MASS GENERAL BRIGHAM INCORPORATED ("Mass General Brigham")
MASS GENERAL BRIGHAM CARE CONNECT PRIVACY POLICY

The MASS GENERAL BRIGHAM CARE CONNECT application ("the Application") Privacy Policy, along with the MASS GENERAL BRIGHAM CARE CONNECT Terms of Use, and the Mass General Brigham Notice of Privacy Practices will tell you what information we collect through the Application and how it is used. By using the Application, you agree to acceptance of this Privacy Policy.

Please read the following carefully before using the Application.

Please note that your use of the Application is also subject to the Application Terms of Use. In addition, individually identifiable information that we collect in connection with your use of the Application through the registration process, through access to and use of the tools and functionality within the Application in preparation for a virtual visit with a healthcare provider, and the virtual visit itself, is considered "Protected Health Information" as defined under the Health Insurance Portability & Accountability Act and related regulations (collectively referred to as "HIPAA") and is also subject to the Mass General Brigham Notice of Privacy Practices. Certain non-individually identifiable information that we may collect from Application users as described in this Privacy Policy is not considered "Protected Health Information" as defined under HIPAA and is not subject to the Mass General Brigham Notice of Privacy Practices.

In hosting the Application for download, Apple or Google (through the App Store or Google Play Store, respectively) may have access to a limited amount of the user's information, provided directly by the user (including but not limited to name, email, IP address, and the app downloaded). However, neither Apple nor Google collect such information for or on behalf of Mass General Brigham, and it will not be subject to the Mass General Brigham Notice of Privacy Practices or this Privacy Policy. By agreeing to these terms, you acknowledge that information provided to Apple or Google by the user does not constitute protected health information under HIPAA.

By using the Application, you consent to the collection, use and sharing of information as described in this Application Privacy Policy.

When you download and use the Application, we may collect personal information from you such as IP address and other location data, demographic information (e.g., name, address, birthdate, email address and phone number), insurance policy number and device information (e.g., device platform, operating system type and version) in connection with the registration, download, and use of this Application. In addition, we may collect additional information in connection with your use of certain features of the Application. For example, we may collect, or you may be asked to provide, additional personal information, such as medical history and current medical information, and your responses to the MASS GENERAL BRIGHAM CARE CONNECT intake and assessment questions, if you choose to use the Application.

If you submit to Mass General Brigham any personal information relating to other people, you represent that you have the authority to do so and permit us to use the information in accordance with this Application Privacy Policy. By submitting personal information, you grant Mass General Brigham the right to transmit, monitor, retrieve, store, share and use such information in connection with the ongoing operation, support, maintenance, and continued development of future versions of the Application.

Information We Collect

Use of Third-Party Services; Information Collected Through Interaction with the Application

Cookies, Tracking and Internet-based Advertising

The Application uses cookies, which are small data files placed on a user's computer or mobile device through the user's web browser so that data can be stored and retrieved about the user. The information is stored and retrievable either for the duration of an Application visit (called "session cookies"), or for a longer period defined by the application setting the cookie (called "persistent cookies"). The Application also uses other tracking technologies, such as web beacons and software development kits (SDKs). Web beacons are tiny graphics files that contain a unique identifier that allow us to recognize when someone has visited the Application. SDKs are small pieces of code included in mobile applications that function like cookies and web beacons. For the purpose of this Application Privacy Policy, we will refer to all tracking technologies as "cookies."

Cookies can be set by Mass General Brigham or by our service providers, which are providers of third-party products or services. Service providers include Google and others who help us track and analyze user activity on the application.

Examples of information we and our service providers collect include how often someone visits and/or uses this Application and what they do while on the Application. We and our service providers use this information in the aggregate to understand how our visitors as a group use different resources and to help us improve the Application. We and our service providers also collect information about the activity of individual application users. This information may be used to direct related Mass General Brigham advertisements and/or informational content to Application users when they visit other Mass General Brigham websites or applications.

There are a variety of tools publicly available to manage cookies and similar technologies that collect information related to your use of the application. Learn more from (i) the FTC or (ii) the Digital Advertising Alliance opt-out page, which allows users to opt out from receiving interest-based advertising.

We are not responsible for the effectiveness or compliance of third party opt-out mechanisms or programs. Please note that if you delete your cookies or upgrade your browser after having opted out of cookies, you will need to opt out again. Further, if you use multiple browsers or devices you will need to opt out of cookies on each browser or device. You can access the information on this Application without enabling cookies in your browser, but disabling cookies may result in a diminished ability to take advantage of the services and related informational content on the Application.

We use Piwik PRO Analytics Suite as our website/app analytics software and consent management tool. We collect data about website visitors based on cookies. The collected information may include a visitor's IP address, operating system, browser ID, browsing activity and other information. See the scope of data collected by Piwik PRO.

Our service providers may acquire additional information about your activity on the Application, including pages you visit, access times, visit duration, how you arrived at the Application and your IP address. An IP address is a number that identifies a device connected to the Internet. For most devices, the IP address changes on at least a weekly basis. Our service providers may also acquire device identifiers and specific information about the browser you use. In some cases, this information may be unique to you.

We use the information you provide to operate and manage the Application as described in more detail below, to provide virtual clinical services offered through the Application, to obtain payment for those services, respond to user inquiries, or in other ways as specified in the Mass General Brigham Care Connect Terms of Use and Mass General Brigham Notice of Privacy Practices or as required by law.

In addition, we may use your information to:

• Help us improve the services and content we offer
• Personalize your experience and inform you about the treatments/services in which you have indicated an interest
• Tailor digital advertisements on third-party applications based on your interactions on the Application
• Improve the Application offerings and send you information and updates
• Respond to your questions and requests and improve customer service
• Communicate changes to the Application Privacy Policy or Terms of Use

Health care providers associated with Mass General Brigham, or an entity affiliated with Mass General Brigham will have access to your information to price virtual clinical services offered through the Application.

We will also share your information with third parties in connection with obtaining prior authorization from insurance companies for the virtual clinical services and obtaining payment for those virtual clinical services.

In some cases, third parties contracted by Mass General Brigham may have access to your information to perform a specific task, for example, assisting us with operating Mass General Brigham Care Connect or monitoring application use and performance.

Mass General Brigham seeks to prevent unauthorized access to your personal information by use of security technologies to protect the integrity and privacy of any personal information you provide.

Although we endeavor to protect your personal information, Mass General Brigham cannot and does not warrant the security of any information you transmit to us through online applications, and you do so at your own risk. For security purposes, if you wish to contact us, use the email address below.

Some sections of the Application may require login identifiers and/or passwords. You are responsible for taking reasonable steps to ensure that no unauthorized person has access to your password or account login information. It is your sole responsibility to control the use of login information and passwords, to authorize, monitor and control access to and use of your account and password and to inform promptly of any need to deactivate a password.

Mass General Brigham reserves the right to change or update this Privacy Policy from time to time without notice, so please review it periodically to keep informed of any changes.

If you have questions or comments regarding this Privacy Policy or about how we collect, use or protect your personal information, please contact us by phone at 617-648-5822. Your communications with the Application team may be recorded for quality assurance purposes.