Privacy Policy
AssetBlue Impact Technologies, PBC
Last Updated: October 9, 2026
https://vivery.com/privacy-policy
AssetBlue Impact Technologies, PBC (“ABIT,” “we,” “us,” or “our”) understands your concerns about privacy and how your information is used and safeguarded. This Privacy Policy describes our practices for the Vivery website at vivery.com, the Vivery web application at app.vivery.com, and the Vivery mobile applications (together, the “Services”), including the types of personal information we collect, how we use it, and with whom we share it.
This Privacy Policy applies only to information collected through the Services where this Privacy Policy is posted or linked. It does not apply to our other websites or applications that have their own privacy policies, or to our offline practices. When you use the Services through a health plan, healthcare provider, or other organization, that organization’s own privacy notices may also apply (see “Health Information and HIPAA” below). By using the Services, you acknowledge the practices described in this Privacy Policy. We may update this Privacy Policy from time to time, as described in “Changes to This Privacy Policy.”
Summary
This Privacy Policy explains:
- What personal information we collect through the Services and where it comes from.
- How we use the information we collect, including our use of artificial intelligence (AI).
- With whom the information may be shared, and confirmation that we do not sell or share it for advertising.
- How health information is handled under HIPAA.
- How we safeguard and retain your information.
- Your privacy rights and how to exercise them.
- Information related to third-party websites, children’s privacy, and where your information is processed.
- How you can learn about changes to this Privacy Policy and how to contact us.
The Information We Collect
Personal Information You Provide
You can browse public parts of the Services without providing personal information. Other features, such as finding programs you may be eligible for, ordering food, or receiving deliveries, require you to create an account and provide some personal information. Personal information is information that identifies, relates to, or could reasonably be linked to you.
Depending on the features you use, we may collect:
- Contact and account information: name, home address, email address, telephone number, date of birth, and account credentials.
- Household and eligibility information: household size, whether you have children, income, needs and service interests, preferred language, travel distance, and accessibility requirements.
- Health insurance and benefit information: health plan name, member ID, plan effective date, payor ID, insurance type, and enrollment in programs such as Medicaid, SNAP, or WIC.
- Health information: information about certain health conditions, pregnancy status, and disability details, where you choose to provide it or where a program requires it.
- Demographic information: such as race, ethnicity, and gender, where you choose to provide it.
- Your content: messages you send, answers to check-ins and surveys, order and delivery details, delivery notes, and emergency contact information.
Information From Other Sources
If you use the Services through a health plan, healthcare provider, community organization, or other program partner, that organization may provide information about you to us, such as your name, contact details, and program eligibility, so that we can verify your eligibility and deliver the program. We may ask for your consent before using a match between information you provide and an eligibility file a partner has supplied.
Information Collected Automatically
When you use the Services, we and our service providers automatically collect certain information, including IP address, browser and device type, operating system, Internet service provider, referring and exit pages, date and time stamps, pages and screens viewed, and actions you take in the Services (“app activity”). We also collect push-notification tokens if you enable notifications. Much of this information is collected through cookies, similar technologies, and third-party services such as Branch.io and Google Analytics.
Summary Table
| Category of Personal Information | Source | Purpose | Sold or Shared? |
|---|---|---|---|
| Contact and account information | You; program partners | Account creation, communication, service delivery | Not sold or shared |
| Household and eligibility information | You; program partners | Program matching, eligibility verification, service delivery | Not sold or shared |
| Health insurance and benefit information | You; program partners | Membership verification, service delivery | Not sold or shared |
| Health information | You; program partners | Service delivery, program matching | Not sold or shared |
| Demographic information | You | Program matching, reporting required by programs | Not sold or shared |
| Your content (messages, check-ins, orders) | You | Service delivery, support, communications | Not sold or shared |
| App activity, IP address, device information, cookies | Automatically collected | Functionality, security, analytics, improving the Services (including AI features) | Not sold or shared |
How We Use Your Information
We use the information we collect to:
- Create and manage your account and verify your identity and program eligibility.
- Provide the Services, including recommending programs and resources, processing orders, and coordinating pickups and deliveries.
- Send you service communications, such as reminders, check-ins, surveys, and in-app messages.
- Translate content into your preferred language.
- Provide support and respond to your requests.
- Report to the health plans, providers, and program partners that sponsor your program, as required to administer that program.
- Maintain the security and integrity of the Services and prevent fraud and misuse.
- Analyze and improve the Services, including the AI features described below.
- Comply with legal obligations and enforce our terms.
Communications
We may contact you by email, text message (SMS), push notification, or in-app message about your account, programs, orders, pickups, and deliveries. You can turn off push notifications in your device settings, opt out of text messages by replying STOP, and unsubscribe from marketing emails using the link in the email. Some service messages, such as order and account notices, are required to use the Services.
Artificial Intelligence (AI) Features
Some Vivery features use AI to help connect you with programs and keep you engaged with them:
- Program recommendations. Vivery’s in-house models suggest assistance programs you may be eligible for and rank how well programs fit your needs, location, and schedule. Recommendations are suggestions only. They are not eligibility decisions, they are never used to deny you services, and the program administrator decides eligibility. You can dismiss any recommendation.
- Reminders and check-ins. An AI service helps decide whether and when to show you a short in-app reminder, check-in, or survey, and may write or select its wording from templates written by program staff. We send this AI service only the minimum information needed, such as recent app activity and the templates; we do not send your name, contact details, date of birth, health information, or other personal information that identifies you. These messages are not medical advice.
- Translation. When you view translated content or search in another language, the text being translated is processed by a machine-translation service.
Third-party AI services we use are provided by Microsoft through Microsoft Azure and are hosted in the United States under contracts that require Microsoft to protect your information and that prohibit using it to train Microsoft’s or others’ AI models. We do not allow any third-party AI provider to train its models on your information.
We may use app activity, linked to an internal identifier rather than your name or contact details, to develop and improve our own in-house models, such as models that help time reminders. We do not use information provided to us by a health plan or other program partner to train AI models unless that partner has authorized it in writing.
You can turn off personalized recommendations at any time in Account Settings under “Personalization & Recommendations.” If you do, you can still search for programs and use the Services without personalized suggestions.
Health Information and HIPAA
When you use Vivery through a health plan, healthcare provider, or other organization covered by the Health Insurance Portability and Accountability Act (HIPAA), ABIT acts as that organization’s “business associate.” In that role, health information we receive or create for the organization is protected health information (PHI), and we use and disclose it only as permitted by HIPAA and our business associate agreement with that organization. The organization’s Notice of Privacy Practices describes how your PHI may be used and your rights under HIPAA, such as the right to access or amend your health records. You may contact that organization directly to exercise those rights; if you contact us instead, we will forward your request to the organization and assist it as required.
Where HIPAA does not apply, we protect health information you provide under this Privacy Policy, and we use it only to provide the Services you request.
How We Share Your Information
We do not sell your personal information, and we do not share it for cross-context behavioral (targeted) advertising.
We disclose personal information only in the following circumstances:
- Service providers. We work with service providers that host and store information, deliver communications, process forms, provide analytics, translate content, plan delivery routes, and provide other functions on our behalf. They may use your information only to perform services for us and must protect it.
- Program partners. If you use the Services through a health plan, healthcare provider, community organization, food pantry, or other program partner, we share information with that partner as needed to administer and report on the program and to deliver food and services to you.
- With your direction or consent. We share information when you ask us to or give us permission.
- Affiliates. We may share information with companies under common ownership or control with ABIT for internal business operations, subject to this Privacy Policy.
- Business transfers. Information may be transferred as part of a merger, acquisition, financing, reorganization, or sale of all or part of our assets, subject to this Privacy Policy.
- Legal and safety reasons. We may disclose information to comply with a subpoena, legal process, government request, or other legal obligation; to prevent, investigate, or address fraud, security incidents, or attacks on the Services; or to protect the rights, privacy, property, or safety of ABIT, our users, our partners, or others.
We may also share aggregated or de-identified information that cannot reasonably be used to identify you.
| Category of Third Party | Purpose of Sharing | Restrictions |
|---|---|---|
| Service providers | Hosting, communications, forms, analytics, translation, route planning, support | Contractually restricted to specified purposes |
| Program partners | Program administration, reporting, food and service delivery | Limited to program purposes; HIPAA business associate agreements where applicable |
| Affiliates | Internal business operations | Restricted to internal use |
| Legal authorities | Compliance with law | As required by law |
Third-Party Vendors Authorized to Receive Personal Information or PHI
| Vendor | Service Description | PII? | PHI? | HIPAA BAA in Place? |
|---|---|---|---|---|
| Microsoft Azure | Cloud hosting and storage; Azure OpenAI Service and Azure AI Translator; Azure Maps | Y | Y | Y |
| WebIT Services, Inc. | IT services subcontractor | Y | Y | Y |
| HubSpot | Marketing and communications platform | Y | Y | Y |
| FormStack | Surveys and dynamic forms | Y | Y | Y |
| Twilio | SMS | Y | N | N |
| SendGrid (via Azure) | Y | N | N | |
| Branch.io | App deep-linking and reporting | Y | N | N |
| WorkWave | Delivery route planning | Y | N | N |
| Tableau | Analytics and business intelligence | N | N | N |
| Analytics | N | N | N |
Cookies and Similar Technologies
A cookie is a small piece of information that a web server places on your device when you visit a website. Some cookies last only for a single session; others remain until they expire or you delete them. We use session cookies to keep you signed in and verify your identity as you move between pages, and we use cookies and similar technologies to authenticate users, maintain continuity during a session, keep the Services secure, and understand how the Services are used.
Most browsers let you stop accepting new cookies, be notified when you receive a new cookie, or disable existing cookies. Without cookies, you may not be able to use all features of the Services. We do not use cookies to sell your information or to serve targeted advertising.
IP Addresses and Usage Information
We and our service providers collect IP addresses and the usage information described above to operate and secure the Services, track use of the Services in the aggregate, and learn how people use the Services so that we can improve them.
Do Not Track
Some web browsers offer a “Do Not Track” setting. Because there is no common standard for responding to these signals, we do not currently respond to them.
How We Safeguard Your Information
We maintain administrative, technical, and physical safeguards designed to protect your personal information against theft, loss, misuse, and unauthorized access, disclosure, alteration, or destruction, and we require our service providers to do the same. These safeguards include encryption of information in transit and at rest, access controls based on job need, multi-factor authentication for administrative access, and logging and monitoring. However, no website, application, or transmission is completely secure, and we cannot guarantee the security of information you transmit to us.
If a data breach involves your personal information, we will notify you as required by applicable law, by email or other direct communication, and will describe the nature of the breach, the information involved, and steps you can take to protect yourself.
How Long We Keep Your Information
We keep personal information only as long as reasonably necessary for the purposes described in this Privacy Policy, or as required by law or our contracts with program partners. Account information is kept while your account is active. When an account is closed, its data is retained for 90 days and then deleted, unless we are required by law or contract to keep it longer. When you ask us to delete your information, we delete it within 30 days, subject to those requirements, and we notify service providers with whom it was shared to delete it as well.
Your Privacy Rights
Depending on where you live, you may have the right to:
- Know what personal information we collect, use, and disclose about you, and receive a copy of it.
- Correct inaccurate personal information.
- Request deletion of your personal information.
- Limit our use of sensitive personal information, such as health information, to what is necessary to provide the Services.
- Not be discriminated against for exercising your privacy rights.
Because we do not sell your personal information or share it for targeted advertising, there is nothing to opt out of. If that ever changes, we will update this Privacy Policy and give you a way to opt out first.
To exercise your rights, email or write to us at the address below. You may also update much of your information directly in your account settings. We will verify your identity before fulfilling a request, and you may use an authorized agent where the law allows. We will respond within 45 days, and if we need more time, we will tell you why. If we cannot fulfill all or part of a request, for example because the law requires us to retain certain information, we will explain why. For PHI that we hold on behalf of a health plan or provider, see “Health Information and HIPAA.”
Data Processing in the United States
The Services are intended for people who reside in the United States. We store and process information in the United States, including in U.S. data centers operated by Microsoft Azure. If you access the Services from outside the United States, your information will be processed under U.S. law, which may not provide the same protections as the laws of your country.
Children’s Privacy
The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13 through the Services. If you are under 13, please do not use the Services or provide any personal information. If you are a parent or guardian and believe your child under 13 has provided personal information to us, please contact us at so that we can delete it. Information about members of your household, including children, that you provide as part of your household profile is handled as described in this Privacy Policy.
Third-Party Websites
The Services may link to third-party websites, social media, and services, including program and partner websites. We do not control and are not responsible for the information practices of those third parties. We encourage you to review the privacy policies of any third-party websites or services you visit.
Changes to This Privacy Policy
We may revise this Privacy Policy at any time by posting the updated version and changing the “Last Updated” date at the top. If we make material changes, we will notify you by a prominent notice in the Services, or by email where appropriate, before the changes take effect. By continuing to use the Services after the changes take effect, you acknowledge the revised Privacy Policy.
Data Protection Officer
ABIT has a Data Protection Officer. If you have questions or concerns about data privacy or the handling of your personal information, you may contact the Data Protection Officer at .
How to Contact Us
If you have questions or comments about this Privacy Policy, want to exercise your privacy rights, or would like us to update or correct information you have provided, please contact us:
- Mail: AssetBlue Impact Technologies, PBC, Attn: Privacy, 351 W. Hubbard St., Suite 709, Chicago, IL 60654
