 of the Processing of Personal Data Subject Matter: Eko collects the following data: heart sounds, lung sounds, ECG data, diagnosed condition, mobile device accelerometer data, average heart rate, the location on the body where the recording was taken, local time, and geographic location of data acquisition. Duration of Processing: Personal Data processing shall not exceed the duration of Personal Data retention described below. ‍ The nature and purpose of the Processing of Customer Personal Data The software is provided in order to: Automatically transmit a Data Subject's lung sounds, heart sounds, ECG data, and data analysis to the Data Subject's provider; and Allow providers to access the transmitted Personal Data on Eko's wireless, mobile, and web-based management systems and technologies. ‍ The types of Customer Personal Data to be Processed Eko will process account information, physiologic and usage date, and data pertaining to support inquiries. The types of Sensitive Data to be Processed (if applicable) and applied restrictions or safeguards Eko will process special categories of Personal Data including data concerning the health of the patient. Eko has implemented and shall maintain all reasonable and necessary technical and physical security controls to protect these data. Specific information on these protections is listed in Attachment C Description of Security Controls section of this document. The categories of Data Subject to whom the Personal Data relates Personal Data relates to patients. The period for which Personal Data will be retained 