Privacy Notice

Last updated: February 5, 2025

This Privacy Notice of ComunityApp S, EP. ("we", "us" or "our"), describes how and why we may access, collect, store, use and/or share ("process") your personal information when you use our services ("Services"), including when you:

• Visit our website at https://comunityapp.com, or any of our websites that link to this Privacy Notice.
• Download and use our mobile application (ComunityApp), or any other application of ours that links to this Privacy Notice.
• Participate with us in other related activities, such as sales, marketing, or events.

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have questions or concerns, please contact us at support@comunityapp.com.

SUMMARY OF KEY POINTS

This summary provides the key points of our Privacy Notice, but you can find more details on any of these topics by clicking on the link following each key point or by using our index to find the section you are looking for.

• What personal information do we process? When you visit, use or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use.
• Do we process any sensitive personal information? Some information may be considered “special” or “sensitive” in certain jurisdictions (“your health data”). We may process sensitive personal information where necessary with your consent or as permitted by applicable law. Users may withdraw consent at any time.
• Do we collect information from third parties? We may collect information from public databases, marketing partners, social media platforms, and other outside sources.
• How do we process your information? We process your information to provide, improve, and administer our Services, to communicate with you, for security and fraud prevention purposes, and to comply with the law. We may also process your information for other purposes with your consent. We only process your information when we have a valid legal reason to do so.
• In which situations and with which third parties do we share personal information? We may share information in specific situations and with specific third parties, always without profiling the user. The data will be used in a dissociated manner with respect to third parties.
• How do we keep your information secure? We have appropriate organisational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure.
• What are your rights? Depending on where you are geographically located, applicable privacy law may mean that you have certain rights regarding your personal information.
• How to exercise your rights? The easiest way to exercise your rights is by visiting https://app.comunityapp.com/user/settings, or by contacting us.

1. WHAT INFORMATION DO WE COLLECT?

Personal information you communicate to us

In short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register for the Services, express your interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us, using the following legal bases:

• Consent granted by you with the free, unequivocal, express and informed selection of the corresponding box for acceptance of the Privacy Policy and by validating your email account in the registration forms.
• The establishment of a contractual relationship according to the service you request.
• Compliance with the legal obligations of the controller when providing you with the services you request.
• The legitimate interest of the Controllers in keeping you informed regarding products or services you receive.
• The legitimate interest in defending the interests of the Controllers in the event of a conflict or incident with the user of our services.

Personal information provided by you

The personal information we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include:

• Names
• Email addresses
• Medical information
• Phone numbers
• Country
• Gender
• Birthdate
• Blood type
• Allergies
• Vaccines
• Insurance policy
• Food preferences
• Billing addresses

Sensitive Information

Where required, with your consent or as permitted by applicable law, we process the following categories of sensitive information: health data.

Payment Data

We may collect data necessary to process your payment if you choose to make purchases, such as your payment instrument number and the security code associated with your payment instrument. All payment data is managed and stored by authorize.net. You can find the link to their privacy notice(s) here.

Application Data

If you use our application(s), we may also collect the following information if you choose to provide us with access or permission:

• Mobile Device Access: We may request access to your camera, microphone, and other features.
• Mobile Device Data: Device model, OS, version, unique device identifier, carrier, IP address.
• Push Notifications: We may ask to send you push notifications.

This information is primarily needed to maintain the security and operation of our application(s), for troubleshooting purposes, and for our internal analysis and reporting purposes.

Important: All personal information you provide to us must be true, complete and accurate, and you must notify us of any changes to such personal information.

Treatment Summary

Purpose of data processing and additional purposes: The basic purpose is the processing of your health data so you can enter your medical data (vaccines, allergies, etc.) and share it with other users inside or outside the platform. All information will be anonymized and/or dissociated before sharing with any third party. Additionally, we process data for:

• Managing contracted services
• Charging for the use of the application and generating payment receipts
• Managing user registration and enrollment for services
• Ensuring identity and reliability of user information
• Communicating important account messages
• Sending promotions and discounts
• Maintaining logged-in sessions (Cookies)
• Performing statistical analysis and behavior modeling
• Providing marketing, advertising and commercial prospecting
• Offering support services
• Proactive management of information security

Information collected automatically

In Short: Some information — such as your IP address and/or browser and device characteristics — is collected automatically when you visit our Services.

The information includes:

• Log and Usage Data
• Device Data
• Location Data

We also collect data through cookies and similar technologies. Learn more in our Cookie Notice.

Information collected from other sources

In Short: We may collect limited data from public databases, marketing partners, and other outside sources to update our records and enhance our services.

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to provide, improve, and administer our Services, to communicate with you, for security and fraud prevention, and to comply with the law.

• Facilitating account creation and authentication
• Providing and facilitating service delivery
• Responding to user inquiries and support
• Sending administrative information
• Fulfilling and managing orders
• Enabling communications between users
• Requesting feedback
• Sending marketing communications (if consented)
• Protecting our Services
• Identifying usage trends and improving user experience
• Saving or protecting a person's vital interests

3. ON WHAT LEGAL BASIS DO WE BASE OUR PROCESSING OF YOUR DATA?

In Short: We only process your personal information when we have a valid legal basis to do so.

• Consent
• Performance of a contract
• Legitimate interests
• Compliance with legal obligations
• Vital interests protection

4. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: Yes, we use cookies and similar tracking technologies to collect and store your information.

Google Analytics may also be used. You can opt out at Google opt-out.

5. ARE YOUR DATA TRANSFERRED INTERNATIONALLY?

In Short: Your data may be transferred to, stored, and processed in countries other than your own, particularly the United States.

6. HOW LONG DO WE KEEP YOUR DATA?

In Short: We retain your information for as long as necessary unless otherwise required by law, typically no longer than 24 months after account termination.

7. HOW DO WE KEEP YOUR INFORMATION SECURE?

In Short: We implement technical and organizational security measures to protect your personal data but cannot guarantee 100% security.

8. DO WE COLLECT INFORMATION FROM MINORS?

In Short: No, we do not knowingly collect or market to individuals under the age of 18.

9. ACCOUNT INFORMATION

You can review, update, or delete your account information through your user settings or by contacting us.

10. YOUR RIGHTS

You have rights under Panamanian law to access, correct, delete your data, and more. You may submit a request through your account or by email to support@comunityapp.com.

11. DO WE UPDATE THIS NOTICE?

In Short: Yes, we will update this notice as necessary to stay compliant with laws.

12. HOW CAN YOU CONTACT US REGARDING THIS NOTICE?

By email at support@comunityapp.com or by mail:

CommunityApp S, EP.
San Francisco District
Panama City
Panama

13. EMAIL SECURITY

Emails are important but vulnerable to attacks. Always verify emails and avoid suspicious links.

14. HOW CAN YOU REVIEW, UPDATE OR DELETE THE DATA WE COLLECT ABOUT YOU?

You can do so by visiting your account settings: https://app.comunityapp.com/user/settings.