the Limited Use requirements.

Recommendations

We have deployed services to provide recommendations and insights from your data. These are done using algorithms that run on your data, and no human intervention is allowed. We may track the effectiveness of these recommendations to improve the services using analytics information. We do not personally identify or look into your data. Insights are for general information and are not medical advice.

Age

You must be at least 18 years old to use our apps. We do not knowingly collect personal data from children under 18, except health documents that a parent or guardian stores for them.

When do we share your information?

In WeCare apps that offer doctors, health coaches or healthcare institutions (WeCare OneHealth currently does not), the professionals working with you need your information to provide better care.

When you interact with a doctor, a health coach, or a healthcare institution, they can see your profile, daily activity tracking, chats, clinical documents, and historical data. This is required to offer better care and support.
Your payment information will be visible to the provider that offers you the service.
Your health or profile information is not shared with any other people who interact on the platform.
When you raise a support request, your email and app information will be shared to assist you better. You may edit/delete automatically collected data before you send them.
Our support or technical team would be able to look into your information with your approval and request. Our default option is not to access user information and help you troubleshoot with guides and assistance.
We use trusted service providers to run our apps. They only receive the data they need to provide their service, and they are required to protect it:
- Hosting and database: Amazon Web Services
- Sending messages and one-time codes: Twilio
- Analytics: Mixpanel (no health values)
- Sign-in: Apple and Google
- Notifications and crash reports: notification and crash-reporting services
If required by law, we may share data with authorities in the countries we operate in.

How we secure your data

All data is encrypted via SSL/TLS when transmitted between your device and our servers. Databases and other data backups are also encrypted. Data you enter while offline is stored on your phone until it syncs. We design our systems following recognised security and privacy practices.

How long do we keep your data?

We keep your data while your account is active.
Access logs (IP address) are kept while your account is active.
When you delete your account, we follow the steps in the next section.

What happens when you delete your account?

You can delete your account in the app (Settings), or by emailing [email protected]. After you ask us to delete your account, your data is no longer accessible, and you have 90 days to restore your account. After that, your data is permanently deleted from our database, storage and logs, and it can't be recovered. Our backups may contain your data, which will be cleaned up in 90 days.

When a user profile is deleted through our backend system by an admin, care provider, or surrogate, the data will be kept in our systems for 90 days before deletion.

Data you have already shared to other apps, such as Apple Health or Health Connect, stays in those apps; you can delete it there. You may request [email protected] to download your data before you delete your account.

Your rights

You can:

See the data we hold about you
Correct data that is wrong
Download a copy of your data
Delete your account and data
Withdraw your consent at any time, including removing health app permissions in your phone's settings
Complain to the data protection authority in your country

To use these rights, write to [email protected].

Location of site and data

Your data is stored on secure cloud servers provided by Amazon Web Services. Your data may be stored and processed outside your country. By using the sites/apps or participating with this information, you consent to this transfer. It may get cached to your nearby region to offer a better user experience and performance.

Changes to this policy

When we make important changes to this policy, we will tell you in the app or by email before they take effect. The "Last updated" date at the top shows when it last changed.

Have questions, including about your data protection rights? Write to us at [email protected]. We are happy to assist you.

This privacy policy is provided by Mega Lifesciences PCL, the developer of WeCare OneHealth, WeCare Diabetes, WeCare Mother & Child, and WeCare Wellness applications. Read our Terms of Service.