AccessMeCare STANDARD PRIVACY POLICY

This Privacy Policy explains how Heudia Health LLC, together with its partners (“Heudia,” “we,” “us,” or “our”), collects, uses, discloses, and protects information in connection with the AccessMeCare™ website, mobile applications, and related services (collectively, the “Platform”). This Privacy Policy is incorporated by reference into, and should be read together with, the AccessMeCare™ Operating Governance Policy and any other terms governing your use of the Platform.

By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Privacy Policy, you should not use the Platform.

1.1 Information You Provide. We collect information you provide directly, including:

• Registration information: username, password, email address, first and last name, and zip code.
• Profile and organizational information submitted by participating organizations, including program descriptions, services offered, hours of operation, and contact details.
• Content you post to the Platform, including forum posts, group postings, messages, and event listings.
• Information you submit when contacting us for support or exercising your privacy rights.

1.2 Information Collected Automatically. When you use the Platform, we may automatically collect certain technical information, including device type, browser type, IP address, pages viewed, referring pages, and general location information (such as city or region) derived from your IP address. This information is used to operate, secure, and improve the Platform, and to support aggregate reporting on Platform usage and reach.

1.3 Information We Do Not Require. The Platform is designed as a resource navigation and referral tool. We do not require you to disclose your health status, diagnosis, or treatment history to use the Platform's public-facing resource directory. Any such information you choose to share — for example, in a forum post, message, or profile — is shared at your own discretion, and we encourage you not to include personally identifiable health information about yourself or any other individual in any public post or profile.

We use the information we collect to:

• Operate, maintain, and improve the Platform and its features.
• Facilitate connections between users, community organizations, and available resources.
• Review and approve community content submitted for publication.
• Communicate with you about your account, requests, or the Platform.
• Compile de-identified or aggregate data for population-level reporting, program evaluation, and reporting to funders, grantors, or governmental partners.
• Maintain the security and integrity of the Platform, including detecting and preventing fraud, abuse, or violations of the Operating Governance Policy.
• Comply with applicable law and respond to lawful requests from public authorities.

We do not sell personal information, and we do not use personal information for automated decision-making that produces legal or similarly significant effects without human review.

We may share information as follows:

• With participating Community Partners, solely as necessary to facilitate a referral, connection, or service you have requested.
• With service providers who perform functions on our behalf (such as hosting, analytics, or communications), under obligations to protect the information and use it only for the purposes we specify.
• In aggregate or de-identified form, for reporting to funders, grantors, governmental partners, or in public reporting, in a manner that does not identify you.
• When required by law, regulation, subpoena, or governmental request, or to protect the rights, safety, or property of Heudia, its partners, or the public.
• In connection with a merger, acquisition, or transfer of assets, subject to continued protection under a privacy policy at least as protective as this one.

Content you choose to post publicly on the Platform (such as forum posts or profile information) may be visible to other users and, depending on your settings, to the public.

We retain personal information for as long as necessary to provide the Platform, fulfill the purposes described in this Privacy Policy, and comply with our legal obligations. When information is no longer needed for these purposes, we take reasonable steps to delete, de-identify, or anonymize it. Consistent with the Operating Governance Policy, Heudia has no obligation to maintain, store, or transfer information following termination of a user's account, except as required by law or as necessary to respond to a valid deletion or access request submitted before termination.

We extend the following privacy rights to all Platform users, regardless of location, consistent with the rights recognized under the European Union and United Kingdom General Data Protection Regulation (“GDPR”) and similar data privacy laws increasingly adopted by U.S. states. Subject to applicable legal exceptions, you have the right to:

• Access the personal information we hold about you.
• Correct or update inaccurate or incomplete personal information.
• Request deletion (erasure) of your personal information.
• Request that we restrict or limit the processing of your personal information.
• Receive a copy of your personal information in a portable, machine-readable format.
• Object to certain processing of your personal information, including for purposes of profiling.
• Withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing before withdrawal.
• Not receive discriminatory treatment for exercising any of these rights.

To exercise any of these rights, contact us at [insert privacy contact/email]. We will respond within the time period required by applicable law. We may need to verify your identity before fulfilling certain requests. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority or, for U.S. residents, your state Attorney General's office.

The Platform may use cookies and similar technologies to remember your preferences, understand how the Platform is used, and support security. You can control cookies through your browser settings; disabling cookies may limit certain features of the Platform.

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, disclosure, alteration, or destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

The Platform's account and personalized care coordination features are intended for users 18 years of age or older, consistent with the eligibility requirements in the Operating Governance Policy. The Platform's public-facing resource navigation features may be used by a parent, guardian, family member, or caregiver seeking resources on behalf of a minor. We do not knowingly collect personal information directly from children through account registration. If we learn that we have inadvertently collected personal information from a child in a manner inconsistent with this Policy, we will take steps to delete that information.

We may revise this Privacy Policy from time to time. If we make substantial changes, we will post a prominent announcement on the Platform and update the effective date above. Your continued use of the Platform after changes are posted constitutes acceptance of the revised Privacy Policy.

If you have questions about this Privacy Policy or wish to exercise any of the rights described above, please contact us at:

[insert privacy contact/email]