Privacy Policy

For purposes of this Privacy Policy, “Sentient Connect,” “we,” “us,” and “our” refer to Sentient Connect LLC and its current and future products, systems, brands, programs, and verticals.

This Privacy Policy applies to, but is not limited to:

• Sentient Connect™
• SentientOS™
• AURA Genesis™ and AURA™
• AURA Genesis Behavioral Health
• AURA Genesis Home Services
• MIND | BODY | SPIRIT Triangulation™ frameworks
• DISC profile tools and related assessments
• Business consulting, sales, intake, outreach, automation, and CRM workflows
• Websites and subdomains operated by us, including sentientconnect.io and related demo or vertical sites
• Future mobile applications, wearable integrations, voice AI systems, dashboards, client portals, and connected services

This Privacy Policy applies to visitors, users, clients, prospective clients, pilot participants, customers, vendors, contractors, business partners, authorized representatives, and any other person who interacts with our services.

Some services may also have additional terms, notices, authorizations, consent forms, business associate agreements, data processing agreements, client agreements, pilot agreements, or service-specific privacy notices. If there is a conflict between this Privacy Policy and a signed written agreement that applies to a specific service, the signed written agreement controls for that service.

Sentient Connect builds and operates AI-assisted systems, coaching frameworks, intake flows, workflow automations, behavioral support tools, business tools, and operational platforms.

Unless a separate written agreement clearly states otherwise:

• We are not an emergency service.
• We are not a crisis hotline.
• We do not provide emergency medical, psychiatric, legal, financial, or clinical services.
• We do not diagnose, treat, cure, or prevent any disease or condition.
• We do not replace licensed medical, behavioral health, legal, financial, or clinical professionals.
• AI outputs, coaching insights, dashboards, summaries, recommendations, nudges, classifications, profile outputs, and reports are informational and support-oriented only.
• Users should rely on qualified professionals for medical, behavioral health, legal, financial, clinical, or safety-critical decisions.

If you are experiencing an emergency, call 911 or your local emergency number. If you are in emotional distress or thinking about self-harm, contact emergency services or a qualified crisis resource immediately.

We design our systems around the following privacy principles:

• Data minimization: We try to collect only what is reasonably needed to operate, secure, improve, and deliver the services.
• Purpose limitation: We use personal information for the purposes described in this Privacy Policy, disclosed at collection, authorized by contract, or permitted by law.
• Sensitive data protection: We treat wellness, behavioral, recovery, biometric, voice, wearable, and health-related information as highly sensitive.
• Consent where required: We seek consent where required by law, contract, or the sensitivity of the data.
• Human oversight: AI systems are intended to assist, not replace, human judgment in consequential settings.
• Security by design: We use administrative, technical, and organizational safeguards to protect information.
• Transparency: We disclose when users interact with AI systems where required or appropriate.
• No hidden sale of sensitive information: We do not sell sensitive personal information, health information, voice recordings, biometric data, recovery-support information, or behavioral-health information.

We may collect the following categories of information depending on how you interact with us.

Identity and Contact Information

• Name
• Email address
• Phone number
• Mailing address
• Company name
• Role or title
• Login credentials
• Account identifiers
• Signature or authorization details
• Communication preferences

Business and Professional Information

• Employer or organization
• Job title
• Industry
• Business goals
• Operational problems
• Consulting needs
• Vendor information
• Client status
• Sales pipeline status
• Meeting notes
• Scheduling information
• Service preferences
• Product interest
• CRM records
• Business process information

Account and Portal Information

• Username
• Password hash
• Authentication data
• Access permissions
• Login history
• Session data
• Role-based permissions
• Security settings
• User preferences
• Dashboard activity

We do not intend to store plain-text passwords.

Intake, Coaching, Self-Assessment, and Framework Data

• Personal goals
• Self-reported stressors
• Mindset, clarity, focus, urgency, impulse, or decision-readiness scores
• Body, sleep, energy, nutrition, movement, craving-control, or regulation scores
• Spirit, purpose, prayer, integrity, service, forgiveness, or alignment scores
• MIND | BODY | SPIRIT Triangulation™ reflections
• DISC profile answers and outputs
• Coaching notes
• Progress tracking
• User-generated journal-style entries
• Daily check-in responses
• Behavioral patterns voluntarily submitted by the user
• Recovery-support or wellness-support data voluntarily submitted by the user

Health, Wellness, Behavioral, Recovery, and Sensitive Information

• Wellness information
• Behavioral-health support information
• Recovery-support information
• Substance-use recovery support information
• Emotional regulation information
• Sleep, energy, nutrition, movement, or body-regulation information
• Self-reported symptoms or concerns
• Peer-support or coaching-related information
• Information related to care coordination, if voluntarily provided
• Information entered into demo or pilot environments
• Health-related information submitted through connected forms, portals, or integrations

We treat this information as sensitive. We do not use it for targeted advertising. We do not sell it. We do not disclose it except as described in this Privacy Policy, with your consent, under contract, as required by law, or as necessary to provide and secure the services.

Voice, Audio, Video, Transcription, and AI Interaction Data

• Voice recordings
• Audio recordings
• Video recordings
• Transcripts
• Chat messages
• Prompts
• AI outputs
• Summaries
• Call metadata
• Interaction timestamps
• Speaker labels
• Quality-control notes
• Consent records
• Voice-agent logs

Unless a service clearly states otherwise and obtains required consent, we do not use voice recordings to identify you by biometric voiceprint.

Where required by law, we will provide notice and obtain consent before recording, transcribing, or analyzing calls, meetings, voice interactions, or biometric information.

Wearable, Device, Sensor, and Connected-Health Data

• Heart rate
• Sleep data
• Movement data
• Activity data
• Device data
• Check-in reminders
• Wellness trends
• Sensor-derived metrics
• User-selected integrations
• Connected-device status
• App interaction data

Wearable and sensor integrations will be consent-based where required. Users should review the privacy policies of any wearable, device, app, or third-party integration provider.

Home Services and Field Operations Data

• Property or service address
• Maintenance requests
• Tenant or resident contact information
• Vendor contact information
• Service photos
• Work order notes
• Scheduling details
• Dispatch logs
• Completion status
• Vendor acceptance records
• Payment or invoice metadata
• Audit trail data
• Customer support communications

Payment and Transaction Information

• Billing name
• Billing address
• Payment method metadata
• Transaction amount
• Invoice details
• Subscription status
• Payment confirmation
• Tax-related records
• Refund or cancellation records

We do not intend to store full payment card numbers on our own servers. Payment card information is generally processed by third-party payment processors.

Communications and Support Information

• Emails
• Text messages
• Form submissions
• Support tickets
• Call notes
• Chat messages
• Meeting notes
• Attachments voluntarily submitted
• Feedback
• Testimonials
• Consent or authorization records

Website, Device, Cookie, and Analytics Information

• IP address
• Device type
• Browser type
• Operating system
• Referring URL
• Pages visited
• Links clicked
• Time on page
• Session identifiers
• Cookie identifiers
• Approximate location derived from IP address
• Error logs
• Security logs
• Performance logs
• Analytics events

Location Information

• Approximate location from IP address
• Service address if voluntarily provided
• Business address
• Property address
• Location information from connected services if enabled and authorized

We do not collect precise GPS location unless the service requires it, the user enables it, or notice and consent are provided where required.

Information From Third Parties

• Clients or organizations that authorize your access
• Business partners
• Vendors
• Scheduling tools
• CRM platforms
• Payment processors
• Analytics providers
• Communication platforms
• AI service providers
• Referral sources
• Publicly available sources
• Authorized representatives
• Connected accounts or integrations you approve

We may use information for the following purposes:

To Provide and Operate Services

• Operate websites, portals, dashboards, apps, and demos
• Create and manage accounts
• Provide coaching, consulting, automation, and AI-assisted services
• Process forms and intake submissions
• Generate reports, summaries, dashboards, and recommendations
• Route service requests
• Support home services workflows
• Support behavioral-health, coaching, wellness, or recovery-support workflows
• Support DISC, MIND | BODY | SPIRIT Triangulation™, and related assessment tools
• Provide customer service
• Manage pilots, demos, subscriptions, and paid services

To Personalize and Improve Services

• Customize user experience
• Improve workflows
• Improve prompts, templates, dashboards, and automations
• Understand usage patterns
• Debug errors
• Improve service quality
• Develop new features
• Evaluate product-market fit
• Improve safety and reliability

We do not use sensitive health, wellness, behavioral, recovery, voice, biometric, or client-confidential information to train general-purpose AI models unless allowed by contract, consent, de-identification, or applicable law.

To Support AI Features

• Generate AI responses
• Summarize user-provided content
• Classify requests
• Route tasks
• Produce reports
• Support voice AI
• Support transcription
• Support intake triage
• Assist with coaching or operational recommendations
• Detect safety issues
• Improve AI reliability and reduce errors

AI outputs may be incomplete, inaccurate, or inappropriate for certain uses. Users and organizations are responsible for reviewing AI outputs before relying on them, especially in business, health, behavioral, legal, financial, employment, housing, insurance, or other consequential settings.

To Communicate With You

• Respond to inquiries
• Send service updates
• Confirm appointments
• Send onboarding information
• Provide support
• Send billing notices
• Send administrative notices
• Send marketing communications where permitted
• Manage consent and communication preferences

You may opt out of non-essential marketing communications. We may still send transactional, legal, security, billing, or service-related messages.

To Process Payments and Manage Accounts

• Process payments
• Manage subscriptions
• Send invoices
• Process refunds
• Verify account status
• Maintain accounting records
• Detect billing issues
• Prevent fraud

To Protect Safety, Security, and Integrity

• Authenticate users
• Prevent unauthorized access
• Detect abuse, fraud, or misuse
• Monitor system security
• Maintain audit logs
• Enforce agreements
• Protect users, clients, vendors, and the public
• Investigate suspicious activity
• Respond to security incidents
• Protect the rights, property, and safety of Sentient Connect and others

To Comply With Law and Legal Obligations

• Comply with applicable laws
• Respond to lawful requests
• Preserve records
• Enforce contracts
• Resolve disputes
• Respond to regulatory inquiries
• Support audits
• Maintain tax, accounting, and corporate records
• Establish, exercise, or defend legal claims

Our services may use artificial intelligence, machine learning, automation, large language models, speech-to-text, natural language processing, scoring, classification, routing, summarization, and other automated tools.

We may use AI to assist with:

• Intake
• Triage
• Coaching support
• Operational workflows
• Home service routing
• Behavioral-support summaries
• Business consulting workflows
• DISC or framework analysis
• Dashboard insights
• Voice interactions
• Call summaries
• Report generation
• Administrative support

AI tools are not perfect and may produce inaccurate, incomplete, biased, outdated, or inappropriate outputs. AI outputs should be reviewed by a qualified person before being used for important decisions.

Unless specifically authorized under a written agreement, our AI systems are not intended to make final decisions about employment, housing, credit, insurance, legal services, government services, health care access, or other consequential decisions.

Where our services are used in a setting that may materially influence a consequential decision, we expect the organization using the service to maintain appropriate human review, notices, appeal rights, correction rights, impact assessments, and other controls required by applicable law.

Some Sentient Connect services may be used near healthcare, behavioral health, peer support, recovery support, coaching, or wellness contexts. Privacy obligations depend on the specific relationship and legal role.

When HIPAA May Apply

HIPAA may apply when we act as a business associate to a HIPAA-covered entity or another business associate under a signed Business Associate Agreement.

If we sign a Business Associate Agreement, we will handle protected health information according to that agreement and applicable HIPAA obligations. If a Business Associate Agreement conflicts with this Privacy Policy for protected health information, the Business Associate Agreement controls.

When HIPAA May Not Apply

Not all health, wellness, coaching, recovery-support, wearable, or behavioral data is protected by HIPAA. Information submitted directly to a consumer app, coaching service, demo, form, website, or non-covered service may not be HIPAA-protected unless a covered-entity or business-associate relationship exists.

Even when HIPAA does not apply, we treat health-related, wellness-related, recovery-related, behavioral, and biometric information as sensitive and protect it under this Privacy Policy, applicable consumer privacy laws, contracts, and security practices.

No Treatment Relationship Unless Expressly Agreed

Using our services does not create a doctor-patient, therapist-client, counselor-client, attorney-client, financial-advisor-client, or clinical treatment relationship unless a separate written agreement with an appropriately licensed provider says so.

Some information we collect may qualify as consumer health data under certain state laws. This may include information that identifies or could reasonably be associated with a person’s past, present, or future physical or mental health status, wellness status, recovery-support status, behavioral support, biometric data, wearable data, or health-related inferences.

We may collect consumer health data only as reasonably necessary to provide requested services, support user-authorized features, operate pilots or demos, fulfill contracts, improve safety and reliability, comply with law, or as otherwise disclosed and consented to where required.

We do not sell consumer health data. We do not use consumer health data for targeted advertising.

We do not disclose consumer health data except:

• With your consent
• To provide the requested service
• To service providers and processors under appropriate contractual restrictions
• To the organization that authorized or administers your access, where applicable
• To comply with law
• To protect safety, security, rights, or legal interests
• As otherwise permitted by applicable law

Where required, users may request access, deletion, withdrawal of consent, or information about third parties with whom consumer health data has been shared.

Some current or future services may include enhanced identity-security features, including:

• Voice phrase verification
• Fingerprint authentication through device-level systems
• Facial recognition through device-level systems
• CAC-style ID verification
• Multi-factor authentication
• Passkeys
• Security phrase verification
• Other identity-verification tools

Unless clearly disclosed otherwise, we do not store fingerprint templates or facial templates directly. Device-based biometric authentication may be handled by the user’s device or operating system.

If we ever collect biometric identifiers, biometric templates, voiceprints, or similar biometric information directly, we will provide notice and obtain consent where required by law. We will use biometric data only for disclosed purposes, restrict access, retain it only as long as necessary or legally permitted, and delete it according to applicable retention requirements.

We may use cookies, pixels, scripts, SDKs, local storage, analytics tools, and similar technologies to:

• Operate websites
• Remember preferences
• Maintain sessions
• Secure accounts
• Measure website performance
• Understand traffic and usage
• Improve services
• Support marketing attribution where permitted
• Detect fraud or abuse

Some cookies are necessary for website operation. Others may be optional.

Where required, we will provide cookie choices and honor applicable opt-out signals, including legally recognized universal opt-out mechanisms.

We do not knowingly use tracking technologies to disclose protected health information to advertising or analytics vendors in a manner prohibited by HIPAA or applicable law.

We may share information with the following categories of recipients.

Service Providers and Processors

• Cloud hosting providers
• Database providers
• AI service providers
• Communication platforms
• Email providers
• SMS providers
• CRM systems
• Payment processors
• Analytics providers
• Security providers
• Scheduling tools
• Automation platforms
• Customer support tools
• Legal, accounting, compliance, and professional advisors

These vendors are authorized to process information only as needed to provide services to us or as otherwise permitted by law or contract.

Clients, Organizations, and Administrators

If you access our services through an employer, provider, client, pilot organization, recovery-support organization, behavioral-health organization, home-services company, property manager, or other organization, we may share information with that organization according to the applicable agreement, permissions, and service configuration.

Authorized Users and Representatives

• Account administrators
• Care coordinators
• Coaches
• Consultants
• Family representatives, if authorized
• Business representatives
• Legal representatives
• Vendors assigned to a work order
• Other users you invite or authorize

Legal, Safety, and Compliance Disclosures

We may disclose information if we believe it is reasonably necessary to:

• Comply with law
• Respond to subpoenas, warrants, court orders, or lawful requests
• Cooperate with regulators
• Enforce agreements
• Protect rights, safety, or property
• Investigate fraud, abuse, or security incidents
• Prevent harm
• Establish, exercise, or defend legal claims

Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, investment transaction, or similar business transaction, information may be disclosed or transferred as part of that transaction, subject to appropriate protections.

De-Identified, Aggregated, or Anonymized Data

We may create and use de-identified, aggregated, or anonymized information for analytics, product development, research, reporting, benchmarking, security, marketing, and business purposes.

We will not attempt to re-identify de-identified data except as permitted by law, such as to test de-identification methods or comply with legal requirements.

We do not sell sensitive personal information, consumer health data, protected health information, biometric data, voice recordings, recovery-support information, behavioral-health information, or wearable data.

We do not use sensitive personal information, consumer health data, protected health information, biometric data, recovery-support information, behavioral-health information, or wearable data for targeted advertising.

Some privacy laws define sale or sharing broadly to include certain advertising, analytics, or marketing technology activities. If our use of cookies, analytics, pixels, or advertising tools is considered a sale, sharing, or targeted advertising under applicable law, you may opt out.

We will provide a “Do Not Sell or Share My Personal Information” or equivalent mechanism where required.

We retain information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

• Provide services
• Maintain accounts
• Complete transactions
• Support users
• Comply with contracts
• Maintain business records
• Meet legal, tax, accounting, audit, or regulatory obligations
• Resolve disputes
• Enforce agreements
• Maintain security
• Improve services
• Protect legal rights

Retention periods vary depending on the type of information, service, contract, and legal requirements.

• Account information may be retained while an account remains active and for a reasonable period afterward.
• Transaction records may be retained as required for tax, accounting, and legal purposes.
• Security logs may be retained for security, audit, and fraud-prevention purposes.
• Coaching, wellness, behavioral, or recovery-support records may be retained according to the applicable service agreement, consent, legal requirement, or user request.
• Audio, video, transcripts, and AI logs may be retained according to the applicable service settings, consent, contract, and legal obligations.
• De-identified or aggregated data may be retained longer where permitted by law.

We may retain information longer when required or permitted by law, subject to a legal hold, needed to resolve disputes, or necessary to protect rights, safety, or security.

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, disclosure, or destruction.

Safeguards may include:

• Encryption in transit
• Encryption at rest where appropriate
• Access controls
• Role-based permissions
• Multi-factor authentication where appropriate
• Audit logs
• Secure cloud infrastructure
• Vendor review
• Confidentiality obligations
• Incident response processes
• Backups
• Monitoring
• Least-privilege access
• Segmented permissions
• Security reviews for sensitive workflows

No system is 100% secure. We cannot guarantee absolute security of any information transmitted to or stored by us.

You are responsible for keeping your login credentials secure and notifying us immediately if you believe your account has been compromised.

If we discover a security incident involving personal information, we will investigate and take appropriate steps based on the nature of the incident, the information involved, applicable law, contractual obligations, and risk of harm.

Where legally required, we will notify affected individuals, clients, regulators, covered entities, business partners, or other required parties.

If protected health information is involved and we are acting as a business associate, we will follow the applicable Business Associate Agreement and HIPAA breach-notification obligations.

If consumer health data is involved and a health breach notification law applies, we will comply with applicable notification obligations.

Depending on where you live and the nature of your interaction with us, you may have rights to:

• Access personal information
• Confirm whether we process your personal information
• Correct inaccurate information
• Delete personal information
• Obtain a portable copy of personal information
• Opt out of sale, sharing, targeted advertising, or certain profiling
• Limit use of sensitive personal information where applicable
• Withdraw consent where processing is based on consent
• Appeal a denied privacy request where required
• Request information about categories of third parties with whom information is shared
• Object to or restrict certain processing where applicable

To submit a request, contact us at info@sentientconnect.io with the subject line “Privacy Request.”

We may need to verify your identity before fulfilling a request. We may deny or limit requests where permitted by law, including where information is necessary for security, legal compliance, contract performance, fraud prevention, dispute resolution, or other lawful purposes.

We will not discriminate against you for exercising privacy rights.

Colorado residents may have the right to:

• Access personal data
• Correct inaccurate personal data
• Delete personal data
• Obtain a portable copy of personal data
• Opt out of targeted advertising
• Opt out of the sale of personal data
• Opt out of certain profiling
• Appeal a denied request

Where required, we will honor recognized universal opt-out mechanisms.

Colorado residents may submit privacy requests by emailing info@sentientconnect.io with the subject line “Colorado Privacy Request.”

If your request is denied, you may appeal by replying to our decision notice with the subject line “Colorado Privacy Appeal.”

California residents may have rights under California privacy law, including the right to:

• Know what personal information we collect, use, disclose, sell, or share
• Access personal information
• Delete personal information
• Correct inaccurate personal information
• Opt out of sale or sharing
• Limit use and disclosure of sensitive personal information where applicable
• Not be discriminated against for exercising privacy rights

We do not knowingly sell or share personal information of users under 16.

California residents may submit requests by emailing info@sentientconnect.io with the subject line “California Privacy Request.”

If required, we will provide a “Do Not Sell or Share My Personal Information” link or equivalent control.

If you are protected by a consumer health data law, you may have rights to:

• Confirm whether we collect, share, or sell consumer health data
• Access consumer health data
• Delete consumer health data
• Withdraw consent
• Receive a list of categories of consumer health data collected
• Receive a list of categories of sources
• Receive a list of categories of third parties or affiliates with whom consumer health data is shared
• Appeal a denied request where required

We do not sell consumer health data.

Submit consumer health data requests to info@sentientconnect.io with the subject line “Consumer Health Data Request.”

Our services are operated from the United States. If you access our services from outside the United States, your information may be processed in the United States or other countries that may not provide the same level of data protection as your home jurisdiction.

Where GDPR, UK GDPR, or similar laws apply, our legal bases for processing may include consent, performance of a contract, legitimate interests, legal obligation, vital interests, or public interest where applicable.

Depending on applicable law, you may have rights to:

• Access
• Rectification
• Erasure
• Restriction
• Portability
• Objection
• Withdrawal of consent
• Lodge a complaint with a supervisory authority

To submit an international privacy request, email info@sentientconnect.io with the subject line “International Privacy Request.”

Our services are not directed to children under 13.

We do not knowingly collect personal information from children under 13 without verifiable parental consent where required by law.

If we learn that we have collected personal information from a child under 13 without required consent, we will delete it or take other appropriate action.

Some services may be used by minors only with parent, guardian, school, provider, organization, or legally authorized consent where required.

If a parent or guardian believes a child has provided information to us without required consent, contact info@sentientconnect.io with the subject line “Child Privacy Request.”

Some services are provided to organizations, businesses, providers, pilot partners, or enterprise clients.

When an organization controls your access to our services, that organization may determine:

• What data is collected
• Who has access
• What reports are generated
• How long information is retained
• Whether data is exported
• Whether specific integrations are enabled
• Whether certain AI features are used

In those situations, we may act as a service provider, processor, contractor, business associate, or similar role. Privacy requests related to organization-controlled data may need to be directed to the organization that controls the account.

Our services may integrate with third-party platforms, including:

• CRM systems
• Email systems
• Calendar systems
• Payment processors
• Analytics tools
• Automation tools
• Cloud providers
• AI providers
• Voice and transcription providers
• Wearable or connected-device platforms
• Communication tools
• Scheduling systems
• Business software

Your use of third-party services may be subject to their own terms and privacy policies. We are not responsible for the privacy practices of third parties that we do not control.

If you submit testimonials, reviews, comments, images, logos, case studies, success stories, or feedback, we may use them with your permission or as otherwise permitted by law.

We will not publicly disclose sensitive health, wellness, behavioral, recovery, biometric, voice, or client-confidential information in testimonials or case studies without appropriate consent.

We may send marketing communications about our services, demos, updates, events, offers, or content where permitted by law.

You may opt out of marketing emails by using the unsubscribe link or contacting us at info@sentientconnect.io.

We may still send non-marketing communications, such as security, billing, legal, administrative, or service-related notices.

If you provide your phone number or email address, we may contact you regarding:

• Requested information
• Scheduling
• Service updates
• Account notices
• Support
• Billing
• Security
• Intake follow-up
• Demo access
• Operational workflows
• Marketing where permitted

Consent to marketing communications is not required to purchase services. Message and data rates may apply for SMS. You may opt out of SMS by replying STOP where supported.

We rely on users, clients, and organizations to provide accurate information.

You may request correction of inaccurate personal information by contacting info@sentientconnect.io with the subject line “Correction Request.”

AI-generated summaries, scores, or outputs may contain errors. You should review and correct important information before relying on it.

Do not submit sensitive information unless it is necessary for the service you are using and you are authorized to provide it.

This includes:

• Social Security numbers
• Government IDs
• Financial account numbers
• Medical records
• Therapy records
• Legal records
• Criminal history
• Biometric identifiers
• Precise location
• Children’s information
• Protected health information
• Information about other people without authorization

If a form, workflow, or contract specifically asks for sensitive information, provide only what is necessary.

We may disclose information in response to lawful requests, subpoenas, warrants, court orders, or legal processes.

Where permitted, we may review, limit, challenge, or object to requests that appear overbroad, improper, or unlawful.

We may preserve information if we believe it is necessary to comply with law, protect rights, respond to legal claims, or prevent harm.

We may update this Privacy Policy from time to time.

If we make material changes, we may notify users by posting the updated policy, updating the “Last Updated” date, sending notice, or using other appropriate methods.

Your continued use of the services after an updated Privacy Policy becomes effective means you acknowledge the updated policy.

For privacy questions, requests, appeals, or concerns, contact:

• We do not sell sensitive personal information.
• We do not sell consumer health data.
• We do not sell protected health information.
• We do not use consumer health data for targeted advertising.
• We do not use protected health information for targeted advertising.
• We do not use behavioral-health, recovery-support, biometric, voice, or wearable data for targeted advertising.
• We use AI to assist, not replace, human judgment.
• We treat wellness, behavioral, recovery, biometric, voice, wearable, and health-related data as sensitive.
• We honor legally required privacy rights.
• We use vendors only as needed to operate, secure, improve, and deliver the services.
• We maintain security safeguards, but no system can be guaranteed 100% secure.
• We will follow stricter written agreements, including Business Associate Agreements, where they apply.