Version 2026.05.1

Cookies & Analytics Disclosure

This disclosure explains the cookies, application technologies, analytics, security, and performance tools that ScoliBase and ScoliBase Connect may use, the information those technologies may process, and the controls that may be available to users.

Web Cookies

ScoliBase websites and portal services may use authentication and session cookies, security and CSRF-related cookies, preference cookies, and analytics or performance cookies where enabled.

These technologies may be used to maintain authenticated sessions, protect against unauthorized requests, remember user preferences, support application security, and maintain reliable operation of ScoliBase web services.

ScoliBase Connect

ScoliBase Connect is a mobile application and may use technologies appropriate to mobile applications rather than traditional browser cookies. These may include secure application storage, authentication tokens, session information, device information, and other technologies necessary to provide and secure the application.

These technologies may be used to keep authorized users signed in, securely communicate with ScoliBase services, associate activity with the appropriate account, maintain application functionality, and protect against unauthorized access.

Analytics and Performance Monitoring

Where enabled, ScoliBase and ScoliBase Connect may use analytics, error monitoring, diagnostic, security monitoring, or performance monitoring technologies to understand service reliability, diagnose technical problems, measure feature usage, identify operational anomalies, and improve platform performance.

Analytics and monitoring technologies are intended to support the operation, security, reliability, and improvement of ScoliBase services. The specific technologies used may differ between the web platform and mobile applications.

Information Associated With These Technologies

Depending on the service and technologies enabled, information processed may include browser or device type, operating system, application version, IP address, session information, authentication events, screen or feature interactions, session duration, error reports, crash information, diagnostic events, and performance measurements.

Some network or security information may provide an approximate indication of geographic area, such as information derived from an IP address. ScoliBase does not represent such information as precise device location unless a service specifically requests and uses precise location with appropriate permission.

Health Information and Analytics

ScoliBase handles healthcare-related information and may process protected health information (PHI) in applicable workflows. Analytics and monitoring technologies should be configured and used in a manner consistent with applicable privacy, security, and healthcare requirements.

ScoliBase does not intentionally use PHI or brace-tracking information for third-party behavioral advertising.

Third-Party Services

ScoliBase and ScoliBase Connect may rely on third-party service providers for infrastructure, security, diagnostics, error monitoring, analytics, communications, or other technical functions. Information shared with those providers is limited according to the services they perform, applicable agreements, and legal requirements.

Where a service provider handles PHI on behalf of a HIPAA-regulated entity or business associate, appropriate contractual safeguards, including a Business Associate Agreement where required, may apply.

Advertising and Tracking

ScoliBase and ScoliBase Connect do not use health information or brace-tracking information for third-party behavioral advertising.

If ScoliBase's advertising, analytics, or tracking practices materially change in the future, this disclosure and other applicable privacy disclosures will be updated as required.

User Controls

Users may control certain web cookies through browser settings and any preference tools ScoliBase makes available. Disabling cookies required for authentication or security may prevent portions of the web platform from functioning correctly.

On mobile devices, users may control certain application permissions and notification settings through ScoliBase Connect or their device settings where those controls are available.

Retention

Information generated through cookies, application technologies, analytics, security monitoring, or performance monitoring may be retained for periods reasonably necessary for security, application operation, troubleshooting, audit, compliance, and service improvement, subject to applicable retention requirements.

Changes to These Technologies

The technologies used by ScoliBase and ScoliBase Connect may change as the services evolve. Material changes to analytics, tracking, or related data practices may be reflected in an updated version of this disclosure and other applicable privacy notices.

Contact

Questions about cookies, analytics, mobile application technologies, or related privacy practices involving ScoliBase or ScoliBase Connect should be directed to the designated ScoliBase privacy or support contact channels published by the organization.