Privacy Policy

• —To run your program: build your plan around your medication, titration schedule, goals and preferences, have coaches review it, and update it as your schedule changes.
• —To coach and support you: send messages, reminders and check-ins, and answer your questions.
• —To route safety questions: pass side effects and questions about medication, dose or labs to your prescriber or Partner (see Section 6).
• —To report to Partners: give your Partner the program information its agreement with us allows, such as your progress, time on therapy and reported side effects.
• —To connect services you choose, such as turning your plan into a grocery list.
• —To improve the Services: analyze usage and outcomes, mostly in aggregate or de-identified form.
• —To communicate with business contacts about our products, including marketing you can opt out of.
• —To protect the Services and meet legal duties: prevent fraud and misuse, enforce our terms and comply with the law.

• —Rules, not AI, make clinical choices. Plan recommendations follow rules held in curated clinical knowledge bases, for example which foods suit your goals and conditions, or which coaching protocol fits your medication.
• —Language models only explain. We use language models to combine those rule outputs and explain them in plain language. They do not create clinical rules or protocols.
• —People review every plan. A health coach and a certified personal trainer review and approve your plan before it reaches you. Nutrition coaching is general wellness guidance, not medical nutrition therapy.
• —No automated medical decisions. We do not prescribe, dose or adjust medication. Those decisions stay with your prescriber.
• —Model training. We do not use identifiable health information to train AI models. We may use de-identified or aggregate information to improve our rules and Services, as the law and our agreements allow. Service providers that run language models for us may use your information only to provide that service to us.

We share information only as described here, as our agreements allow, or with your consent.

• —Your Partner and prescriber, to coordinate your program: enrollment, progress, time on therapy and reported side effects. Questions about your medication, dose or labs go to your prescriber.
• —Drug safety teams. If you report a possible side effect in a manufacturer-sponsored program, we may share it with the manufacturer's drug safety team, as the law and our agreement require. These reports include only what safety reporting needs.
• —Sponsoring manufacturers, aggregate, de-identified program results only, unless you agree otherwise.
• —Coaches, employed or contracted by TeraHealth or by your Partner, who need your information to review your plan and support you. Some are outside the United States (Section 7).
• —Service providers that host, secure and support the Services for us, such as cloud hosting, language model processing, messaging, analytics and payment processors. They may use your information only to serve us, and those that handle health information covered by HIPAA sign Business Associate Agreements.
• —Services you connect, such as grocery services, wearables or lab providers, when you ask us to.
• —Legal and safety reasons, when the law requires it or to protect someone's safety, rights or property.
• —A business transfer, such as a merger or sale of assets, subject to this policy.

We do not sell personal information, share it for targeted advertising, or let sponsors use your information to market to you.

We keep information while your account or program is active, and afterwards as long as needed to provide the Services, meet legal, safety-reporting and audit duties, resolve disputes and enforce our agreements. For Partner programs, our agreement with the Partner also sets how long we keep information and whether we return or delete it when the program ends. De-identified information may be kept longer.

We use administrative, technical and physical safeguards, including encryption in transit and at rest, role-based access controls, audit logging, staff training and confidentiality agreements. No system is completely secure, so we cannot guarantee the security of information. If a breach affects your information, we will notify you or your Partner as the law and our agreements require.

Our website and apps use cookies and similar tools to keep them working, remember preferences and measure use. You can block or delete cookies in your browser settings, though some features may not work. We honor Global Privacy Control signals where the law requires. Please do not send health information through our website contact form.

If you give us your mobile number, we or your Partner may text you coaching and program messages. Reply STOP to opt out or HELP for help. We do not share your mobile number or text consent with third parties for their marketing.

Depending on where you live, you may have the right to:

• —know what personal information we hold about you and get a copy;
• —correct inaccurate information;
• —delete your information;
• —withdraw consent you have given, including consent to share health information;
• —opt out of marketing messages;
• —appeal if we decline your request.

Some state laws, such as those of Washington, Nevada and Connecticut, protect consumer health data that HIPAA does not cover. For direct users and manufacturer-sponsored programs, the health information we collect is listed in Section 2, how we use it in Sections 3 and 4, and whom we share it with in Section 6. We collect and share consumer health data only with your consent or as needed to provide the Services you asked for, and you can use the rights in Section 12 for it.

The Services are for adults 18 and older. We do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.

We may update this policy from time to time. We will post the new version here and notify you of material changes through the app, by email or through your Partner. We will ask for your consent before using health information in a materially different way.

Questions or requests about privacy can be sent through our contact form.