Overview

This privacy statement outlines our practices for collecting, using, and sharing information when you use the HeartFlow App (the “Service”). It also explains your privacy rights and protections. We use your personal data to provide and improve the Service. By using the Service, you agree to the collection and use of information as outlined in this policy.

Explanation and Definitions

Explanation

Terms with capitalized initial letters have specific meanings defined below. These definitions apply whether the terms appear in singular or plural form.

Definitions

• Company: Refers to the developer of the HeartFlow App, referred to as “Company,” “we,” or “our.”

• Services: Refers to the HeartFlow App provided by the Company.

• Device: Any device capable of accessing the Service, such as a smartphone or tablet.

• Personal Data: Any information relating to an identified or identifiable individual.

• Usage Data: Data automatically collected while using the Service or from the Service infrastructure (e.g., page visit duration).

• Service Provider: Any person or entity that processes data on behalf of the Company. Under GDPR, a Service Provider acts as a data processor.

• You: The individual using the Services or the legal entity accessing or using the Services on their behalf.

Collection and Use of Your Personal Data

Types of Data Collected

Personal Data
We may ask for personally identifiable information that helps us contact or identify you while using our Service. This may include, but is not limited to:

• Email address

Usage Data
Usage Data is collected automatically when using the Service. This data may include your device's IP address, browser type, browser version, the pages visited within the Service, the time and date of your visit, time spent on those pages, unique device identifiers, and other diagnostic data.

When accessing the Service via a mobile device, certain information may be collected automatically, such as the type of mobile device, its unique ID, IP address, operating system, type of mobile browser, and other diagnostic data.

Use of Your Personal Data

The Company processes personal data for the following purposes:

• Service Provision: To provide and maintain the Service, including monitoring usage.

• Contractual Obligations: To develop, comply with, and enforce contracts made through the Service.

• Communication: To contact you via email or other electronic methods for updates, security notices, and relevant information.

• Marketing: To send news, offers, and information about products, services, or events, unless you opt out.

• Request Management: To manage and respond to your requests.

• Targeted Advertising: To create and display content and ads based on your interests and location, often in collaboration with third parties.

• Business Changes: To assess or conduct business activities such as mergers, divestitures, or transfers involving personal data.

• Data Analysis: To perform data analysis, identify usage trends, and evaluate ways to enhance our Service.

Sharing of Personal Data

Service Providers: Your personal data may be shared with Service Providers for tasks such as monitoring service usage, providing support, and processing payments.

Business Transfers: Personal data may be transferred during business activities such as mergers, acquisitions, or sales of assets.

Affiliates: Information may be shared with affiliates, including parent companies and subsidiaries, in accordance with this Privacy Policy.

Business Partners: Data may be shared with business partners to provide products, services, or promotions.

User Interaction: Any information you share in public areas may be viewed by others.

Consent-Based Disclosure: Personal data may be disclosed for other purposes with your explicit consent.

Retention of Personal Data

The Company retains your personal data only as long as necessary to fulfill the purposes outlined in this policy. We retain and use data to comply with legal obligations, resolve disputes, and enforce agreements. Usage data is typically retained for a shorter period, unless it is needed for security improvements or to comply with legal obligations.

Transfer of Personal Data

Your data may be processed at the Company’s operational locations or elsewhere where the processing parties are based. This means data may be transferred outside your state or country, where privacy laws may differ. By agreeing to this policy and providing such data, you consent to these transfers. The Company will take reasonable steps to ensure data security and regulatory compliance during transfers.

Deletion of Personal Data

You have the right to request the deletion of your personal data. The Service offers options to remove certain data within the platform. You can update, correct, or delete your data through the Manage Personal Information section or by contacting us. Note that some data may be retained due to legal obligations or legitimate reasons.

Security

We prioritize the security of your personal data but remind you that no method of transmission or electronic storage is 100% secure. We use commercially reasonable means to protect data but cannot guarantee absolute security.

Children's Privacy

Our Service is not directed to children under 13. We do not knowingly collect data from children under 13. If you become aware that your child has provided us with personal data, please contact us. If we learn that we have collected data from children under 13 without parental consent, we will take steps to delete that information. Parental consent may be required for processing information where applicable.

Links to Other Websites

Our Service may link to third-party websites not operated by us. We advise reviewing their privacy policies, as we are not responsible for their content or practices.

Changes to This Privacy Policy

We may update this policy periodically. Changes will be posted on this page, and we may notify you via email or within the Service before they become effective. The "Last Updated" date will be updated accordingly.

We encourage checking this policy regularly for any changes, which take effect upon posting.