Privacy Policy

The Alive Portal is operated by Alive Healthcare Technologies LLC ("Alive," "we," "us," or "our") on behalf of the healthcare organizations that use it (each, a "Customer Organization"), including but not limited to the American Lung Cancer Screening Initiative ("ALCSI"). This Privacy Policy explains how we collect, use, store, and protect information when you use the Alive Portal (the "Services"). Your Customer Organization may provide additional privacy notices specific to its own program — for example, ALCSI members are also covered by ALCSI's own Privacy Policy at alcsi.live/privacy.

1. Information We Collect

We collect the following types of information:

• Account information: name, email address, phone number, a required member profile photo, and a bio if you choose to add one.
• Role and activity: information related to your Customer Organization, role, tasks, and activity that you log within the Services.
• Community, participant, or research records: if you are authorized by your Customer Organization to enter information about community members, participants, or research subjects (e.g., name, contact information, age, health-related history), that information is entered for your Customer Organization's program only and is governed by that organization's own policies in addition to this one.
• Device information: basic device identifiers and push notification tokens, used solely to deliver app notifications (e.g., reminders, announcements, approval updates).
• Screening-related information: when an authorized user records a screening or intake conversation, the information provided may be used to support follow-up and calculate a general eligibility indication for that Customer Organization's program. Depending on the Customer Organization's program, this may include measurements taken during a screening, such as blood pressure, height, or weight. A screening measurement is not a diagnosis and does not replace advice from a healthcare professional.

2. How We Store Your Information

Information collected through the Services is stored securely using Supabase, a cloud database and authentication provider. Profile photos and similar files are stored in secure cloud storage. We do not store payment information, and we do not maintain our own servers containing your personal data outside of these managed cloud services.

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account and role within your Customer Organization
• Coordinate your Customer Organization's activities and programs
• Send push notifications and announcements relevant to your role
• Track aggregate progress toward your Customer Organization's goals
• Support screening education, outreach follow-up, research, and care coordination, as applicable to your role
• Respond to support requests and improve the Services

4. Data Is Kept Separate Between Organizations

The Alive Portal serves more than one Customer Organization. Each organization's data is logically separated at the database level, and access controls limit every user to the organization(s) they hold an approved membership or grant with. Alive does not share one Customer Organization's data with another absent explicit authorization from the organization that owns it.

5. Sharing of Information

We do not sell, rent, or trade your personal data. We do not use third-party advertising or analytics services that track you across other apps or websites.

Limited information may be shared in the following circumstances:

• With other authorized staff and leadership within your own Customer Organization, as needed to coordinate activities.
• With service providers (such as Supabase and Apple's push notification service) solely to operate the Services on our behalf.
• If required by law, or to protect the rights, safety, or property of Alive, a Customer Organization, or the public.

6. Information Linked to Your Identity

Your account information (name, email, phone, organization, and activity) is linked to your identity because the Services are designed for verified members, staff, researchers, and providers. Community, participant, or research records are linked to the user who enters them and are available only to authorized users within the same Customer Organization.

7. Data Retention & Deletion

We retain your information for as long as your access is active or as needed to support your Customer Organization's recordkeeping. If you would like your account or personal data deleted, you may contact us at the email address below, and we will remove or anonymize your information within a reasonable timeframe, except where we or your Customer Organization are required to retain certain records by law.

8. Security

We use industry-standard security measures to protect your information, including encrypted connections (HTTPS/TLS), encrypted storage at rest provided by our cloud database provider, and role-based access controls (Row Level Security) that limit who can view sensitive data, including limiting access between Customer Organizations. While no system can be guaranteed 100% secure, we work to safeguard your information using reasonable technical and organizational measures.

9. Children's Privacy

The Services are intended for use by adult volunteers, staff, researchers, providers, and members of the public seeking screening or program information. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date at the top of this page. Continued use of the Services after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or your personal information, please contact Alive at team@alivehealthtech.com.