Privacy Policy

Prometheuz Health, Inc. ("Prometheuz," "we," "our," or "us") operates the Prometheuz telehealth platform and website (collectively, the "Services"). This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our Services. It applies to all users, including patients, visitors, and anyone who contacts us for support.

Information We Collect

We collect information you provide directly to us and information generated automatically when you use our Services.

Information You Provide

• Account information: Name, email address, phone number, date of birth, and password when you create an account.
• Health and medical information: Symptoms, medical history, current medications, lab results, and other health data you submit as part of your care.
• Payment information: Billing address and payment card details, processed securely through our third-party payment processor. We do not store full card numbers.
• Communications: Messages, support requests, and feedback you send us through any channel.
• Identity verification: Government-issued ID or other documents we may request to verify your identity.

Information Collected Automatically

• Device and browser data: IP address, browser type, operating system, and device identifiers.
• Usage data: Pages visited, features used, time spent, and clickstream data.
• Cookies and similar technologies: We use cookies, pixels, and local storage to operate the platform, remember preferences, and analyze usage. See the Cookies section below.
• Location data: General location inferred from your IP address. We do not collect precise GPS location.

How We Use Your Information

We use the information we collect for the following purposes:

• Provide, operate, and improve our telehealth Services and platform.
• Connect you with licensed healthcare providers and coordinate your care.
• Process payments and manage your subscription.
• Send transactional communications such as appointment confirmations, lab results notifications, and prescription updates.
• Send service-related announcements and, with your consent, marketing communications.
• Verify your identity and prevent fraud or unauthorized access.
• Comply with applicable laws, regulations, and professional standards.
• Conduct internal analytics to understand how our Services are used and to improve them.
• Respond to your support requests and resolve disputes.

How We Share Your Information

We do not sell your personal information. We share it only in the circumstances described below.

With Healthcare Providers

We share your health information with the licensed physicians and nurse practitioners on our platform who are responsible for your care. This is necessary to provide clinical services and is governed by our HIPAA Notice of Privacy Practices.

With Service Providers

We engage trusted third-party vendors to assist in operating our platform, including cloud hosting providers, payment processors, laboratory partners, pharmacy networks, and customer support tools. These vendors are contractually obligated to use your information only to provide services to us and to maintain appropriate safeguards.

For Legal and Safety Reasons

We may disclose your information when we believe disclosure is necessary to comply with applicable law, respond to legal process, protect the rights and safety of Prometheuz or others, or prevent fraud or illegal activity.

Business Transfers

If Prometheuz is involved in a merger, acquisition, financing, or sale of all or a portion of our business, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

With Your Consent

We may share your information for other purposes with your explicit prior consent.

Cookies and Tracking Technologies

We use cookies and similar technologies to operate our platform, remember your preferences, and analyze how our Services are used. The types of cookies we use include:

• Essential cookies: Required for the platform to function, including authentication and session management. These cannot be disabled.
• Analytics cookies: Help us understand user behavior and improve the platform (e.g., page views, feature usage). We use tools such as Google Analytics.
• Marketing cookies: Used to measure the effectiveness of our advertising campaigns on third-party platforms. You may opt out via your browser or platform-specific settings.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our platform. We honor Do Not Track signals where technically feasible.

Data Security

We implement administrative, technical, and physical safeguards designed to protect your information from unauthorized access, disclosure, alteration, and destruction. These measures include encryption of data in transit and at rest, access controls, regular security assessments, and employee training.

No method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security. If you believe your account has been compromised, please contact us immediately at [email protected].

Your Rights and Choices

Depending on your location and applicable law, you may have the following rights with respect to your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate or incomplete information.
• Deletion: Request that we delete your personal information, subject to certain legal exceptions.
• Restriction: Request that we limit how we process your information in certain circumstances.
• Portability: Request that we provide your information in a structured, machine-readable format.
• Opt-out of marketing: Unsubscribe from promotional emails at any time by clicking the unsubscribe link or contacting us directly.
• Withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact our Privacy Team at [email protected]. We will respond within 30 days. Note that health information covered by HIPAA is governed by our separate HIPAA Notice of Privacy Practices.

Data Retention

We retain your personal information for as long as necessary to provide our Services and fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law (such as tax, accounting, or medical record retention requirements). When your information is no longer needed, we delete or anonymize it.

Children's Privacy

Our Services are intended for adults aged 18 and older. We do not knowingly collect personal information from individuals under the age of 18. If we learn that we have inadvertently collected information from a minor, we will promptly delete it. If you believe we have collected information from a child, please contact us at [email protected].

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will notify you by email or by posting a prominent notice on our platform at least 30 days before the changes take effect. The effective date at the top of this policy reflects the date of the most recent revision. Your continued use of our Services after any update constitutes your acceptance of the revised policy.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Privacy Team:

• Email: [email protected]
• Mail: Prometheuz Health, Inc., Attn: Privacy Officer, [Address]

This Privacy Policy is effective as of March 1, 2026. For related documents, see our HIPAA Notice of Privacy Practices and Terms of Service.