CMT uses your data to provide you with the best experience possible, to help you make the most of your service and improve adherence habits, and to improve and protect the CMT Service. Here are some examples:

• Contact information is used to send you alerts and to inform you about new features or products we think you would be interested in.

• Data and logs are used in research to understand and improve the CMT Device and CMT Service; to troubleshoot the CMT Service; to detect and protect against error, fraud or other criminal activity; and to enforce the CMT Terms of Service.

• De-identified data that does not identify you may be used to inform the health community about trends; for marketing and promotional use; or for sale to interested audiences. See “Sharing of De-identified Data That Does Not Identify You” to learn more.

DATA THAT COULD IDENTIFY YOU
Personal Identifiable Information (PII) is data that includes a personal identifier like your name, email or address, or data that could reasonably be linked back to you. We will only share this data under the following circumstances:

• If we believe that disclosure is reasonably necessary to comply with a law, regulation, valid legal process (e.g., subpoenas or warrants served on us), or governmental or regulatory request, to enforce or apply the Terms of Service or Terms of Sale, to protect the security or integrity of the CMT Service, and/or to protect the rights, property, or safety of CMT, its employees, users, or others. If we are going to release your data, we will do our best to provide you with notice in advance by email, unless we are prohibited by law from doing so.

• We may disclose or transfer your PII in connection with the sale, merger, bankruptcy, sale of assets or reorganization of our company. We will notify you if a different company will receive your PII and the promises in this Privacy Policy will apply to your data as transferred to the new entity.

• Some of your PII will include, without limitation, your individually identifiable device readings.

DATA THAT DOES NOT IDENTIFY YOU (DE-IDENTIFIED DATA)
CMT may share or sell aggregated, de-identified data that does not identify you, with partners and the public in a variety of ways, such as by providing research or reports about adherence trends. When provide this information, we perform appropriate procedures so that the data does not identify you and we contractually prohibit recipients of the data from re-identifying it back to you.

DATA THAT YOU DIRECT US TO SHARE
You can direct us to share data with other parties. For example, you might authorize us to link your CMT account with a third-party app; or direct us to share data with a health care provider with which CMT has an active Master Services Agreement as part of a medication adherence and monitoring program.

SURVEYS
CMT may also ask you to participate in surveys (processed by CMT or third parties) that help us understand your use of the CMT Service. Any PII you provide to CMT (or supplied by you or CMT to such third-party survey providers) will only be used in relation to that survey and as stated in this policy.