1. Introduction

This Privacy Policy describes how Seattle Children's Hospital collects and uses Personal Data about you through the use of our Application, and through email, text, and other electronic communications between you and Seattle Children's Hospital.

Seattle Children's Hospital ("SCH," or "we," "our," or " us") respects your privacy, and we are committed to protecting it through our compliance with this policy.

This Privacy Policy (our "Privacy Policy") describes the types of information we may collect from you or that you may provide when you use the Seattle Children's Mobile Application (our "Application") and our practices for collecting, using, maintaining, protecting, and disclosing that information.

This policy only applies to information we collect on our Application. It does not apply to information collected by:

• us offline or through any other means, including on any other applications or websites operated by SCH or any third party;
• any third party, including through any application or content that may link to or be accessible from or on the Application.

Please read this policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our Application. By accessing or using our Application, you agree to this Privacy Policy. This Privacy Policy may change from time to time (see Changes to Our Privacy Policy ). Your continued use of our Application after we make changes is deemed to be acceptance of those changes, so please check this Privacy Policy periodically for updates.

2. Children Under the Age of 13

Our Application is not intended for children under the age of 13, and children under the age of 13 are not permitted to use our Application. We will remove any information about a child under the age of 13 if we become aware of it.

Our Application is not intended for children under 13 years of age. No one under age 13 may provide any information to or through the Application. We do not knowingly collect Personal Data through our Application from children under 13. If you are under 13, do not use or provide any information on our Application or on or through any of its features, including your name, address, telephone number, email address, or any screen name or user name you may use. If we learn we have collected or received Personal Data through our Application from a child under 13 without verification of parental consent, we will delete that information. If you believe we might have collected any information through our Application from a child under 13, please email us at digitalhealthinnovation@seattlechildrens.org.

3. Information We Collect About You and How We Collect It

We collect different types of information about you, including information that may directly identify you, information that is about you but individually does not personally identify you, and information that we combine with our other users. This includes information that we collect directly from you or through automated collection technologies.

We collect several types of information from and about users of our Application (collectively, "Personal Data"), specifically information by which you may be personally identified, such as health information and information about traffic data, location data, logs, other communication data, information about your mobile device, and the resources that you access and use on the Application.

We collect this information directly from you when you provide it to us. This includes information provided at the time of registering for or using the Services. We may also ask you for information when you report a problem with our Application. This Personal Information may include your:

• Name
• Address
• Phone Number
• e-mail address
• Information pertain to Your Health
• Information related to Your employment or affiliation with Us
• Other demographic information, such as:
• • Your ZIP code
  • Age
  • Gender
  • Preferences, interests and favorites

As you navigate through and interact with our Application, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns, specifically details of your visits to our Application, such as traffic data, location, logs, information about your mobile device, other communication data, and the resources that you access and use on the Application. The information we collect automatically may include Personal Data or we may maintain it or associate it with Personal Data we collect in other ways or receive from third parties.

We use third party service providers to collect certain information relating to your use of the Application, including Amazon Web Services and Epic. You can find out more about how Amazon Web Services uses data when you visit our Application by visiting https://aws.amazon.com/compliance/data-privacy-faq/ . You can find out more about how Epic uses data when you visit our Application by visiting https://www.epic.com/about/privacypolicies#mobile-policy-patient .

Depending on your device, the Application may have access to the following information from your device:

• Geolocation Information • We may request access or permission to and track location-based information from your mobile device, either continuously in the background or while using the app to provide services such as automated appointment arrival and indoor wayfinding.
• Stored Information (Videos, Images and Files) • We may be able to read, write, modify, or delete the contents of your storage
• Audio Input • We may be able to record audio
• Camera may allow the Application to take pictures
• Phone may directly read the phone status including phone numbers and network status
• Other information the Application may be able to receive data from the Internet, pair with Bluetooth devices and access Bluetooth settings, change your audio settings, view your network connection/state, obtain full network access, and run at startup
• Push Notifications • We may request to send you push notifications regarding your account or certain features of the app

These application permission settings allow you access to certain features with our Application. For example, virtual care visits using our Application may need access to your network state, camera and microphone/audio recording. By changing your app permission settings, you may affect your ability to access or use certain features of our Application. You may disable any of this functionality on your mobile device by removing permissions for our Application at any time through the app's settings.

4. How We Use Your Information

We use your Personal Data for various purposes described below, including to:

• provide our Application to you;
• provide you with information you request from us; and
• enforce our rights arising from contracts.

We use information that we collect about you or that you provide to us, including any Personal Data:

• to present our Application and its contents and services to you;
• verify your identity when accessing the Application;
• to estimate our audience size and usage patterns;
• diagnose and troubleshoot problems with the Application;
• to improve our products and services;
• to fulfill any other purpose for which you provide it;
• to notify you about changes to our Application or any products or services we offer or provide though them;
• Provide authorities or relevant individuals with information related to the Application as required by law;
• in any other way we may describe when you provide the information; and
• for any other purpose with your consent.

Some information SCH collects constitutes protected health information ("PHI") under the U.S. Health Insurance Portability and Accountability Act ("HIPAA"). SCH will use and disclose PHI only as permitted under HIPAA. For more information on how we may use and disclose PHI and your HIPAA privacy rights, please refer to our Notice of Privacy Practices .

5. Disclosure of Your Information

We do not share, sell, or otherwise disclose your Personal Data for purposes other than those outlined in this Privacy Policy and permitted by applicable law. We may disclose your Personal Data to certain third parties, including:

• third party service providers that we use to support our Application;
• an organization we merge with, acquire, or that buys us, or in the event of change in structure of our organization of any form;
• to comply with our legal obligations;
• to enforce our rights; and
• with your consent.

However, we may use and disclose non-identifiable aggregated information about our users, and information that does not identify any individual, without restriction.

We may disclose Personal Data that we collect or you provide as described in this Privacy Policy:

• to contractors, service providers, and other third parties we use to support our Application;
• to a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Data held by SCH about our Application users are among the assets transferred;
• to fulfill the purpose for which you provide it;
• for any other purpose disclosed by us when you provide the information; and
• with your consent.

We may also disclose your Personal Data:

• to comply with any court order, law, or legal process, including to respond to any government or regulatory request;
• to investigate fraud;
• to enforce or apply our Terms of Use and other agreements; and
• if we believe disclosure is necessary or appropriate to protect the rights, property, or safety of SCH, our patients, or others.

6. Choices About How We Use and Disclose Your Information

We offer you choices on how you can opt out of our use of our tracking technology.

We do not control the collection and use of your information collected by third parties described above in Disclosure of Your Information . These third parties may aggregate the information they collect with information from their other customers for their own purposes. When using our Application, we may collect certain information regarding your location, including your location in real time. You must exercise your own judgment as to the adequacy and appropriateness of sharing location information with us and our third party service providers. If you do not want us to collect this information, do not download the Application on, or delete the Application from, your Mobile Device. You can choose whether or not to allow the Application to collect and use real-time information about your Mobile Device's location through the Mobile Device's location or privacy setting. Please refer to the user guide for your operating system for more information on how to enable or disable location based services for the Application. If you block the use of location information, some parts of the Application may then be inaccessible or not function properly. If you enable such location-bases services in connection with the Application, you hereby consent to the collection, transmission and use of your location data by the Application.

7. Data Security

We have implemented measures designed to secure your Personal Data from accidental loss and from unauthorized access, use, alteration, and disclosure.

The safety and security of your information also depends on you. Unfortunately, the transmission of information via the Internet is not completely secure. Although we work diligently to try and protect your Personal Data, we cannot guarantee the security of your Personal Data transmitted to our Application. Any transmission of Personal Data is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Application or in your operating system.

We expect that you are located in and will access the Application from the United States, and that all collection, use and disclosure of your information will occur in the United States and will be governed by United States law. Some information may travel over the Internet outside of the United States. Even if some information does travel outside the United States, you agree that the laws of the United States will apply. If you are downloading or accessing the Application from outside the United States, please be aware that you are sending information (including Personal Data) to the United States, where our servers are located. That information may then be transferred within the United States or back out of the United States to other countries. All data collected by through the Application will be stored exclusively in secure hosting facilities provided by us or our service providers. We have data processing agreements in place with our service providers consistent with applicable privacy and data security laws.

8. Data Retention

We will retain your information for as long as is needed to provide services or comply with our legal obligations.

We will also retain usage data for internal analysis purposes.

We attempt to minimize the amount of personal or protected health information stored or retained on your device. Nevertheless, our Application may:

• Store a copy of a picture on your device if you choose to add a profile picture.
• Temporarily store your personal information in memory or on the device while you use the application.
• Request information from servers and systems owned or operated by Seattle Children's Hospital and those servers and systems may record technical information about that request, such as an IP address and information related to the type of device, platform, and operating system you use with our Application.

9. Changes to Our Privacy Policy

We will post any changes to our Privacy Policy on our Application.

We may change this Privacy Policy at any time. It is our policy to post any changes we make to our Privacy Policy on this page with a notice that the Privacy Policy has been updated on the Application's home page. The date this Privacy Policy was last revised is identified at the top of the page. You are responsible for reviewing this Privacy Policy to check for any changes. Our use of information gathered or obtained is subject to the Privacy Policy in effect at the time of such use.

10. Contact Information

You may contact us through the contact information below.

If you have any questions, concerns, complaints or suggestions regarding our Privacy Policy, you may contact us at digitalhealthinnovation@seattlechildrens.org .