Privacy Policy – Sync360 Mobile Application

Effective Date: March 29, 2026
Last Updated: March 29, 2026

Introduction

Vitalis Care Ltd. ("Company" or "We") respects your privacy and is committed to protecting your privacy through compliance with this policy.

This policy describes the types of information we may collect from you or that you may provide when you use our Sync360 mobile application ("App") and our practices for collecting, using, maintaining, protecting, and disclosing that information.

This policy applies to information we collect:

• Through the Sync360 mobile application.
• In email, text, and other electronic messages between you and the App or our support team.

It does not apply to information collected by:

• Us offline or through any other means, including on any other website or application operated by the Company or any third party; or
• Any third party (including your employer(s)), including through any application or content (including advertising) that may link to or be accessible from or through the App.

For information about data practices on our website, please see our website privacy policy at vitaliscare.ai.

Please read this policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our App. By downloading, installing, or using this App, you agree to this privacy policy. This policy may change from time to time (see Changes to Our Privacy Policy). Your continued use of the App after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates.

Children Under the Age of 18

Our App is not intended for children under 18 years of age. No one under age 18 may provide any personal information to or through the App. We do not knowingly collect personal information from children under 18. If you are under 18, do not use or provide any information through the App. If we learn we have collected or received personal information from a child under 18 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 18, please contact us at support@vitaliscare.ai.

California residents under 16 years of age may have additional rights regarding the collection and sale of their personal information. Please see Your State Privacy Rights for more information.

Information We Collect About You and How We Collect It

We collect several types of information from and about users of our App, including information:

• By which you may be personally identified, such as name, email address, or authentication credentials ("personal information");
• Protected Health Information (PHI) related to patient care, including medical records, care provider details, and treatment plans, handled in accordance with HIPAA;
• Precise location data, including real-time and background location;
• About your device, including device model, device name, operating system version, and unique device identifiers; and/or
• About your usage of the App, including features accessed, actions taken, performance metrics, and crash data.

We collect this information:

• Directly from you when you provide it to us (e.g., account registration, authentication via Google OAuth through AWS Cognito).
• Automatically when you use the App. Information collected automatically may include location data, device information, usage analytics, performance metrics, and crash reports.

Information You Provide to Us

The information we collect through our App may include:

• Information that you provide when registering to use the App, including your name, email address, and authentication credentials.
• Records and copies of your correspondence (including email addresses) if you contact us.
• Patient care data, orders, and related health information that you access or manage through the App.

Information We Collect Automatically

As you use the App, we may use automatic data collection technologies to collect certain information, including:

• Location Data. The App collects precise, real-time location data from your device using HyperTrack technology to coordinate care provider logistics, route optimization, and patient visit tracking. Location data is collected both while the App is in use (foreground) and when the App is running in the background. You will be prompted to grant location permissions before this data is collected.
• Push Notification Tokens. If you enable push notifications, we collect your device's push notification token via Firebase Cloud Messaging to deliver notifications related to patient care, order updates, and other App-related communications.
• Crash and Performance Data. We collect crash reports through Firebase Crashlytics and performance diagnostics through Firebase Performance Monitoring to identify and fix technical issues.
• Usage Analytics. We collect App usage data through Firebase Analytics to understand how the App is used and to improve our services.
• Device Information. We collect device model, device name, operating system version, and unique device identifiers.

How We Use Your Information

We use information that we collect about you or that you provide to us, including any personal information:

• To provide the App and its features to you.
• To manage your account and authenticate your identity.
• To coordinate healthcare provider logistics and patient care.
• To track care provider location for scheduling, routing, and visit verification.
• To display maps and location-based information within the App.
• To send push notifications related to patient care and App updates.
• To process data using artificial intelligence (AI) technologies, including Large Language Models (LLMs), for purposes such as generating health insights, assisting care providers, and automating communication.
• To monitor, analyze, and improve the App's performance and reliability.
• To fulfill any other purpose for which you provide it.
• To carry out our obligations and enforce our rights arising from any contracts entered into between you and us.
• To notify you about changes to our App or any services we offer or provide through it.
• To comply with legal obligations, including HIPAA requirements.
• In any other way we may describe when you provide the information.
• For any other purpose with your consent.

Disclosure of Your Information

We may disclose aggregated information about our users, and information that does not identify any individual, without restriction.

We may disclose personal information that we collect or you provide as described in this privacy policy:

• To our subsidiaries and affiliates.
• To contractors, service providers, and other third parties we use to support our business and who are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them.
• To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Vitalis Care's assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by Vitalis Care about our App users is among the assets transferred.
• To fulfill the purpose for which you provide it.
• For any other purpose disclosed by us when you provide the information.
• With your consent.

We may also disclose your personal information:

• To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
• To enforce or apply our terms of use and other agreements.
• If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Vitalis Care, our customers, or others.

Subprocessors and Third-Party Services

The App uses the following third-party services that may receive or process your data:

• Amazon Web Services (AWS) – Cloud infrastructure, backend hosting, and authentication (AWS Cognito)
• HyperTrack – Real-time location tracking and logistics
• Google Firebase – Push notifications (FCM), crash reporting (Crashlytics), usage analytics (Analytics), and performance monitoring (Performance)
• Google Maps – Map display and location-based features, subject to Google's Privacy Policy
• OpenAI API – Data analysis and AI

HIPAA Compliance

The App is designed for use by authorized healthcare professionals and is HIPAA-compliant. We maintain appropriate administrative, technical, and physical safeguards for Protected Health Information as required by HIPAA and its implementing regulations. Only authorized users are permitted to access PHI through the App. Access to PHI is protected by authentication and role-based access controls.

Choices About How We Use and Disclose Your Information

We strive to provide you with choices regarding the personal information you provide to us:

• Location Permissions. You can control location permissions through your device settings. However, disabling location access will prevent the App from functioning as intended.
• Push Notifications. You can opt out of push notifications through your device settings.
• Promotional Communications. If you do not wish to have your email address or contact information used by the Company to promote our own or third parties' products or services, you can opt out by sending us an email stating your request to support@vitaliscare.ai.

We do not control third parties' collection or use of your information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way.

Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your information, including encryption of data in transit and at rest, secure access protocols, and role-based access controls. Sensitive data such as authentication tokens and credentials are stored using secure device storage mechanisms (Android Keystore).

However, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

Data Retention

We retain your information for as long as your account is active or as needed to provide you with the App's services. We may also retain information as necessary to comply with legal obligations (including HIPAA record retention requirements), resolve disputes, and enforce our agreements.

Accessing and Correcting Your Information

You can review and change your personal information by sending us an email at support@vitaliscare.ai to request access to, correct, or delete any personal information that you have provided to us. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.

Residents of certain states may have additional personal information rights and choices. Please see Your State Privacy Rights for more information.

Your State Privacy Rights

State consumer privacy laws may provide their residents with additional rights regarding our use of their personal information. To learn more about California residents' privacy rights, visit https://oag.ca.gov/privacy/ccpa. In addition, California's "Shine the Light" law (Civil Code Section 1798.83) permits users of our App that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please send an email to support@vitaliscare.ai.

Colorado, Connecticut, Virginia, and Utah each provide their state residents with rights to:

• Confirm whether we process their personal information.
• Access and delete certain personal information.
• Data portability.
• Opt-out of personal data processing for targeted advertising and sales.

Colorado, Connecticut, and Virginia also provide their state residents with rights to:

• Correct inaccuracies in their personal information, taking into account the information's nature and processing purpose.
• Opt-out of profiling in furtherance of decisions that produce legal or similarly significant effects.

To exercise any of these rights please send an email to support@vitaliscare.ai. To appeal a decision regarding a consumer rights request please send an email to support@vitaliscare.ai.

Nevada provides its residents with a limited right to opt-out of certain personal information sales. Residents who wish to exercise this sale opt-out right may submit an email to support@vitaliscare.ai. However, please know we do not currently sell data triggering that statute's opt-out requirements.

Changes to Our Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted within the App or on our website, and the "Last Updated" date at the top of this policy will be revised. Your continued use of the App after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Vitalis Care, Ltd.
Email: support@vitaliscare.ai