Privacy Policy

Last updated: July 5, 2026

Draft — Pending Legal Review

This document is a working draft template provided for informational purposes only. It has not been reviewed by legal counsel and does not constitute legal advice. Please consult a qualified attorney before relying on its contents.

1. Introduction

zzess ("we") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. This policy applies to all users, including both health consumers and healthcare providers.

2. Information We Collect

We collect the following types of information:

  • Account Information: Name, email, phone number, and role preferences
  • Health Data: Constitution type, vital signs, medication records, and health goals you voluntarily enter
  • Activity Data: Notes published, bookings made, products purchased, and engagement metrics
  • Device Data: Connected wearable device data (with explicit permission)
  • Usage Data: How you interact with the Service, including content views and search queries

3. How We Use Your Information

We use your information to:

  • Provide and personalize the Service, including health recommendations
  • Process appointments, orders, and transactions
  • Send notifications, reminders, and service communications
  • Improve content relevance and platform features
  • Comply with legal obligations and protect against fraud

4. Health Data Sharing & Consent

Your health data is yours. We do not share your personal health information with any provider, clinic, or third party unless you have explicitly granted consent through the Consent Center. You may grant, modify, or revoke consent at any time, and providers only see the data scopes you have authorized.

5. Data Security

We implement industry-standard technical and organizational measures to protect your data, including encryption in transit and at rest, access controls, and regular security audits. However, no method of transmission over the Internet is 100% secure.

6. Location Data

We collect city-level location data to personalize your experience — showing nearby clinics, local content, and relevant providers. Here's how it works:

  • Automatic (city-level): On login, we resolve your approximate city from your IP address. We store only the city name, state, ZIP, and city-centroid coordinates — never your street address.
  • GPS (on request): When you tap a "Near Me" feature, we ask for browser location permission with a clear explanation of why. If granted, your GPS coordinates are rounded to ~1km precision before saving, so we never store your exact position.
  • Manual: You can set or change your location manually in Settings at any time.
  • Permission denial: If you deny location permission, all features continue to work using city-level (IP) or manual location. Nothing is blocked.
  • How to change or delete: Go to Settings → My Location to edit, switch to manual, or disable precise location. You can also request full deletion of location data through your account settings.

We never sell or share your location data with third parties. Location is used solely to improve content relevance within zzess.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. You may request deletion of your data at any time through the account settings or by contacting us. Certain data may be retained as required by law.

8. Your Rights

You have the right to:

  • Access and receive a copy of your personal data
  • Correct inaccurate or incomplete data
  • Delete your account and associated data
  • Withdraw consent for data sharing at any time
  • Object to or restrict certain processing of your data

9. Cookies & Tracking

We use essential cookies to maintain your session and provide core functionality. We do not sell your browsing data to third parties. Analytics cookies help us understand usage patterns to improve the Service.

10. Third-Party Services

The Service integrates with third-party platforms (e.g., payment processors, calendar services) for specific features. These services have their own privacy policies, and we encourage you to review them. We share only the minimum data necessary for the integration.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the Service or via email. Continued use constitutes acceptance of the updated policy.