This policy explains what the Masters, Mates & Pilots Benefit Plans mobile app collects from you, why, and who else sees it. It applies only to the app.
Who we are
The app is published by the Masters, Mates & Pilots Plan Office ("Plan Office", "we", "us", "our"), which administers the MM&P Health & Benefits Plan, the MM&P Pension Plan, the MM&P Adjustable Pension Plan, the MM&P Individual Retirement Account Plan (“IRAP”), the MM&P Vacation Plan and the Joint Employment Committee (collectively, the “Plans”).
Masters Mates & Pilots Plan Office
700 Maritime Blvd. Suite A
Linthicum Heights MD 21090
planoffice@mmpplans.com
410-850-8500
How this policy relates to HIPAA
Information about your health coverage, claims and eligibility under the MM&P Health & Benefits Plan is protected health information under HIPAA. It is governed by the Plan's HIPAA Privacy Policy.
This policy covers everything else the app handles, including app-specific data such as device identifiers, login records and push notification settings.
Information the app collects
| Category | What it includes | Where it comes from |
|---|---|---|
| Account and identity | Name, member number, date of birth, last four digits of Social Security number, email, phone | You, at registration and sign-in; the Plans' records |
| Credentials | Username, hashed password, security questions, session tokens | You, at registration and sign-in |
| Benefit and plan data | Eligibility and coverage status, claims and explanations of benefits, pension credits and estimates, IRAP and vacation balances, contribution and employer history, beneficiary designations | The Plans' benefit systems, displayed to you in the app |
| Documents you submit | Forms, beneficiary changes, address changes, uploaded files and photos of documents | You, when you use those features |
| Device and technical | Device model, operating system version, app version, language, IP address, crash logs, app identifier | Automatically, when you use the app |
| Usage | Screens opened, features used, dates and times of sign-in, failed sign-in attempts | Automatically, when you use the app |
| Push notifications | Device push token and your notification preferences | Your device, if you allow notifications |
Please note that while we have endeavored to create a secure and reliable app for users, the confidentiality of any communication cannot be guaranteed.
Face ID, Touch ID and device biometrics
If you turn on biometric sign-in, your device checks your fingerprint or face and tells the app only whether the check passed. Your biometric data stays on your device, is never sent to us, and we never store it.
What the app does not do
- It does not collect your precise location.
- It does not sell or rent your personal information, and does not share it for cross-context behavioral advertising.
- It does not show third-party advertising or use advertising trackers.
- It does not access your contacts, photo library, camera or files unless you choose a feature that needs them, and your device will ask first.
How we use your information
We use it to run the app and provide you with access to your benefits, specifically to:
- verify who you are and keep your account secure;
- show you your eligibility, coverage, claims, pension, IRAP and vacation information;
- accept and process forms, updates and requests you submit;
- send service messages about your benefits, your account or the app, including push notifications you have allowed;
- answer your questions when you contact the Plan Office;
- detect and investigate fraud, unauthorized access and misuse;
- fix bugs, measure how features are used and improve the app; and
- meet legal, regulatory and plan administration obligations under ERISA, HIPAA and other applicable law.
We do not use your information to make automated decisions about your benefits. Benefit determinations are made under the Plan Documents.
When we disclose your information
We disclose personal information only in these situations:
- Service providers. Vendors who host, support, secure or operate the app and the Plans' systems on our behalf, under contracts that limit them to that work. Where protected health information is involved, they act as HIPAA business associates.
- Plan professionals. The Plans' auditors, actuaries, consultants and legal counsel, as needed to administer the Plans.
- Other benefit plans and payers. Insurers, third-party administrators, pharmacy benefit managers and similar parties involved in paying or coordinating your benefits.
- At your direction. Anyone you ask us to share it with, or to whom you authorize disclosure in writing.
- Legal requirements. Courts, regulators, government agencies or law enforcement where required by law, subpoena or legal process, and to establish or defend legal claims.
- Protecting people and systems. Where we reasonably believe disclosure is needed to prevent fraud, serious harm or a security incident.
We do not disclose your information to employers or unions for employment purposes, and we do not sell it.
How we protect your information
Data travels between the app and our servers over encrypted connections, and is encrypted at rest on our systems. Access is limited to staff who need it for their work. Passwords are stored only in hashed form, and sessions expire after a period of inactivity.
How long we keep it
Benefit and plan records are kept for as long as needed to administer the Plans and for the periods required by ERISA, HIPAA and other applicable law. App account records are kept while your account is active and for a reasonable period afterwards.
Deleting the app from your device does not delete your account or your benefit records.
Your choices
- Permissions. Turn notifications, camera or file access on or off in your device settings at any time.
- Biometric sign-in. Turn it off in the app settings or on your device.
- Account information. Update your address, phone and email in the app, or by contacting the Plan Office.
- Account deletion. You may ask us to close your app account from the settings. Closing the account removes your app sign-in. It does not delete benefit records we must keep by law, and it does not end your participation in the Plans.
- Marketing. We do not send marketing messages through the app.
Your privacy rights
Your rights to health information held by the MM&P Health & Benefits Plan, including access, amendment, an accounting of disclosures and restrictions, are described in the Plan's HIPAA Notice of Privacy Practices.
Children
The app is for Plan participants and is not directed to children. We do not knowingly collect information from anyone under 16 through the app. Information about covered dependents is provided by the participant or by the Plans, not collected from the dependents themselves.
Using the app outside the United States
The Plans operate in the United States, and information is stored and processed there. If you use the app while at sea or abroad, you are sending information to the United States, where privacy laws may differ from those where you are.
Changes to this policy
We may update this policy. The effective date at the top shows the current version. If a change is material, we will tell you in the app or by email before it takes effect. Using the app after a change means you accept the updated policy.
Contact us
Questions or complaints about privacy:
Masters, Mates & Pilots Benefit Plans
700 Maritime Blvd. Suite A
Linthicum Heights Maryland, 21090
planoffice@mmpplans.com
410-850-8500
For health information, contact the Plan's Privacy Officer at privacyoffice@mmpplans.com.