Deya App Privacy Policy

This Privacy Policy describes how Deya Health, Inc. (“Deya,” “we,” “us,” or “our”) handles personal information that we collect when you use the Deya mobile application (the “App”).

Please refer to our Consumer Health Data Privacy Policy for additional information about the processing of your consumer health data and your rights under applicable state laws.

Please note that this Privacy Policy applies only to your use of the App and the services provided through it. It does not apply to Deya’s main website, available at https://deya.health, which is governed by a separate privacy policy.

1. Personal Information We Collect

Information You Provide:

• Account information. When you register for, access or use the App, we collect login credentials (such as your name, email address and password) and any preferences you set in your account.
• Health and medical information. We collect information you submit through the App about your eye health, including medical conditions, symptoms, lifestyle, medications (dosage, timing, frequency), eye images, and other information relevant to your care. Please read our Consumer Health Data Privacy Policy for additional information.
• Communications. We collect information when you contact us, including through support requests or feedback.

Automatically Collected Data:

We and our service providers may automatically collect information when you use the App, such as:

• Device data, such as your mobile device’s operating system type and version, manufacturer and model, browser type, screen resolution, device type (e.g., phone, tablet), IP address, unique identifiers, language settings, general location information such as city, state, or geographic area.
• Usage data regarding your interactions with features of the App (e.g., time spent, clicks, content viewed).
• Location data. With your permission, we collect precise geolocation to power weather-related features like pollen and wind alerts relevant to your eye health. You can control precise geolocation settings from the operating system of your device.
• How We Use Personal Information

We use the information we collect for the following purposes:

• To provide services. Including creating, managing and securing your account, and supporting your wellness.
• To personalize your experience. We use your data to deliver personalized summaries, reminders, and wellness tips based on the information you provide and provide relevant in-app content or alerts (e.g., weather-related eye health advisories).
• To support communication with your designated eye care provider, and supporting virtual consultations.
• Direct marketing. We may send you direct marketing communications as permitted by law, including by email. You may opt-out of our marketing communications as described in the “Opt-out of marketing communications” section below.

• To improve the App. We analyze anonymized or aggregated data to understand what features are most helpful and improve App design, content, and functionality
• To generate insights and summaries. We use de-identified data in large language models (LLMs) to generate wellness summaries, usage trends, and personalized recommendations. Identifiable patient data is not shared with or used by these models.
• For compliance and safety. We use personal information to comply with legal and regulatory obligations, enforce our terms, protect our rights and the rights of others, and maintain the security and integrity of our App. This includes preventing, detecting, and responding to fraud, unauthorized activity, and cybersecurity threats; conducting audits and investigations.
• How We Disclose Personal Information

We may disclose your personal information as follows:

• With your doctor. With your consent, we make your submitted information (like images and symptom updates) available to your designated eye care provider and their staff (such as technicians or assistants) for review during virtual or follow-up visits to support your care.
• With service providers. We disclose your information to companies and individuals that provide services on our behalf or help us operate the App and related services (such as hosting, information technology, customer support, email delivery, and analytics services).

• Authorities and others. We may disclose your information to law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate for the compliance and protection purposes described above.
• Business transferees. We may disclose your information to acquirers and other relevant participants in business transactions (or negotiations for such transactions) involving a corporate divestiture, merger, consolidation, acquisition, reorganization, sale, or other disposition of all or any portion of the business or assets of, or equity interests in, our company (including, in connection with a bankruptcy or similar proceedings).
• Other third parties, where applicable, at your direction or with your consent.
• Your Privacy Rights and Choices

Marketing communications opt-out. You may opt out of marketing-related emails and other communications by following the opt-out or unsubscribe instructions in the communications you receive from us. You may also contact us as provided in the “Contact Us” section below to unsubscribe. Even if you opt out of marketing-related communications, you may continue to receive service-related and other non-marketing emails.

Account information. You may update or delete your account information by logging into your account or contacting us.

Personal information requests. We also offer you choices that affect how we handle your personal information. Depending on your location, you may request the following in relation to personal information:

• Information about how we have collected and used personal information. We have made this information available to you without having to request it by including it in this Privacy Policy.
• Access to a copy of the personal information that we have collected about you. Where applicable, we will provide the information in a portable, machine-readable, readily usable format.
• Correction of personal information that is inaccurate or out of date.
• Deletion of personal information that we no longer need to provide our services via the App or for other lawful purposes.
• Opt out of the sharing of your personal information or use of your information for targeted advertising, by limiting tracking as described below.
• Opt out of “profiling” in connection with decisions that produce legal or similarly significant effects. We do not engage in profiling in connection with decisions that produce legal or similarly significant effects.
• Where applicable, you may withdraw your consent to our processing of your personal information. This won’t affect anything we have used your personal information for before you withdraw your consent.
• Appeal our denial of your personal information request by contacting us as set out in the “Contact Us” section below.

To make a request, please email us or write to us as provided in the “Contact Us” section below. We may ask for specific information from you to help us confirm your identity. You are entitled to exercise the rights described above free from discrimination.

Limits on your choices. In some instances, your choices may be limited, such as where fulfilling your request would impair the rights of others, our ability to provide a service you have requested, or our ability to comply with our legal obligations and enforce our legal rights.

Limit tracking. You can limit certain types of tracking and data collection through your mobile device settings. For example, most devices allow you to restrict app tracking, reset your advertising identifier (such as Apple’s IDFA or Google’s AAID), or limit location data sharing. Please consult your device’s privacy settings for more information. Note that some features of the App may not function properly if certain tracking or data sharing is disabled.

• Data Security

We use reasonable safeguards to protect your data against unauthorized access, misuse, loss, disclosure, alteration, and destruction. However, no method of transmission or storage is 100% secure. Please use the App with awareness of these risks.

• Children’s Privacy

The App is not intended for children under 18 years of age. If we learn we collected personal information through the App from a child without the consent of the child’s parent or guardian as required by law, we will delete it.

• Data Retention

We retain your information only as long as needed to fulfill the purposes outlined in this Policy, in accordance with applicable laws and our internal policies.

• Changes to This Policy

We may update this Privacy Policy periodically. If we make material changes, we will notify you through the App and update the “Last Updated” date above.

• Contact Us

If you have any questions or concerns at all about our Privacy Policy, please contact us by email at privacy@deya.health or at the following mailing address:

Deya Health, Inc.
ATTN: Privacy
PO Box 1002
Southampton, NY 11968

---