Privacy Policy

Effective Date: September 16, 2026

Propel, Inc. (“Propel,” “we,” “us,” or “our”) respects your privacy and is committed to being transparent about how we collect and use information when you visit our public websites, interact with our marketing materials, communicate with us, or otherwise engage with Propel outside of our client well-being platforms.

This Website Privacy Policy applies to propelwellbeing.com and other Propel-operated public websites that link to this policy.

Except for the section below (paragraph 15) titled, “Google Health Privacy Policy Section,” this policy does not govern personal information collected from participants through a Propel client well-being platform, application, challenge, or other client-sponsored program. Those services are subject to separate privacy terms and policies.

1. Information We Collect

We may collect information that you provide directly to us as well as information collected automatically when you use our website.

Information You Provide to Us

You may provide information to Propel when you:

• request a demonstration;
• submit a contact form;
• download a resource;
• register for a webinar, event, or other offering;
• subscribe to a newsletter or marketing communication;
• communicate with our sales or support teams; or
• otherwise contact us through the website.

This information may include:

• name;
• business email address;
• telephone number;
• company or organization;
• job title or role;
• information about your organization or business needs;
• communication preferences; and
• any other information you choose to provide.

Please do not submit sensitive personal or health information through forms on our public marketing website.

Information Collected Automatically

When you visit our website, we and our service providers may automatically collect information about your device and use of the website, including:

• IP address;
• browser type and version;
• operating system;
• device information;
• approximate geographic location;
• referring website or source;
• pages viewed;
• links or buttons clicked;
• date and time of visits;
• time spent on pages;
• website navigation and interaction data; and
• cookie, device, or similar identifiers.

We may collect this information through cookies, pixels, tags, scripts, analytics tools, and similar technologies.

2. How We Use Information

We may use information collected through our website to:

• operate, maintain, and improve our website;
• respond to inquiries and requests;
• provide requested information, resources, or demonstrations;
• communicate with prospective and existing customers;
• understand how visitors interact with our website and content;
• measure the effectiveness of marketing campaigns;
• identify organizations that may be interested in Propel’s products or services;
• personalize or improve our marketing and sales efforts;
• manage newsletter and marketing subscriptions;
• protect our website and systems against fraud, abuse, or security threats;
• comply with applicable laws and legal obligations; and
• support other legitimate business purposes consistent with this policy.

3. Cookies and Similar Technologies

Propel uses cookies and similar technologies to operate our website and understand how visitors interact with it.

Cookies are small files or pieces of information stored on or associated with your browser or device. Some cookies are necessary for the website to function, while others may be used for analytics, marketing, or visitor identification.

We may use the following general categories of cookies and technologies:

Necessary Cookies

These technologies are required for core website functionality, security, network management, or your privacy preferences.

Analytics Cookies

These technologies help us understand how visitors use our website, including which pages are viewed, how visitors arrive at the website, and how they interact with website content.

Marketing and Visitor-Identification Technologies

These technologies help us understand interest in Propel’s services, evaluate marketing activity, and identify companies or business professionals who may be interested in Propel.

Where required by applicable law, we will obtain consent before activating non-essential cookies or similar tracking technologies.

You may be able to manage your preferences through the cookie banner or cookie-preference controls available on our website.

4. Website Visitor Identification and Apollo.io

Propel uses Apollo.io and potentially other sales-intelligence and marketing technology providers to help us understand which organizations and business professionals interact with our public website.

When permitted by applicable law and your cookie preferences, information regarding your website visit may be transmitted to Apollo.io. This information may include information such as your IP address, device and browser information, pages viewed, referring source, website interactions, and related technical information.

Apollo may associate information from a website visit with company information or business contact information available through its services. As a result, Propel may in some circumstances receive information identifying the organization associated with a website visit or a business professional who may have visited the site.

We may use this information to:

• understand which organizations are interested in Propel;
• evaluate engagement with our website and marketing materials;
• identify potential prospective customers;
• prioritize business-to-business sales outreach; and
• communicate with business professionals regarding Propel products or services.

Apollo.io operates according to its own privacy practices.

Website visitor identification is used for business-to-business marketing and sales purposes and is separate from the operation of Propel client well-being programs.

Propel does not provide participant health information, well-being activity, assessment responses, incentive information, biometric information, or other information collected through Propel client well-being programs to Apollo.io for website visitor-identification purposes.

5. How We Share Information

We may disclose information collected through our public website to third parties that assist us in operating our business.

These may include providers of:

• website hosting and infrastructure;
• website analytics;
• customer relationship management systems;
• email and newsletter services;
• marketing automation;
• advertising and campaign measurement;
• sales intelligence and visitor identification;
• cybersecurity and fraud prevention; and
• professional, legal, or administrative services.

These third parties may process information on our behalf or, in some cases, under their own privacy practices.

We may also disclose information:

• when required by law, regulation, subpoena, court order, or other legal process;
• when reasonably necessary to protect the rights, property, security, or safety of Propel, our customers, website visitors, or others;
• in connection with a merger, acquisition, financing, restructuring, sale of assets, or similar business transaction; or
• when you direct or authorize us to do so.

We do not sell information collected through our public website in exchange for money.

Certain disclosures involving advertising, analytics, or marketing partners may be considered a “sale,” “sharing,” or use for targeted advertising under some privacy laws even when no money is exchanged. Where applicable, we provide the privacy choices required by those laws.

6. Marketing Communications

If you provide us with your contact information, we may send you communications regarding Propel products, services, research, events, resources, or other information that we believe may be relevant to your professional interests.

You may unsubscribe from marketing emails at any time by using the unsubscribe link included in the communication.

Even if you unsubscribe from marketing communications, we may continue to send non-marketing communications when appropriate, such as responses to requests you initiate.

7. Information From Other Sources

We may obtain business contact or company information from sources other than our website.

These sources may include:

• publicly available information;
• professional networking platforms;
• industry databases;
• sales-intelligence providers;
• referral partners;
• event organizers; and
• other business information providers.

We may combine this information with information you provide to us or information associated with interactions with our website.

8. Your Privacy Choices and Rights

Depending on where you reside, you may have certain rights regarding your personal information.

These may include the right to:

• request access to personal information we maintain about you;
• request correction of inaccurate information;
• request deletion of certain personal information;
• obtain information about how we collect, use, or disclose personal information;
• object to or restrict certain processing;
• opt out of certain uses of personal information for targeted advertising;
• opt out of disclosures that may be considered a sale or sharing under applicable law; and
• withdraw consent where processing is based on consent.

These rights are subject to applicable law and may not apply in all circumstances.

You may also manage certain tracking preferences through the cookie controls provided on our website.

To submit a privacy request, contact us using the information provided below.

We may need to verify your identity before completing certain privacy requests.

9. Do Not Track and Browser Privacy Signals

Some browsers and devices allow users to transmit privacy preference signals.

Where required by applicable law and supported by our website technology, Propel will process recognized browser-based privacy signals in accordance with applicable legal requirements.

Because standards in this area continue to evolve, not all browsers or signals may operate in the same manner.

10. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this policy, including maintaining business records, managing customer and prospective-customer relationships, complying with legal obligations, resolving disputes, and enforcing agreements.

Retention periods may vary depending on the type of information and the purpose for which it was collected.

11. Data Security

Propel uses reasonable administrative, technical, and organizational safeguards designed to protect personal information.

However, no website, network, transmission method, or storage system can be guaranteed to be completely secure. You should use appropriate care when transmitting information over the internet.

12. International Visitors

Propel is based in the United States.

If you access our website from outside the United States, information may be transferred to, stored in, or processed in the United States or other countries where Propel or our service providers operate.

Where required, we take appropriate steps regarding international transfers of personal information.

13. Children’s Privacy

Propel’s public marketing website is intended for business and professional audiences and is not directed to children.

We do not knowingly collect personal information through our public marketing website from children under 13.

If you believe a child has provided personal information through our public website, please contact us so we can address the matter.

14. Links to Other Websites

Our website may contain links to websites, services, or resources operated by third parties.

Propel is not responsible for the privacy, security, content, or practices of third-party websites. We encourage you to review the privacy policies of any third-party sites you visit.

15. GOOGLE HEALTH PRIVACY POLICY SECTION

This section addresses Google Health (Fitbit) Connections for client companies utilizing Propel’s device-connectivity feature on their Propel platform.

Propel allows users to connect supported Google Health (which includes Fitbit) services to their Propel account. Connecting an account is optional. If you choose to connect a service, Propel will access only the information you authorize through the permissions presented during the connection process.

Information We Access

Depending on the service you connect and the permissions you grant, Propel may access:

• physical-activity information, such as steps, distance, active minutes, activity type, and calories burned;
• sleep information;
• device or data-source information;
• Google Health account identifiers needed to establish and maintain the connection; and
• OAuth access and refresh tokens used to maintain the authorized connection.

Propel does not access categories of Google Health information that are not included in the permissions you authorize.

How We Use Google Health Information

Propel uses information received from Google Health to provide and improve user-facing well-being features requested by the user. These uses may include:

• synchronizing activity and wellness information with the user’s Propel account;
• displaying the user’s activity and progress within Propel;
• calculating progress toward challenges, goals, pathways, or other program activities;
• determining completion of an activity-based program requirement or eligibility for a program incentive, where applicable;
• helping the user understand participation and progress; and
• operating, securing, troubleshooting, and improving the connected features.

Propel does not use Google Health information for unrelated marketing, advertising, sales prospecting, or visitor identification.

How We Share Google Health Information

Propel does not sell Google Health user data. Propel does not transfer Google Health user data to advertising platforms, data brokers, information resellers, or other third parties for targeted advertising.

Propel may disclose this information only:

• to service providers that process information on Propel’s behalf as necessary to host, secure, maintain, or support the Propel service;
• to the organization sponsoring the user’s Propel program, but only in the form and circumstances described to the user within the program;
• when the user directs or affirmatively authorizes the disclosure;
• when reasonably necessary to protect the security or integrity of the service; or
• when required by applicable law.

The sponsor of this well-being platform (your employer or health plan) receives aggregated or de-identified reporting and does not receive an individual user’s Google Health activity information unless that disclosure is clearly described and authorized, or is required to administer a user-selected program feature or incentive.

Human Access

Propel personnel do not access an individual user’s Google Health data except when:

• the user expressly requests support and authorizes access to the relevant information;
• access is necessary to investigate fraud, abuse, a security incident, or a technical problem;
• access is required by law; or
• the information has been aggregated and anonymized for permissible internal operations.

Data Storage and Security

Propel uses administrative, technical, and organizational safeguards designed to protect Google Health information. Information transmitted over external networks is encrypted using secure protocols. Stored Google Health information, including OAuth access and refresh tokens, is encrypted at rest. Access is restricted to authorized systems and personnel with a legitimate need for access.

Disconnecting an Account and Deleting Data

Users may disconnect Google Health from Propel through visiting the Connect Your Device or Health App page of the employer’s Propel site and clicking the button to Disconnect Google Health. Disconnecting stops Propel from collecting new information from that service but does not automatically delete information previously imported into Propel unless expressly stated within the application.

Users may request deletion of previously imported Google Health information by contacting our Portal Support team via chat, email (support@propelwellness.zendesk.com) or phone (1.888.339.4131). Following a verified deletion request, Propel will delete or de-identify the applicable information within 72 hours, except where retention is required by law or necessary for security, dispute resolution, or maintaining required program records.

Users can also revoke Propel’s Google Health access through their Google Account’s third-party connection settings and revoke Google Health access through their Google Health Google Health or Google Health (Fitbit) account settings.

Google API Limited Use Disclosure

Propel’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Google Health Information

Information obtained through the Google Health platform is used only to provide the Propel features the user requests and as otherwise expressly disclosed in this policy. Propel does not sell Google Health user data or use it for targeted advertising.

16. Changes to This Privacy Policy

We may update this Website Privacy Policy from time to time to reflect changes in our business practices, technologies, legal requirements, or services.

When we make changes, we will revise the Effective Date at the top of this policy.

If changes materially affect how we handle personal information, we may provide additional notice when appropriate.

17. Contact Us

If you have questions about this Website Privacy Policy or would like to submit a privacy request, please contact:

Propel, Inc.
105 Continental Place, Suite 400
Brentwood, TN 37027
United States

Email: privacy@propelwellness.com
Phone: (615) 377-6116