Privacy Notice

This Privacy Notice describes how Soundtrip LLC ("we", "us", "our") collects, uses and discloses information about you when you use our website https://soundtrip.health/, applications, services, tools and features, or otherwise interact with us (collectively, the "Services"). For the purposes of this Privacy Notice, "you" and "your" means you as the user of the Services or another individual whose data we have collected pursuant to this Privacy Notice. For the purpose of applicable data protection laws, we are the data controller.

Please read this Privacy Notice carefully to understand our policies and practices for processing and storing your personal data. By using any of the Services, you accept and consent to the collection, use, and disclosure of your information as described in this Privacy Notice. If you do not understand or agree to this Privacy Notice, please do not use or access the Services.

1. Changes to This Privacy Notice

We may modify this Privacy Notice from time to time, in which case we will update the "Effective Date" at the top of this Privacy Notice. If we make material changes to how we use or disclose information we collect, we will use reasonable efforts to notify you (such as by emailing you at the last email address you provided us, by posting notice of such changes on the Services or by other means consistent with applicable law) and will take additional steps as required by applicable law. If you do not agree to any updates to this Privacy Notice, please do not continue using or accessing the Services.

2. Collection and Use of Information

When you use or access the Services, we collect certain categories of information about you from a variety of sources. In addition to the specific uses discussed below, we may use this information to provide, personalize and improve the Services and to maintain our business relationship, as a matter of our legitimate interests, including by enhancing the safety and security of our Services, providing customer support and troubleshooting, data analysis, research, complying with applicable legal obligations, enforcing any applicable terms of service, and protecting our rights and the rights of our employees, users or other individuals.

We and/or external researchers may use your information for research purposes, including to develop research projects or identify individuals who may potentially qualify to participate in research studies. We may obtain your consent or a HIPAA Authorization to use your "protected health information" or "PHI" for research purposes or may use such information once an institutional review board or privacy board has reviewed the research proposal and determined that your specific authorization or consent for the research use of your PHI is not needed in whole or in part.

Information You Provide to Us

Some features of the Services require you to directly provide certain information about yourself. You may elect not to provide this information, but doing so may prevent you from using or accessing these features. Information that you directly submit through our Services includes:

• Basic contact details, such as name, address, phone number and email. We use this information to create and maintain your account and provide the Services, as required to perform our contract with you, and because it is in our legitimate interest to communicate with you (including to tell you about products or services that may be of interest to you, to the extent you have consented to receiving marketing communications from us).
• Account information, such as username and password. We use this information to provide the Services, as required to perform our contract with you, and because it is in our legitimate interest to maintain and secure your account with us. If you choose to register an account, you are responsible for keeping your account credentials safe. We recommend you do not share your access details with anyone else. If you believe your account has been compromised, please contact us immediately.
• Any other information you choose to include in communications with us, for example, when sending a message through the Services, because it is in our legitimate interest to be responsive to you.

Information Collected From Other Sources

We may obtain information about you from outside sources, including information that we collect directly from third parties and information from third parties that you choose to share with us. Such information includes:

• Analytics data we receive from analytics providers such as Amplitude Analytics, which we use to improve our website, communications and the Services.
• Information we receive when you choose to link any platforms to your account, such as Google, which we use to maintain your account and login information.

Any information we receive from outside sources will be treated in accordance with this Privacy Notice. We are not responsible for the accuracy of the information provided to us by third parties and are not responsible for any third party's policies or practices. For more information, see the section below, Third-Party Websites and Links.

Information Collected Automatically

We and third parties may also use cookies, pixels or other tracking technologies to automatically collect certain information about your interactions with the Services. This information is collected for example, to personalize the Services for you, and to target, deliver and measure interest-based advertising or to tailor your experience with the Services, provide you with offers or promotions, run analytics, better understand user interactions with the Services, etc. Such information includes:

• Device information, such as device type, operating system, unique device identifier, and internet protocol (IP) address.
• Location information, such as approximate location / precise geolocation, if you choose to provide it.
• Other information regarding your interaction with the Services, such as browser type, log data, date and time stamps, clickstream data, interactions with marketing emails, and ad impressions.

Most browsers accept cookies automatically, but you may be able to control the way in which your devices permit the use of cookies. If you so choose, you may block or delete certain of our cookies from your browser; however, blocking or deleting cookies may cause some of the Services, including any portal features and general functionality, to work incorrectly. You may also opt-out of the collection and use of information for interest-based advertising by advertisers that are part of certain industry alliances, including through tools offered by the National Advertising Initiative, the Digital Advertising Alliance or the European Interactive Digital Advertising Alliance, by clicking the links provided. Your browser settings may also allow you to transmit a "Do Not Track" signal when you visit various websites. Like many websites, our website is not designed to respond to "Do Not Track" signals received from browsers.

In addition to the specific uses described above, we may use any of the above information as needed in complying with applicable legal obligations, enforcing any applicable terms of service, and protecting the Services, our rights, and the rights of our employees, users or other individuals.

De-identified Information

In our legitimate interest (or with your consent, where required by applicable law), we may de-identify or anonymize your information such that it cannot reasonably be used to infer information about you or otherwise be linked to you (or we may collect information that has already been de-identified/anonymized), and we may use such de-identified/anonymized information for any purpose, in accordance with applicable law.

3. Disclosure of Your Information

We may disclose your information subject to this Privacy Notice in our legitimate interest, to provide our services to you and, where required by applicable law, with your consent, including the following categories of third parties:

• Our affiliates or others within our corporate group.
• Vendors or other service providers who help us provide the Services, including for system administration, cloud storage, security, customer relationship management, marketing communications, web analytics, payment networks, and payment processing.
• Third parties to whom you request or direct us to disclose information, such as your healthcare provider.
• Professional advisors, such as auditors, law firms, or accounting firms, as a matter of our legitimate interests to assess, protect, enforce and defend our rights and to comply with our legal and regulatory obligations.
• Third parties in connection with or anticipation of an asset sale, merger, bankruptcy, or other business transaction.

We may also disclose your information as needed to comply with applicable law or any obligations thereunder or to cooperate with law enforcement, judicial orders, and regulatory inquiries, to enforce any applicable terms of service, and to ensure the safety and security of our business, employees, and users.

4. Third-Party Websites and Links

We may provide links to third-party websites or platforms. If you follow links to sites or platforms that we do not control and are not affiliated with us, you should review the applicable privacy notice, policies and other terms. We are not responsible for the privacy or security of, or information found on, these sites or platforms. Information you provide on public or semi-public venues, such as third-party social networking platforms, may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators.

5. Children's Privacy

Our Services are not intended for children, and we do not seek or knowingly collect any personal information about children. If we become aware that we have unknowingly collected information about a child, in particular any child under 16 years of age or the age of majority in the relevant jurisdiction, we will make commercially reasonable efforts to delete such information from our database. If you are the parent or guardian of a child under 16 years of age who has provided us with their personal information, you may contact us using the below information to request that it be deleted.

6. Data Security and Retention

Despite our reasonable efforts to protect your information, no security measures are impenetrable, and we cannot guarantee "perfect security." Any information you send to us electronically, while using the Services or otherwise interacting with us, may not be secure while in transit. We recommend that you do not use unsecure channels to send us sensitive or confidential information.

We retain your information for as long as is reasonably necessary for the purposes specified in this Privacy Notice. When determining the length of time to retain your information, we consider various criteria, including whether we need the information to continue to provide you the Services, resolve a dispute, enforce our contractual agreements, prevent harm, promote safety, security and integrity, or protect ourselves, including our rights, property or products.

7. Data Transfers

We are based in the United States. If you are using the Services from outside the United States, please be aware that the information we collect from you may be transferred to, stored and processed in the United States or other countries outside your country of residence.

To the extent your information is subject to the GDPR, and we transfer such information outside the European Economic Area and/or United Kingdom, we will ensure that an appropriate transfer mechanism is in place such as the European Commission's standard contractual clauses for the transfer of personal data to third countries, or the UK Information Commissioner's international data transfer addendum to the EU standard contractual clauses, as relevant, unless the data transfer is to a country that has been determined by the European Commission or the relevant UK authorities, as applicable, to provide an adequate level of protection for individuals' rights and freedoms for their personal data. Please contact us at the details set out in Section 9 (How to Contact Us) below if you require more information.

8. Privacy Rights

Depending on where you live and applicable privacy law, you may have certain rights in relation to your personal information. Please note that a number of these rights only apply in certain circumstances, and these rights may be limited by law.

• Access / Know: You may have the right to request access to the personal information we hold about you, and to obtain information about how we use it, and with whom we share or have shared it in the past.
• Deletion / Erasure: You may have the right to request that we delete personal information we hold about you.
• Correction: You may have the right to correct inaccurate personal information we hold about you.
• Portability: You may have the right to receive a copy of the personal information we hold about you and to request that we transfer it to a third party.
• Restriction of Processing: You may have the right to require us to stop, suspend or restrict our processing of personal information we hold about you.
• Objection: You may have the right to object to our processing of your personal information.
• Opt-Out of Marketing: You may opt out of marketing at any time by using the unsubscribe / opt-out function displayed in our communications to you. Please note that if you opt out, we may still send you transactional or administrative messages, such as emails about your account.
• Withdrawal of Consent: Where we rely on consent to process your personal information, you may have the right to withdraw this consent at any time.

To exercise any of these rights, please contact us at the email address listed below in Section 9 (How to Contact Us).

You may also have the right to complain to the data protection authority in the country in which you live or work or where you think we have infringed data protection laws, about how we process your personal data. Of course, we hope you will contact us first so we can resolve any issues.

9. How to Contact Us

Should you have any questions about our privacy practices or this Privacy Notice, please email us at [email protected].

Material Changes to this Policy

We'll notify you before we make material changes to this Policy. You'll have the opportunity to review the revised Policy before you choose to continue using our Services.

Contact for More Information