mConnect Privacy Policy

Holmusk (KKT Technology Pte Ltd)

Privacy Policy

Last Updated: April 19, 2021

This privacy policy (the "Policy") is intended to inform you of the types of information Holmusk (KKT Technology Pte Ltd) and its affiliates ("we" or "us" or "Holmusk") collects, as well as our policies and practices regarding the collection, use, and disclosure of that information through the web pages at https://www.holmusk.com/ (the "Site") and the Holmusk Platform known as mConnect ("Platform").

Please read this Policy carefully, because by using the Site and/or Platform, you are acknowledging that you understand and agree to the terms of this Policy, and consent to the types of information and the manner in which we may collect, use and disclose such information. If you do not agree to the terms of this Policy, please do not use the Site or Platform.

We reserve the right to change the provisions of this Policy at any time. We will alert you that changes have been made by indicating on the Policy the date it was updated. We encourage you to review this Policy from time to time to make sure that you understand how any information you provide will be used. Each time you access the Site or use the Platform, the most recent version of the Policy will apply. Your continued use of the Site or Platform following the posting of changes to these terms will mean you accept those changes.

We will ensure that all Personal Information (as defined below) that we collect and maintain will be (i) processed lawfully, fairly, and in a transparent manner; (ii) collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; (iii) adequate, relevant, and limited to what is necessary; (iv) accurate and kept up to date; and (v) processed in a manner that ensures appropriate security of the Personal Information, including protection against unauthorized or lawful processing and against accidental loss, destruction or damage.

In certain situations, we may be considered a Business Associate as defined by HIPAA (the federal Health Insurance Portability and Accountability Act) of certain Covered Entities (as also defined in HIPAA), and as such we may have certain federal, state and contractual restrictions on how we can use your Protected Health Information ("PHI"). When acting as a Business Associate, we may only use or disclose your PHI or Personal Information as required by law or as permitted by the Business Associate Agreement ("BAA") that we have in place with a specific Covered Entity. Please be aware that when you give other individuals access to your PHI or Personal Information, they may be able to use, reproduce, distribute, display, transmit, and/or communicate the data to others and the public. We shall not have any responsibility for access, use, or disclosure of your PHI or Personal Information by people you authorized to have access to your user account.

If you are using the Site or Platform in coordination with your physician or other healthcare provider ("Medical Provider") or as part of a research study, you are granting access to and use of your PHI and Personal Information to the Medical Providers and study personnel. You expressly consent to the access, use and disclosures outlined in this paragraph.

I. Information We Collect

Personal Information You Provide to Us

When you register for and access or use the Platform, we collect (i) personal information, including name, email address, phone number, username, password, socio-demographic information (such as age, height, weight, gender, occupation, insurance type); (ii) information about your mental health including past and current diagnoses; and (iii) any other information that you may provide while accessing or using the Platform. All collectively referred to us "Personal Information".

We only have access to and collect personal information that you voluntarily give us by filling out our online forms and surveys which are part of the Platform, granting us access to your health records, or via email or other direct contact from you, such as: your name, date of birth, telephone number, email address, and email preferences. Information collected via the Platform may include, in part, medication side effects, medication adherence, severity of depressive symptoms, function, mood, body measurements, activity, and sleep data, including data obtained by third party devices (such as fitness watch) and third party applications (such as Apple Health and Google Fit).

If you do not want this information to be shared with our employees, service providers, and subcontractors, upon your request, we will not share your information. However, your ability to access and use the Site and/or Platform, and request services, may be limited or interrupted. See Section “Your Access to and Control Over Your Information”.

Information Collected by Automated Means

Whenever you use the Site, we and/or our service providers, may use a variety of technologies that automatically collect information about how the Site is accessed and used (“Usage Information”). Usage Information may include, in part, browser type, operating system, the page viewed, the time, how many users visited the Site, and the website you visited immediately before the Site. This statistical data provides us with information about the use of the Site, such as how many visitors visit a specific page on the Site, how long they stay on that page, which websites they are coming from and which hyperlinks, if any, they “click” on. Usage Information helps us to keep the Site user friendly and to provide visitor’s with readily accessible and helpful information. We may also use your Usage Information to troubleshoot issues with access or use of our Site. Usage Information is generally non-identifiable, but if we associate it with you as a specific and identifiable person, we treat it as Personal Information.

We believe that such technology usage is fair, lawful, and proportional to the legitimate interest and needs of our business, and that our methodology fairly addresses each user’s legitimate rights and expectations in view of the context and purpose for the collection and use of the information collected.

II. How Do We User Your Information?

We will use your information to respond to you regarding the reason you contacted us. We will also use your information as follows:

Registration – A user may need to complete a registration form and create an account with us in order to use certain aspects of our Site or Platform. During registration, a user is required to give certain information (such as name and email address). This information is used to contact you about the products/services on our Site and/or Platform in which you have expressed interest or subscribed to and allow you to easily update your contact information.

Customer Service – Unless you ask us not to, we may contact you via email in the future to tell you about changes to our services, or changes to this Policy.

If at any time you wish that we cease communication with you, please notify us using the contact information provided below in the “Contact Us” section.

III. Do We Share Your Information?

Except as provided herein, we will not trade, rent, share or sell your Personal Information to third parties. Please note that with the exception of certain limited information as specified in the Platform, your Medical Providers and study personnel will have access to the information that you input into the Platform. Specifically, your Medical Provider and study personnel will be able to see data you input around medication side effects, medication adherence, severity of depressive symptoms, function. Your Personal Information and PHI may be included by your Medical Provider and study personnel as part of your health records and use of such information by your Medical Provider and study personnel will be governed by your Medical Provider’s privacy and other policies.

Except as provided herein, unless you ask or provide your consent to do so, we will not share your Personal Information with any third party outside of our organization, except as necessary with our service providers and subcontractors in order to troubleshoot issues you may have with our Site, the Platform or your account. Only employees, service providers, and subcontractors who need the Personal Information to perform a specific job are granted access to Personal Information. The computers/servers in which we store Personal Information are kept in a secure environment.

We will disclose Personal Information when we believe in good faith that such disclosures (a) are required by law, including, for example, to comply with a court order or subpoena, or (b) will help to: enforce our policies; protect your safety or security, including the safety and security of property that belongs to you; and/or protect the safety and security of our Site, the Platform us, our employees, our service providers, our subcontractors, other third parties, or equipment that belongs to us, our service providers, or our subcontractors. Disclosures in this limited scenario would be made to a court of law, law enforcement, or other public or government authority.

We may use non-identifiable anonymous data that is based on users’ access or use of the Site and/or Platform that may be used by us for research and to improve the Site and/or the Platform. We may also use anonymized data based on your use of the Platform, including de-identified health data and combine such de-identified data with data or other anonymous data (“Aggregate Data”). Aggregate Data may include information that describes the habits, usage patterns, survey responses and/or demographic information of users as a group, but does not identify any particular users. We may provide anonymized data and Aggregate Data to our third party collaborators and partners.

Your Access to and Control Over Your Information

We offer you choices regarding the collection, use, and sharing of your Personal Information. Our Site and Platform do not currently respond to browser-based do-not-track signals. You can choose to have your computer warn you each time a cookie is being set, or you can choose to turn off all cookies. You do this through your browser settings. As each browser is different, we encourage you to look at your browser's Help menu to learn the proper way to modify your browser’s cookies setting.

If you disable cookies, some features may be disabled that make your site experience more efficient and some of our services may not function properly.

You may do the following at any time by contacting us via the email address provided below in the “Contact Us” Section:

  • See what data we have about you; if any.
  • Change or correct any contact information we have about you.
  • Have us delete any data we have about you.

We do not charge for these services. Your request will be processed within 30 days of the date on which we receive it.

If you do not want your information to be shared with our employees, service providers and subcontractors, upon your request, we will not share your information. However, your ability to access and use the Site and the Platform may be limited or interrupted.

IV. What Steps Do We Take to Protect Your Information?

We take measures designed to protect your Personal Information in an effort to prevent loss, misuse, and unauthorized access, disclosure, alteration, and destruction. We provide physical, electronic, and procedural safeguards to protect Personal Information we process and maintain. Please be aware, however, that despite our efforts, no security measures are perfect or impenetrable and no method of data transmission can be guaranteed against any interception or other types of misuse. To protect the confidentiality of Personal Information maintained in your account, you must keep your password confidential and not disclose it to any other person. You are responsible for all uses of the Site and Platform by any person using your password. Please advise us immediately if you believe your password has been misused. If you have reason to believe that your interaction with us is no longer secure, if you feel that the security of any account you might have with us might have been compromised, or if you suspect that someone else is using your account, please contact us immediately using the contact information provided below in the “Contact Us” Section.

V. Does This Policy Apply to Other Websites Linked to Or from the Site?

The Site or Platform may contain links to other websites. Any Personal Information you provide on linked pages or sites is provided directly to that third party and is subject to that third party’s privacy policy. This Policy does not apply to such linked sites, and we are not responsible for the content or privacy and security practices and policies of these websites or any other sites that are linked to or from the Site and/or the Platform. We encourage you to learn about their privacy and security practices and policies before providing them with Personal Information.

VI. Do We Collect Information from Children Under the Age of 13?

The Site and the Platform is not intended for use by children under the age of 13, and Holmusk does not knowingly collect or use any Personal Information from such children. If we become aware that we have unknowingly collected Personal Information from a child under the age of 13, we will make commercially reasonable efforts to delete such Personal Information from our database.

VII. What if I am resident of California?

California requires operators of websites or similar services to make certain disclosures to users who reside in California regarding their rights, specifically:

Shine the Light

For clarity, we will not trade, rent, share or sell your Personal Information to third parties unless you ask or authorize us to do so. However, if we disclose Personal Information that is primarily used for personal, family, or household purposes of a California user to a third party for said third party’s direct marketing purposes, we will identify such third party along with the type of personal data disclosed, upon your request.

For further clarification, please refer to the “Contact Us” section below. Under California law, businesses are only required to respond to a user’s request once during any calendar year.

Do-Not-Track

Some browsers give individuals the ability to communicate that they wish not to be tracked while browsing on the Internet. California law requires that we disclose to users how we treat do-not-track requests. The Internet industry has not yet agreed on a definition of what “Do Not Track” means, how compliance with “Do Not Track” would be measured or evaluated, or a common approach to responding to a “Do Not Track” signal. We have not yet developed features that would recognize or respond to browser initiated Do Not Track signals in response to California law. In the meantime, there are technical means to prevent some of the tracking. See Section “Your Access to and Control Over Your Information”.

VIII. Miscellaneous

This Policy and the privacy practices of Holmusk will be subject exclusively to the laws of the United States. Please note that Holmusk servers are located in the United States. Holmusk makes no representation that this Policy and our practices comply with the laws of any other country or jurisdiction. Users of the Site who reside outside the United States do so on their own initiative and are responsible for compliance with local laws, if and to the extent local laws are applicable. If you reside outside of the United States, by using the Site or Platform, you consent to the transfer, processing, and use of your information outside of your country.

If we become involved in a merger, acquisition, or any form of sale of some or all of our assets, the Site, our Platform, and your information as collected, processed and maintained through our Platform may be included in the assets sold or transferred to the acquirer. You agree that we may transfer or assign the information we have collected about you in connection with any such event. In the event of a bankruptcy, insolvency, reorganization, receivership or assignment for the benefit of creditors, we may not be able to control how your Personal Information is treated, transferred, or used.

IX. Contact Us

If you have any questions about this Policy, please contact via email us at: mConnect@holmusk.com.

To exercise any of your rights in this Privacy Policy, please contact us in writing, via email or postal mail as indicated above, so that we may consider your request under applicable law.

Please be aware that your request will not be accepted for review unless you provide the following:

  • The name, user ID, pseudonym, email address, or other identifier > that you have used to use the Site or Platform, or if you are not > a registered user of the service, or have not otherwise previously > interacted with us, your first and last name and an address where > we can correspond with you.
  • State or Country in which you are located.
  • Clear description of the information or content you wish to receive > or to be deleted or corrected, or the action you wish to be taken; > and
  • Sufficient information to allow us to locate the content or > information to be deleted, removed or corrected

For your protection, we may only implement requests with respect to the Personal Information associated with the particular email address that you use to send us your request.

In addition, please note that, depending on the nature of your inquiry, request or complaint, we may need to verify your identity before implementing your request and may require proof of identity, such as in the form of a government issued ID and proof of geographical address.

We will attempt to comply with your request as soon as reasonably practicable.