FUTURHEALTH INC. PRIVACY NOTICE

This Privacy Notice was last updated: June 11, 2026

At FuturHealth Inc. (“FuturHealth”) your privacy is important to us. Our Privacy Notice describes the information we collect, how we collect the information, the reasons we collect information, and how we share or use the information we collect. This Privacy Notice also describes the choices you have with the information we collect, including how you can manage, update, or request that we delete your information.

Please take a moment to review this Privacy Notice. You may scroll through this Privacy Notice or use the headings below. By using our Platform, you acknowledge that you have read and understand this Privacy Notice. If you have any questions or concerns about this Privacy Notice, you may Contact Us at any time.

Table of Contents

• Who is FuturHealth?
• Key Terms, Definitions & our Privacy Notice
  • When does our Privacy Notice apply?
  • When does our Privacy Notice not apply?
  • Our Privacy Notice and Terms of Use
• Personal Information
  • What is Personal Information?
  • What types of Personal Information do we collect?
  • Health-Related Information
  • How do we collect your Personal Information?
  • How do we use your Personal Information?
  • How do we share your Personal Information?
  • Your choices about how we share your Personal Information
  • How do I access and correct my Personal Information?
• Who may use the Services?
• Children’s Privacy
• Does FuturHealth Respond to Do Not Track Signals?
• Data Security
• Data Retention
• Jurisdiction-Specific Privacy Rights
• California’s Shine the Light Law
• Health Breach Notification
• Changes to our Privacy Notice
• Contact Us

Who is FuturHealth

FuturHealth is a technology, wellness, and coordination platform that operates in coordination with affiliated medical groups. FuturHealth is not a medical group, health care provider, health plan, pharmacy, or diagnostic laboratory. FuturHealth does not provide medical advice, diagnosis, treatment, prescribing decisions, pharmacy services, or laboratory services.

Through the Platform, users may access FuturHealth account management, subscription management, customer support, wellness and nutrition tools, payment functionality, and coordination features that may help users request or access services from independent medical groups, licensed clinicians, pharmacies, diagnostic laboratories, and related service providers.

Clinical services, including diagnosis, treatment, prescribing, and clinical decision-making, are provided solely by independent licensed health care providers and their affiliated medical groups, which may include SteadyMD Physician Group, P.C., OpenLoop Healthcare Partners P.C., and provider groups supported by CareValidate, Inc., as applicable (collectively, the “Medical Groups”). The Medical Groups and Providers are independent from FuturHealth. FuturHealth does not control or direct the clinical judgment of Providers.

The Medical Groups and Providers are responsible for providing any applicable Notice of Privacy Practices describing their use and disclosure of protected health information in their capacity as HIPAA-regulated entities, where applicable. FuturHealth’s collection, use, and disclosure of Personal Information is governed by this Privacy Notice.

Key Terms & Definitions and Our Privacy Notice

It is helpful to start by explaining some of our key terms and definitions used in this Privacy Notice.

When does our Privacy Notice apply?

This Privacy Notice describes the types of information we may collect from you when:

• You visit or use our Platform, including our Website, Mobile Applications, account pages, and other FuturHealth-operated online services;
• You create or manage a FuturHealth account;
• You use FuturHealth’s subscription, customer support, payment, wellness, nutrition, technology, or coordination features;
• You communicate with FuturHealth by email, text message, phone, chat, in-app message, or other electronic communication; and
• You otherwise provide information to FuturHealth or authorize FuturHealth to receive information in connection with Services you request.

When does our Privacy Notice not apply?

This Privacy Notice does not apply to information collected from users who log-in to the password-protected and secure portions of our Platform (“Secure Platform”). The Secure Platform allows users who obtain the Services (“Customers”) to perform certain functions or obtain the Services (such as telehealth visits and ongoing consultations) from Medical Group or Providers. Information collected and stored by us or added by Customers into the Secure Platform consists of health-related information that is handled in connection with the Services we provide in coordination with the Medical Groups and Providers, and is subject to applicable law and to the Medical Groups’ and Providers’ own privacy notices. We will not use or disclose information collected from the Secure Platform or your Provider for advertising or marketing except as permitted by applicable law, and we will not sell this information.

This Privacy Notice does not apply to information collected by any other website or apps operated either by us or by a third party unless the website is listed above or links to this Privacy Notice. It also does not apply to any website that we may provide a link to or that is accessible from our Platform.

This Privacy Notice does not apply to information collected, used, disclosed, or maintained by independent Medical Groups, Providers, pharmacies, diagnostic laboratories, or other third-party health care entities in their own systems or in their own capacity, even if those services are accessible through, coordinated through, or linked from the Platform. Those entities are responsible for their own privacy practices and may provide separate privacy notices, including a HIPAA Notice of Privacy Practices where applicable.

Our Privacy Notice and Terms of Use

This Privacy Notice is incorporated into our Terms of Use, which also apply when you use our Platform.

Personal Information

What is Personal Information?

Personal information is information from and about you that may be able to personally identify you. We treat any information that may identify you as personal information. For example, your name and e-mail address are personal information.

What types of Personal Information do we collect?

We may collect and use the following personal information (hereinafter, collectively referred to as “Personal Information”):

FuturHealth collects biometric information, as defined under applicable law, which may include physiological, biological, and behavioral characteristics and exercise, sleep, genetic, health, and other related data that can be used to identify you. Biometric information is collected only in connection with the Services, such as during the normal treatment sessions between you and your Provider, and is used to support progress tracking and to provide the Services. Where required by law, we collect biometric information with your consent. We do not use biometric information for advertising or marketing, we do not sell biometric information, and we retain it only for as long as necessary to provide the Services or as otherwise required by law. FuturHealth does not collect precise geolocation unless specifically disclosed at or before the point of collection and, where required, with your consent.

Health-Related Information

Some Personal Information we collect may include health-related information. As set forth above, the Medical Group will provide you with a Notice of Privacy Practices describing their collection and use of your health information, not FuturHealth. We will only collect and use this health-related information for the purposes of providing the Services or as otherwise permitted by law. We may combine your health-related information with other Personal Information that we have either obtained from you or through a third-party, such as your Provider, attorney, health insurer, employee benefits program, or other health care providers. This health-related information will not be used for any other purpose without your consent or as otherwise permitted by law.

How do we collect your Personal Information?

We collect most Personal Information directly from you. Additionally, we collect information from you when you visit, fill out forms, or use our Platform or Services:

We may also collect Personal Information in the following ways:

• When you contact us. When you contact FuturHealth directly, such as when you contact our customer support team, we will receive the contents of your message or any attachments you may send to us, as well as any additional information you choose to provide.
• When you make payments through the Platform. When you make a payment through the Platform, we do not collect or store financial account information, though we may receive transaction identifiers and summary information that does not include credit card or bank account numbers. Our payment processors’ privacy policy may be found at https://stripe.com/privacy and https://usa.visa.com/legal/privacy-policy.html.
• From service providers and partners involved in the Services. We may receive Personal Information from Medical Groups, Providers, pharmacies, diagnostic laboratories, payment processors, identity verification providers, customer support vendors, fulfillment providers, and other service providers involved in services you request or authorize. For example, we may receive information from telehealth support partners, pharmacy service providers, and diagnostic laboratory providers when necessary to help facilitate consultations, prescriptions, lab orders, billing, customer support, or related services. We use this information only as described in this Privacy Notice, as authorized by you, or as permitted by applicable law.

We will also collect information automatically as you navigate through our Platform. We use the following technologies to automatically collect data:

• Cookies and Similar Technologies. We and our service providers may use cookies, pixels, web beacons, software development kits, and similar technologies to operate the Platform, maintain security, remember your preferences, support account access, prevent fraud, understand Platform usage, measure marketing performance, and improve the Platform and Services.
  
  Some technologies are essential to the operation, security, and functionality of the Platform and cannot be disabled through our cookie preference center. Where required by law, we obtain your consent before using non-essential analytics, advertising, personalization, or similar technologies.
  
  FuturHealth uses Ketch, a third-party consent management platform, to manage cookie and tracking preferences. Through the Ketch preference center, accessible via the cookie banner on our website or the “Cookie Preferences” link in our footer, you can view categories of cookies and tracking technologies, grant or withdraw consent for non-essential categories, and update your preferences at any time. Your choices are stored and applied when you visit the Platform, subject to browser, device, and technical limitations.
  
  You may also manage cookies through your browser or device settings. If you disable certain cookies, some Platform features may not function properly.
• Tracking Technologies and Advertising. On non-authenticated portions of the Platform and limited non-clinical portions of the mobile application, as applicable, we may use cookies, pixels, web beacons, software development kits, and similar technologies provided by analytics, measurement, and advertising service providers. These technologies may help us understand Platform usage, measure advertising performance, prevent fraud, improve the Platform, and deliver or measure advertising for FuturHealth.
  
  FuturHealth does not permit advertising platforms, data brokers, or marketing technology providers to receive health-related information, prescription information, lab-related information, clinical-intake responses, medication-selection information, authenticated account content, telehealth communications, or consumer health data for their own advertising or marketing purposes, except with your consent where permitted by applicable law.
  
  We configure our advertising and analytics technologies to avoid transmitting health-related intake responses, authenticated account content, telehealth communications, prescription information, lab information, and pages or events that directly identify a specific health condition or medication interest, except as disclosed to you and with your consent where required by applicable law.
  
  You may opt out of advertising cookies and similar technologies through our cookie preference center. Where required by law, we also honor recognized opt-out preference signals, such as Global Privacy Control, as described below.

How do we use your Personal Information?

We may use your Personal Information for the following purposes:

• Operate, maintain, supervise, administer, and enhance our Platform or the Services, including monitoring and analyzing the effectiveness of content on the Platform, aggregate site usage data, and other usage of the Platform and/or the Services such as assisting you in completing the registration process.
• Provide our Services to you, in a custom and user-friendly way.
• For internal testing, research, analysis, and product development, including to develop and improve our Platform, and to develop, improve, or demonstrate our Services.
• Provide you with information or Services that you request from us or that may be of interest to you.
• To provide, support, coordinate, fulfill, document, and improve Services you request, including account registration, subscription management, scheduling support, communications, payment processing, prescription-routing support, laboratory-order facilitation, customer support, fulfillment, and coordination with independent Medical Groups, Providers, pharmacies, laboratories, and other service providers.
• To communicate with you about FuturHealth products, Services, promotions, educational content, and updates, subject to your communication preferences and applicable law. We do not use health-related information, prescription information, lab-related information, clinical-intake responses, medication-selection information, or consumer health data for targeted advertising except with your consent where permitted by applicable law.
• Provide you notices about your account.
• Contact you in response to a request made by you or a third party on your behalf.
• Notify you about changes to our Platform and/or the Services we offer or provide through them.
• Fulfill any other purpose for which you provide it.
• Carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.
• Anonymize and aggregate information for analytics, reporting, and any other purposes permitted by law.
• Respond to law enforcement requests, court orders, and subpoenas and to carry out our legal and contractual obligations.
• Authenticate use, detect fraudulent use, and otherwise maintain the security of our Platform and the safety of others.
• Administer surveys and questionnaires.
• Any other purpose with your consent.

ARTIFICIAL INTELLIGENCE AND AUTOMATED TECHNOLOGIES

FuturHealth may use artificial intelligence, machine learning, or automated technologies to support certain Platform features and internal operations, such as nutrition recommendations, user experience improvements, security monitoring, fraud detection, customer support, analytics, and service optimization.

AI-enabled features are intended to support the Platform and user experience. They do not replace licensed health care Providers and do not constitute medical advice, diagnosis, or treatment. Clinical decisions remain the responsibility of independent licensed Providers. FuturHealth may use de-identified, aggregated, or anonymized information to develop, test, and improve internal models, recommendation tools, and Platform functionality.

How do we share your Personal Information?

We may disclose Personal Information in the circumstances described below, subject to applicable law, your choices, and any consent requirements that apply to sensitive personal information or consumer health data.

• Our business purposes. We may disclose Personal Information to vendors, service providers, contractors, processors, and business partners that help us operate, support, secure, analyze, improve, and provide the Platform and Services. These may include hosting providers, data storage providers, customer support vendors, payment processors, fulfillment providers, identity verification providers, analytics providers, security vendors, professional advisors, and other service providers. We use contractual and operational controls designed to limit their use of Personal Information to the services they provide to FuturHealth, subject to applicable law.
• At your direction or with your consent. We may disclose Personal Information, including health-related information, to independent Medical Groups, Providers, pharmacies, diagnostic laboratories, caregivers, family members, or other individuals or entities when you direct us to do so, consent to the disclosure, or request Services that reasonably require the disclosure.
• Compliance with law. We may share your Personal Information to comply with applicable law or any obligations thereunder, including cooperation with law enforcement, judicial orders, and regulatory inquiries.
• Business transfer. We may share your Personal Information to a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all our assets, whether as a going concern or as part of a bankruptcy, liquidation, or similar proceeding, in which Personal Information held by us about our users are among the assets transferred.
• To enforce our rights. We may share your Personal Information to enforce any applicable terms and conditions and Terms of Use, and to ensure the safety and security of our Services and our users.
• De-identified information. We may also disclose de-identified information, so that it cannot be reasonably used to identify any individual, with third parties for marketing, advertising, research, or any other purpose permitted by law.
• Marketing and advertising service providers. We may disclose limited Personal Information to service providers that help us deliver, measure, and improve FuturHealth marketing, subject to contractual restrictions and your privacy choices. We do not disclose health-related information, prescription information, lab-related information, clinical-intake responses, medication-selection information, or consumer health data to third parties for their own advertising or marketing purposes except with your consent where permitted by applicable law.
• Mobile Messaging Data. Text Messaging Opt-In Data and Consent. Notwithstanding anything to the contrary in this Privacy Policy, the categories of sharing described in this section exclude text messaging originator opt-in data and consent collected by or on behalf of FuturHealth in connection with FuturHealth’s SMS/MMS messaging programs, including records reflecting a user’s consent to receive text messages from FuturHealth and the user’s related opt-in or opt-out status (“SMS Opt-In Data”). FuturHealth does not sell, rent, or share SMS Opt-In Data with third parties. For clarity, SMS Opt-In Data does not include Personal Information collected, used, or disclosed by FuturHealth outside of a user’s SMS/MMS opt-in or opt-out status, even if such Personal Information includes a telephone number. This paragraph does not limit FuturHealth’s collection, use, disclosure, or sharing of Personal Information other than SMS Opt-In Data as described elsewhere in this Privacy Policy. FuturHealth may use SMS Opt-In Data to operate, administer, and support its own messaging programs, including to send messages requested or consented to by users, maintain consent and suppression records, honor opt-in and opt-out requests, prevent fraud or abuse, and comply with applicable law. For purposes of this SMS provision, “third parties” does not include service providers, processors, carriers, aggregators, or messaging vendors that process SMS Opt-In Data on FuturHealth’s behalf solely to operate, administer, or support FuturHealth’s messaging programs and that are not permitted to use SMS Opt-In Data for their own marketing or other independent purposes.
• Third-party analytics. We use Google Analytics to understand and evaluate how visitors interact with our Platform and/or the Services. These tools help us improve our Platform and/or the Services, performance, and your experience.
  
  In addition to Google Analytics, we may use third-party advertising measurement technologies including Meta (Facebook) Pixel, Google Ads conversion tracking, and similar tools provided by other advertising partners to measure the effectiveness of our marketing campaigns. These technologies may observe page interactions on our non-authenticated pages. Please see the “Tracking Technologies and Advertising” section above for our commitment regarding health data and advertising.

Your choices about how we share your Personal Information

This section of our Privacy Notice provides details and explains how to exercise your choices. We offer you choices on how you can opt out of our use of tracking technology, disclosure of your Personal Information for our advertising to you, and other targeted advertising. Some third-party websites, platforms, and services that are not operated by FuturHealth may collect information according to their own privacy policies. We do not control unaffiliated third-party websites or services. For service providers and vendors that process information on our behalf, we use contractual and operational controls designed to limit their processing to the services they provide to FuturHealth, subject to applicable law. These third parties may aggregate the information they collect with information from their other customers for their own purposes.

You can opt out of third parties collecting your Personal Information for targeted advertising purposes in the United States by visiting the National Advertising Initiative's (NAI) opt-out page and the Digital Advertising Alliance's (DAA) opt-out page.

Each type of web browser provides ways to restrict and delete cookies. Browser manufacturers provide resources to help you with managing cookies. Please see below for more information.

For other browsers, please consult the documentation that your browser manufacturer provides.

If you do not wish to have your e-mail address used by FuturHealth to promote our own Services, you can opt-out at any time by clicking the unsubscribe link at the bottom of any e-mail or other marketing communications you receive from us or logging onto your Account Settings. This opt out does not apply to information provided to FuturHealth as a result your use of our Platform and/or the Services. You may have other options with respect to marketing and communication preferences through our Platform.

You may also see certain ads on other websites because we participate in advertising networks. Ad networks allow us to target our messaging to users through demographic, interest-based, and contextual means. These networks track your online activities over time by collecting information through automated means, including through the use of cookies, web server logs, and web beacons. The networks use this information to show you advertisements that may be tailored to your individual interests.

How do I access and correct my Personal Information?

You can review, access, and update certain Personal Information by logging into your account and visiting the account settings or profile section of the Platform. You may also request access, correction, deletion, or other rights by contacting us at [email protected], submitting a request through our privacy request form at https://privacy.fh.co/privacy-policy#us-states-notices, contacting us by phone, or using our online chat function at https://landing.fh.co/chat.

We may need to verify your identity before fulfilling your request. We may deny or limit a request where permitted by applicable law, including where fulfilling the request would violate law, interfere with legal rights or obligations, affect the privacy or rights of others, compromise security, or require deletion of information we are required or permitted to retain.

Who may use the Services?

FuturHealth operates subject to state and federal regulations, and the Platform and/or the Services may not be available in your state. You represent that you are not a person barred from enrolling in or receiving the Services under the laws of the United States or other applicable jurisdictions in which you may be located. Access to and use of the Platform and/or the Services are limited exclusively to users located in states within the United States where the Platform and/or the Services are available. The Platform and/or the Services are not available to users located outside the United States. Accessing the Platform and/or obtaining the Services from jurisdictions where content is illegal, or where we do not offer the Platform and/or the Services, is prohibited.

Children’s Privacy

The Platform and FuturHealth Services are intended for individuals who are at least 18 years old. FuturHealth does not knowingly collect Personal Information from children under 13, and the Platform is not directed to children under 13. If we learn that we have collected Personal Information from a child under 13 without verifiable parental consent, we will delete that information as required by law.

If you are under 18, you may not use the Platform or provide Personal Information to FuturHealth unless FuturHealth has made a specific service available to minors through an approved process that includes any required parent or legal guardian consent.

Parents or guardians who believe a child has provided Personal Information to FuturHealth may contact us using the information below.

Independent Medical Groups, Providers, pharmacies, laboratories, or other third-party health care entities may have their own eligibility, consent, privacy, and medical-record practices for minors. Those practices are separate from FuturHealth’s practices.

Does FuturHealth Respond to Do Not Track Signals?

Global Privacy Control. Some browsers and browser extensions support Global Privacy Control or other recognized opt-out preference signals. Where required by applicable law, we treat a recognized opt-out preference signal as a valid request to opt out of sale, sharing, or targeted advertising for the browser or device through which the signal is received. If we can reasonably associate the signal with your FuturHealth account, we will apply the opt-out to that account as required by law. Because opt-out preference signals are typically browser- and device-specific, you may need to enable the signal separately on each browser and device you use.

Data Security

We maintain administrative, technical, and physical safeguards designed to protect Personal Information against accidental, unlawful, or unauthorized access, destruction, loss, alteration, disclosure, or use. These safeguards are designed to be appropriate to the nature and sensitivity of the information we process. However, no method of transmission over the Internet, mobile network, or method of electronic storage is completely secure. We cannot guarantee absolute security.

You are responsible for maintaining the confidentiality of your account credentials and for using secure devices and networks when accessing the Platform.

DATA RETENTION

We retain Personal Information for as long as reasonably necessary to fulfill the purposes described in this Privacy Notice, provide and support the Services, maintain business records, comply with legal and contractual obligations, resolve disputes, enforce agreements, prevent fraud, maintain security, and exercise or defend legal claims.

Account and registration information is generally retained for the life of your account and for a reasonable period after account closure as needed for legal, tax, accounting, fraud prevention, dispute resolution, and business-record purposes.

Payment and transaction records are retained as needed for tax, accounting, chargeback, fraud prevention, and financial-record purposes. FuturHealth does not store full payment card or bank account numbers.

Marketing and communications data is retained until you opt out or until it is no longer reasonably necessary for the purposes described in this Privacy Notice. We may retain suppression-list information as needed to honor your opt-out choices.

Health-related information collected by FuturHealth is retained for as long as reasonably necessary to provide, support, coordinate, fulfill, document, and improve the Services; comply with legal obligations; resolve disputes; maintain security; prevent fraud; and exercise or defend legal claims.

Medical records maintained by independent Medical Groups, Providers, pharmacies, diagnostic laboratories, or other third-party health care entities are subject to those entities’ own retention practices, privacy notices, and applicable law.

When Personal Information is no longer needed, we will delete, de-identify, aggregate, or otherwise dispose of it in accordance with applicable law and our retention practices.

Jurisdiction-Specific Privacy Rights.

Residents of certain U.S. states may have additional privacy rights under applicable comprehensive state privacy laws. These rights may include the right to access, correct, delete, or obtain a copy of Personal Information, and the right to opt out of certain processing for targeted advertising, sale, sharing, or profiling, subject to applicable exceptions.

To exercise consumer health data rights, please submit a request at https://privacy.fh.co/privacy-policy#us-states-notices, email [email protected], or contact us using the information below.

U.S. State Comprehensive Privacy Rights.

Depending on your state of residence and subject to applicable exceptions, you may have the right to confirm whether we process your Personal Information, access your Personal Information, correct inaccurate Personal Information, delete Personal Information, obtain a portable copy of Personal Information, opt out of targeted advertising, opt out of sale or sharing, and opt out of certain profiling that produces legal or similarly significant effects.

To exercise these rights, please submit a request at https://privacy.fh.co/privacy-policy#us-states-notices, email [email protected], or contact us using the information below. We will verify and respond to your request as required by applicable law. If we deny your request, you may appeal by following the instructions in our response or by emailing [email protected] with the subject line “Privacy Appeal.”

Information collected, used, disclosed, or maintained by independent Medical Groups, Providers, pharmacies, diagnostic laboratories, or other third-party health care entities may be subject to those entities’ own privacy notices, rights processes, and applicable legal obligations.

California’s Shine the Light Law.

California Civil Code Section 1798.83 (California’s “Shine the Light” law) permits users of our Platform and/or the Services that are California residents and who provide Personal Information in obtaining products and services for personal, family, or household use to request certain information regarding our disclosure of Personal Information to third parties for their own direct marketing purposes. If applicable, this information would include the categories of Personal Information and the names and addresses of those businesses with which we shared your Personal Information for the immediately prior calendar year. You may request this information once per calendar year. To make such a request, please Contact Us using the information below.

HEALTH BREACH NOTIFICATION

To the extent the Federal Trade Commission’s Health Breach Notification Rule applies to FuturHealth, including in connection with personal health records or related health information outside the scope of HIPAA, we will provide notices of breaches of unsecured PHR identifiable health information as required by that rule.

Depending on the nature and scope of the incident, this may include notice to affected individuals, the FTC, and, for certain breaches involving 500 or more residents of a state, the District of Columbia, or a U.S. territory or possession, notice to prominent media outlets serving the relevant area. We also comply with applicable state data breach notification laws.

Notice will be provided within the time periods and by the methods required by applicable law.

Changes to our Privacy Notice

We may update our Privacy Notice periodically to reflect changes in our privacy practices, laws, and best practices. We will post any changes we make to our Privacy Notice on this page. The date this Privacy Notice was last revised is identified at the top of the page. You are responsible for periodically accessing the Platform and reviewing this Privacy Notice to check for any changes.

Contact Us

If you have any questions, concerns, complaints or suggestions regarding our Privacy Notice or otherwise need to contact us, you may contact us at the contact information below.

How to Contact Us:

Address:
FuturHealth Inc.
325 W Washington St
Ste 2 - 944
San Diego, CA 92103

Phone: (831) 900-4723

Online Chat