Effective Date: January 01, 2026

Introduction

Healthaide LLC (“Company,” “Healthaide,” “we,” “us,” or “our”) has developed this Privacy Policy for users (“user” or “you”) who use or access our website located at www.healthaide.io, as well as any related media forms, media channels, mobile websites, or mobile applications that are linked, integrated, or otherwise connected to it (collectively, the “Website”). Your access to and use of the Website, any part thereof, or anything associated therewith, including its content (“Content”), any products or services provided through the Website or otherwise by Healthaide, and any affiliated website, software, or application owned or operated by Healthaide (collectively, including the Website and the Content, the “Service”) are subject to this Privacy Policy unless specifically stated otherwise.

This Privacy Policy is designed to inform you, as a user of the Website, about the types of information that Healthaide may gather or collect from you in connection with your use of the Website. It also explains the circumstances under which Healthaide uses and discloses that information, and the rights you may have in relation to that information. Changes to this Privacy Policy are addressed in the section titled “Privacy Policy Changes” below. Each time you use the Website, the current version of this Privacy Policy will apply. Accordingly, each time you use the Website you should review the Privacy Policy for any changes since the last time you accessed the Website. Capitalized terms not defined in this Privacy Policy have the same meaning as in the Healthaide Terms of Use or Terms and Conditions (“Terms”).

If you are using the Service on behalf of an individual other than yourself, you represent that you are authorized by such individual to act on their behalf and that such individual acknowledges and accepts the practices and policies set forth in this Privacy Policy.

Notice to Users Outside the United States

The Website is hosted and operated in the United States of America and is subject to U.S. federal law and the laws of the State of Texas. If you are accessing our Website from any other jurisdiction, please be advised that your use of the Website will be treated as a transfer of your personal information to the United States. By using our Website, you consent to such transfer and to the collection, use, and disclosure of your personal information in accordance with this Privacy Policy.

You also agree to abide by applicable U.S. federal law and the laws of applicable states, including Texas, in connection with your use of the Website and any agreements entered into with us. Individuals who access our Website from jurisdictions with laws or regulations governing the use of the Internet, including personal data collection, use, and disclosure, that differ from those of the United States or Texas may only use the Website in a manner that is lawful in their jurisdiction. If your use of the Website would be unlawful in your jurisdiction, you must not use the Website. Further, your jurisdiction may afford different or more limited protections regarding the privacy of your data than those provided under U.S. or Texas law.

BY USING OR ACCESSING THE WEBSITE, YOU ARE ACCEPTING AND AGREEING TO THE PRACTICES DESCRIBED IN THIS PRIVACY POLICY.

GATHERING, USE, AND DISCLOSURE OF NON-PERSONALLY-IDENTIFYING INFORMATION

Users of the Website Generally

“Non-Personally Identifying Information” is information that cannot, without the use of additional information, be directly associated with a specific individual. Examples include, but are not limited to, browser type, general location, and other technical details. “Personally Identifying Information,” by contrast, is information such as a name, email address, or other unique identifiers that can, on their own, be directly associated with a specific person.

Like most website operators, Healthaide collects from users of the Website Non-Personally Identifying Information that web browsers, depending on their settings, typically make available. This information may include a user’s Internet Protocol (IP) address, operating system, browser type and version, device type, language preferences, and the addresses of websites visited just before, during, and immediately after accessing the Website. Although such information is not, by itself, Personally Identifying Information, it may be possible for Healthaide to determine from an IP address the user’s Internet service provider and the approximate geographic location of the user’s point of connectivity, as well as other statistical usage data.

Healthaide analyzes Non-Personally Identifying Information gathered from users of the Website to better understand how the Website is being used. By identifying patterns and trends in usage, Healthaide can improve the design, operation, and content of the Website to enhance users’ experience.

From time to time, Healthaide may release Non-Personally Identifying Information in the aggregate, such as by publishing reports on usage trends or providing aggregated statistics to partners, advertisers, or other third parties.

Web Cookies

A “Web Cookie” is a small text file containing a string of characters that a website stores on a user’s device. Cookies assign a unique identifier to the device and enable the website to recognize the device upon subsequent visits. When you visit the Website, your browser may store one or more cookies on your device. Each time you return to the Website, the browser sends the cookie back to the Website’s server so that it can recognize your device.

We use cookies on the Website to:

• Keep track of services you have used
• Record registration information related to your login name and password
• Remember your preferences and settings
• Keep you logged into the Website as you navigate
• Facilitate purchase and checkout procedures
• Analyze how users navigate and interact with the Website

Healthaide also uses Web Cookies to track the pages users visit during each session on the Website, both to improve user experience and to understand how the Website is being used. As with other Non-Personally Identifying Information, Healthaide may analyze and disclose in aggregated form information gathered using cookies to help Healthaide, its partners, and others better understand usage of the Website.

USERS WHO DO NOT WISH TO HAVE WEB COOKIES PLACED ON THEIR DEVICES SHOULD SET THEIR BROWSERS TO REFUSE WEB COOKIES BEFORE ACCESSING THE WEBSITE, WITH THE UNDERSTANDING THAT CERTAIN FEATURES OF THE WEBSITE MAY NOT FUNCTION PROPERLY WITHOUT THE AID OF WEB COOKIES. USERS WHO REFUSE WEB COOKIES MAY LOSE ACCESS TO CERTAIN FUNCTIONALITY OR FEATURES OF THE WEBSITE.

“Device fingerprinting” is another technology that can be used to track devices over time based on the configuration and settings of the user’s browser or device. Because each browser or device has a unique combination of characteristics, device fingerprinting can identify a device without using cookies. Since device fingerprinting relies on those characteristics, deleting cookies may not prevent this type of tracking. Device fingerprinting technologies are evolving and may be used to track you across various internet-connected devices with browsers, including smartphones, tablets, laptops, and desktop computers. For more information, please see: https://www.consumer.ftc.gov/articles/0042-online-tracking.

Flash Cookies

Flash cookies, sometimes referred to as “local shared objects,” are cookies that are written using Adobe Flash technology. These cookies may be permanently stored on your device. Similar to standard cookies, Flash cookies can retain user settings and actions and may enable a website to recognize your browser or device. Flash cookies are not managed by the same browser settings used for regular cookies. Managing Flash cookies typically requires separate settings or tools provided by Adobe or your browser.

Web Beacons

A “Web Beacon” (also known as a pixel tag or clear GIF) is a small, often invisible, graphic image embedded in a web page or email that allows website operators to check whether a user has viewed a particular web page or email. Healthaide may use Web Beacons on the Website and in email communications to count users who have visited specific pages, opened particular emails, or interacted with certain content, and to deliver co-branded services.

Web Beacons are not used to access users’ Personally Identifying Information directly. Instead, they are one of the techniques Healthaide may use to compile aggregated statistics about Website usage. Web Beacons collect only a limited set of information, such as a cookie identifier, the time and date of a page or email view, and a description of the page or email on which the Web Beacon resides.

You cannot specifically decline Web Beacons; however, they can be rendered less effective by disabling cookies or modifying browser settings to notify you when cookies are sent, permitting you to accept or decline cookies individually.

Analytics

We may use third-party analytics vendors, including Google Analytics and similar tools, which utilize first-party cookies (such as the Google Analytics cookie) and third-party cookies (such as the DoubleClick cookie) together to collect information and report Website usage statistics without personally identifying individual visitors. These tools help us understand how visitors engage with our Website, which pages are most popular, and how our marketing efforts perform.

The information collected may be used to, among other things:

• Analyze and track data
• Determine the popularity of specific content
• Deliver advertisements and content tailored to user interests
• Better understand online activity across devices and sessions

If you do not want your information to be collected and used by Google Analytics, you can install an opt-out browser add-on (https://tools.google.com/dlpage/gaoptout) and/or opt out of Google Analytics for Display Advertising or the Google Display Network through Google’s Ads settings and help resources (https://support.google.com/analytics/answer/181881?hl=en).

Scripts

Scripts are pieces of code embedded in websites that define how the site behaves in response to user actions, such as clicks or key presses. Scripts may be used to collect information about user interactions with the Website, such as the links clicked, mouse movements, scroll behavior, and form submissions. These scripts are typically active only during a user’s session on the Website and are deactivated or removed when the user leaves or closes the browser window.

Aggregated and Non-Personally Identifying Information

We may share aggregated and Non-Personally Identifying Information we collect under any of the circumstances described above. We may also share it with third parties and affiliate companies to develop, provide, and deliver targeted advertising on the Website and third-party websites, as well as for analytics and business purposes. We may combine Non-Personally Identifying Information from one source with Non-Personally Identifying Information obtained from other sources.

We may share aggregated information with third parties, including advisors, advertisers, and investors, for the purpose of conducting general business analysis, improving our services, and enhancing the Website. For example, we may inform advertisers about the number of visitors to the Website and the most popular features or services accessed. This aggregated information does not contain any Personally Identifying Information.

In addition, Healthaide may make use of de-identified information in accordance with applicable privacy law.

Mobile Device Additional Terms

Mobile Device. If you access the Website or use our applications via a mobile device, we may collect information about your device, such as your mobile device ID, model and manufacturer, operating system, version information, and IP address.

Geo-Location Information. Unless we obtain your prior consent, we will not access or track any precise location-based information (e.g., GPS data) from your mobile device while you are using our mobile application or services. However, we may infer an approximate geographic location from your IP address, in which case we may gather and use general location data for analytics and service improvement.

Push Notifications. We may send you push notifications to your mobile device if you opt in to receive them, for example, to notify you of messages, updates, or service-related matters. If you no longer wish to receive such communications, you may disable push notifications through your device settings.

Mobile Analytics. We may use mobile analytics software to better understand the functionality of our mobile software on your device. This software may record information such as how often you use the application, the events that occur within the application, aggregated usage data, performance data, and the source from which the application was downloaded. This data is generally not linked to Personally Identifying Information you submit within the mobile application.

SOCIAL MEDIA

We may offer you the ability to connect your account on the Website with your account on one or more social networking sites for purposes such as logging in, uploading information, or enabling enhanced features on the Website. When you log in using your social network credentials or authorize such a connection, we may collect the Personally Identifying Information you have made publicly available on the social networking site, including but not limited to your name, profile picture, cover photo, username, gender, friends network, age range, locale, friend list, and any other publicly shared information.

Once connected, other users may be able to see information about your social network connections, such as the size of your network and mutual friends. By connecting your Website account with your account on any social networking site, you consent to the continuous release of information about you to us in accordance with your privacy settings on the social networking site. We will not post on your social network account without your permission.

Each social network allows you to set privacy controls for your data on its system, and our collection and use will always follow those controls and permissions. This integration feature, and the specific information shared, may change over time as both we and the social networking sites modify or improve our services.

We may use hyperlinks or social plug-ins on the Website that redirect you to social networks (such as Facebook, Instagram, X/Twitter, Google, TikTok, etc.). When you click on a social plug-in, such as Facebook’s “Like” button or the X “Tweet” button, the social network’s plug-in will be activated, and your browser will connect directly to that provider’s servers. If you do not use such buttons, generally no data is sent to the social network’s plug-in provider. When you do interact with these plug-ins, the social network may receive information such as your IP address, browser details, and device characteristics, and may record that you visited the Website.

Settings and information regarding privacy protections can be found on the social networks’ own websites. Those practices are not under our control, and we encourage you to review the privacy policies of any social networks you use.

COLLECTION, USE, AND DISCLOSURE OF PERSONALLY IDENTIFYING INFORMATION

Website Registration

As noted above, Personally Identifying Information (“PII”) is information that can be directly associated with a specific person. Healthaide may collect a range of PII from and about Website users.

Much of the PII collected by Healthaide is information that you provide directly when you:

1. Register for our services or create an account
2. Log in using social network credentials
3. Participate in polls, contests, surveys, or other features of our services
4. Respond to offers or advertisements
5. Communicate with us by email, phone, text message, chat, or via the Website
6. Create or modify a public profile
7. Sign up to receive newsletters or other communications

The types of PII we may collect include, but are not limited to:

• Name
• Postal address and country of residence
• Email address
• Telephone number
• Date of birth
• Gender
• Username and password
• Payment information (such as valid credit card number, type, expiration date, and billing address) if you transact business with us
• Shipping or delivery information
• Electronic signature

We may also request demographic and preference information, such as your interests and activities, hometown, and other relevant details as determined by Healthaide from time to time.

You may also provide additional information, including but not limited to:

• Photographic or video images for identification purposes or for non-diagnostic or diagnostic purposes (for example, photographs of your face, skin, hair, or treatment areas)
• Images of government-issued identification (e.g., driver’s license or passport) for verification
• Information about third parties that you refer to us (e.g., name, email, contact information, relationship)
• Any other information you choose to share when you contact or communicate with us

Users of the Website are under no obligation to provide Healthaide with PII, with the caveat that refusal to do so may prevent the user from accessing certain features or services of the Website.

BY REGISTERING WITH OR USING THE WEBSITE, YOU CONSENT TO THE USE AND DISCLOSURE OF YOUR PERSONALLY IDENTIFYING INFORMATION AS DESCRIBED IN THIS “COLLECTION, USE AND DISCLOSURE OF PERSONALLY-IDENTIFYING INFORMATION” SECTION.

Online Postings

Certain PII collected from users may be disclosed as a matter of course when you use specific features of the Website that enable you to share content publicly. We may provide areas on the Website where you can post information, including reviews, comments, testimonials, or other user-generated content related to your experience with the Website or our services.

Any such postings are governed by our Terms of Use. They may also appear in public search engine results or on other websites when searches are conducted regarding the subject of your posting. Whenever you voluntarily disclose personal information on publicly viewable web pages, that information can be accessed, collected, and used by others. For example, if you include your email address in a public posting, you may receive unsolicited messages.

We cannot control who reads your posting or how other users may use the information you voluntarily provide. Accordingly, we encourage you to exercise caution when disclosing personal information in public areas of the Website. YOU ASSUME ALL RESPONSIBILITY FOR ANY LOSS OF PRIVACY OR OTHER HARM RESULTING FROM YOUR VOLUNTARY DISCLOSURE OF PERSONALLY IDENTIFYING INFORMATION IN PUBLIC AREAS OF THE WEBSITE.

Medical Information

We also collect certain medical information on behalf of health care providers and medical groups that may treat you via the Service, such as Qualiphy Med and other affiliated or contracted providers (collectively, the “Providers”). This information may include, but is not limited to:

• Health and medical data that you submit for diagnosis or treatment purposes, including answers to medical questionnaires, intake forms, and treatment assessments
• Information about your prior health care providers or prescribers
• Dates and nature of visits or consultations
• Images or videos you share for diagnostic or treatment purposes (for example, images of your skin, hair, body areas, or conditions)
• Communications you exchange with Providers through the Service

We may also receive information about you from our service partners, identity verification vendors, and others. For example, as part of our identity verification process, our vendor may send us information they have independently collected, such as your name, age, and estimated location. Our marketing or referral partners may also send us information about you, even if you have not visited or registered on our Website directly.

Healthaide does not collect or create biometric information about you. To use some of our services, we may require you to submit proof of identity, such as a driver’s license or passport, along with a “selfie” image. In these cases, we may share this information with an identity verification partner. That partner may generate biometric identifiers to compare your selfie with your identification document in order to confirm your identity. Any biometric information is created and used only by that identity verification partner and is not shared with Healthaide. Our identity verification partner deletes biometric data after completing the verification process, in accordance with its own policies and applicable law. Healthaide may receive limited information extracted from such photos (for example, confirmation that there is a “match” between images and certain identification details), which we use to help verify your identity.

In addition, we may receive information from Providers involved in your care and from third parties that pay for your care or provide you with related services. This may include diagnoses, treatment plans (including prescriptions), notes, and laboratory results. We may also receive prescription history and other relevant health data from pharmacies, labs, or health information exchanges as permitted by law.

Company Communications

We may use your name, email address, phone number, or mailing address to send you communications regarding:

• New or existing services offered through the Website
• Changes to the Service or policies
• Service-related announcements, such as transaction confirmations, password resets, or critical notices
• Marketing communications, promotional offers, and newsletters that we think may be of interest to you

You may opt out of receiving certain non-essential marketing communications at the time of registration or by following the unsubscribe instructions contained in such communications, or by adjusting your account settings where available. However, opting out of marketing communications will not necessarily opt you out of receiving all communications from us, as we may still send you transaction-related or service-related messages (such as notices regarding your account, updates to terms, or changes affecting your use of the Service).

General Use by Company

Healthaide uses the PII it collects from you, along with other information we obtain from your current and past activities on the Website, for various purposes, including to:

1. Deliver the products and services you have requested from us or from Providers and affiliated pharmacies
2. Manage your account and provide you with customer support and technical assistance
3. Communicate with you by email, postal mail, phone, text message, or other means regarding products or services that may be of interest to you, whether offered by us, our affiliates, or third parties
4. Develop, display, and tailor content and advertising to your interests on the Website and on third-party sites
5. Resolve disputes, troubleshoot problems, and respond to inquiries
6. Measure consumer interest in our services and improve our offerings
7. Inform you of product updates, new services, or policy changes
8. Customize your user experience on the Website
9. Detect, investigate, and protect against fraud, security breaches, and other potentially prohibited or illegal activities
10. Enforce our Terms of Use and other agreements
11. Perform any other function described at the time of collection or as otherwise permitted by law

We may also use financial information or payment method details to process payments for purchases, enroll you in discount or promotional programs that you elect to participate in, protect against unauthorized transactions, and manage our business operations.

From time to time, we may look across multiple users to identify issues, patterns, or potential misuse. In certain circumstances, we may examine PII to identify users employing multiple user IDs or aliases, or to verify the accuracy of information provided.

Company Disclosures

Healthaide may disclose PII as described in this Privacy Policy under the following circumstances:

1. By Law or to Protect Rights.
   We may disclose PII when we believe it is appropriate or necessary to:

• Comply with applicable law, regulation, legal process, or governmental request
• Investigate, prevent, or take action regarding suspected illegal activities, fraud, or other wrongdoing
• Protect and defend the rights, property, or safety of Healthaide, our users, our employees, the Providers, the pharmacies, or others
• Enforce our Terms of Use or other agreements or policies
• Establish or exercise our legal rights or defend against legal claims

In connection with such disclosures, we may raise or waive legal objections or rights available to us at our discretion.

We will not sell, rent, or otherwise share your Personal Information with other companies or individuals for their own marketing purposes unless we have your consent. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes.

2. Marketing Communications.
   Unless you opt out at registration or through your account settings (where applicable), Healthaide may send you marketing communications about products and services that we believe may be of interest to you. If you wish to stop receiving marketing communications from us, you may opt out by following the unsubscribe instructions in any such communication, by changing your account settings, or by contacting us at the information provided below.
3. Third-Party Marketing Communications.
   Where permitted and if you do not opt out, Healthaide may provide your email address or basic contact information to carefully selected third parties so they may contact you regarding additional products or services that may interest you. To stop having your email information provided to third parties for marketing purposes, you may adjust your settings (if applicable) or contact us. Even after you opt out, you may still receive marketing communications from third parties to whom your information has already been provided, and you will need to contact those third parties directly to stop receiving such emails.
4. Third-Party Service Providers.
   We may share your PII, including your name and contact information, with authorized third-party service providers who perform services on our behalf. These services may include:

• Fulfilling or shipping orders
• Providing customer service or support
• Providing marketing assistance or analytics
• Processing payments and refunds
• Supporting Website functionality and infrastructure
• Conducting surveys, contests, or promotions

These service providers may have access to PII needed to perform their functions but are not permitted to use such information for any other purpose.

5. Business Transfers; Bankruptcy.
   Healthaide may disclose or transfer all PII in its possession to a successor organization as part of a merger, acquisition, bankruptcy, or other sale of all or a portion of the Company’s assets. The use and disclosure of all transferred PII will be subject to this Privacy Policy or to a new privacy policy if you are given notice of the new policy and an opportunity to opt out of it where required. PII submitted or collected after a transfer may be subject to a new privacy policy adopted by the successor organization.
6. Medical Groups and Providers.
   We disclose PII and relevant health information to Providers and affiliated pharmacies as necessary to enable them to deliver medical services, telehealth consultations, diagnoses, treatments, prescription services, and related operations to you, and to receive payment for such services.
7. Employees, Contractors, and Brand Partners.
   Certain Healthaide employees, contractors, consultants, and Brand Partners may have limited access to your PII in the course of performing their duties, such as troubleshooting issues, providing support, or improving the Service. Access to PII is limited to the minimum information reasonably necessary to perform their job functions.

Children’s Personally Identifying Information

Our Service is generally intended for individuals who are at least eighteen (18) years of age or older, or such greater age as may be required by applicable state law. Individuals between thirteen (13) and eighteen (18) years of age may use certain limited aspects of our services (for example, topical skincare products) only where permitted by law and with appropriate consent, as applicable.

We do not knowingly collect PII from children under the age of 13. If you are under 13, you may not use or access the Website or Service at any time or in any manner. If we become aware that we have collected PII from a child under the age of 13, we will use reasonable efforts to delete such information from our records and refrain from further use.

If you are a parent or legal guardian of a child under the age of 13 and believe that your child has disclosed PII to us, please contact us at:

By mail:
Healthaide LLC
Attn: Privacy Officer
1 Cowboys Way
Frisco, TX 75034
Subject line: “Removal of Minor Information”

By email:
support@skyblue-gull-466622.hostingersite.com
Subject line: “Removal of Minor Information”

If sending by mail, we recommend using a trackable method (such as USPS Certified Mail) so you can confirm delivery.

Protected Health Information

When you create an account with Healthaide, you are establishing a customer relationship with Healthaide that allows you to access and use various features and functions of the Website. As part of that relationship, you provide certain information to Healthaide, such as your name, email address, shipping address, phone number, and other contact details. We collect, use, and disclose that information in accordance with this Privacy Policy and do not consider such information, by itself, to be “health” or “medical” information.

However, when you use certain components of the Website and Service, you may also provide medical or health-related information that may be protected under applicable laws. Healthaide is not a “covered entity” under the Health Insurance Portability and Accountability Act of 1996, as amended, and its implementing regulations (collectively, “HIPAA”). One or more Providers or pharmacies accessible via the Service may or may not be “covered entities” or “business associates” under HIPAA. In some cases, Healthaide may act as a “business associate” of a covered entity such as a Provider or pharmacy. It is important to understand that HIPAA does not necessarily apply to all health information or to all transactions involving such information.

To the extent Healthaide is deemed a “business associate” and solely in that capacity, Healthaide may be subject to certain HIPAA requirements with respect to “protected health information” (“PHI”), as defined under HIPAA, that you provide to or that is created or received by Providers or pharmacies in connection with treatment, payment, or health care operations. In addition, certain medical or health information may be subject to additional protections under state-specific privacy laws (collectively, with PHI, “Protected Information”). Protected Information will be handled in compliance with applicable laws. Information that does not constitute Protected Information under applicable law may be used and disclosed in any manner permitted under this Privacy Policy.

Protected Information does not include information that has been de-identified in accordance with HIPAA and applicable state law.

Providers (including Qualiphy Med and any other medical groups providing care through the Service) may adopt their own Notices of Privacy Practices and Telehealth Consent describing how they use and disclose Protected Information. By accessing or using any part of the Website, you acknowledge receipt of such Notices of Privacy Practices made available to you by your Providers.

By using the Website, you agree that, even if HIPAA applies to certain Providers or pharmacies, any information that you submit to Healthaide that is not intended solely for the provision of diagnosis and treatment by Providers or for prescription fulfillment by pharmacies is not considered Protected Information and will be governed by this Privacy Policy and any applicable state laws governing privacy and security.

COLLECTION AND USE OF INFORMATION BY THIRD PARTIES GENERALLY

Healthaide contractually prohibits its employees, contractors, and affiliates from disclosing PII they receive from Healthaide in ways that are inconsistent with this Privacy Policy. However, third parties are not bound by this Privacy Policy with respect to PII that you provide directly to them or that they collect for themselves. These third parties may include:

• Advertisers
• Analytics providers
• Social networks
• Payment processors
• Independent applications or widgets integrated into the Website
• Other websites or services accessible via hyperlinks on the Website

Healthaide neither owns nor controls these third-party websites and applications. Accordingly, this Privacy Policy does not apply to information you provide to or that is gathered by third-party websites or applications.

Before visiting any third-party website or using any third-party application (whether via a link on the Website, through embedded content, or otherwise), you should review that third party’s privacy policy and practices (if any) to understand how they collect, use, and share your information. Take whatever steps you deem necessary to protect your privacy in your discretion. Healthaide does not permit third parties or third-party cookies to access any communication you have with Providers through secure clinical channels or to access medical information that you submit for diagnosis and treatment purposes.

SECURITY

We use reasonable and appropriate physical, administrative, and technical safeguards to protect the information we collect against loss, theft, misuse, unauthorized access, disclosure, alteration, or destruction. These measures may include encryption of data in transit, firewalls, access controls, and other security technologies and procedures.

However, no method of transmitting or storing data over the Internet or through mobile networks can be guaranteed to be 100% secure. As a result, we cannot and do not guarantee that your information will be safe from unauthorized access or misuse by third parties. We cannot guarantee that only authorized persons will access your information, and we are not responsible for third-party circumvention of any privacy settings or security measures.

You are responsible for maintaining the confidentiality of your account credentials, including your username and password. You should change your password immediately if you believe it has been compromised or if you suspect unauthorized access to your account. If you lose control of your account, you should notify us promptly.

We do not use encryption for all email communications, and ordinary email may not be secure. You should take this into account when deciding what information to include in emails you send to us. We make no representations or warranties regarding the sufficiency of our security measures or whether information may be accessed, disclosed, altered, or destroyed by a breach of any of our physical, technical, or managerial safeguards.

To the fullest extent permitted by law, Healthaide is not responsible for any damages, whether actual or consequential, that result from a security breach, technical malfunction, or circumvention of our security measures.

TRANSACTIONS

In connection with transactions conducted through the Service (for example, purchasing products or services through the Website), you may be asked to provide information relevant to the transaction, including but not limited to:

• Payment card number and expiration date
• Card security code
• Billing address
• Shipping address
• Phone number
• Email address

By submitting such information, you grant Healthaide the right, without charge, to transmit such information to third parties (for example, payment processors, pharmacies, fulfillment providers) for the purpose of facilitating the transaction.

All credit card, debit card, and other monetary transactions on or through the Service are processed via one or more online payment processing applications. These applications are operated by third-party payment processing vendors selected by Healthaide. Additional information about such payment processors, their privacy practices, and their security measures is available on their respective websites. Any relationship between Healthaide and a payment processor is purely contractual in nature, and the payment processor is not subject to Healthaide’s direction or control. Nothing in this Privacy Policy creates or implies a partnership, joint venture, fiduciary relationship, or agency relationship between Healthaide and any payment processor.

DATA RETENTION

Healthaide may retain your information for as long as it believes necessary to:

• Provide the Service and fulfill the purposes described in this Privacy Policy
• Comply with applicable legal, regulatory, and contractual obligations
• Resolve disputes
• Enforce our agreements
• Protect our rights and interests

We may dispose of or delete any information at any time, except as required by law or as otherwise set forth in an applicable agreement or notice.

Similarly, medical groups, Providers, and pharmacies may retain information about you for as long as they believe necessary for their own purposes, including to comply with legal obligations, maintain medical records, resolve disputes, and enforce agreements. They may dispose of or delete such information at any time, except as required by law or under separate agreements.

PRIVACY POLICY CHANGES

Healthaide may, in its sole discretion, modify, update, or replace this Privacy Policy from time to time. Any and all changes to this Privacy Policy will be posted on this page, and the “Effective Date” at the top will indicate when the revised policy became effective. Unless otherwise stated, our current Privacy Policy applies to all information that we have about you and your account.

Users should review this Privacy Policy regularly to check for changes. Healthaide will always post the latest version of the Privacy Policy on the Website. In addition, Healthaide may, but is not required to, choose to notify users of material changes via email or other means. You are responsible for ensuring that we have up-to-date contact information for you.

Your continued use of the Website after the posting of a revised Privacy Policy constitutes your acceptance of the changes.

CALIFORNIA PRIVACY RIGHTS

If you are a California resident, you may have certain rights under the California Consumer Privacy Act (“CCPA”) and related regulations concerning your personal information. These rights may include the right to:

• Know what personal information we collect, use, disclose, or sell about you
• Request access to the personal information we maintain about you
• Request deletion of certain personal information we have collected from you

To exercise these rights and choices, please follow the instructions below.

How to Request Access to Your Personal Information

You may request access to your personal information up to twice in a 12-month period. To do so, please email us at support@healthaide.com with the subject line “California Privacy Rights – Access Request.” In response, we will prepare an Access Report detailing the categories of personal information we have collected, used, disclosed, and/or sold (if applicable) about you. We will deliver this report by mail or electronically, at your request and as required by applicable law.

Please note that we may not always be able to fully satisfy your request. For example, we may be unable to provide information if doing so would adversely affect the rights or freedoms of others, or if we are legally entitled or required to handle the request differently.

How to Request Deletion of Your Personal Information

You may request that we delete personal information we have collected and/or maintained about you, subject to certain exceptions. To do so, please email us at support@healthaide.com with the subject line “California Privacy Rights – Deletion Request.”

We may be required or permitted by law to retain certain personal information, such as to:

• Complete a transaction for which the personal information was collected
• Maintain an electronic medical record for a medical group or Provider
• Provide a service that you requested
• Detect security incidents or protect against malicious, deceptive, fraudulent, or illegal activities
• Comply with legal obligations
• Enable internal uses that are reasonably aligned with your expectations or otherwise lawful

We reserve the right to charge a fee where permitted by law if your request is manifestly unfounded, excessive, or repetitive. If we determine that a fee is warranted, we will inform you and provide a cost estimate before fulfilling your request.

Verification

We will take reasonable steps to verify your identity before processing your request to access or delete personal information. If you maintain an account with us, we may verify your identity by using our existing authentication practices (for example, login and password). If you do not have an account, we may verify your identity using two or three data points you provide (e.g., browser or device ID) that we confirm against information we maintain and have determined to be reliable for verification purposes.

Authorized Agents

Only you or someone legally authorized to act on your behalf may make a verifiable consumer request related to your personal information or that of your minor child. If you wish to designate an authorized agent, you must provide written permission, unless the agent has power of attorney under California law. You may be required to verify your identity directly with us and confirm that you provided the authorized agent permission to submit the request.

Response Timing and Format

If you have an online account with us, we will deliver our written response to that account or to the email address associated with it. If you do not have an account, we will deliver the response by mail or electronically, at your preference and as permitted by law.

If we cannot comply with your request, our response will explain the reasons, to the extent required by law. If your request relates to information maintained by a medical group, a Provider, or a pharmacy, you may need to direct your request to that entity in accordance with its own policies.

Anti-Discrimination

We will not discriminate against you for exercising any of your rights under the CCPA. However, please note that if you request deletion of your personal information or otherwise restrict certain uses, some features of the Service may no longer be available or may function differently.

We do not sell your personal information for monetary consideration. We may, however, use cookies and other tracking technologies as described in this Privacy Policy. In some cases, the use of certain data by service providers and vendors might be interpreted as a “sale” under the CCPA (for example, where machine learning is used to improve identity verification systems at scale). To the extent such practices are deemed a “sale,” you may opt out by contacting us at support@healthaide.com.

We do not and will not knowingly sell the personal information of minors under 16 years of age without appropriate affirmative authorization.

DO-NOT-TRACK POLICY

Most web browsers and some mobile operating systems include a Do-Not-Track (“DNT”) feature or setting that you can activate to signal your preference not to have your online browsing activities monitored and collected. The Website does not currently respond to DNT signals or similar mechanisms. If industry standards for responding to DNT signals are established in the future, we may revisit this policy.

MISCELLANEOUS

We strive to use reasonable physical, technical, and administrative measures to protect information under our control. However, you are responsible for keeping your account password secure and for maintaining the confidentiality of your account. You are responsible for all activities that occur under your account.

If you believe that the security of your account has been compromised, please notify us immediately using the contact information below.

When using the Service, you may choose not to provide certain information, but this may limit your ability to use certain features or may prevent you from using the Service altogether. You may also choose to opt out of some communications (for example, newsletters or promotional emails) by emailing us your preferences or using unsubscribe mechanisms. Even if you opt out of marketing communications, we may still send you service-related communications, as described above.

Healthaide may supplement, amend, or otherwise modify this Privacy Policy at any time as described in the “Privacy Policy Changes” section. Such updates are effective as of the “Effective Date” indicated at the top of the Privacy Policy. It is your responsibility to review this Privacy Policy periodically and ensure you understand any changes that may impact you.

CONTACT US

If you have any questions about this Privacy Policy, our privacy practices, or your rights, please contact us:

By Email:
support@healthaide.io

You may also contact the U.S. Department of Health & Human Services, Office for Civil Rights, for additional information regarding federal health privacy rights:

Phone (Voice): (800) 368-1019
Phone (TTY): (800) 537-7697
Fax: (202) 619-3818
Email: ocrmail@hhs.gov
Or contact your local Office for Civil Rights via the directory at:
https://www.hhs.gov/ocr/about-us/contact-us/index.html#ocr-regional-offices

EFFECTIVE DATE

This Privacy Policy is effective as of the date set forth at the top of this document. Any changes to this Privacy Policy will be posted on the Website, and the “Effective Date” will be updated accordingly. Any revised Privacy Policy will apply to all information that we maintain about you, including information collected prior to the change, as permitted by law.