Privacy Policy

Introduction

Grata Health Inc. operates the Sobo mobile application and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use Sobo and related services.

In this policy, "Sobo," "we," "us," and "our" refer to Grata Health Inc.

By using Sobo, you agree to the collection and use of information as described in this Privacy Policy.

Relationship Between Entities

Sobo is a software application operated by Grata Health Inc.

Clinical services referenced or made available through Sobo are provided by licensed healthcare professionals affiliated with Grata Health Care P.C., a separate medical professional corporation.

Grata Health Inc. provides technology and administrative services. Grata Health Care P.C. provides medical care.

Information you share may be used by both entities as appropriate to deliver services, perform eligibility checks, and support your care experience.

Information We Collect

We collect several types of information depending on how you use Sobo.

Information You Provide Directly

This may include:

• Account information such as name, email address, and login credentials
• Messages, journal entries, and conversational data shared with Sobo
• Recovery progress and check-in information
• Support requests and communications
• Insurance information, if you choose to provide it

Automatically Collected Information

When you use Sobo, we may automatically collect:

• Device type and operating system
• App usage information
• Log data
• IP address
• General location information
• App store account country
• Device identifiers, including advertising identifiers where you have given permission
• Purchase and subscription status
• Performance and error data

Information From Third Parties

If you choose to pursue care services, we may collect information from:

• Health insurance providers for eligibility verification
• Licensed healthcare providers affiliated with Grata Health Care P.C.
• Authorized service providers that support our operations

How We Use Your Information

We use the information we collect to:

• Provide and operate the Sobo application
• Personalize your experience and remember your preferences
• Enable conversational continuity and contextual support
• Improve and enhance our Services
• Process and manage subscriptions and in-app purchases
• Determine which subscription options, offers, and access requirements apply in your region
• Respond to your questions and support requests
• Maintain security and prevent misuse
• Conduct insurance eligibility verification when authorized
• Facilitate potential access to clinical services through Grata Health Care P.C.
• Comply with legal and regulatory obligations

Insurance Eligibility Verification

If you provide insurance information and request verification, Grata Health Inc. may use that information to confirm eligibility and benefits on your behalf.

This process may involve contacting insurance providers and transmitting necessary information solely for administrative and care coordination purposes.

Eligibility verification occurs only with your authorization.

Subscriptions and In-App Purchases

Sobo offers paid subscriptions purchased through the Apple App Store or Google Play. Payment is collected and processed entirely by Apple or Google. We never receive or store your full payment card details.

We use a third-party subscription management platform, RevenueCat, to process and manage subscriptions. In connection with your purchase, RevenueCat may receive information such as your account identifier, purchase and transaction history, subscription status, and device identifiers. We also store your subscription status on our servers so that subscription features work across your devices.

Subscription availability, pricing, and whether a subscription is required to access certain features may vary by region. To determine which subscription experience applies to your account, we use your app store account country and, within the United States, your state, which may be provided by you during onboarding or estimated from your IP address, along with the date your account was created.

You can manage or cancel your subscription at any time through your Apple App Store or Google Play account settings.

Advertising Attribution and Measurement

We work with attribution and measurement partners, such as AppsFlyer, to understand how users discover Sobo and to measure the effectiveness of our advertising campaigns. Where you have given permission (for example, through Apple's App Tracking Transparency prompt on iOS), these partners may receive device identifiers, including advertising identifiers, and app events such as installs, trial starts, and subscription purchases.

This information may be shared with advertising networks on which we advertise for campaign measurement purposes. It does not include your conversations, journal entries, or recovery information.

You can withdraw tracking permission at any time in your device settings. On iOS, go to Settings, then Privacy & Security, then Tracking. On Android, you can reset or delete your advertising ID in your device's privacy settings.

Disclosure of Information

We may share information in the following circumstances:

With Service Providers

We may share information with vendors and partners who help us operate Sobo, including providers of:

• Hosting services
• Analytics tools
• Subscription and purchase management platforms
• Advertising attribution and measurement partners
• Customer support platforms
• Security services

These providers are permitted to use information only to perform services on our behalf and are required to maintain confidentiality.

With Healthcare Providers

If you choose to pursue care, we may share relevant information with licensed professionals affiliated with Grata Health Care P.C. to support treatment, eligibility, and care coordination.

For Legal and Safety Reasons

We may disclose information when required by law, to protect our rights, to prevent fraud, or to protect the safety of users or others.

Use of Personal Information

We use personal information only for purposes described in this Privacy Policy and as permitted by law.

We do not sell personal information as defined by applicable privacy laws.

We may use aggregated or de-identified information for analytics, research, and product improvement. Such information does not identify you personally.

Data Security

We take the security of your information seriously.

• Data is encrypted in transit and at rest
• Access is limited to authorized personnel
• We use administrative, technical, and physical safeguards
• We regularly review our security practices

No system can be completely secure. We work continuously to protect your information to the best of our ability.

Data Retention

We retain information as long as needed to provide Services, comply with legal obligations, resolve disputes, and enforce our agreements.

If you close your account or request deletion, we will remove or de-identify your personal information, except where retention is required by law.

Your Rights and Choices

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request corrections to inaccurate information
• Request deletion of your information
• Receive a copy of your data in a portable format
• Opt out of certain processing activities

To exercise any of these rights, contact us at hello@grata-health.com.

Health Information and HIPAA

If you receive clinical services from Grata Health Care P.C., certain information may be protected under the Health Insurance Portability and Accountability Act, known as HIPAA.

Protected health information handled in connection with clinical services is managed in accordance with HIPAA and applicable law.

This Privacy Policy applies to information collected and processed by Grata Health Inc. through Sobo. Clinical information maintained by Grata Health Care P.C. is subject to that entity's own HIPAA Notice of Privacy Practices.

Third-Party Links and Services

Sobo may contain links to external websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their policies before sharing information.

International Users

If you use Sobo from outside the United States, your information may be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.

Children's Privacy

Sobo is intended for adults only. We do not knowingly collect personal information from individuals under 18 years of age. If we learn that such information has been collected, we will take steps to delete it.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the Services or by other appropriate means.

Your continued use of Sobo after changes are posted indicates acceptance of the updated policy.

Contact Us

If you have questions or concerns about this Privacy Policy or your information, please contact us: