Consumer Health Data Privacy Policy

01What we mean by consumer health data

“Consumer health data” means personal information that is linked or reasonably linkable to you and that identifies your past, present or future physical or mental health status. In Gia, this includes the answers you give, your voice, and information Gia derives from them.

02Consumer health data we may collect

Depending on how you use Gia, we may collect:

• Your responses to Gia’s questions and checks
• Voice and audio recordings, and information derived from your speech
• Assessment and screening information, including results and status
• Functional information, such as answers about everyday activities
• Derived or inferred health information generated from the above
• Consent and authorization records, including sharing permissions
• Account and contact information, such as your mobile number
• Technical interaction information linked to your Gia experience

03Sources of consumer health data

We collect consumer health data directly from you, from the device and connection you use to reach Gia, and from the checks you complete. We generate derived information when we process your responses and recordings. Where you or someone you authorize shares information with Gia, that is also a source.

04Why we collect and use consumer health data

We use consumer health data to:

• Provide Gia and administer your checks
• Generate and show your results
• Support sharing you request, such as with a caregiver or clinician
• Maintain your account, consents and authorizations
• Secure the product and prevent misuse
• Comply with law and respond to lawful requests
• Operate, maintain and support the service

05Consumer health data we share

We share consumer health data only as needed to provide Gia, when you ask us to, or when the law requires it. We may share the categories listed in section 2 with the recipient categories in section 6. We do not share consumer health data for any recipient’s own marketing.

06Categories of recipients

We work with service providers that act on our instructions. They are described here by what they do for Gia:

• Cloud hosting and infrastructure
• Communications and telephony
• Email delivery
• Speech and audio processing
• Analytical processing
• Authentication and security
• Monitoring and technical operations
• Recipients you choose, such as a caregiver or clinician you authorize
• Authorities or other parties when required by law

07Sale of consumer health data

Scienza does not sell consumer health data.

We do not sell consumer health data.

08Targeted advertising

Scienza does not use or share consumer health data for targeted advertising.

We do not use or share consumer health data for targeted advertising.

09Third-party collection across websites or online services

We do not permit third parties to collect consumer health data from Gia to track you across other websites or online services.

10Consumer choices and rights

Depending on where you live, you may have the right to:

11How to exercise your rights

Email privacy@scienzahealth.com, or write to the address in section 21. We may need to verify that a request comes from you or someone authorized to act for you. We will respond within the time the law allows. You may appeal a decision by replying to our response.

12Deletion requests

When you ask us to delete your consumer health data, we delete it from our records and instruct our service providers to do the same, subject to any legal duty to retain information. Some information may remain in backups for a limited period before it is removed.

13Withdrawing consent

You can withdraw consent for collection or sharing at any time by contacting us. Withdrawing consent does not affect processing that already happened, and it may mean Gia can no longer provide some or all of the service.

14Caregiver and clinician sharing

Sharing with a caregiver or clinician happens only with your permission, and you can revoke it. Revoking permission stops future access. It cannot retract information a recipient has already viewed.

15Security

We use administrative, technical and physical safeguards designed to protect consumer health data, and we limit access to people who need it to do their work. No system is perfectly secure, so we cannot guarantee absolute security.

16Geofencing

We do not use geofencing around facilities that provide in-person health care services to identify, track, collect data from, or send notifications to consumers.

17Data retention

We keep consumer health data for as long as needed to provide Gia, meet legal obligations, resolve disputes and enforce our agreements, and then delete or de-identify it.

18Children

Gia is not directed to children, and we do not knowingly collect consumer health data from children. If you believe a child has provided consumer health data to Gia, contact us and we will delete it.

19HIPAA

Consumer health data collected by Gia is not automatically the same as protected health information regulated under HIPAA. Where a HIPAA Notice of Privacy Practices is legally required, that notice applies, and this policy does not replace it.

20Changes to this policy

We may update this policy. When we do, we will change the effective date at the top of this page. If a change would collect, use or share new categories of consumer health data, or use existing data for new purposes, we will tell you and ask for your consent first where the law requires it.

21Contact us

For privacy questions or to exercise your rights: