Privacy policy

Fufild, Inc. ("Fufild," "we," "us," or "our") provides Care-First People Solutions through an employer-sponsored platform. This Privacy Policy explains how we collect, use, disclose, and protect personal information when people visit our website, interact with us, or use Fufild's platform, mobile experiences, marketplace, support channels, and related services.

This Policy applies to Fufild's handling of personal information in the United States. It does not apply to the independent privacy practices of employers, marketplace providers, financial institutions, card issuers, or other third parties.

1. Our Role and Your Employer

Employers provide workforce and eligibility information so their eligible employees can access Fufild. Depending on the information and activity involved, Fufild may process personal information on behalf of an employer or may determine how information is used for Fufild's own services and business operations.

An employer's privacy notice may also apply to information it provides to Fufild or receives through its Fufild program. Questions about an employer's employment records, eligibility decisions, or independent use of information should be directed to that employer.

2. Personal Information We Collect

The information we collect depends on how you interact with Fufild and which services you use.

Information You Provide

We may collect:

• contact information, such as your name, email address, telephone number, and postal address;
• account information, such as your login details, account preferences, and employer affiliation;
• information you submit during registration, onboarding, surveys, support requests, or other interactions;
• communications with Fufild, including email, telephone, text-message, chat, and support content;
• marketplace selections, requests, reviews, and information needed to fulfill a product or service you choose; and
• any other information you choose to provide.

Information From Employers and Integrations

We may receive information from an employer or its authorized administrator, HRIS provider, payroll provider, or other integration partner. This may include your name, work contact information, employee identifier, employer affiliation, employment or eligibility status, program eligibility, point allocation, and other information needed to administer the employer's Fufild program.

Transaction and Service Information

When you use points or request a product or service, we may collect information about the transaction, such as the provider or merchant, category, date, amount, status, point activity, virtual-card or payment status, fulfillment information, and related support activity.

Payment, banking, and card providers may collect financial information directly from you or process it on Fufild's behalf. Fufild may receive transaction details, status information, limited payment identifiers, or other information needed to facilitate and support the transaction. We do not necessarily receive or store complete payment-card credentials.

Device, Usage, and Cookie Information

When you use our website or services, we may automatically collect information such as your IP address, device and browser type, operating system, identifiers, approximate location, referring page, pages and features used, dates and times, interactions, diagnostic data, and security logs. We and our service providers may use cookies, pixels, software development kits, local storage, and similar technologies to operate the website and services, remember preferences, understand usage, improve performance, maintain security, and support communications and marketing. See Section 8 for more information.

Text-Messaging Information

If you choose to receive text messages from Fufild, we may collect your mobile number, the date, time, source, and language of your consent, the types of messages requested, message content, and delivery, help, and opt-out records. We use this information to administer the messaging program, deliver messages you requested, respond to you, maintain consent and suppression records, and meet legal and carrier requirements.

3. How We Use Personal Information

We may use personal information to:

• confirm eligibility and create, administer, and support accounts;
• operate Fufild and provide employer-sponsored services;
• allocate and administer points and facilitate approved products and services;
• process, authorize, reconcile, and support transactions;
• communicate about accounts, security, support, eligibility, points, transactions, services, and requested updates;
• respond to questions, requests, feedback, and accessibility needs;
• personalize and improve the user experience;
• maintain, analyze, troubleshoot, test, and improve our website, platform, and services;
• protect users, customers, Fufild, and service providers and detect, investigate, and prevent fraud, misuse, security incidents, and unlawful activity;
• manage customer, provider, and business relationships;
• create aggregated or de-identified information and use it for analytics, reporting, service improvement, and business planning;
• send marketing communications where permitted by law and consistent with your choices;
• comply with law, legal process, and regulatory requirements;
• establish, exercise, or defend legal claims and enforce our agreements; and
• support a financing, merger, acquisition, reorganization, bankruptcy, or transfer involving all or part of our business.

We may use information for another purpose disclosed when it is collected or with your direction or consent.

4. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients:

Employers and Authorized Administrators

We may provide employers and their authorized administrators with information needed to administer their Fufild program, such as eligibility, funding, account status, participation, point activity, and program reporting. The information available to an employer depends on the program, product configuration, applicable agreement, and law. Where appropriate, reporting may be aggregated or de-identified.

Service Providers

We use service providers for functions such as infrastructure, hosting, authentication, communications, analytics, customer support, payment processing, card services, HRIS and payroll integrations, fraud prevention, professional advice, and other business operations. These providers may process personal information for Fufild subject to contractual or other restrictions appropriate to their role.

Marketplace and Requested-Service Providers

When you select a product or service through Fufild, you are directed to the applicable provider's website, application, or checkout experience. The provider may collect information directly from you, and its own privacy notice and terms govern its independent handling of that information. Fufild may disclose limited information or payment details to the provider or related service providers as needed to facilitate the approved transaction, reconcile activity, or provide support.

Legal, Safety, and Corporate Matters

We may disclose information to government authorities, law enforcement, courts, litigants, professional advisors, insurers, or other parties when we reasonably believe disclosure is required by law or necessary to protect rights, safety, property, users, customers, Fufild, or others.

We may also disclose information in connection with due diligence, financing, a merger, acquisition, reorganization, bankruptcy, sale of assets, or another corporate transaction. A recipient may continue to use the information subject to this Policy or a notice provided at the time.

At Your Direction

We may disclose information to another person or organization when you request or authorize us to do so.

Aggregated and De-Identified Information

We may use and disclose information that has been aggregated or de-identified so that it cannot reasonably be linked to an identifiable individual. We maintain de-identified information in de-identified form and do not attempt to re-identify it except as permitted by law to test our de-identification processes.

Sale and Sharing

Fufild does not sell personal information. Fufild may use advertising and analytics technologies on its public website, and certain disclosures associated with those technologies may be treated as "sharing" under applicable privacy laws.

Additional information for California residents, including applicable opt-out rights, is available in our California Privacy Rights notice.

5. Mobile Information and Text-Message Consent

No mobile opt-in information or text-message consent is shared with third parties or affiliates for their marketing or promotional purposes.

We may disclose mobile information and messaging records to service providers that help Fufild deliver, route, support, and manage messages. Those providers may use the information only to provide services to Fufild or as required by law. We may also disclose information when required by law, to protect rights and safety, or in connection with a corporate transaction as described in this Policy.

Text-message terms, including message types, frequency, charges, and opt-out instructions, are described in the Terms of Service .

6. Employer Reporting and User Choices

Fufild is employer-sponsored, so certain information must be associated with an employer's program. Employers may receive information needed to confirm eligibility, fund and administer the program, reconcile activity, meet legal obligations, and understand participation.

Depending on the program and product configuration, employer reporting may include individual-level information such as a user's name, eligibility and account status, participation, point activity, transaction status, and the provider or service selected. For example, an employer may be able to see that a user selected a particular service. Fufild may also provide aggregated or de-identified reporting that helps employers understand program engagement and evaluate relationships to workforce priorities such as retention, recruiting, employee experience, culture, and workforce costs. Reporting does not guarantee or establish that Fufild caused a particular business outcome. Fufild may deliver employer communications to workforce groups based on permissions established by the employer. If a user submits a response through an employer-sponsored survey or communication feature, Fufild may provide that response and related information to the employer as described when the information is collected.

The information available to an employer depends on the program, product configuration, service involved, applicable agreement, and law. Users should contact privacy@fufild.com with questions about a particular information flow.

7. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including to provide services, administer customer and user relationships, maintain transaction and consent records, protect security, prevent fraud, satisfy legal and accounting obligations, resolve disputes, and enforce agreements.

Retention periods vary based on the type of information, the relationship, operational needs, legal requirements, and applicable customer or provider agreements. When information is no longer needed, we may delete it, de-identify it, or isolate it from active use. Information may remain for a limited period in backups or records that cannot reasonably be removed immediately.

8. Cookies and Similar Technologies

Fufild and its service providers may use:

• essential technologies needed for security, navigation, authentication, and core functionality;
• preference technologies that remember settings and choices;
• analytics technologies that help us understand performance and usage; and
• advertising or communications technologies that help measure campaigns or tailor communications where permitted.

You can manage many cookies through your browser settings and any controls Fufild makes available. Blocking some technologies may affect website or service functionality.

Some browsers support privacy signals such as Global Privacy Control. Where applicable law requires it, Fufild treats a recognized signal as a request to opt out of sale or sharing for the browser or device that sends the signal.

9. Your Privacy Rights and Choices

Depending on where you live and how Fufild handles your information, you may have the right to request access, correction, deletion, or a copy of personal information; to object to or restrict certain processing; or to opt out of certain disclosures or targeted advertising.

To submit a request, email privacy@fufild.com . Describe your request and provide enough information for us to identify the relevant records. We may take reasonable steps to verify your identity and authority before acting on a request.

Some rights are subject to exceptions. If Fufild processes information on behalf of your employer, we may direct your request to the employer or assist the employer in responding. We will not retaliate against you for exercising a privacy right.

California residents can learn more in our California Privacy Rights notice.

Communication Choices

You can unsubscribe from marketing emails by using the unsubscribe link in the message. You may still receive non-promotional messages about your account, transactions, security, support, or the services you use.

You can opt out of Fufild text messages at any time by replying STOP. For help, reply HELP or contact support@fufild.com . Opting out of one messaging program may not opt you out of a separate program for which you provided separate consent.

10. Security

Fufild maintains administrative, technical, and organizational safeguards to protect personal information against unauthorized access, use, alteration, and disclosure. We pair these safeguards with account-security practices and encourage users to protect their credentials and promptly report suspicious activity.

For more information, visit our Trust & Security page. Security concerns should be reported to security@fufild.com .

11. Third-Party Services

Our website and services may link to or integrate with third-party websites, applications, products, and services. When you continue to a provider's website, application, or checkout experience, the provider may collect information directly from you. The provider's privacy notice and terms govern that interaction. Fufild is not responsible for a third party's independent privacy practices.

12. Children's Privacy

Fufild's services are designed for employer-sponsored workforce programs and are not directed to children. Fufild does not knowingly provide accounts to or collect personal information directly from children under 14. If you believe a child under 14 has provided personal information to Fufild, contact privacy@fufild.com .

Eligible workforce members who are 14 through 17 may use Fufild only with the permission of a parent or legal guardian and as permitted by applicable law. Employers determine workforce eligibility and are responsible for lawful employment decisions. Marketplace providers may apply additional age, account, or eligibility requirements to their own products and services.

13. United States Services

Fufild is based in the United States, and its services are intended for use in the United States. Personal information may be processed in the United States and other locations where Fufild or its service providers operate, subject to applicable law and contractual protections.

14. Changes to This Policy

We may update this Policy to reflect changes in our services, practices, or legal requirements. We will post the updated Policy and revise the "Last Updated" date. If required by law, we will provide additional notice or request consent before a material change takes effect.

15. Contact Us

Privacy questions and requests: privacy@fufild.com

Security concerns: security@fufild.com

Legal notices: legal@fufild.com

Fufild, Inc., Attn: Privacy, 1508 8th Avenue South, Nashville, Tennessee 37203

Last Updated: August 31, 2026