Time Labs Inc Privacy Policy
This Privacy Policy (“Policy”) applies to the processing of personal data by Time Labs Inc and its subsidiaries and affiliates (together, “Time Labs” and also referred to herein as “us” and “we”) of a customer (“Customer” or “you”) when such Customer visits Time Labs’ web properties (“Sites”) or uses the Time products, the mobile application (the “Time Labs App”), and/or the other data applications, integrations, insights and add-ons (collectively with the Sites, the “Services”). A. DEVICE & APPLICATION USERS
2
personal data, which means that Time Labs only processes your data with respect to third-party integrations when you choose to integrate them with our Services, or when you provide the necessary consents. We process the data we receive from these third-parties according to applicable terms, such as the Google Health Connect Permissions policy and Google Limited Use requirements, as well as relevant third- party developer license agreements, as we become aware of those policies and agreements. viii. To Comply with Legal Obligations. In certain cases, we must process certain data when it is required by applicable laws and regulations. Such statutory obligations are related, for example, to accounting and tax requirements, legal claims, or other legal purposes. Time Labs will oppose any request to provide legal authorities with access to user data for surveillance or prosecution purposes. We will notify users if we receive any such request whenever legally permissible. 2. Legal basis for processing. Data protection law in Europe and the United Kingdom requires a "lawful basis" for collecting and retaining personal information from residents of the European Economic Area. Our lawful bases for processing your data depend on the particular processing purposes, including: i. Contract. When processing personal data for the purpose of providing our Services, we process personal data on the basis of a user contract, which is formed when you create your account and accept our Terms of Service. ii. Consent. We process your sensitive personal data only with your consent. In some cases, you can provide your consent to us for processing your data through your actions, such as by adding sensitive personal data into your notes, or by adding health related tags in the Time Labs App. iii. Legitimate Interest. We process your personal data based on our legitimate interests when we process it for the purposes of marketing our Services and Sites, providing our customer service, and improving our Services. When choosing to use your personal data on the basis of our legitimate interests, we carefully weigh our own interests against your right to privacy, in compliance with applicable law. iv. Legal Obligation. Time Labs must process certain information to comply with statutory obligations which may vary in each country. For example, such obligations can relate to consumer protection or tax laws. 3. Processed data and data source. In most cases, Time Labs collects personal data directly from you, such as when you register for an account or tag your data in the Time Labs App or Sites. We may also process personal data that is produced from the information you provide to us. Time Labs may also rely on trusted third-party processors to process data on our behalf, such as our cloud service providers. i. Time Labs processes the following personal data categories when you use our Services: a. Contact information such as email address or physical address. b. User information such as gender, height and weight, User ID, and other information you may provide to us about yourself or your account. c. Device information such as IP address and location data. d. User-provided activity and contextual information such as the activities, notes, comments, user feedback, and tags you provide within the app. e. Measured data such as heart rate, movement data, temperature data, and respiration data.
3
f. Calculated user, sleep, health, and activity data such as sleep phases (deep, light, REM, awake), activity levels throughout the day, readiness level, and body mass index (calculated based on height and weight). ii. Please note that some of the personal data we process, including any data concerning your health, is considered special or sensitive personal data. Under applicable law, such data is processed only if you have given your consent for processing. If you access or use any of Time Labs' location-based services, such as by enabling GPS-based activity tracking through our Services, Time Labs may process the approximate or precise location of your device while the service is active. This data may be obtained via your device's service provider network ID, GPS, and/or Wi-Fi data. Time Labs does not process such location data without first obtaining your consent. You may disable such location processing at any time using your device's location permission settings. If you choose to disable access to location data, please note that certain Services, features, or functionalities may no longer be accessible. iii. Please also note that if you give your opt-in consent through our Services, you may share limited personal information like your current and past sleep and readiness scores with other Time Labs users. The information you choose to share may be shared with other Time Labs users in the circle(s) you join, and with any additional Time Labs users who are added to those circles. You can make changes to what data you share with other Time Labs users, including opting out of sharing any data. Depending on your use of our Services, you may also choose to communicate with and react to other users' information and scores. Please remember to always maintain a respectful and supportive environment when communicating with other users. Please see the Terms of Service for more information. 4. Time Labs Teams i. “Time Labs Teams” is a service that allows you to share your Time Labs Services data with your doctor, coach, trainer, or other researchers (“Data Recipient”) which invite you to share your data. If you choose to participate in Time Labs Teams, once you consent to sharing your personal data with the Data Recipient, the data that you sync to your Time Labs App is available for the Data Recipient in Time Labs Teams. The Time Labs Teams service shows teams’ administrators their team's statistics at a glance and allows them to get a detailed look into your data, such as heart rate, heart rate variability, activity level, and other data that you sync to your Time Labs App. ii. Once your data is shared to the Time Labs Teams service, the Data Recipient becomes the controller of your personal data. The Data Recipient is responsible for its processing of your personal data according to applicable laws. Your personal data is used by the Data Recipient in accordance with its own privacy policy, so please carefully review the Data Recipient's privacy policy carefully before opting-in to Time Labs Teams. Time Labs is not responsible for the security of personal data that the Data Recipient has extracted from the Time Labs Teams service. iii. Once you give consent to share your Time Labs data with the Data Recipient, the administrators of the Time Labs Teams service may get access to the following personal data: a. Account data as inserted by you:
4