YBGRConnect APP PRIVACY POLICY
Last updated July 2, 2021
Yellowstone Boys and Girls Ranch (“YBGR” or “we” or “us” or “our”) respects the privacy of our users (“user” or “you”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you interact with YBGRConnect (the “Application”). Please read this Privacy Policy carefully. IF YOU DO NOT AGREE WITH THE TERMS OF THIS PRIVACY POLICY, PLEASE DO NOT ACCESS THE APPLICATION.
We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you about any changes by updating the “Last updated” date of this Privacy Policy. You are encouraged to periodically review this Privacy Policy to stay informed of updates. You will be deemed to have been made aware of, will be subject to, and will be deemed to have accepted the changes in any revised Privacy Policy by your continued use of the Application after the date such revised Privacy Policy is posted.
This Privacy Policy does not apply to the third-party online/mobile store from which you install the Application. We are not responsible for any of the data collected by any such third party.
COLLECTION OF YOUR INFORMATION
We may collect information about you in a variety of ways. The information we may collect via the Application depends on the content and materials you use, and includes:
Personal Data including Protected Health Information (PHI)
Demographic and other personally identifiable information (such as your name and email address) that you voluntarily give to us when choosing to participate in various activities related to the Application, such as chat, milestones, personal profile and surveys. Demographic data will be visible to you and to YBGR Employees, Contractors and Business Associates. You will be asked to provide consent if any demographic information is to be used publicly to other users of the service.
Patient information regarding the services you have received or will receive at YBGR. This information constitutes Protected Health Information (PHI) and is additionally subject to the YBGR Notice of Privacy Practices. YBGR will comply with the requirements of 45 CFR Parts 160 and 164 “HIPAA Rule” and 42 CFR Part 2 “Confidentiality of Substance Use Disorder Patient Records.”
Derivative Data
Information our servers automatically collects when you access the Application, such as your native actions that are integral to the Application, including interacting with various features of the Application as well as dates/time/IP Address of sign-ins through automated logging.
Financial Data
Application does not collect, store, or use financial data such as credit card or account numbers. Use of the Application is free to users. Users may complete activities to acquire “YCoins” which may be used to redeem for items in the rewards store. YCoins are not considered currency and have no convertible monetary value. YCoins may be added or removed from a user’s account at anytime by Application administrators or by automated policy (e.g. expiration).
Geo-Location Information
We may request access or permission to track location-based information from your mobile device, either continuously or while you are using the Application, to provide location-based services. If you wish to change our access or permissions, you may do so in your device’s settings.
Mobile Device Access
We may request access or permission to certain features from your mobile device, including your mobile device’s
calendar, camera, contacts, microphone, reminders, sensors, SMS messages, storage, and other features. If you wish to change our access or permissions, you may do so in your device’s settings.
Mobile Device Data
Device information such as your mobile device ID number, model, and manufacturer, version of your operating system, phone number, country, location, and any other data you choose to provide.
Push Notifications
We may request to send you push notifications regarding your account or the Application. If you wish to opt-out from receiving these types of communications, you may turn them off in your device’s settings.
Third-Party Data
Information from third parties, such as personal information or network friends, if you connect your account to the third party and grant the Application permission to access this information.
Data From Milestones, Rewards, and Surveys
Personal and other information you may provide when completing surveys, milestone reports or requesting rewards from the YBGRConnect store.
USE OF YOUR INFORMATION
Having accurate information about you permits us to provide a positive app experience and services that are customized to your specific needs. Information collected about you will be used to:
- Provide support for your personal mental health and well-being.
- Create and manage your account.
- Track your life progress through Milestones and Surveys before, during, and/or after receiving YBGR Services.
- Administer the rewards program including offering and delivering rewards to you.
- Respond to court order(s) where legally required.
- Compile anonymous statistical data and analysis for use internally or with third parties.
- Deliver customized mental health and well-being information based on your profile.
- Refer you to mental health and well-being services, whether with YBGR or other providers.
- Coordinate scheduling and notifications through push notification, emails, and/or SMS.
- Generate a personal profile about you to make future visits to the Application more personalized.
- Increase the efficiency and operation of the Application.
- Monitor and analyze usage and trends to improve your experience with the Application.
- Notify you of updates to the Application.
- Perform other business activities as needed.
- Prevent fraud, misuse, and/or investigate privacy violations.
- Request feedback and contact you about your use of the Application.
- Solicit support for the Application.
DISCLOSURE OF YOUR INFORMATION
We may share information we have collected about you in certain situations. Your information may be disclosed as follows:
By Law or to Protect Rights
If we believe the release of information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property, or safety of you and/or others, we may share your information as permitted or required by any applicable law, rule, or regulation. Any release will be done in accordance with applicable federal, state and local laws such as 45 CFR Parts 160, 164 and 42 CFR
Part 2. YBGR is a Montana-based corporation with principle operations in Yellowstone County. By using the Application, you agree to venue in Yellowstone County and the application of Montana law to any dispute regarding the Application.
Business Associates
We may share your information with third parties that perform services for us or on our behalf, including data analysis, billing, email and/or SMS delivery, hosting services, application development or healthcare services. Business Associates will be required to follow the terms of this privacy policy and the YBGR Notice of Privacy Practices.
Marketing Communications
With your consent, or with an opportunity for you to withdraw consent, we may share your information with third parties for marketing purposes, as permitted by law.
Interactions with Other Users
If you interact with other users of the Application, those users may see your name, profile photo, and descriptions of your activity, including sending invitations to other users, chatting with other users, liking posts, following blogs. Before this is allowed you will be asked to complete a global consent.
Online Postings
When you post comments, contributions or other content to the Application, your posts may be viewed by all users and may be publicly distributed outside the Application in perpetuity. Before this is allowed you will be asked to complete a global consent.
Sale or Bankruptcy
If we reorganize or sell all or a portion of our assets, undergo a merger, or are acquired by another entity, we may transfer your information to the successor entity. If we go out of business or enter bankruptcy, your information may be an asset transferred or acquired by a third party. You acknowledge that such transfers may occur and that the transferee may decline to honor commitments we made in this Privacy Policy. Protected Health Information (PHI) may be required to be retained for a period of time by Federal, State and/or Local laws.
We are not responsible for the actions of third parties with whom you share personal or sensitive data, and we have no authority to manage or control third-party solicitations. If you no longer wish to receive correspondence, emails or other communications from third parties, you are responsible for contacting the third party directly.
TRACKING TECHNOLOGIES
Cookies and Web Beacons
We may use cookies, web beacons, tracking pixels, and other tracking technologies on the Application to help customize the Application and improve your experience. When you access the Application, your personal information is not collected through the use of tracking technology. Most browsers are set to accept cookies by default. You can remove or reject cookies, but be aware that such action could affect the availability and functionality of the Application. You may not decline web beacons. However, they can be rendered ineffective by declining all cookies or by modifying your web browser’s settings to notify you each time a cookie is tendered, permitting you to accept or decline cookies on an individual basis.
Analytics
We may collect information about how you utilize the Application. This privacy policy will be updated if third parties are used for such analysis beyond YBGR and YBGR Business Associates and will include information on how to opt out of tracking/analytic services when possible.
THIRD-PARTY WEBSITES
The Application may contain links to third-party websites and applications of interest, including advertisements and external services, that are not affiliated with us. Once you have used these links to leave the Application, any information you provide to these third parties is not covered by this Privacy Policy, and we cannot guarantee the safety and privacy of your information. Before visiting and providing any information to any third-party websites, you should inform yourself of the privacy policies and practices (if any) of the third party responsible for that website, and should take those steps necessary to, in your discretion, protect the privacy of your information. We are not responsible for the content or privacy and security practices and policies of any third parties, including other sites, services or applications that may be linked to or from the Application.
SECURITY OF YOUR INFORMATION
We use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse. Any information disclosed online is vulnerable to interception and misuse by unauthorized parties. Therefore, we cannot guarantee complete security if you provide personal information. All federal, state, and/or local requirements governing the disclosure of breaches will be followed as appropriate for the data set.
POLICY FOR CHILDREN
We do not knowingly solicit information from or market to children under the age of 13. If you become aware of any data we have collected from children under age 13, please contact us using the contact information provided below.
OPTIONS REGARDING YOUR INFORMATION
Account Information
You may at any time review or change the information in your account or terminate your account by:
● Logging into your account settings and updating your account
● Contacting us using the contact information provided below
Upon your request to terminate your account, we will deactivate your account and remove any information from public view. Some data may be kept including logs and information under the “Retention of Data” heading in this section. YBGR does not have control over public information that may have been redisclosed after your consent but will make the best effort to ensure that it can no longer be sourced from the Application. Data may be fully retained for 30 days before permanent deletion in case of accidental revocation.
Emails and Communications
If you no longer wish to receive correspondence, emails, or other communications from us, you may opt-out by:
● Logging into your account settings and updating your preferences.
● Contacting us using the contact information provided below
If you no longer wish to receive correspondence, emails, or other communications from third parties, you are responsible for contacting the third party directly.
Retention of Healthcare Data
The Application is a healthcare app and data collected may constitute Protected Health Information (PHI) and information required for the provision and/or billing of services. Any information considered part of the health record may be retained using the YBGR data retention policy of a minimum of seven years, even if an account has been revoked or terminated by either you or us.
CALIFORNIA PRIVACY RIGHTS
California Civil Code Section 1798.83, also known as the “Shine The Light” law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us using the contact information provided below.
If you are under 18 years of age, reside in California, and have a registered account with the Application, you have the right to request removal of unwanted data that you publicly post on the Application. To request removal of such data, please contact us using the contact information provided below, and include the email address associated with your account and a statement that you reside in California. We will make sure the data is not publicly displayed on the Application, but please be aware that the data may not be completely or
comprehensively removed from our systems.
CONTACT US
If you have questions or comments about this Privacy Policy, please contact us at:
Yellowstone Boys and Girls Ranch
Attn: Privacy Officer
1732 S 72ND ST W,
Billings, MT 59106
406-655-2100