Privacy Policy

Last Updated: June 6, 2023

Introduction

Digital Therapeutics, Inc., Digital Therapeutics Ltd., Quit Genius Medical, P.A., Quit Genius Medical, P.C., Quit Genius Medical of Kansas, P.A., and Quit Genius Medical of New Jersey, P.C. (together “Quit Genius”, “we”, ”our” or “us”) are committed to protecting and respecting your privacy. This Privacy Policy sets out who we are, how we collect, store, process, transfer, share and use data that identifies, is associated or could be associated with, or is linked to you (“personal information”) and how you can exercise your privacy rights.

If you have any questions or concerns about our use of your personal information, then please contact us using the contact details provided at the bottom of this Policy.

Quit Genius provides a platform and services for treating individuals with substance use management challenges through a combination of any or all of the following depending on the program and the individual’s needs: digital content and other engagement tools, coaching programs, cognitive behavioral therapy, and medication assisted treatment which are delivered via the Quit Genius mobile application (our “App”), our website (available at www.pelagohealth.com ) and any site linking to this policy (our “Site”), connected devices, chat sessions, live virtual telephone or video sessions, and in certain cases in person meetings. For information about how our professional entities handle information protected by the Health Insurance Portability and Accountability Act, please see our separate Notice of Privacy Practices.

This Privacy Policy applies when you:

  • use our App, our Site, or any other site, app or service that links to this Privacy Policy (together the “Service”);
  • Communicate with us electronically, such as via email; or
  • Apply for a job with us.

Please note: we are in the process of rebranding from “Quit Genius” to “Pelago”, a process which will complete this Fall 2023. During this transition period you may see or hear references to both brand names. Each is a brand name under which the entities names above do business. The entities are the same entities regardless of which brand name they use.

Please read this Privacy Policy and understand how we collect, store, use and disclose your personal information before accessing or using the Service.

1. Who is Responsible for the Use of Your Personal Information

Quit Genius is the controller of the personal information we hold about you in connection with your use of the Service. This means that we determine and are responsible for how your personal information is used. You may contact us using the information located in the Contacting Us section below.

2. How We Collect Personal Information from You

2.1 We may have collected personal information about you from a variety of sources:

  • From You: We collect personal information that you voluntarily submit directly to us when you use the Service. This can include information you provide to us through the Site or when you set up an account, download and use the App, correspond with us by e-mail or otherwise, subscribe to our mailing lists or other forms of marketing communications, report a problem with the Service, or use some other feature of the Service.
  • From Your Use of Our Site or App: We also automatically collect personal information indirectly about how you access and use the Service, and information about the device you use to access the Service.
  • From Service Providers: We work with and receive personal information from third parties such as service providers, vendors, contractors, and market researchers.
  • From Other Sources: We may supplement the information described above with information we obtain from other third parties. The types of information we collect from third parties include eligibility and claims information of participants, background information on candidates applying for positions, screening and background checks on contractors and employees, prescription histories of members receiving prescriptions. We use the information we receive from these third parties to perform the Services, comply with legal and contractual obligations, and operate our business.

3. Personal Information We Collect and How We Use It.

You have the choice whether to provide us with your personal information. In some circumstances, if you choose not to provide such personal information, we may not be able to provide certain parts of the Service to you or respond to your other requests.

3.1. Information you provide to us directly.

The table at Annex 1 describes the categories of personal information we collect about you, how we use that information, the third parties with to whom we may disclose that information, and for users based in the European Economic Area (“EEA”) and UK, the legal basis which we rely on to process the personal information.

3.2 Information we automatically collect.

The table at Annex 2 describes the categories of personal information we collect about you automatically, how we use that information, the third parties with to whom we may disclose that information, and for users based in the EEA and UK, the legal basis which we rely on to process the personal information.

3.3.

We may link or combine the personal information we collect about you and the information we collect automatically. This allows us to provide you with a personalized experience regardless of how you interact with us.

3.4.

We may anonymize and aggregate any of the personal information we collect (so that it does not directly identify you). We may use anonymized information for purposes that include testing our IT systems, research, data analysis, improving the Service, and developing new products and features. We may also share such anonymized and aggregated information with others such as our clients.

4. How Long Will We Store Your Personal Information

We retain personal information we collect from you where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax or accounting requirements). When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible. In general, we keep information for as long as we are required to do so under applicable law, which can be as long as seven (7) years. Where we are not under a legal obligation to maintain information for a longer period, our general practice is to dispose of information after one (1) year from your last interaction with us.

5. Recipients of Personal Information

We may share your personal information with the following parties (as described in Annexes 1 and 2):

  • Medical professionals: we may share your personal information with third party medical associated with us professionals (“Providers”) that we engage to provide care and treatment to Members where indicated in our Programs or with your other care providers.
  • Service providers and contractors: we may share your personal information with service providers and contractors who perform services for us or on our behalf, which may include providing professional services (such as legal and accounting services), mailing, email, chat, or video services, fraud prevention, cloud or web hosting, analytic services, or fulfilling orders our Providers place for connected devices, medications, or other items for Members. We contractually require service providers and contractors acting on our behalf to take reasonable steps to protect your personal information and to not use your personal information for any purpose other than that for which it was given to the service provider or contractor.
  • Your Employer. If you enroll through a program offered or sponsored by your employer, we may provide information back to your employer related to, for example, your completion or progress through our program.
  • Third parties at your request: You may have the option to share your content with other users of the Service or with your other care providers.
  • Purchasers and third parties in connection with a corporate business transaction: your personal information may be disclosed to third parties in connection with a transaction, such as a merger, sale of assets or shares, reorganization, financing, change of control or acquisition of all or a portion of our business.
  • Affiliates: Other companies owned by or under common ownership as Quit Genius, including our subsidiaries (i.e., any organization we own or control) ultimate holding company (i.e., any organization that owns or controls us) and any subsidiaries it owns. These companies will use your personal information in the same way as we can under this Privacy Policy.
  • To federal, state, or local government agencies or to other third parties as required by applicable law or pursuant to a valid legal warrant, subpoena, court order, or other legal or regulatory mandate, or as necessary for us to defend or assert legal claims.
  • Analytics companies. We use selected third parties to collect data about how you interact with our Site and App. This information may be used to, among other things, improve the functionality of our Service.
  • From time to time, we may disclose your personal information to parties such as law enforcement or other government agencies when we, in good faith, believe you or others are acting unlawfully, when we believe it is necessary or appropriate to satisfy any law, regulation or other governmental request, to operate our business properly, to protect or defend our rights or the rights or well-being of our users, and when we believe disclosure is necessary or appropriate to protect the health and safety of our employees, other consumers, and the general public.

6. Marketing and Advertising

6.1.

From time to time we may contact you (by email, text or push notification) with information about your account and the use of our Services, including calls and texts about appointment reminders, patient account statements, and other informational messages or requests for patient feedback. You consent to receive these messages when you agree to our Terms of Use.

6.2

We may also send you marketing messages. For some marketing messages, we may use personal information we collect about you to help us determine the most relevant marketing information to share with you.

6.3.

If you are an EEA or UK-based user, we will only send you marketing emails, text messages or push notifications if you have given us your consent to do so.

6.4

We may disclose your mobile phone number to service providers with whom we contract in order to send you automated text messages, but we will not disclose your mobile phone number to third parties for their own marketing purposes without your express consent.

6.5.

To stop receiving marketing email or text message communications, you can follow the unsubscribe instructions in the communication. You can disable push notifications via the App settings on your device. Opting out of calls, texts messages and push notifications does not mean that we will not contact you about your account our Services.

7. Protecting, Storing and Transferring Your Personal Information

7.1. Safeguards.

We implement technical and organizational measures to protect your personal information against accidental or unlawful destruction, loss, change or damage. The measures we use are designed to provide a level of security appropriate to the risk of processing your personal information. Specific measures we use include, depending on the type of data, encrypting your personal information in transit and at rest; protecting your information with firewalls, anti-malware and data loss prevention systems; conducting vulnerability scans and penetration tests on systems holding your information; training our employees on security awareness and data handling topics; and having a third-party audit of our security controls annually.

7.2. International Transfers of your Personal Information.

The personal information we collect may be transferred to and stored in countries outside of the jurisdiction you are in where we and our third-party service providers have operations, including in the United States. If you are accessing our Service from the EEA or UK, in the event of such a transfer, we ensure that either: (i) the personal information is transferred to countries recognized as offering an equivalent level of protection; or (ii) the transfer is made pursuant to appropriate safeguards, such as the Standard Contractual Clauses adopted by the European Commission or as may be applicable, the equivalent clauses approved by the UK Government. For more information on the transfer safeguards we rely on and where they have been made available you may contact us by using the details in the Contacting Us section below.

8. Your Control Over Your Information

8.1. Access to your Device Information.

You may control the App’s access to your device information through your “Settings” on your device.

8.2. Modifying or deleting your information.

If you have any questions about reviewing, modifying, or deleting your information, you can contact us at privacy@pelagohealth.com. We may not be able to modify or delete your information in all circumstances.

9. Disclosures for EEA Users

9.1. If you are residing in the EEA or the UK, you may have the following rights:

  • Right of access. The right to obtain: (i) confirmation of whether, and where, we are processing your personal information; (ii) information about the categories of personal information we are processing, the purposes for which we process your personal information and information as to how we determine applicable retention periods; (iii) information about the categories of recipients with whom we may share your personal information; and (iv) a copy of the personal information we hold about you.
  • Right of portability. You have the right, in certain circumstances, to receive a copy of the personal information you have provided to us in a structured, commonly used, machine-readable format that supports re-use, or to request the transfer of your personal information to another person.
  • Right to rectification. You have the right to obtain rectification of any inaccurate or incomplete personal information we hold about you without undue delay.
  • Right to erasure. You have the right, in some circumstances, to require us to erase your personal information without undue delay if the continued processing of that personal information is not justified.
  • Right to restriction. You have the right, in some circumstances, to require us to limit the purposes for which we process your personal information if the continued processing of the personal information in this way is not justified, such as where the accuracy of the personal information is contested by you.
  • Right to withdraw consent. If you have provided consent for the processing of your personal information, you have the right to withdraw your consent. If you withdraw your consent, this will not affect the lawfulness of our use of your personal information before your withdrawal. However, in certain circumstances, if you withdraw your consent, we might not be able to continue providing Services to you as a result.
  • Right to opt-out of automated decision making. We use automated decision making to determine your eligibility for certain services. You can opt-out of our use of this form of decision making.

9.2.

You also have the right to object to any processing based on our legitimate interests where there are grounds relating to your particular situation. There may be compelling reasons for continuing to process your personal information, and we will assess and inform you if that is the case. You can object to marketing activities for any reason.

9.3.

If you wish to exercise one of these rights, please contact us using the details in the Contacting Us section below.

9.4.

Due to the confidential nature of data processing we may ask you to provide proof of identity when exercising the above rights. This may be done by a number of methods, including you providing a scanned copy of a valid identity document or a signed photocopy of a valid identity document.

9.5

You also have the right to lodge a complaint to your local data protection authority. If you are based in the EEA, information about how to contact your local data protection authority is available at: https://edpb.europa.eu/about-edpb/about-edpb/members_en#member-dk.

10. Automated Decision-Making

10.1

In some instances, our use of your personal information may result in automated decisions being taken (including profiling) that legally affect you or similarly significantly affect you. Automated decisions mean that a decision concerning you is made automatically on the basis of a computer determination (using software algorithms), without our human review. For example, we use automated decisions to determine the level of care to provide you based on your response to certain questions. We have implemented measures to safeguard the rights and interests of individuals whose personal information is subject to automated decision-making in accordance with applicable law.

As described above, when we make an automated decision about you, you have the right to contest the decision, to express your point of view, and to require a human review of the decision. Please see section 9.3 above for more information about how to exercise your rights.

11. Notice to Residents of California

11.1

If you are a resident of California, you have additional privacy rights, which you can read about in Annex 4.

12. Notice to Residents of Nevada

12.1

If you are a Nevada resident, you have the right to opt out of the sale of certain personal information, including your name and mailing address, to third parties. As of the date of this Privacy Policy, we do not sell any personal information to any third party.

13 Cookies, Tracking, and Do Not Track

13.1

Our Service uses cookies and similar technologies such as pixels and Local Storage Objects (LSOs) like HTML5 (together “cookies”) to distinguish you from other users. This helps us to provide you with a good experience and allows us to monitor and analyze how you use and interact with our Service so that we can continue to improve our Service. It also helps us and our advertising partners to determine products and services that may be of interest to you, in order to serve you targeted advertisements. Please see Annex 3 for our Cookie Notice.

13.2.

Although we do our best to honor the privacy preferences of our users, we are unable to respond to Do Not Track signals set by your browser at this time.

13.3

Our emails may contain tracking pixels that identify if and when you have opened an email that we have sent you, how many times you have read it and whether you have clicked on any links in that email. This helps us measure the effectiveness of our marketing email campaigns, make the emails we send to you more relevant to your interests and to understand if you have opened and read any important administrative emails we might send you. Most popular email clients will allow you to block these pixels by disabling certain external images in emails. You can do this through the settings on your email client – these generally give you the option of choosing whether emails will display “remote images”, ”remote content” or “images” by default.

14. Links to Third Party Sites

14.1

The Service may, from time to time, contain links to and from third party websites, including those of other users, our partner networks, advertisers, partner merchants, news publications, retailers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we are not responsible or liable for their policies, actions, or omissions. Please check the individual policies before you submit any information to those websites.

15. Our Policy Towards Children

15.1

The Service is not directed at persons under 18 and we do not knowingly collect personal information from any persons under 18. If you become aware that your child has provided us with personal information, without your consent, then please contact us using the details in the Contacting Us section below so that we can take steps to remove such information and terminate any account your child has created with us. We do not sell or share the information of any person under 18.

16. Changes to This Policy

16.1

We may update this Privacy Policy from time to time and so you should review this page periodically. When we change this Privacy Policy in a material way, we will update the “Last Updated” date at the top of this Privacy Policy. Changes to this Privacy Policy are effective when they are posted on this page. If we make material changes to this Privacy Policy we will make reasonable efforts to notify you of those changes to the extent required to do so by applicable law.

17. Contacting Us

You can contact us with questions by emailing us at privacy@pelagohealth.com or writing us at:

United Kingdom
Digital Therapeutics, Ltd.
Peer House Ps.03, Third Floor
8-14 Verulam Street
Holborn, London WC1X 8LZ, GB

United States
Digital Therapeutics, Inc.
1632 1st Ave. #20163
New York, NY 10028

Annex 1 – Personal Information You Provide to Us

Category of personal information How we may use it EEA / UK legal basis for the processing Third parties to whom the information may be disclosed
Identifiers and Information Subject to Protection under California Law such as your name, email address, mailing address, phone number, log in password, birth date, Social Security Numbers, and Driver License numbers. We may use this information to set up and authenticate your account on the Service. The processing is necessary for the performance of a contract with you and to take steps prior to entering into a contract with you, namely our Terms of Service. Service providers, your employer, medical professionals involved in your treatment, others who engage our services to offer them to you as part of your employee benefits, third party analytics companies, our affiliates, and other third parties as required by applicable law.
We may use this information to communicate with you, including sending service-related communications and to send you physical products. The processing is necessary for the performance of a contract with you, namely our Terms of Service. Service providers, your employer, medical professionals involved in your treatment, others who engage our services to offer them to you as part of your employee benefits, third party analytics companies, our affiliates, and other third parties as required by applicable law.
We may use this information to send you unsolicited marketing communications in accordance with your preferences. We will only use your personal information in this way to the extent you have given us consent to do so. Service providers, your employer, medical professionals involved in your treatment, others who engage our services to offer them to you as part of your employee benefits, third party analytics companies, our affiliates, and other third parties as required by applicable law.
We may use this information to deal with enquiries and complaints made by or about you relating to the Service. The processing is necessary for our legitimate interests, namely administering the Service, and for communicating with you effectively to respond to your queries or complaints. Service providers, your employer, medical professionals involved in your treatment, others who engage our services to offer them to you as part of your employee benefits, third party analytics companies, our affiliates, and other third parties as required by applicable law.
We may use this information to coordinate care with your healthcare providers or third party healthcare providers we arrange in order to provide the Services. The processing is necessary for the performance of a contract with you. Service providers, your employer, medical professionals involved in your treatment, others who engage our services to offer them to you as part of your employee benefits, third party analytics companies, our affiliates, and other third parties as required by applicable law.
Protected Classification Characteristics, such as your racial or ethnic origin. We may use this information to facilitate your use of the Services, to facilitate care coordination with third party health care providers, and for demographics analysis to improve the Services. We will only process this type of information when we have your consent. Service providers, your employer, medical professionals involved in your treatment, our affiliates, and other third parties as required by applicable law.
Sensitive Personal Information. This includes your Protected Classification Characteristics (above) in addition to your health information, for example whether you are a smoker, whether you are pregnant, whether you have smoked in the last 7 days, and your Social Security Number and Driver’s License numbers. We may use this information to facilitate your use of the Service, to communicate with you, including sending service-related communications, and to coordinate care with third party health care providers. The processing is necessary for the performance of a contract with you, our legitimate interests and one of the conditions required by applicable law, such as the provision of healthcare or to comply with legal claims. If we are not able to rely on these legal bases, we will only process this information with your explicit consent. We do not sell or share this information. Our service providers, affiliates, medical providers, third party analytics companies, and other third parties as required by applicable law.
Audio, electronic, visual, thermal, olfactory, or similar information, such as photos and other media, each of which you present through technology available through the Service. We use this information to provide the Services. The processing is necessary for the performance of a contract with you, our legitimate interests and one of the conditions required by applicable law, such as the provision of healthcare or to comply with legal claims. If we are not able to rely on these legal bases, we will only process this information with your explicit consent. Our service providers, affiliates, medical providers, and other third parties as required by applicable law.
Correspondence and comments. When you contact us directly, e.g. by email, phone, mail, when you respond to customer surveys or when you interact with customer service, we will record your comments and opinions. To address your questions, issues and concerns and to resolve your customer service issues. This processing is necessary for our legitimate interests, namely, administering the Service and communicating with you in connection with the Service. Our service providers, affiliates, medical providers, and other third parties as required by applicable law.
Professional Information, including information relating to your role as a representative or agent of a company or business, such as your work title and contact information. We use this information provided by clients, vendors, and other business partners in order to conduct business with them. The processing is necessary for our legitimate interest, or performance of the employment contract with you. Our service providers, affiliates, medical providers, and other third parties as required by applicable law.
Your preferences, such as preferences set for notifications, marketing communications, how the Service is displayed and the active functionalities on the Service. We use this information to provide notifications, send news, alerts and marketing communications and provide the Service in accordance with your choices. The processing is necessary for our legitimate interest, namely ensuring the user receives the correct marketing and other communications, and that this is displayed in accordance with the user’s preferences. We will only send you marketing communications when we have your consent. Our service providers, affiliates, medical providers, and other third parties as required by applicable law.
We use this information to ensure that we comply with our legal obligation to send only those marketing communications to which you have consented. The processing is necessary for our legitimate interest, namely ensuring the user receives the correct marketing and other communications, and that this is displayed in accordance with the user’s preferences. We will only send you marketing communications when we have your consent. Our service providers, affiliates, medical providers, and other third parties as required by applicable law.
Inferences. We may use the information you provide and combine it with the information we receive from others to draw inferences related to, for example, your eligibility for our services. We use this information to verify eligibility to receive our Services. We will only process this type of information when we have your consent. Our service providers, affiliates, medical providers, and other third parties as required by applicable law.
Internet and Other Electronic Activity Information, such as your browsing history, search history, information about your interactions with our website, use our mobile apps, or interact with our digital advertisements Please see Annex 2 Please see Annex 2

In addition to the uses above, we may use the information we obtain from you:

  • When you give us your consent;
  • To comply with applicable law;
  • To assert or defend our rights or those of others; or
  • in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

Annex 2 – Personal Information Collected Automatically

Category of personal information How we may use it EEA/UK legal basis for the processing Third parties to whom the information may be disclosed
Information about how you access and use the Service. For example, how frequently you access the Service, the time you access the Service and how long you use it for, the approximate location that you access the Service from, whether you access the Service from multiple devices, and other actions you take on the Service. We may use information about how you use and connect to the Service to present the Service to you on your device. The processing is necessary for our legitimate interests and performance of a contract with you, namely to tailor the Service to the user’s preferences. Our service providers, third party analytics companies, our affiliates and to other third parties as required by applicable law
We may use this information to determine products and services that may be of interest to you for marketing purposes. We will only process your data for marketing purposes when we have obtained your consent or when the processing is necessary for our legitimate interests. Our service providers, our affiliates and to other third parties as required by applicable law
We may use this information to monitor and improve the Service and business, resolve issues and to inform the development of new products and services. The processing is necessary for our legitimate interests, namely to monitor and resolve issues with the Service and to improve the Service generally. Our service providers, third party analytics companies, our affiliates and to other third parties as required by applicable law
Log files and information about your device. We also collect information about the tablet, smartphone or other electronic device you use to connect to the Service. This information can include details about the type of device, unique device identifying numbers, operating systems, browsers and applications connected to the Service through the device, your mobile network, your IP address and your device identifier. We may use information about how you use and connect to the Service to present the Service to you on your device. The processing is necessary for our legitimate interests, namely, to tailor the Service to the user’s preferences. Our service providers, third party analytics companies, our affiliates and to other third parties as required by applicable law
We may use this information to determine products and services that may be of interest to you for marketing purposes.
  • The processing is necessary to provide a better experience to you by offering personalized Services. We will only process your data for marketing purposes when we have obtained your consent or when the processing is necessary for our legitimate interests.
  • The processing is necessary for the performance for us to perform the contract we have with you in order to provide our Services.
  • We will only process your data for marketing purposes when we have obtained your consent.
Our service providers, our affiliates and to other third parties as required by applicable law.
We may use this information to monitor and improve the App and business, resolve issues and to inform the development of new products and services. The processing is necessary for our legitimate interests or to perform the contract we have with you in order to provide the Service, namely, to monitor and resolve issues with the Service and to improve the Service generally. Our service providers, third party analytics companies, our affiliates and to other third parties as required by applicable law.
Non-specific geolocation, which we obtain from your devices that access the Service. We may use this information to facilitate the timing of communications and display of currencies. Also to identify technical issues. The processing is necessary for our legitimate interests or performance of a contract with you. Our service providers, third party analytics companies, our affiliates and to other third parties as required by applicable law.
Identifiers such as your IP address and device identifier We may use this information to assess and diagnose technical issues, for performance monitoring. The processing is necessary for our legitimate interests or to perform the contract we have with you. Our service providers, third party analytics companies, our affiliates and to other third parties as required by applicable law.

In addition to the uses above, we may use the information we obtain from you:

  • When you give us your consent;
  • To comply with applicable law;
  • To defend our rights or those of others; or
  • in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

Annex 3 – Cookie Notice

This cookie notice (the “Cookie Notice”) describes how Quit Genius uses cookies and other similar technologies on our Services. It explains what these technologies are and why we use them, as well as your rights to control our use of them.

What are cookies?

A cookie is a small text file that our Site stores on your computer or mobile device when you visit our Site.
Depending on their function and intended purpose, cookies are often classified in the following categories:

  • “First party cookies” are cookies set by the website you are visiting. In addition, a website might potentially use external services, which also set their own cookies, known as “third-party cookies.”
  • “Persistent cookies” are cookies saved on your computer and that are not deleted automatically when you quit your browser, unlike a “session cookie,” which is deleted when you quit your browser.
  • “Essential cookies” are required so that you can navigate on a website and use its features. Without these cookies, functionalities cannot be ensured by the website.
  • “Performance cookies” are cookies that collect information on how a website is used. These cookies do not retain any information that allows to identify the website user. The collected information will be aggregated and thus will be analyzed in a non-attributable way to a specific person. These cookies are used exclusively to improve the performance of a website and the user’s experience.
  • “Functional cookies” are cookies that enable a website to save details that have already been provided and to offer the website user personalized functions. These cookies collect anonymized information and cannot track your traffic on other websites.
  • “Cookies for marketing purposes” are cookies used to extract advertisements that are relevant to specific users and adapted to their interests. These cookies register whether you have visited a website or not, and this information can be shared with third parties.

Every time you visit the Site, you will be prompted to accept non-essential cookies. The purpose is to enable our Site to remember your preferences (e.g., your username) for a certain period of time.
Cookies can also be used to establish anonymized statistics about the browsing experience on our Site.

Which types of cookies do we use?

Type of cookie Who Serves these cookies Persistent / session Purposes / Additional information Change cookie settings
Essential Amazon AWS Persistent These cookies are strictly necessary to provide you with services available through our Site and to use some of its features, such as access to secure areas. Because these cookies are strictly necessary to deliver the Site to you, you cannot refuse them.
Analytical / performance Google Analytics Persistent We use Google Analytics to gain insights into how users use our Service, and to improve the functionality of the Service. To refuse these cookies, please follow the instructions below under the heading “How can you control cookies?”
You can learn more about Google’s practices at http://www.google.com/policies/privacy/partners and view its currently available opt-out options at https://tools.google.com/dlpage/gaoptout.
Analytical / performance Facebook Analytics Persistent We use Facebook Analytics to help us better understand the traffic that comes from our Facebook and/or Facebook ads. To refuse these cookies, please follow the instructions below under the heading “How can you control cookies?”
You can learn more about Facebook’s practices at https://www.facebook.com/policy.php.
Analytical / performance Mixpanel Persistent We use Mixpanel to track user behavior in our Apps. To refuse these cookies, please follow the instructions below under the heading “How can you control cookies?”
You can learn more about Mixpanel’s practices at https://mixpanel.com/legal/privacy-policy/.
Analytical / performance Amplitude Persistent We use Amplitude to track user language, location, device and browser used, and user sign in and actions. To refuse these cookies, please follow the instructions below under the heading “How can you control cookies?”
You can learn more about Amplitude practices at https://www.amplitude.com/privacy
First party cookies Survey Monkey Persistent We use Survey Monkey to display member feedback surveys in our mobile application and gather feedback from members to improve our services. To refuse these cookies, please follow the instructions below under the heading “How can you control cookies?”
You can learn more about Survey Monkey practices at https://www.surveymonkey.co.uk/mp/legal/survey-page-cookies/
First party cookies Iterable Persistent We use Iterable to send communications to eligible members and existing members to encourage them to use our services. Iterable uses browser cookies to track campaign performance. To refuse these cookies, please follow the instructions below under the heading “How can you control cookies?”
You can learn more about Iterable practices at https://iterable.com/trust/privacy-policy/

Other tracking technologies

Cookies are not the only way to recognize or track visitors to a website. We may use other, similar technologies from time to time, like web beacons (sometimes called “tracking pixels” or “clear gifs”). These are tiny graphics files that contain a unique identifier that enable us to recognize when someone has visited our Site. In many instances, these technologies are reliant on cookies to function properly, and so declining cookies will often impair their functioning.

How can you control cookies?

The cookies we use are designed to help you get the most from the Service but if you do not wish to receive cookies, most browsers and devices allow you to change your cookie settings. Depending on your mobile device and operating system, you may not be able to delete or block all cookies. Please note that if you choose to refuse all cookies you may not be able to use the full functionality of our Service. These settings will typically be found in the “options” or “preferences” menu of your browser.

In addition, most advertising networks offer you a way to opt out of targeted advertising. If you would like to find out more information, please visit http://www.aboutads.info/choices/ or http://www.youronlinechoices.com.

For mobile users, you have controls in your device Operating System that enables you to choose whether to allow cookies or share your advertising ID with companies like Quit Genius or our advertising service providers. To block the IDFA on your iOS mobile device, you should follow this path: Settings > General > About > Advertising and then turn on ‘Limit Ad Tracking’. To block Android ID on your Android device, you should follow this path: Google Settings > Ads and then turn on ‘Opt out of interest-based ads’. Please note that deleting or blocking cookies may not be effective for all types of tracking technologies, such as Local Storage Objects (LSOs) like HTML5.

How can this Cookie Notice be modified?

This Cookie Notice may be amended from time to time by Quit Genius, at its sole discretion. Any and all changes to this Cookie Notice will be reflected here and the date of the latest version of the Cookie Notice will be stated at the top of this Site. Any material changes to this Cookie Notice will be communicated on this Site.

How can you contact us?

If you have any questions regarding our Cookie Notice, please contact us at privacy@pelagohealth.com.

Annex 4 – California Privacy Disclosures

In addition to the disclosures in our privacy policy, which identify how we collect personal information, how we use that information, the purposes of our use, to whom we may disclose that information, how long we retain information, and how we secure the information we collect, this section includes additional disclosures applicable to residents of California.

Shine The Light

California Civil Code Section 1798.83, also known as the “Shine The Light” law, allows California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us using the contact information provided below. However, please be aware that we are not sharing your information for any third party’s marketing purposes.

Selling and Sharing of Personal Information

Quit Genius has not sold consumers’ personal information in the preceding 12 months for any monetary value. However, our use of certain website cookies may be considered a “sale” of information under California law. In the past twelve months, we may have disclosed your internet activity or geolocation with third parties whose cookies are on our websites. These cookies are used to analyze usage of our website, provide you with relevant Quit Genius advertising and products, and provide additional, dynamic functionality to our websites. You can opt-out of the use of these cookies by using the “Do Not Sell My Personal Information” link in the footer of the web page. We also recognize opt-out preference signals contained in HTTP header fields.

Quit Genius does not “share” personal information as that term is used in the California Consumer Privacy Act.

We do not use or disclose your sensitive personal information for any purpose other than as permitted by applicable law. We do not sell or share your sensitive personal information as those terms are used in the California Consumer Privacy Act.

Financial Incentives

From time to time, we may offer financial incentives to consumers in exchange for the consumer sharing certain personal information with us. The specific instructions for how to participate and the rewards offered as incentives may vary and are set out within each program. Our good faith estimate of the value of your information is the value of the benefit we offer to you. We have calculated that value by using the expense to us of operating the program related to the benefit obtained by our running of the program. To participate in any incentive-based programs you can opt-in by signing up for the incentive when it is offered to you. Participation in our promotional programs is always optional, and you can terminate program participation at any time as explained in the applicable program terms. You can also contact us at privacy@pelagohealth.com to unsubscribe or cancel your participation in any program.

Privacy Rights

If you are a California resident, you are entitled to certain privacy rights relating to your personal information, subject to certain legal limitations. This section describes those rights and how you can exercise those rights.

Right to Access Personal Information

You have the right to access and know what personal information Quit Genius collects about you, and how it uses, discloses, sells such personal information. You also have the right to request, to the extent technically feasible, a portable set of your personal information.

Right to Request Deletion of your Personal Information

You have the right to request that Quit Genius delete the personal information it has about you. If we do not delete your personal information for reasons permitted under applicable law, we will let you know.

Right to Correct Inaccurate Personal Information

You have the right to request that Quit Genius correct inaccurate personal information that we maintain about you.

Right to Opt Out of Sale of your Personal Information

You have the right to opt out of the sale or sharing of your Personal Data as described above.

Exercising Your Privacy Rights

If you are a California Consumer, to exercise your rights, please submit a request using one of the following methods:

Quit Genius cannot respond to your request or provide you with personal information if we cannot verify your identity or your authority to make the request. When you submit a request, we will take steps to verify your identity by comparing it to data in our possession or other methods such as, if you have an account with us, sending an email to the email address we have on file for you asking you to confirm your identity and that you have authorized a request. You are not required to create an account with us to submit a request. If you don’t have an account with us, or if you do but we need further information to verify your identity, we may ask you to provide us with information about yourself in order to verify your identity.

We will only use personal information you provide in connection with identity verification to verify the requestor’s identity or authority to make the request and whenever feasible, we will attempt to match the information you provide with information we may already have about you.

If you wish to authorize a third party to make a request on your behalf through an authorized agent, you must contact us directly as provided above and you or your agent must provide a valid California power of attorney or comparable documentation of written permission from you and verification of your identity with Quit Genius. You may also make a privacy request on behalf of your minor child by contacting us as provided above.

Non-Discrimination

We will not discriminate or retaliate against you for exercising any of your privacy rights identified in this privacy policy.

Say hello to brighter days together

Get started quickly. Reduce healthcare spend. Change lives forever.