Raise Your Game Charity Challenge Privacy and Data

Raise Your Game (RYG) App Terms and Conditions

Introduction
Welcome to our terms and conditions which outlines our code of practice during a challenge. When using the app we need to make you aware that we pride ourselves on making the app as user friendly as possible and ensuring that your personal data is managed and stored in line with GDPR.

Registration data
When you sign up for the challenge, we ask you for information such as your username, password, email address. We may also collect health tracking data when you choose to enter it. You may also choose to voluntarily add other information in the chat functions.

Your mobile device
We may provide features that rely on the use of additional information on your mobile device or require access to certain services on your mobile device that will enhance your experience but are not required to use the Service. For example, we might allow you to upload photos to your profile or synchronisation with other apps and wearables. Granting us access does not mean you are granting us unlimited access to that information or that we will access specific information without your permission. To the contrary, for each type of information listed in this section, before we access this information or these features of your mobile device, we will ask for your permission. If you provide such permission, we will collect the information for the specific purposes explained at the time we ask for your permission. You do not have to give us such permission in order to use RYG app, and acceptance of this document does not mean you have granted us permission to access this information. We will name any organisations and/or coaches who can access your data.

In particular:
Photos and Camera: We will not access your photos or camera without first getting your explicit permission and we will never scan or import your photo library or camera roll. If you give us permission to access photos or your camera, we will only use images that you specifically choose to share with us. (You may use our application to select the photo or photos you choose to upload, but we will never import the photos you review except those you explicitly share.).
Location: We will not gather or use the specific location of your mobile device
Contacts: We will not scan or import your contacts stored on your phone
Synchronisation data: We will pull information from other wearables/apps that integrate with RYG app. This will only occur if you grant permission to connect.
Opting in: We ask you to opt-in to all our processes and systems. We want to ensure that we obtain your informed consent on our management of your personal data when we collect it throughout the app.
Data deletion: You are requested to delete your RYG account at the end of the challenge or if you decide not to continue at any point. If you ask us to delete your data from our systems, we will delete your data from our systems completely and with reasonable expediency.​ You can delete the app account at any time from your phone.​
Consent: You can withdraw your consent at any time. You can refuse to consent to coaching.
We are not required to litigate or otherwise pursue any wrongful disclosure of your data and information. To the extent that any of your data or information contains protected health information, you hereby expressly consent to the disclosure of such protected health information when you accept an invitation from a Coach.

Data Storage
Creating a HIPAA-compliant digital coaching platform begins with where all the data lives, and for us, that begins with our key partner in HIPAA-compliance and security, and that’s leading cloud-based secure hosting provider, Armor.

Third Party Services
We may use a variety of services offered by third parties to help maintain and improve our app to help us understand the use of our services, or simply to provide the services. These services may store both personally identifiable information about you which we collect and the information sent by your browser as part of a web page request, such as cookies or your IP address. If any third parties are given access to your personally identifiable information, we will limit the use of such personally identifiable information only to provide the services to us which we have requested.

Policy towards Children
The challenge and RYG app are not directed to people under the age of 18. If you become aware that your child has provided personally identifiable information, please contact info@healthoutfit.co.uk. We do not knowingly permit people under 18 to use our app. If we become aware that a child has provided us with personally identifiable information, we will take steps to remove such information and terminate the child’s account.

Information Security, Retention, and Data Integrity
We take reasonable security measures to protect against unauthorized access to or unauthorized alteration, disclosure or destruction of data. These include firewalls and encryption, internal reviews of our data collection, storage and processing practices and security measures, as well as physical security measures to guard against unauthorized access to systems.
Our software code and all data and information reside on servers that comply with the requirements of the Health Insurance Portability and Accountability Act of 1996. In addition, our software code resides on one set of servers and all data and information reside on a separate set of servers.
We restrict access to personal information to our employees, contractors and agents who need to know that information in order to operate, develop or improve our Services. These individuals are bound by confidentiality obligations and may be subject to discipline, including termination, if they fail to meet these obligations.
However, we are unable to guarantee that the security measures we take will not be penetrated or compromised or that your information will remain secure under all circumstances.

Transfer of Information on Sale and for Legal Compliance
RYG uses a platform developed and owned by NudgeCoach. Notwithstanding anything to the contrary in this Terms and conditions: (a) upon a sale of Nudge or all or substantially all of its assets, we reserve the right to transfer to the purchaser of Nudge all data it has, including without limitation all Log Data and all personally identifiable data concerning you and any user of the Nudge Sites and the Services and (b) we will share your personal information if we have a good faith belief that: (i) access, use, preservation or disclosure of such information is reasonably necessary to satisfy any applicable law, regulation, legal process, such as a court order or subpoena, or a request by law enforcement or governmental authorities, (ii) such action is appropriate (A) to enforce the Terms of Service, including any investigation of potential violations thereof, or (B) to detect, prevent, or otherwise address fraud, security or technical issues associated with the Nudge Sites and the Services, or (iii) such action is appropriate to protect the rights, property or safety of Nudge, its employees, users of the Nudge Sites and the Services

Users
The app is hosted on a high security cloud based server in the United States. If you access the App from the European Union, Asia, or any other region with laws or regulations governing personal data collection, use, and disclosure that differ from United States laws, please be advised that through your continued use of the app you are transferring your personal information to the United States and you consent to that transfer.
Additionally, you understand that your personal information may be processed in countries (including the United States) where laws regarding processing personal information may be less stringent than in your country.

Access
You retain the right to access, amend, correct or delete your personal information where it is inaccurate at any time. To do so, please contact info@healthoutfit.co.uk