Privacy Policy
Last updated on: October 15, 2025
Table of Contents
1. Introduction
Mevity ("we," "our," or "us") values your privacy. This Privacy Policy explains how we collect, use, store, and share your information when you use our platform, websites, and related services ("the Service").
By using Mevity, you consent to the practices described in this Privacy Policy.
2. Information We Collect
We may collect the following types of information:
- Account Information: Name, email address, password, and other details you provide when creating an account.
- Profile Information: Information you choose to include in your profile, such as wellness interests, professional details, and uploaded content.
- Usage Data: Information about how you use Mevity, including pages visited, features used, and interactions with other users.
- Device & Technical Data: IP address, browser type, operating system, and device identifiers.
- Third-Party Login Data: If you sign in with Google or other providers, we may receive your basic account details (e.g., name, email).
3. How We Use Information
We use the information we collect to:
- Provide, personalise, and improve the Service
- Facilitate connections between members and practitioners
- Process account management and authentication
- Communicate with you about updates, features, or support
- Protect against fraud, abuse, or unauthorised activity
- Comply with legal obligations
4. Sharing of Information
We do not sell your personal data. We may share information only in the following cases:
- With Your Consent: When you choose to share content or connect with others.
- With Service Providers: Trusted third parties who help us operate the Service (e.g., hosting, analytics, payment processing).
- For Legal Reasons: If required by law, regulation, or court order.
- In Case of Business Transfer: If Mevity is involved in a merger, acquisition, or sale of assets.
6. Data Storage & Security
- Your information is stored securely using industry-standard practices.
- We use encryption, access controls, and monitoring to protect your data.
- We implement Google's Cross-Account Protection (RISC) to detect and prevent unauthorized access across accounts.
- No system is 100% secure. We cannot guarantee absolute security of information.
7. Data Retention
We retain personal data only as long as necessary to provide the Service or comply with legal obligations. You may request deletion of your account and data at any time (see Section 9).
8. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Request correction or deletion of your information
- Restrict or object to certain processing
- Request a copy of your data in a portable format
To exercise these rights, contact us at legal@mevity.com.
9. International Users
Your information may be stored and processed in countries outside your own. By using the Service, you consent to the transfer of data across borders in accordance with this Privacy Policy.
10. Changes to this Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page, and continued use of Mevity constitutes acceptance of the updated policy.
11. Location Data & Geolocation
When you use our "find practitioners near me" feature, we may collect and process your location data to provide relevant results. This includes:
- Precise Location: GPS coordinates when you explicitly enable location services
- Approximate Location: IP-based location for general geographic matching
- Location History: Stored temporarily to improve search results
You can control location sharing through your device settings. We anonymize location data and do not share precise coordinates with practitioners.
12. AI & Machine Learning
We use artificial intelligence and machine learning to improve our services, including:
- Recommendation Algorithms: Suggesting relevant practitioners and health topics
- Content Matching: Connecting users with appropriate wellness content
- Search Optimization: Improving search results and user experience
Your data may be used to train and improve these algorithms. We implement safeguards to prevent bias and ensure fair treatment of all users.
13. Third-Party Integrations
We integrate with third-party services that may collect your information:
- Google OAuth: For account creation and authentication
- Payment Processors: For booking transactions (Stripe, PayPal)
- Analytics Services: Google Analytics for usage insights
- Communication Tools: Email and messaging services
Each integration has its own privacy policy. We only share necessary data and ensure partners meet our security standards.
14. Data Breach Response
In the event of a data breach that may affect your personal information, we will:
- Notify affected users as required by applicable law (within 72 hours of becoming aware for GDPR, 30-60 days for other jurisdictions)
- Report to relevant authorities as required by law
- Provide detailed information about the breach and steps taken
- Offer credit monitoring services if appropriate
We maintain incident response procedures and regularly test our security measures to prevent breaches.
15. Account Termination & Data Deletion
You may delete your account at any time through your account settings. When you delete your account:
- Your profile and personal information will be permanently deleted
- Booking history will be anonymized (kept for legal/regulatory purposes for up to 7 years per tax and business record requirements)
- Public content may remain visible until manually removed
- Transaction records and payment data may be retained for up to 7 years to comply with tax laws and financial regulations
We may also terminate accounts that violate our Terms of Service. In such cases, we will provide notice and explanation.
16. Children's Privacy (COPPA)
Mevity is not intended for users under 16. We do not knowingly collect personal information from users under 16. If we discover that we have collected information from a user under 16, we will:
- Immediately delete the user's information
- Notify parents if we have their contact information
- Take steps to prevent future collection
Additional Protections: In California, we provide additional protections for users under 18, including the right to delete content and opt-out of data sales. Parents who believe their child has provided information to us should contact us immediately at legal@mevity.com.
17. HIPAA Compliance & Medical Data
IMPORTANT HIPAA NOTICE:
Mevity is not subject to or compliant with HIPAA (Health Insurance Portability and Accountability Act). We are a platform that connects users with healthcare professionals but do not provide medical services or handle protected health information (PHI) as defined by HIPAA.
Medical Data Handling
- Not HIPAA Covered: Mevity is not a covered entity under HIPAA and does not handle PHI
- Platform Role: We facilitate connections but do not provide medical services or store medical records
- Professional Independence: Healthcare professionals on our platform are independent practitioners with their own HIPAA obligations
- Data Limitations: We do not collect, store, or process protected health information as defined by HIPAA
- User Responsibility: Users are responsible for understanding their healthcare provider's privacy practices
Medical Emergency Disclaimer
In a medical emergency, call 911 immediately. Do not use Mevity for emergency medical situations. This platform is for informational and educational purposes only and is not a substitute for professional medical advice, diagnosis, or treatment.
18. Accessibility & Accommodations
We are committed to making Mevity accessible to all users. We:
- Follow WCAG 2.1 AA accessibility standards
- Provide alternative formats for content when requested
- Continuously improve the platform to be usable for users with disabilities
- Regularly audit our platform for accessibility compliance
If you need accommodations or have accessibility concerns, please contact us at accessibility@mevity.com.
19. Contact Information
If you have questions about this Privacy Policy, please contact us:
Email: legal@mevity.com
Accessibility: accessibility@mevity.com
Data Protection Officer: dpo@mevity.com