PRIVACY POLICY OF UNITX LLC

This Privacy Policy establishes the specifics of the procedure for collecting and processing data of individuals - users of the internet platform and mobile application "PLUSMED" (hereinafter - the Application) and the Website www.plusmed.uz (hereinafter - the Website) of UNITX LLC (hereinafter - the Operator).

This document (the "Policy") is an integral part of the Public Offer for the use of the Service/Website. This Policy applies exclusively to information that was obtained by the Operator as a result of users' use of the Service/Website.

When using the Service/Website, the user fully accepts the terms of this Policy and expresses their voluntary consent to the processing of personal data as described below in this Policy. If the User disagrees with this Policy, the user has the right to refuse to use the Service/Website.

The Operator of the Service/Website has the right to unilaterally make changes to this Policy, informing the user about this by publishing the specified changes in the Application or in the information messages (notifications) of the Application no later than 30 days.

1. User Information Collected and Used, as well as Purposes of Its Use:

Within the framework of this Privacy Policy, user information means: personal data that the user independently enters into the "PLUSMED" application (full name, date and place of birth, gender, registration address, email address, phone number, etc.) as well as automatically transmitted data in the process of using the Service/Website, including but not limited to: IP address, information about the device from which access is made, etc.

Identifiers, such as:

  • Your mobile phone number (including country/mobile network code);
  • Your personal data (e.g., name, date of birth) if you provided them;
  • Your contact information (e.g., email address) if you provided it;
  • Account login credentials, such as username and your chosen password or PIN, if any;
  • Device identifiers, as described below;
  • Your photograph, if you provided it (including avatar, etc.);
  • Your interests, if you choose to share them with us;
  • Your phone's address book, i.e., names, phone numbers and favorites list from your contact list, if you allowed access to them;
  • Additional information that does not violate or infringe upon user rights according to the legislation of the Republic of Uzbekistan.

Geolocation Data:

Location by general data.We use the IP addresses we collect and additional information (e.g., regional phone codes) to determine your approximate location (e.g., at the city level).

GPS location. We will collect GPS data only for strictly defined purposes (as indicated below), and only with your permission.

Purchase of Subscriptions, Products or Services:

If you top up your PlusMed account through our application or website, we process your payment data (such as full name or username, phone number, payment method), as well as information related to the transactions (e.g., purchase amount, purchase date, currency, IP address, country, first and last 4 digits of your credit card number).

Data we collect automatically from your device, for example, data collected using Cookies and other device identification technologies ("Cookies and tracking technologies"):

  • Device identifiers that you used when visiting our websites and using the application, including IP address, unique device identifiers, advertising-related identifiers, MAC identifiers;
  • Network activity data, such as information stored in log files when you access our Service and website, for example, access time and date stamp, pages viewed, IP address, pages from which you were referred to our website, error messages and crash reports;
  • Data on actions related to the use of Services, such as connection status, data on receiving and viewing messages sent to you, call status, as well as data related to completed calls, received and sent messages, such as call duration, who called whom, who sent a message to whom and at what time, your personal preferences related to the use of Services (e.g., frequency and duration of use, choice of options, etc.);
  • Other device data, such as information about the operating system, browser, browser or operating system language, your wireless network, mobile operator.

How We Use Your Data

PlusMed uses your personal data to improve the quality of services provided to you, including administering your account, customizing and improving the Services we offer, processing payments, conducting marketing campaigns, user support, as well as ensuring regulatory compliance and security. Below we explain the purposes for which we collect and use your personal data, as well as the types of data we use for each purpose.

Authentication and Account Administration:

PlusMed uses various types of your personal data to create and administer your PlusMed account so that you can register, log in, activate and use our Services, for example:

  • To authenticate and verify your account, as well as to ensure that you do not already have a PlusMed account;
  • To synchronize your contact list in the application (i.e., to display your contacts through the PlusMed interface so you can connect with them through PlusMed);
  • To create your profile, customize your PlusMed account according to the information you provide (e.g., name, photo, etc.) and display such information in your profile when you use PlusMed Services.

Data provided or collected during registration and under your PlusMed account, such as identifiers, your photo and phone address book; Approximate geolocation data; Data we collect automatically from your device, such as identifiers and other device-related data.

Providing Our Services — Communication and Content Sharing:

PlusMed uses various types of personal data to manage its Services and provide services, including communication features, for example:

  • To display your online status;
  • So you can send messages, use PlusMed voice calls, delete messages, etc.;
  • So you can use other application features, including receiving timely notifications (e.g., about missed calls);
  • We will use your IP address to determine your approximate location so you can use certain features available only in certain countries (e.g., sticker packs);
  • So you can post and send your medical documents in forms (e.g., images, videos, etc.);

When you use our Services, PlusMed doctors may see some information about you, such as the fact that you are a PlusMed user, content you voluntarily share, your profile information (subject to your settings), your connection status, etc., which will be described in detail below.

If you have not changed your settings:

  • your name and photo;
  • your connection status;
  • whether messages sent to you have been received and viewed;
  • Your call status with another subscriber at the moment.

If you communicate with a doctor, he/she may see data about incoming and outgoing voice calls and messages, such as call duration, who called whom, who sent a message to whom and at what time, call type (audio/video) and whether you answered the call on your primary or secondary device.

When you register with PlusMed, contacts from your address book who are already using PlusMed may be informed that you are now also present in PlusMed.

Your public messages: if you post information in doctor reviews, it may be accessible through search to any PlusMed user.

Address Book Access Rights. When you use the Service, you may grant us permission to collect contact information from your mobile address book to help us connect you with your friends and other Service users. If you grant this device permission to access the Service, we will collect contact information from your device's address book to connect you with your friends in the Service.

2. Transfer of User Personal Data:

The Service/Website Operator transfers user personal data only for the purposes provided for in the consent to the processing of personal data.

The Service/Website Operator undertakes to warn all persons to whom user personal data is transferred that this data may only be used for the purposes for which it was communicated. All persons receiving User personal data are obliged to strictly observe confidentiality with respect to such data. This provision does not apply to cases where the exchange of user personal data is carried out in the manner established by the legislation of the Republic of Uzbekistan.

Use of Service Permissions:

2.1 Sending photos, audio, video and other documents in the form of files from phone memory for recognizing test results, laboratory studies in the form of documents, as well as photo or video materials from the camera.

2.2 When using the Service functionality designed to provide information on prevention, diagnosis and (or) support of patients with new coronavirus infection, access to personal or confidential data related to the new coronavirus infection epidemic may be requested. All other data is used for the purposes of implementing Service functions: providing appointments with a doctor (for diagnostic or other manipulations), conducting consultations using telemedicine technologies, displaying User information to the User, including the User's health status.

2.3 The Android application implements the following standard permission mechanisms:

  • Location Permission (Location from ACCESS_COARSE_LOCATION, ACCESS_FINE_LOCATION) - used for: network scanning function - searching for devices for Bluetooth pairing and receiving data from bluetooth blood pressure monitors, determining the User's city to indicate the nearest available medical organizations for appointment, including laboratories, the ability to view the number of steps taken and distance traveled.
  • Activity Recognition Permission (ACTIVITY_RECOGNITION) - used for: the ability to view the number of steps taken and distance traveled.
  • Bluetooth Function Permission (Bluetooth from BLUETOOTH, BLUETOOTH_ADMIN, BLUETOOTH_CONNECT, BLUETOOTH_SCAN, BLUETOOTH_ADVERTISE) - used for: pairing and transferring data from bluetooth blood pressure monitors to the Service using Bluetooth technology, communication through bluetooth headsets during consultations with doctors via the Service call with a doctor.
  • Audio Device Settings Permission (Audio from RECORD_AUDIO, MODIFY_AUDIO_SETTINGS) - used for: working with bluetooth headsets during consultations with doctors through the Service.
  • Camera Permission (Camera from CAMERA) - used for: the ability to photograph test results and medical reports received from doctors, and further upload them to the appropriate section of the Service; remote interaction with a doctor via video call.
  • Image Gallery Access Permission (Images from READ_EXTERNAL_STORAGE, READ_EXTERNAL_STORAGE, WRITE_EXTERNAL_STORAGE) - used for: the ability to upload images or video files when contacting technical support staff; messaging with medical personnel.
  • Phone Status Information Permission (READ_PHONE_STATE) - used for: messaging with medical personnel.
  • Internet Access Permission (INTERNET, ACCESS_NETWORK_STATE) - used for: transmitting measurements from connected medical devices via the Internet, checking for Internet access when using the Service, and transmitting data as part of using the Service.

When using the Service, the User has the ability to authorize in Google services using a Google account using the OAuth 2.0 authorization protocol. This allows access to the Fitness API, which in turn is used to obtain data on the User's physical activity and distance traveled. When using the Service, the User has the ability to invite their friends to the PLUSMED system (READ_CONTACTS, SEND_SMS, WRITE_CONTACTS).

3. Processing of User Personal Data

3.1 User personal data is processed for the following purposes:

  • to ensure quality operation of the Service;
  • to provide User appointments with doctors through the Service;
  • to provide User support when using the Service in case of difficulties, including with the selection of a specific Partner specialist or Partner;
  • to send messages to Users regarding the use of the Service, including about ongoing promotions and special offers;
  • to make changes to the Service to improve its operation;
  • to receive feedback and suggestions from Users about the operation of the Service, including by email or through telephone surveys.

3.2 When making an appointment with a doctor through the Service, the User may provide the Operator with the following personal data: surname, first name, patronymic, phone number, email address, gender, age, information about the intention to consult a doctor. The User confirms that the personal data is complete, accurate and up-to-date and is provided personally by the User or their legal representative.

3.3 The User has the right not to provide any additional information or data to the Operator's employees or the Operator's call center when making an appointment with a doctor using the Service, including information about the User's health status. When using mobile applications as part of the Service, the User provides additional information at their discretion if it is necessary to implement the functionality of the applications.

3.4 The Operator does not collect or process user personal data related to the health status and intimate life of Users. Such data is provided by Users directly and only to doctors or medical organizations, including Partners, who are required to observe their confidentiality in accordance with the applicable legislation of the Republic of Uzbekistan.

3.5 When using the Service, Users provide the Operator with consent to process their personal data by accepting the terms of the consent text posted in the Service.

3.6 The Operator, at its own expense and in accordance with the procedure provided for by the legislation of the Republic of Uzbekistan, ensures the protection of User personal data from loss, unlawful and/or unauthorized access to it.

3.7 Sending photos, audio, video and other documents in the form of files from phone memory for recognizing test results, laboratory studies in the form of documents, as well as photo or video materials from the camera.

3.8 The User may use some Service functions designed for Partners to provide medical and other services to patients with suspected COVID-19 or patients with diagnosed COVID-19, namely:

3.8.1. Uploading and recognizing COVID-19 test results. When using this function, Partners process the following data set: test date, full name, date of birth, age, gender, name of medical organization, name of laboratory test, biological material tested, test parameters, test results. The information is used exclusively to provide the User with information about laboratory tests performed in the User's interests;

3.8.2. Uploading and processing vaccination information, including COVID-19 vaccination. When using this function, Partners process the following data set: full name, date of birth, age, gender, vaccine name, vaccination date. The information is used exclusively to provide the User with information about vaccinations performed on the User;

3.8.3. Conducting telemedicine consultations by Partners using the Service, including for Users with diagnosed COVID-19. When using this function, Partners process the following data set: full name, consultation date, User complaints, disease history, medical worker recommendations. The information is used exclusively to provide the User with doctor consultations using telemedicine technologies and providing the User with access to the results of such consultations.

3.9 In certain cases of using additional functionality of the Application, the Operator may obtain information about the User's contact data (phone and/or address book, contacts in the mobile device).

4. Collection, Storage and Use of User Personal Data

4.1 The Operator collects and stores User personal data using an electronic database.

4.2 When collecting User Personal Data, the Operator ensures the recording, systematization, accumulation, storage, clarification (updating, modification), extraction of personal data in databases located on the territory of the Republic of Uzbekistan.

4.3 The Operator may use the industry-standard 'cookies' technology. Cookies are a small piece of data sent by a web server and stored on the computer used by the Service User, allowing the Operator to save the User's personal settings and preferences, as well as collect non-personal information about them.

4.4 The Operator collects information about appointments actually held with a particular Partner specialist exclusively for the purpose of determining available time for appointments, while not performing analytics to determine the facts of actual requests by a specific User for medical or other services and does not disclose such information.

5. User Rights Regarding Their Personal Data:

For the purpose of protecting personal data stored by the Service/Website Operator, users are granted the following rights:

  • To receive complete information about their personal data and its processing based on the relevant request;
  • To have free access to their personal data;
  • To require the deletion or correction of incorrect, incomplete or outdated personal data, as well as data processed in violation of the requirements of the legislation of the Republic of Uzbekistan.

In cases where the Service/Website Operator has not deleted or corrected the user's personal data, the user has the right to send an electronic appeal to the Operator in the 'Feedback' section available in the PLUSMED application or on the website www.plusmed.uz.

5.1 Security Measures Used by the Service/Website Operator to Maintain Information Confidentiality:

All possible measures are taken to ensure the security and protection of user information from unauthorized attempts to hack, access, modify, disclose or destroy, as well as other types of use by third parties. In particular, the Service/Website Operator constantly improves the methods of collecting, storing and processing data, including physical security measures, to counteract unauthorized access to systems. The Service/Website Operator also limits access of employees, contractors and agents to user information, providing strict contractual obligations in the field of confidentiality, the violation of which provides for strict liability measures and penalties within the legislation of the Republic of Uzbekistan.

The security of using the Service/Website also depends on the user's compliance with security recommendations:

  • Keep account credentials, such as login and password, secret from third parties.
  • Install antivirus software on your device and regularly update it along with other software products (operating system and applications), which can protect against malware penetration.
  • It is recommended to use the Service/Website only from a trusted device in order to maintain the confidentiality of personal data. If access to the Service/Website is made using someone else's device, it is not recommended to save personal data and other information on it, and after completing all operations, you need to make sure that personal data and other information were not saved.

User compliance with the recommendations will ensure maximum security of the information provided to the Service/Website Operator.

All questions and written inquiries from Users can be sent to the 'Feedback' section available in the PLUSMED application and on the website www.plusmed.uz or to the email address info@plusmed.uz