Privacy Policy

This Privacy Policy explains how Xceed Health ("Xceed," "we," "us," or "our"), a service of System2 Technologies Corp., collects, uses, shares, and protects information when you visit our website, complete an intake form, or otherwise interact with our services.

Please read this policy carefully. If you do not agree with it, please do not use our site or services.

1. Who this policy covers, and a note on how Xceed works

Xceed operates a website and marketing platform that connects you with an independent network of licensed physicians and licensed pharmacies. It is important to understand who does what with your information, because different privacy and security rules apply to different parts of that chain:

• Xceed operates the website, marketing, and the accompanying training app and coaching experience. Xceed is not a healthcare provider and does not make medical decisions.
• The physician network is an independent network of licensed physicians. Once you submit a medical intake, your health information is reviewed and held by the physician network, which is subject to HIPAA (the Health Insurance Portability and Accountability Act) as a covered healthcare provider.
• Our pharmacy partners are licensed pharmacies that compound and dispense prescriptions and are separately subject to HIPAA and state pharmacy law.

In plain terms: the intake and medical information you provide is collected through Xceed's website but is reviewed and held by the physician network and pharmacy, who are the parties directly subject to HIPAA for that information. Xceed's role is to operate the website and marketing experience and to facilitate secure handoff of your information to those licensed parties.

2. Information we collect

Information you provide directly:

• Contact information: name, email address, phone number, mailing address.
• Account information: username, password, and account preferences.
• Intake and health information: information you provide in a medical intake or questionnaire, including health history, current medications, goals, and other information relevant to a physician's review.
• Payment information: processed by our payment processor. Xceed does not store full payment card numbers.
• Communications: messages you send us, including through customer support, and messages exchanged with your care team through the patient portal or app.

Information collected automatically:

• Device and usage information: IP address, browser type, operating system, pages visited, referring URLs, and general location derived from IP address.
• Cookies and similar technologies: see Section 7 below.

Information from other sources:

• If you access Xceed through a creator or influencer link, we may receive information about which creator referred you, for attribution purposes. This does not include your health information.

3. How we use information

We use the information we collect to:

• Operate and improve the website, app, and coaching experience.
• Facilitate your intake and connect you with the physician network and pharmacy.
• Process payments.
• Communicate with you about your account, orders, and support requests.
• Send you marketing communications, where permitted, and in accordance with your preferences (see Section 8).
• Maintain the security of our systems and prevent fraud.
• Comply with legal obligations.

We do not use your health information to make advertising or targeting decisions, and we do not sell health information.

4. How we share information

We share information only as described here, and never sell your health information.

With the physician network and pharmacy. Your intake and health information is shared with the licensed physician network and, once a prescription is issued, with the dispensing pharmacy, solely to provide you care and fulfill your prescription.

With service providers. We use third-party vendors to operate our technology, including:

• Cloud hosting, email, and text messaging providers.
• Payment processing providers.
• Analytics and marketing tools.

These providers are permitted to use your information only to provide services to us and are contractually restricted from using it for their own purposes.

For legal and safety reasons. We may disclose information if required by law, to respond to legal process, or to protect the rights, property, or safety of Xceed, our users, or others.

In a business transfer. If Xceed is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this policy or a successor policy.

We do not sell your personal information, and we do not share health information for cross-context behavioral advertising.

5. Cookies and tracking technologies

We and our service providers use cookies and similar technologies to operate the site, remember your preferences, measure site performance, and, where permitted, support marketing. You can control cookies through your browser settings.

6. Your privacy choices and rights

Depending on where you live, you may have rights under state privacy law, including the right to:

• Know what personal information we have collected about you.
• Request deletion of your personal information.
• Correct inaccurate personal information.
• Opt out of the sale or sharing of personal information, and opt out of targeted advertising.
• Not be discriminated against for exercising these rights.

A note on health-specific state laws. Some states, including Washington, Nevada, and Connecticut, have laws that specifically regulate "consumer health data," a category that can be broader than HIPAA and can apply to companies that are not otherwise HIPAA covered entities.

To exercise any of these rights, contact us at support@system2.fitness. We will verify your request before acting on it.

7. Data security

We use administrative, technical, and physical safeguards designed to protect your information, including. No system is completely secure, and we cannot guarantee the absolute security of your information.

8. Data retention

We retain personal information for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements.

9. Children's privacy

Xceed's services are intended for adults only. We do not knowingly collect information from anyone under 18. If we learn we have collected information from someone under 18, we will delete it.

10. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you as required by law, for example by posting a notice on our site or, where required, by direct communication. The "last updated" date at the top of this page reflects the most recent revision.

11. Contact us

If you have questions about this policy or your information, contact us at:

System2 Technologies Corp.
2261 Market Street #4048
San Francisco, CA 94114
United States
support@system2.fitness