Privacy Policy for the BlueSky MD App

1. Information We Collect

Account and Profile Information

• Name, email address, phone number, password credentials, account identifiers, and authentication tokens.
• Preferred clinic location, referral code, referral source, terms acceptance, member status, points, rewards, and account preferences.
• Profile updates, password changes, and support-related information you provide.

Wellness, Rewards, and Activity Information

• Clinic check-ins, visit counts, rewards activity, points balances, referral activity, and completed app activities.
• Nutrition, supplement, water, weight, BMI, body composition, and related wellness logs you choose to enter.
• Journal entries, tags, notes, coach notes, and other health or wellness-related content you choose to save in the App.

Communications and Community Content

• Messages with coaches or support teams, video call metadata, incoming call details, and notification data.
• Community posts, comments, replies, likes, bookmarks, uploaded images, videos, PDFs, and other content you submit.

Device, Usage, and Technical Information

• Device type, operating system, app version, browser or network information, diagnostic logs, and app usage events.
• Push notification tokens and other identifiers needed to deliver notifications and keep your account session secure.

2. App Permissions and Optional Access

The App may request access to device features only when needed for app functionality. You can deny or later change these permissions in your device settings, but some features may not work without them.

• Camera: Used for QR code or barcode scanning, profile or content uploads when you choose them, and video calls with your care team or coach.
• Microphone: Used for audio during video calls.
• Location: Used to confirm clinic check-ins and location-based activity eligibility when geofencing is enabled.
• Photos and media: Used when you choose to upload or save images, videos, or other files.
• Notifications: Used to send account, rewards, reminder, message, and incoming call notifications.
• Bluetooth or audio device access: May be used by the operating system or video call components to support audio devices during calls.

3. How We Use Information

• To create, authenticate, secure, and maintain your App account.
• To provide App features, including clinic check-ins, rewards, referrals, wellness logs, journals, messaging, notifications, and video calls.
• To show your progress, points, rewards, visit history, nutrition logs, weight history, and other saved activity.
• To personalize App content based on your selected clinic, program settings, eligibility, activity history, and preferences.
• To respond to support requests, troubleshoot errors, improve performance, and maintain App security.
• To prevent fraud, misuse, unauthorized access, and invalid check-ins or reward claims.
• To comply with legal, regulatory, tax, healthcare, and program administration obligations.

4. How We Share Information

We do not sell your personal information. We may share information only as needed to operate the App, provide care-related and program services, comply with law, or with your direction.

• BlueSky MD care, operations, and support teams: To provide patient, wellness, rewards, support, and account services.
• Technology and service providers: Including providers that support hosting, authentication, rewards administration, file storage, push notifications, analytics, messaging, video calls, email, security, and customer support.
• NextBee: The App and rewards technology may use NextBee services to manage accounts, activities, referrals, points, rewards, check-ins, and related program data.
• Firebase/Google, Twilio, AWS/S3, and similar infrastructure providers: Used for messaging, push notifications, video call support, storage, and app infrastructure.
• Food and nutrition data providers: Barcode, product, or food search terms may be sent to nutrition lookup services when you use food search or barcode scanning features.
• Other users: Information you post in community areas, such as your name, post content, comments, likes, or uploaded media, may be visible to other eligible App users.
• Legal and safety purposes: We may disclose information when required by law, to protect rights and safety, to enforce terms, or to respond to lawful requests.
• Business changes: Information may be transferred if BlueSky MD or App-related services are involved in a merger, acquisition, financing, restructuring, or similar transaction.

5. Health Information and HIPAA

Some information you enter in the App may be health-related, including wellness logs, journal entries, weight history, nutrition details, coach communications, and telehealth-related information. If information is protected health information under HIPAA, BlueSky MD's HIPAA Notice of Privacy Practices describes additional rights and protections that may apply.

For clinical medical care, appointments, billing, prescriptions, lab results, and treatment records, please follow the notices and instructions provided by your BlueSky MD clinic or care team.

6. Data Retention

We retain information for as long as needed to provide the App, maintain your account, administer rewards and referrals, comply with legal, tax, healthcare, and audit obligations, resolve disputes, enforce agreements, and protect the App. Some information may remain in backups, logs, or records where deletion is not immediately possible or where retention is required by law.

7. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect information, including secure transmission, access controls, authentication, and service provider safeguards. No system can be guaranteed to be completely secure, and you are responsible for keeping your login credentials confidential.

8. Your Choices and Rights

• Update your account profile information in the App where available.
• Change device permissions such as camera, microphone, location, photos, Bluetooth, and notifications in your device settings.
• Opt out of push notifications through your device settings.
• Contact us to request access, correction, deletion, or other available privacy rights, subject to identity verification and legal limits.
• For HIPAA-related requests involving protected health information, contact BlueSky MD using the contact information below or follow the HIPAA Notice of Privacy Practices.

9. Third-Party Links and Services

The App may link to BlueSky MD websites, patient portals, scheduling tools, payment tools, nutrition databases, app stores, or other third-party services. Those services may have their own privacy policies and terms. We are not responsible for the privacy practices of third-party sites or services that we do not control.

10. Children's Privacy

The App is not directed to children under 13. We do not knowingly collect personal information from children under 13 through the App. If you believe a child under 13 has provided information through the App, please contact us so we can review and take appropriate action.

11. International Data Transfers

The App is intended primarily for users in the United States. Information may be processed in the United States or other locations where our service providers operate. By using the App, you understand that information may be transferred to and processed in those locations.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the effective date above and may provide additional notice in the App or by other appropriate means when required. Continued use of the App after an updated policy becomes effective means you acknowledge the updated policy.

By using the BlueSky MD App, you acknowledge that you have read and understood this Privacy Policy.