Privacy

Introduction

At Strawberry Health (STRW Inc.), protecting your personal and health-related data is our top priority. This policy explains:

1. What data we collect.
2. How we use, share, and store your data.
3. Your rights regarding your information.

‍

Information We Collect

We collect two primary types of data:

A. Personal Information:

• Name, email address, phone number, delivery address.
• Account credentials (e.g., username and password).

B. Health Information:

• Blood sample data (hormonal levels) collected via at-home devices.
• Self-reported information (e.g., lifestyle habits, previous health levels data, pre-existing conditions, health concerns, etc. ).
• Insights generated through our platform based on your health data.

C. Technical Data:

• IP address, browser type, and device identifiers.
• Usage data (e.g., app activity, analytics).

We only collect the minimum necessary data to deliver our services.

‍

How We Use Your Information

We use your data to:

• Provide personalized hormonal health insights and concierge services.
• Deliver reports based on blood test data.
• Improve our services (e.g., platform updates and performance).
• Respond to your inquiries and provide customer support.
• Comply with legal, regulatory, or security obligations.

We will not sell or rent your data for advertising or commercial purposes.

‍

Sharing Your Information

We share your data under the following circumstances:

A. Service Providers (Business Associates):

• Cloud storage services (e.g., AWS, Google Cloud).
• Blood testing and collection partners (e.g., Tasso).
• Communication tools for customer support.

All third parties must sign Business Associate Agreements (BAAs), ensuring they comply with HIPAA standards.

B. Legal or Compliance Obligations:

• When required by law (e.g., court orders, subpoenas).
• To protect our rights, users, or platform integrity.

‍

Protecting Your Information

We implement administrative, technical, and physical safeguards to protect your data:

• Encryption: Data is encrypted during transmission (SSL/TLS) and at rest.
• Access Controls: Access to health data is limited to authorized personnel only.
• Device Security: All devices used to access data are encrypted and password-protected.

We continuously review and update our security measures to comply with HIPAA standards.

‍

Your Privacy Rights

As a user, you have the following rights:

• Access: Request a copy of the data we hold about you.
• Correction: Update or correct any inaccuracies in your data.
• Deletion: Request that we delete your data (subject to legal or operational exceptions).
• Restriction: Limit how we use or share your data.
• Data Portability: Receive your data in a machine-readable format.

To exercise your rights, contact us at sg@thestrawberry.app.

‍

Data Retention

We retain your data only as long as necessary to provide our services or comply with legal obligations. Upon account deletion, we securely delete all PHI, except where retention is required by law.

‍

Changes to This Privacy Policy

We may update this policy periodically. If significant changes occur, we will notify you via email or app notifications.

‍

Contact Us

For questions about this Privacy Policy or your rights, contact:

Email: team@thestrawberry.app