Privacy Policy

Public privacy policy for Health Geniuses.

Updated as of 02/17/2023

## Introduction

This Privacy Policy describes how we collect, use, process and disclose your information, including personal information, in conjunction with your access to and use of the Health Geniuses Platform and the Payment Services. 
We are committed to ensure Your privacy. In this policy we refer to You as “User”, “Customer”, “You”, “Your”. At the time of registration, We ask You to provide Us with a certain amount of personal information. Submission of such personal information is voluntary, but without it You may not be able to use our Application. By providing Your personal information, You consent to do so for the purpose of placing orders through Our Application.

### Owner and Data Controller
Coastal International Inc. 8 THE GRN STE R Dover, DE 19901 USA 
(aka Health Geniuses Platfrm Application)
Owner contact email: geniuses.ai@gmail.com

### What Personal Information We Collect Includes:
We collect various personal information about Users of our Services. Our collection may include such information as full name, address, business and/or address, telephone number, email address, geographic position, Cookies,  Usage Data, Camera permission, Social media accounts permission, gender, country, state, picture, city and ZIP/Postal code, driver license information, payment information, photographs, video materials.

* **Contact, Account, and Profile Information**. your first name, last name, phone number, postal address, email address, date of birth, and profile photo
* **Identity Verification and Payment Information**. images of your government-issued ID (as permitted by applicable laws), your ID number or other verification information, a selfie when we verify your ID, bank account or payment account information. If a copy of your ID is provided to us, we may scan, use, and store information contained in your ID to verify your identity and for security purposes.
* **Geolocation Information**. Such as precise or approximate location determined from your IP address, mobile or other device’s GPS, or other information you share with us, depending on your device settings. We may or may not also collect this information when you’re not using the app if you enable this through your settings or device permissions.
* **Payment Transaction Information**. Such as payment instrument used, date and time, payment amount, payment instrument expiration date and billing postcode, PayPal email address, IBAN information, your address, and other related transaction details.
* **Additional Profile Information**. Such as gender, city, and personal description. Some of this information as indicated in your account settings is part of your public profile page and will be publicly visible.
* **Information About Others**. Such as a payment instrument belonging to another person or information about a co-traveler. By providing us with personal information about others, you certify that you have permission to provide that information to Us for the purposes described in this Privacy Policy;
* **Usage Information**. Such as the pages or content you view on Health Geniuses Platform;
* **Log Data and Device Information**. details about how you’ve used the Health Geniuses Platform, IP address, access dates and times;
* **Cookies and Similar Technologies**.

You are solely responsible for ensuring the accuracy of all Personal Information that You submit to us. Inaccurate information may affect Your experience when using the Services and/or our ability to contact You as described in this Policy. 
“Non-personally identifiable information" means information where We cannot determine the identity of a natural person. Non-personally identifiable information is not treated as Personal Information unless We combine it with or link it to Personal Information that You give to us. If You do not wish to disclose any required information, then Your sole remedies shall be to close this Website/Application You may not become our customer and You are required to delete Your account and/or exit the Website/Application. 

### How We Collect Your Information:
We collect information that You provide to Us when You register or use Our Services. When You register Your User account on our Website/Application, You will be assigned a unique account identifier which will be associated with any information You give to Us under Your Account. You may also give Us information to allow Us to contact You or use certain features available through our Services without signing up for an Account, such as when You provide feedback, email us, fill out a request form. Even if You do not provide any information to Us, We automatically collect certain information about Your use and interaction with Our Website/Application and/or Services. 

### Automatic Information Collection:
Each time You visit Website/Application We may automatically collect certain types of information. may use “Cookies” of different types to recognize Your computer. A cookie is a small text file that a Website/Application, online application, or e-mail may save to Your internet browser and/or Your computer’s hard drive for use in subsequent visits to the Sites or other sites.

### How do We Use Your Personal Data:
We may use personal information data in-house in order:
* To provide and operate the Services of facilitating Your orders;
* To develop, customize, expand, and improve Our Website/Application;
* To provide You with customer assistance and technical support;
* To be able to contact You with general or personalized notices and promotional messages;
* To enhance Our data security and fraud prevention capabilities; and
* To comply with any applicable laws and regulations.

### To Which Extent and to Whom We Disclose Your Personal Data:
We use personal information collected via Our Website/Application for a variety of business purposes described below. We process Your personal information for these purposes in reliance on Our legitimate business interests, in order to enter into or perform a contract with You, with Your consent, and/or for compliance with Our legal obligations. We indicate the specific processing grounds We rely on next to each purpose listed below.

### We Use the Information We Collect or Receive:
* **To facilitate account creation and login process**.  
We use the information You allowed Us to collect to facilitate account creation and login process for the performance of the contract;
* **To send administrative information to You**.  
We may use Your personal information to send You product(s), and other related information and/or information about changes to Our terms, conditions, and policies.
* **Fulfill and manage Your orders**.  
We may use Your information to fulfill and manage Your orders, payments, made through Our Website/Application;
* **To enforce Our terms, conditions and policies for Business Purposes, Legal Reasons and Contractual**;
* **To manage User accounts**.  
We may use Your information for the purposes of managing Our account and keeping it in working order;
* **To respond to legal requests and prevent harm**.  
If We receive a subpoena or other legal request, We may need to inspect the data We hold to determine how to respond. We may disclose aggregate information about Users for such legal purposes;
* **For other Business Purposes**.  
We may use Your information for other Business Purposes, such as data analysis, identifying usage trends, determining the effectiveness of Our promotional campaigns, to evaluate and improve Our Services, services, marketing and Your experience. We will not use identifiable personal information without Your consent.

### Additional Disclosure Policy:
We may share Your information with third parties as necessary to provide Services to You or to support the technical operation and/or maintenance of our Services, including third party applications that You may engage within the Services. We may also share information with our affiliates, agents, outside vendors or service providers to perform functions on our behalf. When a third party acts solely on our behalf and otherwise as applicable, We use reasonable commercial efforts to require that party to follow the privacy practices stated in this Policy or have complementary privacy protections to protect Your information. We do not share Your information with unaffiliated third parties except as permitted to do so in this Policy.

### What Are Your Privacy Rights:
In some regions (like the European Economic Area), You have certain rights under applicable data protection laws (GDPR). These may include the right (i) to request access and obtain a copy of Your personal information, (ii) to request rectification or erasure; (iii) to restrict the processing of Your personal information; and (iv) if applicable, to data portability. In certain circumstances, You may also have the right to object to the processing of Your personal information. To make such a request, please use the contact details provided herein. We will consider and act upon any request in accordance with applicable data protection laws.
If We are relying on Your consent to process Your personal information, You have the right to withdraw Your consent at any time. Please note, however that this will not affect the lawfulness of the processing before its withdrawal.

### Facebook permissions asked by this Application
This Application may ask for some Facebook permissions allowing it to perform actions with the User's Facebook account and to retrieve information, including Personal Data, from it. This service allows this Application to connect with the User's account on the Facebook social network, provided by Facebook Inc. 
For more information about the following permissions, refer to the Facebook permissions documentation and to the Facebook privacy policy. 
The permissions asked are the following:  
**Basic information**: By default, this includes certain User’s Data such as id, name, picture, gender, and their locale. Certain connections of the User, such as the Friends, are also available. If the User has made more of their Data public, more information will be available.    
**Access private data**: Access the User's and friends' private data.  
**App Notifications**: Send notifications.  
**Birthday**: Provides access to the birthday.  
**Contact email**: Access the User's contact email address.  
**Current City**: Provides access to the User's current location.  
**Email**: Provides access to the User's primary email address.  

### Access to third-party accounts
This type of service allows this Application to access Data from your account on a third-party service and perform actions with it. 
These services are not activated automatically, but require explicit authorization by the User. 

**Stripe account access (Stripe Inc)**
This service allows this Application to connect with the User's account on Stripe, provided by Stripe, Inc. 
Personal Data collected: various types of Data as specified in the privacy policy of the service. Place of processing: United States – Privacy Policy. Privacy Shield participant.  
**Facebook account access**  
This service allows this Application to connect with the User's account on the Facebook social network, provided by Facebook, Inc. 
Permissions asked: Access private data, App Notifications, Birthday, Contact email, Current City, Email, Interests, Likes, Photos and Share. 
Place of processing: United States – Privacy Policy. Privacy Shield participant. 
**Google account access**  
This service allows this Application to connect with the User's account on the Google website, provided by Google, Inc. 
Permissions asked: Access private data, App Notifications, Birthday, Contact email, Current City, Email
Place of processing: United States – Privacy Policy. Privacy Shield participant. 

### Will Your information be shared with anyone?
When You create an account with Us You give Your consent that We may process or share data based on the following legal basis:

* **Legitimate Interests:** We may process Your data when it is reasonably necessary to achieve Our legitimate business interests.
* **Legal Obligations:** if We reasonably suspect that Your Account has been used for an unauthorized, illegal, or criminal purpose, You give Us express authorization to share information about You, Your Account, and any of Your transactions with law enforcement. We may disclose Your information where We are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process, such as in response to a court order or a subpoena (including in response to public authorities to meet national security or law enforcement requirements).
* **Vital Interests:** We may disclose Your information where We believe it is necessary to investigate, prevent, or take action regarding potential violations of Our policies, suspected fraud, situations involving potential threats to the safety of any person and illegal activities, or as evidence in litigation in which We are involved.
* **Google Sign-in and Facebook Sign-in:** Also, Our Services include a Social Media feature, such as “Google Sign-in” and “Facebook Sign-In”. This Social Media Features may collect certain Personal Information such as your IP address or which page You are visiting on Our Website and may set a cookie to enable them to function properly. Google Sign-in and Facebook Sign-In  are hosted by a third party (Google and Facebook respectively). Your interactions with this third party’ Social Media Feature are governed by Google’s  and  Facebook’s policies respectively and not by Ours.
* **Other:** We share personal information with affiliated and unaffiliated service providers (including their service providers) and for their compliance purposes, including those that help us: (i) verify your ID documents, (ii) check information against public databases, (iii) perform product development, maintenance, and debugging, (iv) allow the provision of the Health Geniuses Services through third-party platforms and software tools (e.g., through the integration with our APIs), (v) provide customer service, advertising, or payments services, (vi) offer additional services you select.

### Third-party Services:

### **Payment Processing Third-party Services**
We use third party payment processing platforms. Such platforms will request You to provide sensitive personal data (e.g. credit card number, account username and password) in order to complete purchases and operations related to our services. Such third party payment processing platforms are governed by their own safety standards, policies and terms of use. We shall not be liable for their operation, safety or otherwise their functioning. We strongly advise our users to engage in online safety measures in order to protect their financial information, here on Website/Application and elsewhere. We will not collect or store any sensitive financial data of yours.

### Use of the YouTube Services.
Health Geniuses uses YouTube API Services and therefore, all Our Users must comply with the terms of YouTube User Agreement at all times when accessing or using the YouTube API Services provided on Our Website/Application.
Particularly, You must not accept the Agreement, or access or use the YouTube API Services, if (i) you are not of legal age to form a binding contract with us, or (ii) you are a person barred from using or receiving the YouTube Services under the applicable laws of the United States, the country in which you reside, or the countries from which you access or use the YouTube Services. YouTube collects Data according to its own rules and in compliance with all applicable laws. For details please access YouTube Privacy Policy. 
YouTube Confidential Information and user data collected by Us (including Personal Data) to protect from accidental or unauthorized destruction, access or use.

### For How Long Do We Keep Your Information:
* We keep Your information for 5 (five) years or as long as it is necessary to fulfill the purposes outlined in this privacy policy unless otherwise required by law.
* We will only keep Your personal information for 5 (five) years or for as long as it is necessary for the purposes set out in this privacy policy, unless a longer retention period is required or permitted by law (such as tax, accounting or other legal requirements). 
* When We have no ongoing legitimate business need to process Your personal information, We will either delete or anonymize it, or, if this is not possible then We will securely store Your personal information and isolate it from any further processing until deletion is possible.
* If You claim Your personal information to be deleted and Your account with Our Services (facilitating Your order) to be cancelled, We will cancel Your account and information associated with it to exercise Your right “to be forgotten”. 

### Where Do We Store Your Data:
We store Your data on Our servers and We also use third-party storage providers to keep Your Data. Our data storage providers are contractually committed to protect and secure Your data. Third-party Service Providers that store or process Your Personal Information are contractually committed to keep it protected and secured, in accordance with industry standards and regardless of any lesser legal requirements which may apply in their jurisdiction.

### What Are Your Privacy Rights:
In some regions (like the European Economic Area), You have certain rights under applicable data protection laws. These may include the right (i) to request access and obtain a copy of Your personal information, (ii) to request rectification or erasure; (iii) to restrict the processing of Your personal information; and (iv) if applicable, to data portability. In certain circumstances, You may also have the right to object to the processing of Your personal information. To make such a request, please use the contact details provided herein. We will consider and act upon any request in accordance with applicable data protection laws.
If We are relying on Your consent to process Your personal information, You have the right to withdraw Your consent at any time. Please note, however that this will not affect the lawfulness of the processing before its withdrawal.

### How We Protect Information:
Our Website/Application uses industry standard protocols and technology to protect Your information and personal data submitted to Us in order to guard and encrypt data for transmission in a format that prevents data theft by unauthorized third parties, including internal reviews of our data collection, storage and processing practices, security measures, and physical security measures. But We also urge You to take additional steps on Your own to safeguard and maintain the integrity of Your information. For example, You should never share Your Account or login information with other people and be sure to sign off when finished using a shared or public computer. It is Your responsibility to check beforehand on the privacy and/or security policy of Your network prior to accessing the Services. We are not responsible for Your handling, sharing, re-sharing and/or distribution of Your information except as set forth in the Policy.

### Further information about Personal Data

* **Personal Data collected through sources other than the User**  
The Owner of this Application may have legitimately collected Personal Data relating to Users without their knowledge by reusing or sourcing them from third parties on the grounds mentioned in the section specifying the legal basis of processing.
Where the Owner has collected Personal Data in such a manner, Users may find specific information regarding the source within the relevant sections of this document or by contacting the Owner. 
* **Push notifications**  
This Application may send push notifications to the User.
* **?Access the address book**  
This Application may request access to your address book.
* **Selling goods and services online**  
The Personal Data collected are used to provide the User with services or to sell goods, including payment and possible delivery. 
The Personal Data collected to complete the payment may include the credit card, the bank account used for the transfer, or any other means of payment envisaged. The kind of Data collected by this Application depends on the payment system used.
* **The Service is not directed to children under the age of 13**  
Users declare themselves to be adult according to their applicable legislation. Minors may use this Application only with the assistance of a parent or guardian. Under no circumstance persons under the age of 13 may use this Application. 

### Information Necessary For Use of Payment Services
The Payments Controller (in Our case “Stripe, Inc”) needs to collect the following information necessary for the performance of the contract with you and to comply with applicable law (such as anti-money laundering regulations). Without it, you will not be able to use Payment Services.

* Payment Information. When you use the Payment Services, the Payments Controller requires certain financial information (such as your bank account or credit card information) in order to process payments and comply with applicable law.
* Identity Verification and Other Information. The Payments Controller may require identity verification information (such as images of your government issued ID document(s), passport, national ID card, tax ID, or driving license) or other authentication information (such as your date of birth, address, email address, or phone number) and other information in order to verify your identity, provide Payment Services to you, and comply with applicable law.

### How the Payments Controller Uses Personal Information Collected
We may use personal information as a part of Payment Services to:
* Enable or authorise third parties to use the Payment Services,
* Detect and prevent money laundering, fraud, abuse, and security incidents,
* Conduct security investigations and risk assessments,
* Comply with legal obligations (such as anti-money laundering regulations),
* Enforce the Payment Terms and other payment policies,
* With your consent, send you promotional messages, marketing, advertising, and other information that may be of interest to you based on your preferences
* Provide and improve the Payment Services.

### Opting Out of Email or Social Media Marketing:
You can unsubscribe from Our marketing email list at any time by contacting Us via Our Contact Center by email geniuses.ai@gmail.com You will then be removed from the marketing email list – however, We will still need to send You service-related emails that are necessary for the administration and use of Your account. 

### Information From Minors Regulation:
Our Website/Application is not directed to children. Access to and use of Our Website/Application is only for those over the age of 16. 

### California Residents Privacy Rights:
If You are located in California this provision applies to You. California Civil Code Section 1798.83 permits Our Customers who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) We disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which We shared personal information in the immediately preceding calendar year. If You are a California resident and would like to make such a request, please submit Your request in writing to Us using the contact information provided below.

If You are under 18 years of age, reside in California, and have a registered account with Our Website/Application, You have the right to request removal of unwanted data that You publicly post on the Website/Application To request removal of such data, please contact Us using the contact information provided below, and include the email address associated with Your account and a statement that You reside in California. We will make sure the data is not publicly displayed on Website/Application but please be aware that the data may not be completely or comprehensively removed from Our systems.

### DMCA Rights
As required by law We will respond to all claims of intellectual property infringement. We will promptly investigate notices of alleged infringement and will take appropriate actions required under the Digital Millennium Copyright Act, Title 17, United States Code, Section 512(c)(2) ("DMCA") and other applicable intellectual property laws.
Pursuant to the DMCA, notifications of claimed copyright infringement should be sent to Our Designated Agent. Notification must be submitted to the following Designated Agent: Alejo Mo-Sun
geniuses.ai@gmail.com

### Notice to Residents of the State of Nevada:
If You are a resident of Nevada, You have the right to opt-out of the sale of certain personal information to third parties who intend to license or sell that personal information. You can exercise this right by contacting Us at geniuses.ai@gmail.com and providing Us with Your name and the email address associated with Your account. Please kindly note that We do not currently sell Your personal information as sales are defined in Nevada Revised Statutes Chapter 603A.

### Contacting Us:
For questions or clarifications regarding Our Privacy or to request data deletion, please contact Us using the following email address: geniuses.ai@gmail.com.