Vital-Go Privacy & Data Practices

• Vital-Go does not sell personal health information.
• Connected health information is not used for unrelated advertising or targeted marketing.
• You choose which external services connect to Vital-Go, and you can disconnect them.
• Text messages are about your appointments and never contain health information. Reply STOP at any time.
• Voice Access does not store audio, and it changes nothing without your yes.

Depending on how Vital-Go is used, we may process information including:

• Account information such as name, email address, phone number, account role, and profile information.
• Device information such as device type, model, identifier, connectivity status, battery status, firmware information, and synchronization timestamps.
• Health and wellness measurements received from compatible monitoring devices or connected services, such as heart rate, oxygen saturation, respiratory information, temperature-related measurements, activity, sleep information, blood-pressure measurements where supported, and associated measurement metadata.
• Information related to care and monitoring workflows, including alerts, monitoring configurations, appointments, and authorized care-team activity where those features are enabled.
• Technical and security information such as authentication events, audit logs, system events, network information, and information used to maintain platform security and reliability.

Vital-Go supports multiple sources of health information, including Vital-Go-developed devices and compatible third-party wearable or health-monitoring platforms.

Connecting an external service requires authorization through that provider's connection process, such as OAuth. Vital-Go only requests access to the information the enabled integration needs and the authorization permits. Depending on the provider and device, that may include health measurements, activity information, timestamps, device information, signal-quality information, and other measurement metadata.

Where supported, you may disconnect an integration from Vital-Go, or revoke its access through the provider. Disconnecting stops future synchronization; information already received may remain subject to applicable retention, security, contractual, or operational requirements.

Provider credentials and authorization tokens are handled by protected backend systems, not exposed through browser-based application code.

Third-party providers maintain their own systems and privacy practices. Information they store or process before it reaches Vital-Go is also subject to their policies and terms. How Vital-Go keeps the source and meaning of each measurement is set out in Trust & Data Practices.

Vital-Go uses information to:

• Operate and improve the Vital-Go platform.
• Authenticate users and protect accounts.
• Connect and manage supported monitoring devices and services.
• Receive, organize, normalize, and display authorized health information.
• Support monitoring, alerts, trends, and care workflows where those features are enabled.
• Maintain platform reliability, security, auditability, and performance.
• Provide technical and customer support.
• Investigate errors, security events, and potential misuse.

Vital-Go does not use connected health information for unrelated advertising or targeted marketing, and does not sell personal health information.

Voice Access lets a patient ask about their own records, and manage their appointments, by speaking or typing. When it is used:

• Speech is turned into words either on the patient's device or, if the patient chooses, on Vital-Go's server while the microphone is on. Audio is not stored.
• The words of each question are sent to our language-model provider, OpenAI, to work out what is being asked. They are sent with the provider's storage option turned off. Readings and other records are not sent to it: Vital-Go reads them and composes the answer itself, in reviewed wording.
• Vital-Go does not keep the words of questions. To handle a repeated request safely, it keeps a one-way code of the question, and the answer, for up to five minutes.
• Voice Access can request a new appointment or move an existing one, only after it reads the change back and the patient confirms. It cannot change health records or give medical advice.
• Every record Voice Access reads, and every change it makes, is audit-logged.

Vital-Go sends text messages only to people who opt in. The consent checkbox at registration is unchecked by default, and providing a phone number alone does not enroll anyone. Patients can also turn text messages on or off at any time in their notification settings. The checkbox reads:

Messages are transactional, never promotional. Vital-Go currently sends:

• Appointment confirmations, when a doctor approves an appointment request.
• Reminders one hour before an appointment, to both the patient and the doctor.
• Cancellation or rejection notices, to the affected party.

Text messages never include health information: no diagnoses, clinical notes, vital-sign values, medication details, or report content. They direct you to sign in to Vital-Go for details.

To stop, reply STOP to any Vital-Go message (or STOPALL, UNSUBSCRIBE, CANCEL, END, QUIT, REVOKE, or OPTOUT). Opting out takes effect immediately, and no further messages are sent until you opt back in by replying START or UNSTOP, or, for patients, by turning text messages back on in settings. Reply HELP for help, or email support@vital-go.com.

Vital-Go may share information only as reasonably necessary to operate and secure the platform, support authorized monitoring workflows, comply with applicable requirements, or work with service providers that support Vital-Go's infrastructure and functionality.

When a third-party wearable or health platform is connected, information may necessarily move between Vital-Go and that provider to establish or maintain the authorized integration.

Vital-Go does not sell personal health information to advertisers or data brokers.

Vital-Go uses technical and organizational safeguards intended to protect sensitive information, including encrypted network connections, controlled access, authentication protections, role-based permissions, audit logging, rate limiting, secure credential handling, and monitoring of security-relevant events. The layers are described in Trust & Data Practices.

No system can guarantee absolute security. Vital-Go continues to evaluate and strengthen its security controls as the platform develops.

Vital-Go retains information only for as long as reasonably necessary for the purpose for which it was collected, to maintain the operation and security of the platform, or to satisfy applicable contractual, operational, or legal requirements.

Retention requirements may differ depending on the type of information, the connected service, the environment in which Vital-Go is being used, and whether an account or integration remains active. More specific retention schedules may be introduced as Vital-Go moves into broader production use.

Vital-Go may update this policy as the platform, integrations, business operations, and applicable requirements evolve. When material changes are made, the effective date shown at the top of this page will be updated.

Questions about Vital-Go's privacy or data practices may be directed to privacy@vital-go.com.

For general product or technical support, contact support@vital-go.com.