Legal Rights & Agreement Rules · User right or choice
Genetic-data and sample rights depend on applicable law
Depending on applicable law, you may have rights to access or delete genetic data or destroy biological samples from which it can be derived. The policy provides a contact route but says rights are not absolute and requests may be denied as permitted by law. The saved email address is masked, so no actual email address can be supplied here.
Supporting quotations
Privacy rights. Depending on the applicable law, you may have certain rights with respect to your personal information (for example, if you reside in a state that provides you with rights in relation to genetic data). These rights may include rights to request access, delete and/or destroy genetic data and biological samples from which genetic data may be derived. To exercise potentially available privacy rights, please contact us at [[email protected]](https://www.functionhealth.com/cdn-cgi/l/email-protection). Not all rights are absolute and we may deny your requests to exercise such rights in accordance with applicable laws.
Not stated here
The stored source masks the contact email as an email-protection placeholder.
Legal Rights & Agreement Rules · Restriction or exception
Outside services follow their own privacy rules
Third-party sites, apps and services are outside this policy, including those Function links to or refers you to. Function says links or integrations are not endorsements or representations of affiliation, disclaims control and responsibility for those services, and encourages reading their policies.
Supporting quotations
This Privacy Policy does not apply to third-party websites, applications, products, services or other properties even if they may link to our Service or we may refer you to such third parties as part of our Service. In addition, our content may be integrated into web pages or other online services that are not associated with us. These links, relationships and other integrations are not an endorsement of, or representation that we are affiliated with, any third party. We do not control websites, mobile applications or services operated by third parties, and we are not responsible for their actions. We encourage you to read the privacy policies of the other websites, mobile applications and services you use.
Legal Rights & Agreement Rules · Company practice
Policy changes may take effect when posted
Function reserves the right to change the policy at any time. For material changes it will update the date and post the policy or use other appropriate notice. Changes take effect on posting unless otherwise indicated, and later service use indicates acknowledgment that the updated policy applies.
Supporting quotations
The “Last Updated” legend at the top of this Privacy Policy indicates when this Privacy Policy was last updated. We reserve the right to modify this Privacy Policy at any time. If we make material changes to this Privacy Policy, we will notify you by updating the date of this Privacy Policy and posting it on the Service or other appropriate means. Any modifications to this Privacy Policy will be effective upon our posting the modified version (or as otherwise indicated at the time of posting). In all cases, your use of the Service after the effective date of any modified Privacy Policy indicates your acknowledging that the modified Privacy Policy applies to your interactions with the Service and our business.
Legal Rights & Agreement Rules · Procedure
Privacy questions and rights requests have a contact route
Function directs questions about its practices and potentially available privacy rights to its listed email contact. The stored page shows an email-protection placeholder, so this analysis cannot reproduce the actual email address.
Supporting quotations
If you have questions about our personal information practices or if you would like to exercise any privacy-related right that may be available to you, please contact us via the method listed below.
The listed contact email is masked in the stored source; its actual address is unavailable here.
Legal Rights & Agreement Rules · Restriction or exception
State privacy rights depend on applicable law and verification
The state notice is part of the full policy and applies, except as otherwise stated, to residents whose state privacy laws apply to Function and grant these rights. Not all rights belong to everyone. Function responds under applicable law, may decline where an exception applies, and may be unable to process access, correction or deletion requests without enough detail to verify identity and respond.
Supporting quotations
U.S. State Privacy Rights Notice at Collection
Except as otherwise provided, this section applies to residents of U.S. states to the extent they have privacy laws applicable to us that grant their residents the rights described below (collectively the “State Privacy Laws”).
This State Privacy Rights Notice at Collection is part of our full Privacy Policy.
This section describes how we collect, retain, use, disclose, sell and share for the purposes of targeted advertising personal information of residents of applicable U.S. states and the rights these users may have with respect to their personal information. Please note that not all rights listed below may be afforded to all individuals and that if your state does not afford you these rights, you may not be able to exercise these rights. In addition, we may not be able to process your access, correction or deletion request if you do not provide us with sufficient detail to allow us to confirm your identity and understand and respond to your request.
Your privacy rights. You may request to exercise the rights listed below. We will respond to your request in accordance with applicable law. We may decline to honor your request where an exception applies.
Legal Rights & Agreement Rules · Context
The state notice defines personal information broadly
For this state-notice section, personal information relates to an identifiable person or can reasonably identify, contact or precisely locate a person, household, computing system or device. This definition is expressly scoped to this section.
Supporting quotations
For purposes of this section, the term “personal information” means information that relates to an identified or identifiable natural person, or that is reasonably capable of being used to identify, contact, or precisely locate a natural person, household, or a particular computing system or device.
Legal Rights & Agreement Rules · User right or choice
Eligible residents may ask what information is processed and disclosed
Subject to applicable state law and exceptions, you can ask whether Function processes your information and request collection and source categories, business or commercial purposes, sale or targeted-advertising categories and recipients, business-purpose disclosure categories and recipient types, and specific third-party recipients. The described reporting covers the past 12 months and continued practices.
Supporting quotations
You can request to know whether we process your personal information.
You can request the following information about how we have collected and used your personal information during the past 12 months and how we will continue to do so:
The categories of personal information that we have collected.
The categories of sources from which we collected personal information.
The business or commercial purpose for collecting, selling, and/or sharing personal information for targeted advertising purposes.
The categories of personal information that we sold or shared for targeted advertising purposes, and the categories of third parties to whom this information was sold or shared, categorized by the type of personal information for each type of third party.
The categories of personal information that we disclosed for business purposes and the types of entities to whom this information was disclosed.
The specific third parties to which we have disclosed personal information.
Legal Rights & Agreement Rules · User right or choice
Access, correction and deletion can be requested
Where applicable state law grants the rights, you may request a portable copy or representative summary, correction of inaccurate personal information, or deletion of information collected from or about you. These are requests subject to the notice's verification requirements and applicable exceptions, not unconditional promises of deletion or a particular export format.
Supporting quotations
Access. You can request a portable copy or representative summary of the personal information that we have collected about you.
Correction. You can ask us to correct inaccurate personal information that we have collected about you.
Deletion. You can ask us to delete the personal information that we have collected from or about you.
Legal Rights & Agreement Rules · User right or choice
Consent withdrawal may be available
You may have the right under applicable state law to revoke consent to Function's processing of personal information. The notice does not promise this right to every person or make every processing purpose depend on consent.
Supporting quotations
Revoke consent. You may have the right to revoke your consent to our processing of your personal information.
Legal Rights & Agreement Rules · User right or choice
State rights include nondiscrimination and appeal
Where the state privacy laws apply, you are entitled to exercise the described rights without discrimination prohibited by those laws and may appeal denial of a validly submitted request.
Supporting quotations
Nondiscrimination. You are entitled to exercise the rights described above free from discrimination as prohibited by the State Privacy Laws.
Appeal. You can appeal our denial of any request validly submitted.
Legal Rights & Agreement Rules · Procedure
Use the privacy portal for state-rights requests
Function provides a privacy portal and email route for know, access, correction, deletion, appeal and sensitive-processing-limit requests. Requests must include enough detail to understand and respond to them. The portal link is present, but the stored email is masked; the portal's own contents are not supplied.
Supporting quotations
Exercising your right to know, access, correction, deletion, and appeal [and limiting processing of Sensitive Personal Information]. You may submit requests at our privacy portal or via email to [[email protected]](https://www.functionhealth.com/cdn-cgi/l/email-protection).
We cannot process your request if you do not provide us with sufficient detail to allow us to understand and respond to it.
Not stated here
The linked privacy portal is not supplied and its additional procedures cannot be assessed. The email address is masked in the source.
Legal Rights & Agreement Rules · Procedure
Authorized agents may need proof of authority
Some state laws allow an agent to submit your request. Function may verify the agent's identity and authority and, depending on the request, require a valid power of attorney. Without one, it may request legally permitted steps such as signed permission, your identity information or confirmation of authorization.
Supporting quotations
Under some State Privacy Laws, you may enable an authorized agent to make a request on your behalf. However, we may need to verify your authorized agent’s identity and authority to act on your behalf. Depending on the kind of request you have made, we may require a copy of a valid power of attorney given to your authorized agent pursuant to applicable law. If you have not provided your agent with such a power of attorney, we may ask you to take additional steps permitted by law to verify that your request is authorized, such as by providing your agent with written and signed permission to exercise your State Privacy Law rights on your behalf, the information we request to verify your identity, or confirmation that you have given the authorized agent permission to submit the request.
Legal Rights & Agreement Rules · Context
The state table separates business disclosures, ad sharing and sales
The table summarizes current practices and the 12 months before the policy's effective date, using definitions in the full policy and state-law categories. Its columns separately identify data, statutory categories, purposes, business-purpose recipients, cross-context behavioral-advertising recipients and sale recipients. Voluntary free-form submissions may contain categories beyond the table; personal information here includes identifiable people, households and devices.
Supporting quotations
Personal information that we collect, use and disclose. We have summarized the personal information we collect and may disclose, sell to or share with third parties by reference below to both the categories of personal information defined in the “Personal Information we collect,” “How we use your personal information,” and “How we share your personal information” sections of this Policy above and the categories of personal information specified in state law. This table describes our practices currently and during the 12 months preceding the effective date of this Privacy Policy. Information you voluntarily provide to us, such as in free-form webforms, may contain other categories of personal information not described below.
See our full Privacy Policy for descriptions of each entry in this table.
Personal Information (“PI”) We Collect Statutory Category of PI Business/commercial purpose for PI collection Categories of third parties to whom we “disclose” PI for a business purpose Categories of third parties with whom we “share” PI for cross-context behavioral advertising purposes Categories of third parties to whom we “sell” PI
For purposes of this section, the term “personal information” means information that relates to an identified or identifiable natural person, or that is reasonably capable of being used to identify, contact, or precisely locate a natural person, household, or a particular computing system or device.
Legal Rights & Agreement Rules · Context
What this policy covers
This policy covers Function Health and certain affiliates' linked websites, apps, social media, marketing, events and other described services. Specific products may have supplemental or separate notices, including Ezra's linked policy. Third-party services are outside this policy, even when Function links or refers you to them; those policies are not supplied here.
Supporting quotations
This Privacy Policy describes how Function Health, Inc. and certain of its corporate affiliates (collectively, “Function,” “we,” “us” or “our”) process personal information that we collect or otherwise generate through our digital or online properties or services that link to this Privacy Policy (including as applicable, our website, mobile applications, social media pages) as well as our marketing activities, live events and other activities described in this Privacy Policy (collectively, the “Service”). Function may provide to individuals supplemental or separate privacy policies for specific products or services that we offer including those at the time we collect personal information (also known as “just-in-time” disclosures). For example, for information about how our corporate affiliate Ezra AI, Inc. processes personal information, please see Ezra’s privacy policy, available at https://ezra.com/privacy.
This Privacy Policy does not apply to third-party websites, applications, products, services or other properties even if they may link to our Service or we may refer you to such third parties as part of our Service. In addition, our content may be integrated into web pages or other online services that are not associated with us. These links, relationships and other integrations are not an endorsement of, or representation that we are affiliated with, any third party. We do not control websites, mobile applications or services operated by third parties, and we are not responsible for their actions. We encourage you to read the privacy policies of the other websites, mobile applications and services you use.
Not stated here
Ezra's linked privacy policy is not supplied here; this card cannot describe Ezra's separate processing practices.
Legal Rights & Agreement Rules · Context
Consumer health data has a supplemental policy
Function may process information identifying past, present or future physical or mental health. Where applicable state consumer-health-data laws cover it, a separate Consumer Health Data Privacy Policy supplements this policy. Its terms are not supplied in this analysis.
Supporting quotations
Function may process personal information that identifies your past, present, or future health or mental health status, or that otherwise constitutes “consumer health data” or equivalent terms as defined by applicable US state laws (“Consumer Health Data”). To the extent such laws apply to your Consumer Health Data, please see our Consumer Health Data Privacy Policy, which supplements this Privacy Policy.
Legal Rights & Agreement Rules · Restriction or exception
Enterprise-customer processing is excluded
This policy does not cover information Function receives from and processes on behalf of enterprise customers. Employer-provided eligibility information, for example, may instead be governed by the customer's agreement, including a business associate agreement where applicable. Questions about that processing should go to the enterprise customer.
Supporting quotations
This Privacy Policy does not apply to personal information that we receive from and process on behalf of our enterprise customers while providing Function services to them. For example, to the extent that we receive your personal information from your employer related to your eligibility for our Service, our use of that personal information may be governed by our agreements (including, as applicable, a business associate agreement) with the relevant enterprise customer. If you have questions regarding your personal information that we process on behalf of an enterprise customer, please direct your questions to the relevant enterprise customer.
Legal Rights & Agreement Rules · Context
Additional notice for U.S. residents
The policy directs U.S. residents to its State Privacy Rights Notice at Collection for additional information. Specific rights and exclusions depend on that notice's conditions.
Supporting quotations
NOTICE TO U.S. STATE RESIDENTS: Please see the U.S. State Privacy Rights Notice at Collection section of this Privacy Policy for additional information if you are a U.S. resident.
Legal Rights & Agreement Rules · Context
HIPAA does not cover every piece of information
Function and its affiliates may act as HIPAA business associates, but the policy says HIPAA does not apply to all personal information they process. The company describes protective measures and privacy principles without promising universal HIPAA coverage.
Supporting quotations
We built Function for families, ourselves and you. Your privacy is one of our top priorities. We empower you to take control of your health and that includes having control of certain aspects of your personal information. While Function and its corporate affiliates may operate as a “business associate” as the Health Insurance Portability and Accountability Act (“HIPAA”) defines that term, HIPAA does not apply to all personal information that we process. Regardless, we leverage measures designed to protect and process your personal information in accordance with our guiding privacy principles below and as otherwise stated in this Privacy Policy. Please read the Privacy Policy in full to understand our personal information practices.
Legal Rights & Agreement Rules · Company practice
Legal compliance, protection and enforcement uses
Function may use personal information for applicable laws, lawful requests and legal process; protecting rights, privacy, health, safety or property; legal claims; compliance audits; enforcing service terms; and detecting or deterring harmful, fraudulent, unauthorized, unethical or illegal conduct.
Supporting quotations
Compliance and protection. We may use your personal information to:
comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas, court orders, investigations or requests from government authorities;
protect our, your or others’ rights, privacy, health, safety or property (including by making and defending legal claims);
audit our internal processes for compliance with legal and contractual requirements or our internal policies;
enforce the terms and conditions that govern the Service; and
prevent, identify, investigate and deter fraudulent, harmful, unauthorized, unethical or illegal activity, including cyberattacks and identity theft.
Not stated here
The service terms and conditions referenced here are not supplied; this card cannot describe the underlying duties or remedies they contain.
Legal Rights & Agreement Rules · Company practice
Specific consent may be requested
Function may specifically ask for consent to collect, use or share personal information in some cases, such as when law requires it. This does not promise a separate consent request for every activity described in the policy.
Supporting quotations
With your consent. In some cases, we may specifically ask for your consent to collect, use or share your personal information, such as when required by law.