Effective date: May 27, 2022
What Personal Information does Hero Collect?
Information you provide to us:
We receive and store any Personal Information you knowingly provide to us. For example, through the registration process, through your account settings and/or through your use of the Services, we may collect the following Personal Information:
- First and Last name
- Contact information (Including: Email address, Phone number and Address)
- Demographic data (such as: Gender, Ethnicity, Date of birth and Zip code )
- Health condition(s)
- Medication information (such as: Your prescriptions and over-the-counter drugs, medication-taking schedule, if/when you take them, and if/when they may need to be refilled)
- Self-reported data (Including information on how you feel, vital signs and other health measurements)
If you sign up for Refill and Delivery, you may also need to provide us with additional information regarding your insurance, health conditions and medications, including:
- Insurance data (such as: Insurance carrier, Insurance plan, Member ID, Group ID and Payer ID)
- Prescription information (including: list of prescribed and over-the-counter drugs, where and when you fill them)
- Medical history (including information about surgeries, hospitalizations, smoking and drinking)
If you choose to use certain services offered by Hero, you may be asked to provide access to:
- Certain apps on your phone (such as: Contact list, Email, Text messaging)
- Third-party account credentials
We may use the Personal Information you provide to us to operate, improve, understand and customize our Services for you. For example, if you provide your medical data to us, you understand we may use such data to improve and personalize our Services for you and/or to identify, select and contact you about offers, including offers to participate in certain features of the Services that we think may interest or benefit you, such as beta, pre-release, and/or new features that may entail sharing your information with a third party service provider. Certain information may be required to register with us or to take advantage of some of our features.
Specifically, we may use medication data that you provide us in order to determine whether you are a good fit for additional Services we may offer, including Refill and Delivery and/or Personal Pharmacist. Our use of your medication data for this purpose will be internal to Hero, and will only be used by our marketing teams to send you information and offers related to Refill and Delivery and/or Personal Pharmacist. We will not share any medication data with third parties, including any pharmacy partners, before you sign up for Refill and Delivery and/or Personal Pharmacist. You hereby acknowledge and consent to our use of your medication data in order to market Refill and Delivery and Personal Pharmacist to you.
We may communicate with you if you’ve provided us the means to do so. For example, if you’ve given us your email address, we may send you promotional email offers on behalf of Hero or other businesses, or email you about your use of the Services, including emails about Service announcements, updates or offers. Also, you may receive a confirmation when you open an email from us. This confirmation helps us make our communications with you more interesting and improve our services. If you do not want to receive communications from us, please indicate your preference by updating your account preferences or by using applicable opt-out hyperlink(s).
In connection with your use of the Dispenser, you may from time to time elect to receive or select options that will cause the Services related to the Dispenser to send you messages via telephone, electronic mail, SMS texting, voicemail, including through the use of automated dialing technology.. To the extent that you take such actions to initiate such messages, you authorize Hero and its service providers or affiliates to contact you at the phone number you provide, including wireless numbers, even if you registered the number with a Do Not Call list, for all purposes related to your use of the Services. Message and data rates may apply. To opt-out at any time contact firstname.lastname@example.org. To opt out of SMS messages, reply STOP.
By providing your physical and/or electronic mail address(es) or telephone numbers in connection with the Services, you authorize Hero and/or its service providers to contact you at those numbers with a live operator and/or in writing at the addresses, for marketing and service-related purposes. To opt-out at any time contact email@example.com or follow the unsubscribe instructions included with the message.
Information collected automatically
Whenever you interact with our Services, we automatically receive and record information on our server logs from your browser or device, which may include your IP address, geolocation data, device identification, “cookie” information, the type of browser and/or device you’re using to access our Services, and the page or feature you requested. “Cookies” are identifiers we transfer to your browser or device that allow us to recognize your browser or device and tell us how and when pages and features in our Services are visited and by how many people. You may be able to change the preferences on your browser or device to prevent or limit your device’s acceptance of cookies, but this may prevent you from taking advantage of some of our features.
Cookies can either be “session cookies” or “persistent cookies”. Session cookies are temporary cookies that are stored on your device while you are visiting our website or using our Services, whereas “persistent cookies” are stored on your device for a period of time after you leave our website or Services. We’ve provided a quick summary of some of the cookie types we and our service providers use on the Service, but for more information about cookies, visit http://www.allaboutcookies.org or http://www.aboutcookies.org.uk.
- Essential Cookies: Essential cookies are required for providing you with features or Services that you have requested. For example, certain cookies enable you to log into secure areas of our Services. Disabling these cookies will make certain features and services unavailable.
- Functional Cookies: Functional cookies are used to record your choices and settings regarding our Services, maintain your preferences over time and recognize you when you return to our Services. These cookies help us to personalize our content for you, greet you by name, and remember your preferences.
- Performance/Analytical Cookies: Performance/analytical cookies allow us to understand how visitors use our Services such as by collecting information about the number of visitors to the website, what pages visitors view on our website and how long visitors are viewing pages on the website. Performance/analytical cookies also help us measure the performance of our advertising campaigns in order to help us improve our campaigns and the Service’s content for those who engage with our advertising.
- Retargeting/Advertising Cookies: Retargeting/advertising cookies collect data about your online activity and identify your interests so that we can provide advertising that we believe is relevant to you.
We may use this data to customize content for you that we think you might like, based on your usage patterns. We may also use it to improve the Services – for example, this data can tell us how often users use a particular feature of the Services, and we can use that knowledge to make the Services interesting to as many users as possible.
Information collected from other websites and “Do Not Track” policy
Will Hero share any of the Personal Information it receives?
We may share your Personal Information with third parties as described in this section:
Caregivers. If you authorize a Caregiver to link to your account, we will share Personal Information with the Caregiver. You can revoke access to a Caregiver at any time through your account settings. If you revoke access to a Caregiver, we will no longer share your Personal Information with that Caregiver, but we do not have control over any Personal Information the Caregiver may have retained prior to having his or her access revoked.
Refill and Delivery. If you choose to subscribe to Refill and Delivery, we will share certain information with the Pharmacy Partner solely to the extent necessary for you to receive Hero Refill and Delivery, including your name, address, and information about your prescription(s). You may choose to unsubscribe from Refill and Delivery at any time in accordance with the Limited Warranty, Returns and Cancellations Policy.
Personal Pharmacist. If you choose to subscribe to the Personal Pharmacist feature, we will share certain information with the Personal Pharmacist Pharmacy solely to the extent necessary for you to receive the Personal Pharmacist services pursuant to and consistent with any additional terms imposed by the Personal Pharmacist Pharmacy, including but not limited to your name, age, address, other demographic information, and information about your medication(s) and health condition(s) you report to us, including but not limited to your medication levels, dosing schedules, and adherence data and other data held by Hero. You may choose to unsubscribe from Personal Pharmacist at any time, at which time we will cease information sharing, however, the Personal Pharmacist Pharmacy may retain, consistent with its own policies and legal obligations, information already provided by us or you.
Third-Party Dispenser Providers. If (a) you receive a Dispenser and/or subscription to any Services, including but not limited to the Paid Services, from a third-party who contracts with Hero in connection with a program to distribute or monitor the data outputs of Dispensers, such as a healthcare provider (your doctor, a specialist healthcare provider, a hospital or other healthcare system, including but not limited to Henry Ford Health System), a health insurance provider or another third-party such as a commercial remote monitoring service or hardware provider or an entity acting on behalf of any such entities or individuals (each a “Third-Party Dispenser Provider”), or (b) you indicate to Hero that you are a patient or customer of a Third-Party Dispenser Provider in connection with your use of the Services, including but not limited to by placing your order through a Third-Party Dispenser Provider’s landing page maintained by Hero, or entering into a separate agreement with the Third-Party Dispenser Provider or (c) a Third Party Dispenser Provider pays for your subscription to the Services, then Hero may share all of your Personal Information, User Submissions and all other data Hero has from and concerning you, including but not limited to your medication and adherence data and all data generated by the Services, with the Third-Party Dispenser Provider. The Third-Party Dispenser Provider’s storage, use, and redisclosure of your Personal Information shall be governed entirely by your agreement, if any, with the Third-Party Dispenser Provider.
Information that’s been de-identified. We may de-identify your Personal Information so that you are not identified as an individual, and provide that information to third parties. We may also provide aggregate usage information to third-parties (or allow partners to collect that information from you), who may, among other things, use such information to understand how often and in what ways people use our Services, so that they, too, can provide you with an optimal online experience. However, we never disclose aggregate usage or de-identified information to a third-party (or allow a partner to collect such information) in a manner that would identify you as an individual person.
Advertisers: We allow advertisers and/or merchant partners (“Advertisers”) to choose the demographic information of users who will see their advertisements and/or promotional offers and you agree that we may provide any of the information we have collected from you in non-personally identifiable form to an Advertiser, in order for that Advertiser to select the appropriate audience for those advertisements and/or offers. For example, we might use the fact you are located in San Francisco to show you ads or offers for San Francisco businesses, but we will not tell such businesses who you are. Or, we might allow Advertisers to display their ads to users with similar usage patterns to yours, but we will not disclose usage information to Advertisers except in aggregate form, and not in a manner that would identify you personally. Note that if an advertiser asks us to show an ad to a certain audience or audience segment and you respond to that ad, the advertiser may conclude that you fit the description of the audience they were trying to reach. We may also provide certain information about you (such as your name, email, and mailing address) to our partners to create a “look-alike” audience for marketing purposes, which helps us target users that may be interested in our Services. We will never share identifiable health or medication data with third parties for marketing purposes.
We may deliver a file to you through the Services (known as a “web beacon”) from an ad network. Web beacons allow ad networks to provide anonymized, aggregated auditing, research and reporting for us and for advertisers. Web beacons also enable ad networks to serve targeted advertisements to you when you visit other websites. Because your web browser must request these advertisements and web beacons from the ad network’s servers, these companies can view, edit, or set their own cookies, just as if you had requested a web page from their site. You may be able to opt-out of web beacon tracking conducted by third parties through our Services by adjusting the Do Not Track settings on your browser; please note that we don’t control whether or how these third parties comply with Do Not Track requests.
Affiliated Businesses: In certain situations, businesses or third party websites we’re affiliated with may sell or provide products or services to you through or in connection with the Services (either alone or jointly with us). You can recognize when an affiliated business is associated with such a transaction or service, and we will share your Personal Information with that affiliated business only to the extent that it is related to such transaction or service. One such service may include the ability for you to automatically transmit Third Party Account Information to your Services profile or to automatically transmit information in your Services profile to your third party account. We have no control over the policies and practices of third party websites or businesses as to privacy or anything else, so if you choose to take part in any transaction or service relating to an affiliated website or business, please review all such business’ or websites’ policies.
Agents: We employ other companies and people to perform tasks on our behalf and need to share your information with them to provide products or services to you (such as hosting, payment processing, fulfillment, data storage, security, web service analytics or ad serving) and/or who make certain services, features or functionality available to our users on our behalf. Unless we tell you differently, our agents do not have any right to use the Personal Information we share with them beyond what is necessary to assist us.
User Profiles and Submissions: Certain User Submissions, including your name, location, and any video or image content that such user has uploaded to the Services, may be displayed to other users to facilitate user interaction within the Services or address your request for our Services. Your account privacy settings may allow you to limit the other users who can see the Personal Information in your user profile and/or what information in your user profile is visible to others, including Caregivers. Please remember that any content you upload to your public user profile, along with any Personal Information or content that you voluntarily disclose online in a manner other users can view (on discussion boards, in messages and chat areas, etc.) becomes publicly available, and can be collected and used by anyone. Additionally, if you sign into the Services through a third party social networking site or service, your list of “friends” from that site or service may be automatically imported to the Services, and such “friends,” if they are also registered users of the Services, may be able to access certain non-public information you have entered in your Services user profile. Again, we do not control the policies and practices of any other third party site or service.
Business Transfers: We may choose to buy or sell assets, and may share and/or transfer customer information in connection with the evaluation of and entry into such transactions. Also, if we (or our assets) are acquired, or if we go out of business, enter bankruptcy, or go through some other change of control, Personal Information could be one of the assets transferred to or acquired by a third party.
Law Enforcement & Emergency Disclosures: In certain cases and at the discretion of Hero, User Submissions Personal Information and other information about you and held by us may be shared with law enforcement agencies pursuant to a written request if Hero in its discretion believes that either, such a disclosure is necessary to prevent, detect or investigate a crime or reasonably suspected crime, including a crime related to the Services and/or your use of the Services, or payment therefore, or, that such a disclosure may be necessary to prevent serious injury, disease, disability or death of or to any person. To the extent we make such a disclosure, we will undertake good faith efforts to disclose only the least amount of information necessary to fulfill the purpose of the inquiry.
Regulatory Authorities: User Submissions and other information about you and held by us may be submitted to the FDA or other federal, state or local regulatory authorities as required by applicable laws, including but not limited to, recalls, and reporting certain device-related adverse events and product problems.
Is Personal Information about me secure?
Your account is protected by a password for your privacy and security. If you access your account via a third party site or service, you may have additional or different sign-on protections via that third party site or service. You must prevent unauthorized access to your account and Personal Information by selecting and protecting your password and/or other sign-on mechanism appropriately and limiting access to your computer or device and browser by signing off after you have finished accessing your account. Hero shall likewise not be responsible for loss or disclosure of your Personal Information due to unauthorized physical access to the Dispenser while the Dispenser is not in the possession of Hero, and including but not limited to when the Dispenser is in transit to Hero, by common carrier or otherwise. It is solely your responsibility to provide physical access controls and/or to remove your Personal Information from the Dispenser when it is not in your possession.
We endeavor to protect the privacy of your account and other Personal Information we hold in our records, but unfortunately, we cannot guarantee complete security. Unauthorized entry or use, hardware or software failure, and other factors, may compromise the security of user information at any time.
What Personal Information can I access?
Through your account settings, you may access, and, in some cases, edit or delete the following information you’ve provided to us:
- name and password
- email address
- phone number
- health condition(s)
The information you can view, update, and delete may change as the Services change. If you have any questions about viewing or updating information we have on file about you, please contact us at firstname.lastname@example.org.
Under California Civil Code Sections 1798.83-1798.84, California residents are entitled to contact us to prevent disclosure of Personal Information to third parties for such third parties’ direct marketing purposes; in order to submit such a request, please contact us at email@example.com.
What choices do I have?
You can always opt not to disclose information to us, but keep in mind some information may be needed to register with us or to take advantage of some of our features.
You may be able to add, update, or delete information as explained above. When you update information, however, we may maintain a copy of the unrevised information in our records. You may request deletion of your account by firstname.lastname@example.org. Some information may remain in our records after your deletion of such information from your account. We may use any aggregated data derived from or incorporating your Personal Information after you update or delete it, but not in a manner that would identify you personally.
What if I have questions about this policy?
If you have any questions or concerns regarding our privacy policies, please send us a detailed message to email@example.com, and we will try to resolve your concerns.