Privacy policy

LAST MODIFIED: June 26, 2024

Click here to for our Privacy Policy in Spanish.

This Privacy Policy applies to K Health, Inc. and the personal information we collect, use, and disclose in connection with your use of our Services (as defined below) and other business interactions you have with us. Once you create an account, use our Symptom Checker, use the K Pharmacy services, or use the services of any other member of our Organized Health Care Arrangement (“OHCA”), all personal information you have provided us through your account while using the Services will also become subject to the OHCA’s joint HIPAA Notice of Privacy Practices. Our Privacy Policy and the Notice of Privacy Practices work together to inform you how we collect, use, and disclose your personal information and Protected Health Information (as defined by HIPAA).

If you are a resident of California, please click here for the Notice of Collection and more information.

If you are a resident of Connecticut, please click here for more information.

If you are a resident of Colorado, please click here for more information.

If you are a resident of Oregon, please click here for more information.

If you are a resident of Texas, please click here for more information.

If you are a resident of Utah, please click here for more information.

If you are a resident of Virginia, please click here for more information.

At K Health Inc. (“K,” the “Company,” “we,” or “us”), we want you to be familiar with how we collect, use, and disclose personal information. This Privacy Policy describes our practices in connection with personal information that we collect through our “Services,” which together, include:

Websites and mobile applications (each, an “App”) operated by us, which includes a Symptom Checker and other health related intakes, and any subsequent health care services you receive through the same (together, the “Platform”);
Email and text messages that we send to you or other communications with you; and
Offline business interactions you have with us.

We encourage you to read this Privacy Policy closely as it describes information about:

(1) what types of personal information do we collect?

(2) how we collect personal information

(3) how we use the personal information we collect

(4) when and with whom we share the information

(5) your choices regarding personal information

(6) information about online advertising

(7) third party services, including third party payment services

(8) retention

(9) security; and

(10) changes to this Privacy Policy

Contact Us: If anything in our privacy policy is unclear, or if you have any questions, please email us at [email protected].

Reproductive Health and Law Enforcement:

K Health supports access to reproductive health care services. K Health follows, to the extent applicable, the U.S. Department of Health and Human Services – Office for Civil Rights’ guidance applicable to disclosures of personal information relating to reproductive health care and will not disclose this information to state officials or law enforcement unless (i) we are compelled to do so by law, (ii) the request is enforceable under law, and (iii) we limit the disclosure to the minimum necessary to comply with law.

(1) What types of personal information do we collect?

We and our service providers may collect personal information in a variety of ways, including:

When accessing the Platform, we may collect certain basic information about your medical history, preferences, and goals before you create an account to become a patient. In addition to your medical history, this personal information may include your name, phone number, date of birth, gender, location, IP address, billing information (name, physical billing address, payment card information (collected by our third party payment processor) and transaction details), email address, insurance coverage, and in some instances, a copy of your driver’s license or other government-issued identification for identity verification purposes.
The Services also collect personal information such as browser and device information; App usage data; Information collected through cookies, pixel tags and other technologies, including tracking technologies; and demographic information and other information provided by you.
Sponsor Organizations. If an organization, such as your or your partner’s, spouse’s, or parent/guardian’s employer, university, or health plan (“Sponsor Organization”) offers coverage for access to or usage of the Services on your behalf, in addition to the information described above, use of the Services through a Sponsor Organization may require you to provide additional registration information. This information is collected to confirm your eligibility with the Sponsor Organization. Information collected under these circumstances may include, but not be limited to, name, email address, date of birth and phone number, member and/or group number. The information is required to confirm program or benefit eligibility, your specific benefits and to prevent insurance and benefit fraud.

(2) How we collect personal information

We need to collect personal information in order to provide our Services to you. If you do not provide the personal information requested, we may not be able to provide you with our Services.

Personal information you share with us directly. We collect the personal information you provide to us, for example, when you create an account, use our Services, or communicate with us. This may include personal information including information relating to your health. If you disclose any personal information relating to other people to us or to our service providers in connection with the Services, you represent that you have the authority to do so and to permit us to use the personal information in accordance with this Privacy Policy.
Personal information we collect automatically. When you visit or use our app or website, we may gather, collect, and record personal information about such visits. We do this ourselves or with the help of third parties, including through the use of “cookies” and other tracking technologies, as further detailed below. This personal information may include your IP address (which may also be associated with your domain name or the domain name of your internet service provider), data relating to your use and navigation of the Services, including as related to session replay technology, unique or online identifiers associated with your mobile device and use of the Platform and your geographical location.
Personal information you direct us to receive, including personal information we receive from third parties and social media. We may collaborate with third parties in connection with providing the Services and these third parties may provide us with personal information about you. For example, as set forth in our Terms of Service and Informed Consent, you consent for us to receive access to your prescription history in order to properly care for you and assess drug-interactions. Additionally, from time to time, we may receive personal information about you from other third parties (such as Apple’s HealthKit or Fitbit) if you have directed your information to be shared with us.
Your browser or device. Certain information is collected by most browsers or automatically through your device, such as your Media Access Control (MAC) address, computer type (Windows or Mac), screen resolution, operating system name and version, device manufacturer and model, language, Internet browser type and version and the name and version of the Services (such as the App) you are using.
Your use of the App and our website. When you download and use the Platform, we and our service providers may track and collect Platform usage data, such as the date and time the App on your device or your use of the website accesses our servers and what information and files have been downloaded to the App based on your device number.
Cookies. Cookies are pieces of information stored in the browser or on the device that you are using. Cookies allow the collection of personal information such as browser type, time spent on the Services, pages visited, language preferences, and other traffic data. We use this information for security purposes, to facilitate navigation, to display information more effectively, and to personalize your experience including to send you advertising, and to measure and analyze such activities. We also gather statistical and other information about use of the Services in order to continually improve their design and functionality, understand how they are used, and assist us with resolving questions regarding them. You may also wish to refer to http://www.allaboutcookies.org/manage-cookies/index.html. If, however, you do not accept cookies, you may experience some inconvenience in your use of the Services.
Pixel tags and other similar technologies. Pixel tags (also known as web beacons and clear GIFs) may be used to, among other things, track the actions of users of the Services (including email recipients), measure the success of our marketing campaigns, and compile statistics about usage of the Services and response rates. We may use third party pixel tags on some websites. Please refer to their privacy policies regarding their data use.
Analytics. We use data analytics providers that use cookies and similar technologies to collect and analyze personal information about use of the Services and report on activities and trends. The analytics service may also collect information regarding the use of other websites, apps, and online resources.
Location. We may collect the general or precise location of your device by, for example, using satellite, cell phone tower or WiFi signals. We may use your device’s location to provide you with location-based services and content, and you can adjust the permissions on your device to allow or deny such uses and/or sharing of your device’s location.

(3) How we use the personal information we collect:

We and our service providers use your personal information for the following purposes:

Providing the Services to you, including access to your account. Certain of our Services may be provided using our artificial intelligence models and tools, such as our artificial intelligence-enabled Symptom Checker.
To provide and coordinate your care.
To respond to your inquiries and fulfill your requests, when you contact us via one of our online contact forms or otherwise, for example, when you send us questions, suggestions, compliments or complaints, or other customer service requests, or when you request other information about our Services.
To complete your transactions and verify your information.
To send you changes to our terms, conditions, and policies.
To allow you to communicate with us through the Services if you choose to do so.
Το provide you with information about new services, news about us, and/or other marketing materials, and to determine the effectiveness of our promotional campaigns so we can adapt campaigns to the needs of users, and to facilitate social sharing.
To engage in marketing, advertising, and campaign management. We may disclose certain information that includes personal data to third-party advertising networks, social media platforms, sponsors and/or data analytics and measurement services, who may use this information for their own purposes.
Το analyze your personal information to improve the Services and the recommendations and information we provide our users and other third parties, including through the use of our artificial intelligence models. Specifically, we may use your personal information in order to improve our artificial intelligence models, so that we are constantly improving our services, products, and the information we provide our users. When you are using our Services, you are not only learning from our data, but our Services also learn from you and your experiences. Over the long term, this growing repository of health experiences and clinical decision-making will accelerate medical research and improve our understanding of human disease. Generally, the information we use for machine learning is aggregated and/or deidentified, and we take reasonable steps not to reidentify you individually unless permitted by law.
To analyze personal information for business reporting, including, providing personalized services, improve the efficiency of the Services, and to identify usage trends.
To better understand your preferences so that we can deliver content via our Services that we believe will be relevant and interesting to you.
Το aggregate and/or deidentify personal information so that it will no longer be considered personal information, and use and disclose this aggregated and/or de-identified information for any purpose not prohibited by law, including training our artificial intelligence models.
For audits, to verify that our internal processes function as intended and to address legal, regulatory, or contractual requirements;
For fraud prevention and fraud security monitoring purposes, for example, to detect and prevent cyberattacks or attempts to commit identity theft;
For developing new products and services, operating, and expanding our business activities, for example, understanding which parts of our Services are of most interest to our users so we can focus our energies on meeting our users’ interests;
For enhancing, improving, repairing, maintaining, or modifying our current products and services, as well as undertaking quality and safety assurance measures; and
For such other purposes we may notify you about or to which you consent.

(4) When and with whom we share your personal information:

We may share your personal information with third parties, including electronically, as follows:

Affiliates: We may share your personal information with our affiliates for the purposes described in this Privacy Policy.
Partners: We may share your personal information with other companies, such as companies with whom we jointly offer products and services, including third party payers and Sponsor Organizations.
Service Providers: We may share personal information with certain of our service providers, processors and others who perform functions on our behalf. These may include, for example, hosting and server services.
Social Media, Advertising, Analytics and Measurement Companies. We may use social media and advertising platforms to serve advertisements to you or to third parties that the advertising platform determines are similar to you. In order to offer these ads, we may share your personal information, such as email addresses or phone numbers, in hashed or unhashed format, with the advertising platform provider, which can match this information to a particular platform user. To deliver information about products and Services that may be of interest to you, we may share personal information with other companies, such as advertisers, analytics, and measurement providers. For example, we may share device-related data (such as unique identifier, type of device, IP address, Cookies and other information associated with your browsing and app usage) and individual preferences and characteristics (such as insights and inferences related to shopping patterns and behaviors). We also use analytics and measurement companies to analyze and measure our advertising activities.
Session Replay Recording: We may use session replay recording software, in order to better understand our users’ needs and to optimize the Services and experience.
Our Affiliated Clinicians and Pharmacy: When you use our Services that connect you with a clinician, we will share your personal information with our affiliated clinicians, other providers and/or pharmacy, in order for them to provide you care or coordinate your treatment. More about the treatment of this information is within the Notice of Privacy Practices of those organizations.
Third Party Services: We may provide options within the Services where you can receive additional services from a third party. If you choose to receive services from such third parties, then your personal information will be treated in accordance with those third parties’ privacy policies, and we are not responsible for their practices.
Information You Share Through Our Services: Our Services may enable you to share your personal information with others, including healthcare providers, friends, and contacts via social media, via our app or otherwise. Please use caution when sharing your personal information with others. The information you share will be shared according to your instructions and actions, and we have no control over what happens with your information once you share it with others.

We may also use and disclose your personal information as necessary or appropriate, in particular when we have a legal obligation to do so:

Applicable Law. We may share personal information to comply with applicable law and regulations, which may include laws outside your country of residence.
Transactions, Liquidation. We may share personal information with third parties in connection with a transaction, such as a merger, sale of company assets or shares, reorganization, financing, change of control or acquisition of all or a portion of our business, or in the event of a bankruptcy or related or similar proceedings. As part of such transactions, we may share certain of your personal information with lenders, auditors, and third-party advisors, including attorneys and consultants; in each case, these parties will be required to agree to confidentiality and non-disclosure terms relating to such personal information before being provided with access.
Public and Government Authorities, Law Enforcement. Where permitted or required by applicable data protection laws, we may disclose your personal information pursuant to a legal request, or in compliance with applicable laws, if we have good faith belief that the law requires us to do so, with or without notice to you.
Protecting Rights and Safety. Where permitted or required by law, we may share your personal information with others if we believe in good faith that it will help protect the rights, property, or personal safety of us, any of our users, or any member of the general public, with or without notice to you.
Aggregate and De-Identified Information. We may share and/or use aggregated or de-identified information about users with third parties for marketing, advertising, our business purposes, research, or any other purposes.

(5) Your choices regarding personal information:

Your choices regarding our use and disclosure of your personal information:

Notifications. We may send you push or SMS notifications and similar forms of communication from us, which you can control within the Services. If you choose to use our chat-based virtual visit, which is hosted by our service provider, you will receive notifications to your mobile device when your physician responds.
Marketing-related emails from us. If you no longer want to receive marketing related emails from us on a going-forward basis, you may opt out by contacting us via the Contact Us information above or opting out using the link in the bottom of the email. Opting out may prevent you from receiving notification including notices regarding updates, improvements, or offers. Please note that if you opt out of receiving marketing related emails from us, we may still send you important administrative messages about the Services, from which you cannot opt out.

(6) Information About Online Advertising

We use third-party advertising networks, data analytics providers, operating systems and platforms, and social networks to serve advertisements regarding goods and services that may be of interest to you.

These companies place or recognize a unique cookie on your browser (including through the use of pixel tags). They also use these technologies, along with information they collect about your online and offline use, to recognize you across the devices you use, such as a mobile phone and laptop. If you would like more information about this practice and to learn how to opt out from participating companies on your device and browsers on a particular device, please visit http://optout.aboutads.info/#/ and http://optout.networkadvertising.org/#/. You may download the AppChoices app at www.aboutads.info/appchoices to opt out from participating companies in mobile apps.

(7) Third-party Services, including Payment Service

This Privacy Policy does not address, and we are not responsible for, the privacy, information, or other practices of any third parties, including any third party operating any website or service to which our Services link. The inclusion of a link on our Services does not imply endorsement of the linked site or service by us.

In addition, we are not responsible for the information collection, use, disclosure, or security policies or practices of other organizations, such as any other app developer, app provider, social media platform provider, operating system provider, wireless service provider, or device manufacturer, including with respect to any personal information you disclose to other organizations through or in connection with our App or Website.

Our Services provide functionality allowing you to make payments using third-party payment services with which you have created your own account. When you use such a service to make a payment to us, your personal information will be collected by such third party and not by us, and will be subject to the third party’s privacy policy, rather than this Privacy Policy. We have no control over, and are not responsible for, this third party’s collection, use, and disclosure of your personal information.

(8) Retention

We will keep your personal information for as long as your user account is active, in order to allow you to have access to your information and to provide you with our services.

We may continue to retain your personal information even after you deactivate your user account or stop using the Services, as reasonably necessary to comply with our legal obligations, to resolve disputes regarding our users, enforce our agreements or protect our legitimate interests, consistent with applicable law.

(9) Security

We seek to use reasonable organizational, technical, and administrative measures to protect personal information within our organization. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure, please immediately notify us in accordance with the “Contact Us” section above.

(10) Changes to this Privacy Policy

This Privacy Policy is current as of the Effective Date set forth above. We may change this Privacy Policy from time to time, so please be sure to check back periodically. We will post any changes to this Privacy Policy on our Website and App.

Information for California Residents

Notice of Collection

Pursuant to the California Consumer Privacy Act of 2018 (“CCPA”), we are providing the following additional details regarding the categories of personal information that we collect, use, and disclose about California residents.

This notice does not address or apply to information or practices that are not subject to the CCPA, such as publicly available information; deidentified or aggregated information; certain health information governed by HIPAA and other state and federal laws; activities covered by the Fair Credit Reporting Act, and job applicant and employment information.

Categories of personal information

The following chart includes: (1) the categories of personal information, as listed in the CCPA, that we have collected within the preceding 12 months; and (2) the categories of third parties to which we disclosed personal information for our business purposes within the preceding 12 months.

Categories of personal information	Disclosed to Which Categories of Third Parties for Business Purposes
Identifiers, such as name, contact information, unique personal identifiers, and IP address that can reasonably be linked or associated with a particular consumer or household online identifiers.	Affiliated clinicians, pharmacy, and pharmacy providers; advisors and agents; regulators, government entities, and law enforcement; affiliates and subsidiaries; advertising networks; data analytics providers; social networks; internet service providers, operating systems, and platforms; and others as permitted by law.
Government Issued Identifiers, such as Social Security number, driver’s license number and other government issued identifiers	Affiliated clinicians, pharmacy, and pharmacy providers; advisors and agents; regulators, government entities, and law enforcement; affiliates and subsidiaries; and others as permitted by law.
personal information as defined in the California customer records law, such as name, contact information, signature; financial account number; insurance policy number; medical, insurance, financial, education and employment information; physical characteristics or description.	Affiliated clinicians, pharmacy, and pharmacy providers; advisors and agents; regulators, government entities, and law enforcement; affiliates and subsidiaries; and others as permitted by law.
Commercial Information, such as transaction information and purchase history, including purchases considered.	Affiliated clinicians, pharmacy, and pharmacy providers; advisors and agents; regulators, government entities, and law enforcement; affiliates and subsidiaries; advertising networks; data analytics providers; social networks; internet service providers, operating systems, and platforms; and others as permitted by law.
Internet or network activity information, such as browsing history, search history and interactions with our online properties or ads. Session replay software may be used to record and replay your interaction.	Affiliated clinicians, pharmacy, and pharmacy providers; advisors and agents; regulators, government entities, and law enforcement; affiliates and subsidiaries; advertising networks; data analytics providers; social networks; internet service providers; operating systems and platforms; and others as permitted by law.
Geolocation Data, such as non-precise or approximate location derived from IP address.	Affiliated clinicians, pharmacy, and pharmacy providers; advisors and agents; regulators, government entities, and law enforcement; affiliates and subsidiaries; internet service providers; operating systems and platforms; and others as permitted by law.
Audio, electronic, visual, thermal, olfactory, or similar information includes information collected via call recordings if you are interacting with us in a customer service capacity or if you call us on a recorded line, recorded meetings, events and webinars, videos, photograph and images, and CCTV or video footage to secure our offices and premises.	Affiliated clinicians, pharmacy, and pharmacy providers; advisors and agents; regulators, government entities, and law enforcement; affiliates and subsidiaries; internet service providers, operating systems and platforms; and others as permitted by law.
Inferences including inferences drawn from any of the information identified above to create a profile reflecting a consumer’s preferences, characteristics, behavior, or attitudes.	Affiliated clinicians, pharmacy, and pharmacy providers; affiliates and subsidiaries; advertising networks; data analytics providers; social networks; internet service providers; operating systems and platforms; and others as permitted by law
Sensitive personal information including, in limited circumstances, Social Security number, driver’s license number, state identification card number, passport number, a consumer’s racial or ethnic origin, and personal information collected and analyzed concerning a consumer’s health, sex life or sexual orientation.	Affiliated clinicians, pharmacy, and pharmacy providers; advisors and agents; regulators, government entities, and law enforcement; affiliates and subsidiaries; and others as permitted by law
Protected Class Information, such as characteristics of protected classifications under California or federal law, such as sex, age, gender, race, medical conditions, sexual orientation, gender identity and expression, and marital status.	Affiliated clinicians, pharmacy, and pharmacy providers; advisors and agents; regulators, government entities, and law enforcement; affiliates and subsidiaries; and others as permitted by law

Categories of personal information Sold or Shared. Although we do not monetize your personal information (e.g., we do not sell customer lists to other entities for money), we may disclose the following categories of personal information: non-governmental identifiers; commercial information; internet or other electric network activity information and inferences to the following categories of third parties: affiliated clinicians, pharmacy, and pharmacy providers; joint partners; advertising networks; internal service providers; data analytics providers; social networks; and operating systems and platforms; for purposes of marketing and advertising; analytics, measurement and improvement; and customization and personalization, which could be deemed to be a sale or sharing of personal information under the CCPA. You may opt-out of this sale or sharing as described below. We will not use or disclose sensitive personal information for purposes other than those specified in Section 7027(m). We treat the sensitive personal information, as defined by CCPA, that we collect as protected health information under HIPAA. Please see our Notice of Privacy Practices for more information. We do not knowingly sell the personal information of minors under 16 years of age.

Categories of Sources of personal information

As described in the “Categories of personal information” section above, we collect the categories of personal information from the following sources: you; affiliated clinicians, pharmacy, and pharmacy providers; advertising networks; data analytics providers; social networks; internet service providers; operating systems and platforms; advisors and agents; regulators, government entities, and law enforcement; affiliates and subsidiaries; and others as permitted by law.

Specific Business or Commercial Purpose for the Collection of personal information

As described in the “How We Use the personal information We Collect” section above, we may use this personal information to operate, manage, and maintain our business, to provide our products and Services, to fulfill your requests, and to accomplish our business purposes and objectives, including, for example, to: develop, improve, repair, and maintain our products and Services; personalize, advertise, and market our products and Services; conduct research, analytics, and data analysis; create aggregated and/or deidentified data; maintain our facilities and infrastructure; undertake quality and safety assurance measures; conduct risk and security control and monitoring; detect and prevent fraud; perform identity verification; perform accounting, audit, and other internal functions, such as internal investigations; comply with the law, legal process, and internal policies; maintain records; and exercise and defend legal claims.

Retention

We will keep your personal information for as long as your user account is active, in order to allow you to have access to your information and to provide you with our services. We may also continue to retain your personal information even after you deactivate your user account or stop using the Services, as reasonably necessary to comply with our legal obligations, for research purposes and to train our AI models, to resolve disputes regarding our users, enforce our agreements or protect our legitimate interests, consistent with applicable law.

Individual Rights

If you are a California resident, you have the following rights under the CCPA, subject to certain conditions and exceptions:

Right to Know/Access. You have the right to know what personal information we have collected about you, including:

The categories of personal information;
The categories of sources from which we collected such personal information;
The business or commercial purpose for collecting, selling, or sharing personal information;
The categories of third parties to whom we disclosed personal information; and
The specific pieces of personal information we have collected about you.

Right to Delete. You have the right to delete personal information we collected from you, subject to certain exceptions.

Right to Correct Inaccurate personal information. You have the right to correct inaccurate personal information that we maintain about you.

Right to Opt-out of Selling or Sharing personal information. You have the right to opt-out of the sale or sharing of your personal information by us. To exercise this right, please click the “Your Privacy Choices” link. We also honor your right to opt out of sales and sharing as signaled by a universal opt out signal or Global Privacy Control (“GPC”). To enable GPC, you can visit the Global Privacy Control page at https://globalprivacycontrol.org. If you download a supported browser or extension and exercise your privacy rights with GPC, we will turn off third-party advertising cookies on our Website once our Website detects a GPC signal. If you visit our Website from a different device or from a different browser on the same device, you will need to opt-out, or use an opt-out preference signal, for that browser and/or device.

Right to be Free from Discriminatory Treatment or Retaliation. You have the right to be free from unlawful discriminatory treatment or retaliation for exercising your rights under the CCPA.

How to Exercise Your Privacy Rights and What to Expect

To make a request to exercise any of the rights listed above, please contact us by email at [email protected] or write to us at Privacy Office, 387 Park Ave South, 9th Floor, NY, NY 10016. We will verify and respond to your request consistent with applicable law, taking into account the type and sensitivity of the personal information subject to the request. Note the following:

We may require you to log into the Services to verify your identity. Depending on the nature of your request, we may request additional personal information from you, such as your K ID number, in order to verify your identity and protect against fraudulent requests.
If you maintain a password-protected account with us, we may verify your identity through our existing authentication practices for your account and require you to re-authenticate yourself before disclosing or deleting your personal information.
If you make a Request to Delete, we may ask you to confirm your request before we delete your personal information.

If you want to make request as an authorized agent on behalf of a California resident, you may use the submission methods noted above. As part of our verification process, we may request that you provide, as applicable, proof concerning your status as an authorized agent. If you are an authorized agent, we may also require the resident to:

Verify the resident’s own identity directly with us; or
Directly confirm with us that the resident provided you permission to make the request.

No Financial Incentives

Under the CCPA, the purpose of the Notice of Financial Incentive is to explain the material terms of a financial incentive or price or service difference the business is offering so that the consumer may make an informed decision
about whether to participate. We do not offer any financial incentives or price or service difference at this time.

This California Privacy Policy was last updated on June 26, 2024.

Notice to Virginia Residents

Introduction

This Privacy Addendum for Virginia Residents (the “Virginia Privacy Addendum”) supplements the information contained in K Health, Inc.’s (“K Health” or “we” or “us”) Privacy Policy above and further describes our collection and use of personal information (as defined below). This Virginia Privacy Addendum applies solely to all visitors, users, and others who reside in Virginia (“Consumers” or “you”). We adopt this Virginia Privacy Addendum to comply with the Virginia Consumer Data Protection Act (“VCDPA”), and any terms defined in the VCDPA have the same meaning when used in this Virginia Privacy Addendum. We may update this Virginia Privacy Addendum at any time as necessary in the event of changes to the VCDPA.

This Virginia Privacy Addendum applies to information that we collect through our “Services,” as described in our Privacy Policy above that is linked or reasonably linkable to an identified or identifiable natural person (“personal information”). However, publicly available information that we collect from government records and deidentified data (when deidentified as described in the VCDPA) are not considered personal information under the VCDPA and this Virginia Privacy Addendum does not apply to such information. This Virginia Privacy Addendum also does not apply to protected health information covered by the Health Insurance Portability and Accountability Act (“HIPAA”) or information collected or otherwise processed by K Health when K Health acts as a business associate of HIPAA covered entities.

Personal Information We Collect and Share

The following chart outlines the personal information that we may collect about you and the categories of third parties to whom we may disclose your personal information.

Personal Information We Collect	Categories of Third Parties to Whom We Share Personal Information
Identifiers, such as name, contact information, signature, unique personal identifiers, and IP address that can reasonably be linked or associated with a particular consumer or household online identifiers, physical characteristics or description.	Affiliated clinicians, pharmacy, and pharmacy providers; regulators, government entities, and law enforcement; advertising networks; data analytics providers; social networks; internet service providers, operating systems, and platforms; and others as permitted by law.
Government Issued Identifiers, such as Social Security number, driver’s license number and other government issued identifiers	Affiliated clinicians, pharmacy, and pharmacy providers; regulators, government entities, and law enforcement; and others as permitted by law.
Education or Employment Information, such as education information and employment information.	Regulators, government entities, and law enforcement; and others as permitted by law.
Commercial Information, such as transaction information and purchase history, including purchases considered.	Regulators, government entities, and law enforcement; advertising networks; data analytics providers; social networks; internet service providers, operating systems, and platforms; and others as permitted by law.
Medical, Health or Insurance Information, such as insurance policy number, medical information, or insurance information.	Affiliated clinicians, pharmacy, and pharmacy providers; regulators, government entities, and law enforcement; and others as permitted by law.
Financial or Payment Information, such as financial account number.	Affiliated clinicians, pharmacy, and pharmacy providers; regulators, government entities, and law enforcement; and others as permitted by law.
Internet or network activity information, such as browsing history, search history and interactions with our online properties or ads. Session replay software may be used to record and replay your interaction.	Affiliated clinicians, pharmacy, and pharmacy providers; regulators, government entities, and law enforcement; advertising networks; data analytics providers; social networks; internet service providers; operating systems and platforms; and others as permitted by law.
Geolocation Data, such as non-precise or approximate location derived from IP address.	Affiliated clinicians, pharmacy, and pharmacy providers; regulators, government entities, and law enforcement; internet service providers; operating systems and platforms; and others as permitted by law.
Audio, electronic, visual, thermal, olfactory, or similar information, includes information collected via call recordings if you are interacting with us in a customer service capacity or if you call us on a recorded line, recorded meetings, events and webinars, videos, photographs and images, and CCTV or video footage to secure our offices and premises.	Affiliated clinicians, pharmacy, and pharmacy providers; regulators, government entities, and law enforcement; internet service providers, operating systems and platforms; and others as permitted by law.
Inferences, including inferences drawn from any of the information identified above to create a profile reflecting a consumer’s preferences, characteristics, behavior, or attitudes.	Affiliated clinicians, pharmacy, and pharmacy providers; advertising networks; data analytics providers; social networks; internet service providers; operating systems and platforms; and others as permitted by law.
Sensitive Personal data, including, in limited circumstances, a consumer’s racial or ethnic origin, data revealing mental or physical health condition or diagnosis, sex life, or sexual orientation.	Affiliated clinicians, pharmacy, and pharmacy providers; regulators, government entities, and law enforcement; and others as permitted by law.
Protected Class Information, such as characteristics of protected classifications under federal law, such as sex, age, gender, race, medical conditions, sexual orientation, gender identity and expression, and marital status.	Affiliated clinicians, pharmacy, and pharmacy providers; regulators, government entities, and law enforcement; and others as permitted by law.

K Health will not collect additional categories of personal information without providing you notice.

Sources of Personal data

We collect the categories of personal information listed above from the following sources: you; advertising networks; data analytics providers; social networks; internet service providers; operating systems and platforms; advisors and agents; regulators, government entities, and law enforcement; affiliates and subsidiaries; and others as permitted by law.

Processing of Your Personal data

We limit the collection of personal information to what is adequate, relevant, and reasonably necessary in relation to the purposes for which the personal information is processed. We may process the personal information we collect, for one or more of the purposes described in the Privacy Policy (for more information, see How we use the personal information we collect). We will not process personal information for purposes that are neither reasonably necessary to nor compatible with the purposes for which the personal information is processed as described in the Privacy Policy without your consent.

In addition, where applicable, we will obtain your express, affirmative consent before processing any Sensitive Personal data.

We do not knowingly process the personal information of minors under 13 years of age without parental or lawful guardian consent.

Sale of Personal Information

We do not “sell” your personal information as the term is defined under the VCDPA as the “exchange of personal information for monetary consideration by the controller to a third party.”

Your Rights and Choices

The VCDPA provides Virginia residents with specific rights regarding their personal information. This section describes your VCDPA rights and explains how to exercise those rights. You may exercise these rights yourself or through your Authorized Agent. For more information on how you or your Authorized Agent can exercise your rights, please see Exercising Your VCDPA Privacy Rights.

Confirmation and Access. You have the right to confirm whether we process your personal information and to request access to that personal information we have collected and maintain about you except that we will not confirm or provide personal information that we believe would disclose our trade secrets. You may exercise this right as described below.
Correction. You have the right to correct any inaccuracies in your personal information processed by us, taking into account the nature of the personal information and the purposes of the processing of your personal information. We may also not be able to accommodate your request to change the personal information if we believe it would violate any law or legal requirement or cause the personal information or the information associated with the personal information to be incorrect.
Deletion. You have the right to request that we delete all of your personal information. We cannot delete your personal information except by also deleting your user account, however we may not accommodate a request to erase your personal information if we believe the deletion would violate any law or legal requirement or cause any information associated with the personal information to be incorrect.
Portability. To the extent you provide us with your personal information and to the extent we process your personal information, you have the right to request that we provide you a copy of, or access to, all or part of such personal information in portable, and to the extent technically feasible, readily usable format that allows you to transmit the personal information to another controller without hindrance. We shall not provide data that we believe would disclose our trade secrets.
Right to Opt-Out of Certain Processing. To the extent applicable, you have the right to opt-out of processing your personal information for the purposes of: (i) targeted advertising; (ii) the sale of your personal information; or (iii) profiling in furtherance of solely automated decisions that produce legal or similarly significant effects concerning the consumer. These decisions include decisions that result in the provision or denial by the controller of financial or lending services, housing, insurance, education enrollment or opportunity, criminal justice, employment opportunities, health care services or access to essential goods or services. For more information on how to Opt-Out, please see Your Privacy Choices.

Please note, however, that K Health does not sell personal information nor process personal information for purposes of targeted advertising or profiling within the meaning of the VCDPA.

Exercising Your VCDPA Privacy Rights

To exercise the rights described above, please submit a request (a “Consumer Request”) to us by either:

Emailing us at [email protected]
Writing to us at Privacy Office, 387 Park Avenue South, 9th Floor, NY, NY 10016
Visiting www.khealth.com

Personal data provided in response to a request to exercise these rights may be provided free of charge twice per Virginia resident during any twelve-month period. Only you, or your Authorized Agent that you authorize to act on your behalf, may make a Consumer Request related to your personal information. If applicable, you may also make a Consumer Request on behalf of your minor child. To designate an Authorized Agent, see Authorized Agents below.

All Consumer Requests must:

Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an Authorized Agent of such a person. This may include:
- Verifying personal information that we may already have about you, such as your name, address, telephone number, and/or other similar information.
Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We are unable to fulfill your request or provide you with personal information if we cannot authenticate that the personal information that is the subject of your request relates to you through commercially reasonable efforts. In this case, we may request additional information, which we will only use to authenticate you.

Making a verifiable consumer request does not require you to create a password-protected, online account with us. However, if you do have such an account, we may require you to use it in order to make your request. Doing so will enable us to consider your requests through that account to authenticate that the personal information that is the subject of your request relates to you.

Response Timing and Format

We will generally process these requests within 45 days of its receipt. If we require more time (up to 45 additional days), we will inform you of the reason and extension period in writing. If we cannot comply with your request, we will provide you with an explanation of the reasons we cannot comply with a request.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Appeals Process

You may appeal a refusal by us to take action on your request to exercise any of the above rights within a reasonable period of time after we provide you notice of such refusal by contacting us through the contact information listed below. Within 60 days after we receive your appeal, we will inform you in writing of any action taken or not taken in response to your appeal, including any explanations for the reasons for the decision. If your appeal is denied, you may lodge a complaint with the Virginia Attorney General through their contact information available at: https://www.oag.state.va.us/contact-us/contact-info.

Non-Discrimination

We will not discriminate against you for exercising any of your VCDPA rights. Unless permitted by the VCDPA, we will not:

Deny you goods or services.
Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
Provide you a different level or quality of goods or services.

However, we may offer you certain financial incentives permitted by the VCDPA that can result in different prices, rates, quality levels, or selection of goods and services (including the possibility of offering our Services for no fee), if you have exercised your rights to opt-out of certain processes as described above or if the offer is related to your voluntary participation in a bona fide loyalty, rewards, premium features, discounts, or club card program.

Authorized Agents

You may authorize your agent to exercise your rights under the VCDPA. We may request that your Authorized Agent submit proof of identity and that they have been authorized to exercise your rights on your behalf. We may deny a request from your Authorized Agent to exercise your rights on your behalf if they fail to submit adequate proof of identity or adequate proof that they have the authority to exercise your rights.

Personal data of Children

K Health understands the importance of protecting children’s privacy in the interactive online world. K Health’s Platform and Services are not designed for, or intentionally targeted at, children under 13 years of age. It is not our policy to intentionally collect or maintain information about anyone under the age of 13 without appropriate parental or guardian consent. No one under the age of 13 should submit any personal information on our Website or App, and if we learn that we have collected or received personal information from a child under 13 without appropriate parental or guardian consent, we will delete that information. If you are the parent or guardian of a child under 13 years of age whom you believe might have provided us with their personal information without your consent, you may contact us to request the personal information be deleted.

Changes to This Virginia Privacy Addendum

K Health reserves the right to amend this Virginia Privacy Addendum at our discretion and at any time. When we make changes to this Virginia Privacy Addendum, we will post the updated addendum on the Platform and update the addendum’s effective date.

Your continued use of our Platform and Services following the posting of changes constitutes your acceptance of such changes.

Contact Information

If you have any questions or comments about this Virginia Privacy Addendum, the ways in which K Health collects and uses your information, your choices and rights regarding such use, or wish to exercise your rights under Virginia law, please do not hesitate to contact us at:

K Health, Inc.
Website: www.khealth.com
Email: [email protected]

Postal Address:
K Health, Inc.
Privacy Office
387 Park Avenue South, 9^th Floor
NY, NY 10016

This notice for Virginia residents was last updated on June 26, 2024.

Notice to Connecticut Residents

Introduction

This Privacy Addendum for Connecticut Residents (the “Connecticut Privacy Addendum”) supplements the information contained in K Health, Inc.’s (“K Health” or “we” or “us”) Privacy Policy above and further describes our collection and use of personal information (as defined below). This Connecticut Privacy Addendum applies solely to all visitors, users, and others who reside in Connecticut (“Consumers” or “you”). We adopt this Connecticut Privacy Addendum to comply with the Connecticut Data Protection Act (“CTDPA”) and any terms defined in the CTDPA have the same meaning when used in this Connecticut Privacy Addendum. We may update this Connecticut Privacy Addendum at any time as necessary in the event of changes to the CTDPA.

This Connecticut Privacy Addendum applies to information that we collect through our “Services,” as described in our Privacy Policy above that is linked or reasonably linkable to an identified or identifiable individual (“personal information”). However, publicly available information that we collect from government records and deidentified data (when deidentified as described in the CTDPA) are not considered personal information under the CTDPA and this Connecticut Privacy Addendum does not apply to such information. This Connecticut Privacy Addendum also does not apply to protected health information covered by the Health Insurance Portability and Accountability Act (“HIPAA”) or information collected or otherwise processed by K Health when K Health acts as a business associate of HIPAA covered entities.

Personal Information We Collect and Disclose About You

The following chart outlines the personal information that we may collect about you and the categories of third parties to whom we may disclose your personal information.

Personal Information We Collect	Categories of Third Parties to Whom We Disclose Personal Information
Identifiers, such as name, contact information, signature, unique personal identifiers, and IP address that can reasonably be linked or associated with a particular consumer or household online identifiers, physical characteristics or description.	Affiliated clinicians, pharmacy, and pharmacy providers; advisors and agents; regulators, government entities, and law enforcement; advertising networks; data analytics providers; social networks; internet service providers, operating systems, and platforms; and others as permitted by law.
Government Issued Identifiers, such as Social Security number, driver’s license number and other government issued identifiers	Affiliated clinicians, pharmacy, and pharmacy providers; advisors and agents; regulators, government entities, and law enforcement; and others as permitted by law.
Education or Employment Information, such as education information and employment information.	Advisors and agents; regulators, government entities, and law enforcement; and others as permitted by law.
Commercial Information, such as transaction information and purchase history, including purchases considered.	Advisors and agents; regulators, government entities, and law enforcement; advertising networks; data analytics providers; social networks; internet service providers, operating systems, and platforms; and others as permitted by law.
Medical, Health or Insurance Information, such as insurance policy number, medical information, or insurance information.	Affiliated clinicians, pharmacy, and pharmacy providers; advisors and agents; regulators, government entities, and law enforcement; and others as permitted by law.
Financial or Payment Information, such as financial account number.	Affiliated clinicians, pharmacy, and pharmacy providers; advisors and agents; regulators, government entities, and law enforcement; and others as permitted by law.
Internet or network activity information, such as browsing history, search history and interactions with our online properties or ads. Session replay software may be used to record and replay your interaction.	Affiliated clinicians, pharmacy, and pharmacy providers; advisors and agents; regulators, government entities, and law enforcement; advertising networks; data analytics providers; social networks; internet service providers; operating systems and platforms; and others as permitted by law.
Geolocation Data, such as non-precise or approximate location derived from IP address.	Affiliated clinicians, pharmacy, and pharmacy providers; advisors and agents; regulators, government entities, and law enforcement; internet service providers; operating systems and platforms; and others as permitted by law.
Audio, electronic, visual, thermal, olfactory, or similar information includes information collected via call recordings if you are interacting with us in a customer service capacity or if you call us on a recorded line, recorded meetings, events and webinars, videos, photograph and images, and CCTV or video footage to secure our offices and premises.	Affiliated clinicians, pharmacy, and pharmacy providers; advisors and agents; regulators, government entities, and law enforcement; internet service providers, operating systems and platforms; and others as permitted by law.
Inferences including inferences drawn from any of the information identified above to create a profile reflecting a consumer’s preferences, characteristics, behavior, or attitudes.	Affiliated clinicians, pharmacy, and pharmacy providers; affiliates and subsidiaries; advertising networks; data analytics providers; social networks; internet service providers; operating systems and platforms; and others as permitted by law.
Sensitive Personal Information including, in limited circumstances, a consumer’s racial or ethnic origin, data revealing mental or physical health condition or diagnosis, sex life, or sexual orientation, and consumer health data.	Affiliated clinicians, pharmacy, and pharmacy providers; advisors and agents; regulators, government entities, and law enforcement; and others as permitted by law.
Protected Class Information, such as characteristics of protected classifications under federal law, such as sex, age, gender, race, medical conditions, sexual orientation, gender identity and expression, and marital status.	Affiliated clinicians, pharmacy, and pharmacy providers; advisors and agents; regulators, government entities, and law enforcement; and others as permitted by law.

K Health will not collect additional categories of personal information without providing you notice.

Sources of Personal Information

Processing of Your Personal Information

We limit the collection of personal information to what is adequate, relevant, and reasonably necessary in relation to the purposes for which the personal information is processed. We may process the personal information we collect, for one or more of the purposes described in the Privacy Policy (for more information, see How We Use the personal information We Collect). We will not process personal information for purposes that are neither reasonably necessary to nor compatible with the purposes for which the personal information is processed as described in the Privacy Policy without your consent.

In addition, where applicable, we will obtain your express, affirmative consent before processing any Sensitive Personal Information.

We do not knowingly process the personal information of minors under 13 years of age without parental or lawful guardian consent.

Sale of Personal Information

The CTDPA defines the sale of personal information as the “exchange of personal data for monetary or other valuable consideration by the controller to a third party.” Although we do not monetize your personal information, we may disclose the following categories of personal information:

non-governmental identifiers;
commercial information;
internet or other electric network activity information and inferences

to the following categories of third parties:

affiliated clinicians, pharmacy, and pharmacy providers;
joint partners;
advertising networks;
internal service providers;
data analytics providers;
social networks; and
operating systems and platforms

for purposes of marketing and advertising; analytics, measurement and improvement; and customization and personalization, which could be deemed to be a sale of personal information under the CTDPA. You may opt-out of certain sales as described below. Please note that we may provide personal information to our processors that perform services for us pursuant to a contract; the right to opt-out does not limit our ability to provide personal information to these processors.

Your Rights and Choices

The CTDPA provides Connecticut residents with specific rights regarding their personal information. This section describes your CTDPA rights and explains how to exercise those rights. You may exercise these rights yourself or through your Authorized Agent. For more information on how you or your Authorized Agent can exercise your rights, please see Exercising Your CTDPA Privacy Rights.

Confirmation and Access. You have the right to confirm whether we process your personal information and to request access to that personal information we have collected and maintain about you except that we will not confirm or provide personal information that we believe would disclose our trade secrets. You may exercise this right as described below.
Correction. You have the right to correct any inaccuracies in your personal information processed by us, taking into account the nature of the personal information and the purposes of the processing of your personal information. We may also not be able to accommodate your request to change the personal information if we believe it would violate any law or legal requirement or cause the personal information or the information associated with the personal information to be incorrect.
Deletion. You have the right to request that we delete all of your personal information. We cannot delete your personal information except by also deleting your user account, however we may not accommodate a request to erase your personal information if we believe the deletion would violate any law or legal requirement or cause any information associated with the personal information to be incorrect.
Portability. To the extent you provide us with your personal information and to the extent we process your personal information, you have the right to request that we provide you a copy of, or access to, all or part of such personal information in portable, and to the extent technically feasible, readily usable format that allows you to transmit the personal information to another controller without hindrance. We shall not provide data that we believe would disclose our trade secrets.
Opt-Out of Certain Processing. To the extent applicable, you have the right to opt-out of processing your personal information for the purposes of: (i) targeted advertising; (ii) the sale of your personal information; or (iii) profiling in furtherance of solely automated decisions that produce legal or similarly significant effects concerning the consumer. These decisions include decisions that result in the provision or denial by the controller of financial or lending services, housing, insurance, education enrollment or opportunity, criminal justice, employment opportunities, health care services or access to essential goods or services. For more information on how to Opt-Out, please see How You May Opt-Out of the Sale of Your Personal Information and Your Privacy Choices.

Please note, however, that K Health does not process personal information for purposes of targeted advertising or profiling within the meaning of the CTDPA.

Exercising Your CTDPA Privacy Rights

To exercise the rights described above, please submit a request (a “Consumer Request”) to us by either:

Emailing us at [email protected]
Writing to us at Privacy Office, 387 Park Ave South, 9th Floor, NY, NY 10016
Visiting www.khealth.com

Personal information provided in response to a request to exercise these rights may be provided free of charge once per Connecticut resident during any twelve-month period. Only you, or your Authorized Agent that you authorize to act on your behalf, may make a Consumer Request related to your personal information. If applicable, you may also make a Consumer Request on behalf of your minor child. To designate an Authorized Agent, see Authorized Agents below.

All Consumer Requests must:

Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an Authorized Agent of such a person. This may include:
- Verifying personal information that we may already have about you, such as your name, address, telephone number, and/or other similar information.
Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

Response Timing and Format

Appeals Process

Within 60 days after we receive your appeal, we will inform you in writing of any action taken or not taken in response to your appeal, including any explanations for the reasons for the decision. If your appeal is denied, you may lodge a complaint with the Connecticut Attorney General through their contact information available at: www.portal.ct.gov/AG/Contact-the-Attorney-Generals-Office/Contact-the-Attorney-Generals-Office.

Non-Discrimination

We will not discriminate against you for exercising any of your CTDPA rights. Unless permitted by the CTDPA, we will not:

Deny you goods or services.
Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
Provide you a different level or quality of goods or services.

However, we may offer you certain financial incentives permitted by the CTDPA that can result in different prices, rates, quality levels, or selection of goods and services (including the possibility of offering our Services for no fee), if you have exercised your rights to opt-out of certain processes as described above or if the offer is related to your voluntary participation in a bona fide loyalty, rewards, premium features, discounts, or club card program.

Authorized Agents

You may authorize your agent to exercise your rights under the CTDPA. We may request that your Authorized Agent submit proof of identity and that they have been authorized exercise your rights on your behalf. We may deny a request from your Authorized Agent to exercise your rights on your behalf if they fail to submit adequate proof of identity or adequate proof that they have the authority to exercise your rights.

How You May Opt-Out of the Sale of Your Personal Information

To exercise the right to opt-out of the “sale” or exchange of your personal information for monetary or other valuable consideration, you (or your authorized representative) may submit a request to us via the link below or by setting your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. However, if you do not consent to our use of cookies or select this setting you may be unable to access certain features or parts of our Services or other websites. You can find more information about cookies at http://www.allaboutcookies.org and http://youronlinechoices.eu.

Your Privacy Choices

You do not need to create an account with us to exercise your opt-out rights. You may be required to provide us with additional contact information so that we may verify your request. We will only use personal information provided in an opt-out request to review and comply with the request.

Privacy Control Signals

You may also exercise your right to opt out of the “sale” of your personal information for the purposes of targeted advertising by setting the privacy control signal on your operating system, if your mobile operating system supports it. We currently recognize and support the following privacy signals sent by mobile operating systems:

Global privacy control (for more information on how to configure your mobile operating system to send this signal, please see https://globalprivacycontrol.org/).

When we receive one of these privacy control signals, we will opt you out of any further “sales” of your personal information when you interact with our Platform through that mobile device. We are only able to propagate your choice to opt-out to your account if you are currently logged in when we receive the privacy control signal from your mobile device. When we are able to propagate your choice to your account, you will be opted out of “sale” of your personal information on all devices on which you are logged in, and for both online and offline “sales.”

Personal Information of Children

Changes to This Connecticut Privacy Addendum

K Health reserves the right to amend this Connecticut Privacy Addendum at our discretion and at any time. When we make changes to this Connecticut Privacy Addendum, we will post the updated addendum on the Platform and update the addendum’s effective date.

Your continued use of our Platform and Services following the posting of changes constitutes your acceptance of such changes.

Contact Information

If you have any questions or comments about this Connecticut Privacy Addendum, the ways in which K Health collects and uses your information, your choices and rights regarding such use, or wish to exercise your rights under Connecticut law, please do not hesitate to contact us at:

K Health, Inc.

Website: www.khealth.com

Email: [email protected]

Postal Address: K Health, Inc.

Privacy Office,

387 Park Ave South, 9th Floor

NY, NY 10016

This notice for Connecticut residents was last updated on June 26, 2024.

Notice to Colorado Residents

Introduction

This Privacy Addendum for Colorado Residents (the “Colorado Privacy Addendum”) supplements the information contained in K Health, Inc.’s (“K Health” or “we” or “us”) Privacy Policy above and further describes our collection and use of personal information (as defined below). This Colorado Privacy Addendum applies solely to all visitors, users, and others who reside in the State of Colorado (“Consumers” or “you”). We adopt this Colorado Privacy Addendum to comply with the Colorado Privacy Act (“CPA”), and any terms defined in the CPA have the same meaning when used in this Colorado Privacy Addendum. We may update this Colorado Privacy Addendum at any time as necessary in the event of changes to the CPA.

This Colorado Privacy Addendum applies to information that we collect through our “Services,” as described in our Privacy Policy above that is linked or reasonably linkable to an identified or identifiable individual (“personal information”). However, publicly available information that we collect from government records and deidentified data (when deidentified as described in the CPA) are not considered personal information under the CPA and this Colorado Privacy Addendum does not apply to such information. This Colorado Privacy Addendum also does not apply to protected health information covered by the Health Insurance Portability and Accountability Act (“HIPAA”), which will generally include information collected by K Health when K Health acts as a business associate of covered entities.

Personal Information We Collect and Disclose About You

The following chart outlines the personal information that we may collect about you and the categories of third parties to whom we may disclose your personal information.

Personal Information We Collect	Categories of Third Parties to Whom We Disclose Personal Information
Identifiers, such as name, contact information, signature, unique personal identifiers, and IP address that can reasonably be linked or associated with a particular consumer or household online identifiers, physical characteristics or description.	Affiliated clinicians, pharmacy, and pharmacy providers; advisors and agents; regulators, government entities, and law enforcement; advertising networks; data analytics providers; social networks; internet service providers, operating systems, and platforms; and others as permitted by law.
Government Issued Identifiers, such as Social Security number, driver’s license number and other government issued identifiers	Affiliated clinicians, pharmacy, and pharmacy providers; advisors and agents; regulators, government entities, and law enforcement; and others as permitted by law.
Education or Employment Information, such as education information and employment information.	Advisors and agents; regulators, government entities, and law enforcement; and others as permitted by law.
Commercial Information, such as transaction information and purchase history, including purchases considered.	Advisors and agents; regulators, government entities, and law enforcement; advertising networks; data analytics providers; social networks; internet service providers, operating systems, and platforms; and others as permitted by law.
Medical, Health or Insurance Information, such as insurance policy number, medical information, or insurance information.	Affiliated clinicians, pharmacy, and pharmacy providers; advisors and agents; regulators, government entities, and law enforcement; and others as permitted by law.
Financial or Payment Information, such as financial account number.	Affiliated clinicians, pharmacy, and pharmacy providers; advisors and agents; regulators, government entities, and law enforcement; and others as permitted by law.
Internet or network activity information, such as browsing history, search history and interactions with our online properties or ads. Session replay software may be used to record and replay your interaction.	Affiliated clinicians, pharmacy, and pharmacy providers; advisors and agents; regulators, government entities, and law enforcement; advertising networks; data analytics providers; social networks; internet service providers; operating systems and platforms; and others as permitted by law.
Geolocation Data, such as non-precise or approximate location derived from IP address.	Affiliated clinicians, pharmacy, and pharmacy providers; advisors and agents; regulators, government entities, and law enforcement; internet service providers; operating systems and platforms; and others as permitted by law.
Audio, electronic, visual, thermal, olfactory, or similar information includes information collected via call recordings if you are interacting with us in a customer service capacity or if you call us on a recorded line, recorded meetings, events and webinars, videos, photograph and images, and CCTV or video footage to secure our offices and premises.	Affiliated clinicians, pharmacy, and pharmacy providers; advisors and agents; regulators, government entities, and law enforcement; internet service providers, operating systems and platforms; and others as permitted by law.
Inferences including inferences drawn from any of the information identified above to create a profile reflecting a consumer’s preferences, characteristics, behavior, or attitudes.	Affiliated clinicians, pharmacy, and pharmacy providers; affiliates and subsidiaries; advertising networks; data analytics providers; social networks; internet service providers; operating systems and platforms; and others as permitted by law.
Sensitive Personal Information including, in limited circumstances, Social Security number, driver’s license number, state identification card number, passport number, a consumer’s racial or ethnic origin, and personal information collected and analyzed concerning a consumer’s health, sex life or sexual orientation.	Affiliated clinicians, pharmacy, and pharmacy providers; regulators, government entities, and law enforcement; affiliates and subsidiaries; and others as permitted by law.
Protected Class Information, such as characteristics of protected classifications under federal law, such as sex, age, gender, race, medical conditions, sexual orientation, gender identity and expression, and marital status.	Affiliated clinicians, pharmacy, and pharmacy providers; regulators, government entities, and law enforcement; affiliates and subsidiaries; and others as permitted by law.

K Health will not collect additional categories of personal information without providing you notice.

Sources of Personal Information

Processing of Your Personal Information

We limit the collection of personal information to what is adequate, relevant, and reasonably necessary in relation to the purposes for which the personal information is processed. We may process the personal information we collect, for one or more of the purposes described in the Privacy Policy (for more information, see How We Use the personal information We Collect). We will not process personal information for purposes that are neither reasonably necessary to nor compatible with the purposes for which the personal information is processed as described in the Privacy Policy without your consent.

In addition, where applicable, we will obtain your express, affirmative consent before processing any Sensitive Personal Information.

We do not knowingly process the personal information of minors under 13 years of age without parental or lawful guardian consent.

Sale of Personal Information

The CPA defines the sale of personal information as the “exchange of personal data for monetary or other valuable consideration by a controller to a third party.” Although we do not monetize your personal information, we may disclose the following categories of personal information:

non-governmental identifiers;
commercial information;
internet or other electric network activity information and inferences

to the following categories of third parties:

affiliated clinicians, pharmacy, and pharmacy providers;
joint partners;
advertising networks;
internal service providers;
data analytics providers;
social networks; and
operating systems and platforms

for purposes of marketing and advertising; analytics, measurement and improvement; and customization and personalization, which could be deemed to be a sale of personal information under the CPA. You may opt-out of certain sales as described below. Please note that we may provide personal information to our processors that perform services for us pursuant to a contract; the right to opt-out does not limit our ability to provide personal information to these processors.

Your Rights and Choices

The CPA provides Colorado residents with specific rights regarding their personal information. This section describes your CPA rights and explains how to exercise those rights. You may exercise these rights yourself or through your Authorized Agent. For more information on how you or your Authorized Agent can exercise your rights, please see Your Privacy Choices.

Confirmation and Access. You have the right to confirm whether we process your personal information and to request access to all the specific pieces of personal information we have collected and maintain about you. You may exercise this right as described below.
Correction. You have the right to correct any inaccuracies in your personal information processed by us, taking into account the nature of the personal information and the purposes of the processing of your personal information. We may also not be able to accommodate your request to change the personal information if we believe it would violate any law or legal requirement or cause the personal information or the information associated with the personal information to be incorrect.
Deletion. You have the right to request that we delete all of your personal information. We cannot delete your personal information except by also deleting your user account, however we may not accommodate a request to erase your personal information if we believe the deletion would violate any law or legal requirement or cause any information associated with the personal information to be incorrect.
Portability. To the extent you provide us with your personal information and to the extent we process your personal information, you have the right to request that we provide you a copy of, or access to, all or part of such personal information in portable, and to the extent technically feasible, readily usable format that allows you to transmit the personal information to another controller without hindrance. We shall not provide data that we believe would disclose our trade secrets. You may only make such a request twice within a 12-month period.
Opt-Out of Certain Processing. To the extent applicable, you have the right to opt-out of processing your personal information for the purposes of: (i) targeted advertising; (ii) the sale of your personal information; or (iii) profiling in furtherance of decisions that produce legal effects or similarly significant effects concerning the consumer. These decisions include decisions that result in the provision or denial by the controller of financial and lending services, housing, insurance, education enrollment, criminal justice, employment opportunities, health care services, or access to basic necessities, such as food and water. For more information on how to Opt-Out, please see How You May Opt-Out of the Sale of Your Personal Information and Your Privacy Choices.

Please note, however, that K Health does not process personal information for purposes of targeted advertising or profiling within the meaning of the CPA.

Exercising Your CPA Privacy Rights

To exercise the rights described above, please submit a request (a “Consumer Request”) to us by either:

Emailing us at [email protected]
Writing to us at 387 Park Ave South, 9th Floor, NY, NY 10016
Visiting www.khealth.com

If you fail to make your Consumer Request in accordance with the ways described above, we may either treat your request as if it had been submitted with our methods described above or provide you with information on how to submit the request or remedy any deficiencies with your request.

Only you, or your Authorized Agent that you authorize to act on your behalf, may make a Consumer Request related to your personal information. If applicable, you may also make a Consumer Request on behalf of your minor child. To designate an Authorized Agent, see Authorized Agents below.

All Consumer Requests must:

Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an Authorized Agent of such a person. This may include:
- Verifying personal information that we may already have about you, such as your name, address, telephone number, and/or other similar information.
Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

Response Timing and Format

Appeals Process

You may appeal a refusal by us to take action on your request to exercise any of the above rights within a reasonable period of time after we provide you notice of such refusal by contacting us through the contact information listed below. Within 45 days after we receive your appeal, we will inform you in writing of any action taken or not taken in response to your appeal, including any explanations for the reasons for the decision. If we require more time (up to 60 additional days), we will inform you of the reason and extension period in writing. If your appeal is denied, you may lodge a complaint with the Colorado Attorney General through his/her contact information available at: https://coag.gov/about-us/contact-colorado-office-attorney-general/.

Authorized Agents

You may authorize your agent to exercise your rights under the CPA. We may request that your Authorized Agent submit proof of identity and that they have been authorized exercise your rights on your behalf. We may deny a request from your Authorized Agent to exercise your rights on your behalf if they fail to submit adequate proof of identity or adequate proof that they have the authority to exercise your rights.

How You May Opt-Out of the Sale of Your Personal Information

To exercise the right to opt-out of the “sale” or exchange of your personal information for monetary or other valuable consideration, you (or your authorized representative) may submit a request to us via https://app.khealth.com/privacy-settings or by setting your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. However, if you do not consent to our use of cookies or select this setting you may be unable to access certain features or parts of our Services or other websites. You can find more information about cookies at http://www.allaboutcookies.org and http://youronlinechoices.eu.

Your Privacy Choices

Privacy Control Signals

Global privacy control (for more information on how to configure your mobile operating system to send this signal, please see https://globalprivacycontrol.org/).

Personal Information of Children

Changes to This Colorado Privacy Addendum

K Health reserves the right to amend this Colorado Privacy Addendum at our discretion and at any time. When we make changes to this Colorado Privacy Addendum, we will post the updated addendum on the Platform and update the addendum’s effective date.

Your continued use of our Platform and Services following the posting of changes constitutes your acceptance of such changes.

Contact Information

If you have any questions or comments about this Colorado Privacy Addendum, the ways in which K Health collects and uses your information, your choices and rights regarding such use, or wish to exercise your rights under Colorado law, please do not hesitate to contact us at:

K Health, Inc.

Website: www.khealth.com

Email: [email protected]

Postal Address: K Health, Inc.

Privacy Office

387 Park Ave South, 9th Floor,

NY, NY 10016

This notice for Colorado residents was last updated on June 26, 2024.

Notice to Oregon Residents

Introduction

This Privacy Addendum for Oregon Residents (the “Oregon Privacy Addendum”) supplements the information contained in K Health, Inc.’s (“K Health” or “we” or “us”) Privacy Policy above and further describes our collection and use of personal information (as defined below). This Oregon Privacy Addendum applies solely to all visitors, users, and others who reside in Oregon (“Consumers” or “you”). We adopt this Oregon Privacy Addendum to comply with the Oregon Consumer Privacy Act (“OCPA”), and any terms defined in the OCPA have the same meaning when used in this Oregon Privacy Addendum. We may update this Oregon Privacy Addendum at any time as necessary in the event of changes to the OCPA.

This Oregon Privacy Addendum applies to information that we collect through our “Services,” as described in our Privacy Policy above that is linked to or reasonably linkable to you or your device (“personal information”). However, publicly available information that we collect from government records or through widely distributed media and deidentified data (when deidentified as described in the OCPA) are not considered personal information under the OCPA and this Oregon Privacy Addendum does not apply to such information. This Oregon Privacy Addendum also does not apply to protected health information covered by the Health Insurance Portability and Accountability Act (“HIPAA”), which will generally include information collected by K Health when K Health acts as a business associate of HIPAA covered entities.

Personal Information We Collect and Share

The following chart outlines the personal information that we may collect about you and the categories of third parties to whom we may disclose your personal information.

Personal Information We Collect	Categories of Third Parties to Whom We Share Personal Information
Identifiers, such as name, contact information, signature, unique personal identifiers, and IP address that can reasonably be linked or associated with a particular consumer or household, online identifiers, physical characteristics, or description.	Affiliated clinicians, pharmacy, and pharmacy providers; regulators, government entities, and law enforcement; advertising networks; data analytics providers; social networks; internet service providers, operating systems, and platforms; and others as permitted by law.
Government Issued Identifiers, such as Social Security number, driver’s license number, and other government issued identifiers.	Affiliated clinicians, pharmacy, and pharmacy providers; regulators, government entities, and law enforcement; and others as permitted by law.
Education or Employment Information, such as education information and employment information.	Regulators, government entities, and law enforcement; and others as permitted by law.
Commercial Information, such as transaction information and purchase history, including purchases considered.	Regulators, government entities, and law enforcement; advertising networks; data analytics providers; social networks; internet service providers, operating systems, and platforms; and others as permitted by law.
Medical, Health or Insurance Information, such as insurance policy number, medical information, or insurance information.	Affiliated clinicians, pharmacy, and pharmacy providers; regulators, government entities, and law enforcement; and others as permitted by law.
Financial or Payment Information, such as financial account number.	Affiliated clinicians, pharmacy, and pharmacy providers; regulators, government entities, and law enforcement; and others as permitted by law.
Internet or network activity information, such as browsing history, search history, and interactions with our online properties or ads. Session replay software may be used to record and replay your interaction	Affiliated clinicians, pharmacy, and pharmacy providers; regulators, government entities, and law enforcement; advertising networks; data analytics providers; social networks; internet service providers; operating systems and platforms; and others as permitted by law.
Geolocation Data, such as non-precise or approximate location derived from IP address.	Affiliated clinicians, pharmacy, and pharmacy providers; regulators, government entities, and law enforcement; internet service providers; operating systems and platforms; and others as permitted by law.
Audio, electronic, visual, thermal, olfactory, or similar information, such as information collected via call recordings if you are interacting with us in a customer service capacity or if you call us on a recorded line, recorded meetings, events and webinars, videos, photographs and images, and CCTV or video footage to secure our offices and premises.	Affiliated clinicians, pharmacy, and pharmacy providers; regulators, government entities, and law enforcement; internet service providers, operating systems and platforms; and others as permitted by law.
Inferences, including inferences drawn from any of the information identified above to create a profile reflecting a consumer’s preferences, characteristics, behavior, or attitudes.	Affiliated clinicians, pharmacy, and pharmacy providers; advertising networks; data analytics providers; social networks; internet service providers; operating systems and platforms; and others as permitted by law.
Sensitive Personal Data including, in limited circumstances, a consumer’s racial or ethnic background, data revealing mental or physical health condition or diagnosis, sex life, and sexual orientation, including status as transgender or nonbinary.	Affiliated clinicians, pharmacy, and pharmacy providers; regulators, government entities, and law enforcement; and others as permitted by law.
Protected Class Information, such as characteristics of protected classifications under federal law, such as sex, age, gender, race, medical conditions, sexual orientation, gender identity and expression, and marital status.	Affiliated clinicians, pharmacy, and pharmacy providers; regulators, government entities, and law enforcement; and others as permitted by law.

K Health will not collect additional categories of personal information without providing you notice.

Sources of Personal Information

Processing of Your Personal Information

In addition, where applicable, we will obtain your express, affirmative consent before processing any Sensitive Personal Information.

We do not knowingly process the personal information of minors under 13 years of age without parental or lawful guardian consent.

Sale of Personal Information

The OCPA defines the sale of personal information as the “exchange of personal data for monetary or other valuable consideration by the controller with a third party.” Although we do not monetize your personal information, we may disclose the following categories of personal information:

non-governmental identifiers;
commercial information;
internet or other electric network activity information and inferences

to the following categories of third parties:

affiliated clinicians, pharmacy, and pharmacy providers;
joint partners;
advertising networks;
internal service providers;
data analytics providers;
social networks; and
operating systems and platforms

for purposes of marketing and advertising; analytics, measurement and improvement; and customization and personalization, which could be deemed to be a sale of personal information under the OCPA. You may opt-out of certain sales as described below. Please note that we may provide personal information to our processors that perform services for us pursuant to a contract; the right to opt-out does not limit our ability to provide personal information to these processors.

Your Rights and Choices

The OCPA provides Oregon residents with specific rights regarding their personal information. This section describes your OCPA rights and explains how to exercise those rights. You may exercise these rights yourself or through your Authorized Agent. For more information on how you or your Authorized Agent can exercise your rights, please see Exercising Your OCPA Privacy Rights.

Confirmation and Access. You have the right to confirm whether we currently process or have processed your personal information and to request to access such categories of personal information and a list of specific third parties with which we have disclosed personal information. You may exercise this right as described below.
Correction. You have the right to correct any inaccuracies in your personal information processed by us, taking into account the nature of the personal information and the purposes of the processing of your personal information. We may also not be able to accommodate your request to change the personal information if we believe it would violate any law or legal requirement or cause the personal information or the information associated with the personal information to be incorrect.
Deletion. You have the right to request that we delete all of your personal information. We cannot delete your personal information except by also deleting your user account, however we may not accommodate a request to erase your personal information if we believe the deletion would violate any law or legal requirement or cause any information associated with the personal information to be incorrect.
Portability. To the extent you provide us with your personal information and to the extent we process your personal information, you have the right to request that we provide you a copy of, or access to, all or part of such personal information in portable, and to the extent technically feasible, readily usable format that allows you to transmit the personal information to another controller without hindrance. We shall not provide data that we believe would disclose our trade secrets. You may make such a request once within a 12-month period free of charge, however any subsequent requests may require a reasonable fee.
Opt-Out of Certain Processing. To the extent applicable, you have the right to opt-out of processing your personal information for the purposes of: (i) targeted advertising; (ii) the sale of your personal information; or (iii) profiling in furtherance of decisions that produce legal effects or similarly significant effects concerning the consumer. These decisions include decisions that result in the provision or denial by the controller of financial and lending services, housing, insurance, education enrollment, criminal justice, employment opportunities, health care services, or access to basic necessities, such as food and water. For more information on how to Opt-Out, please see How You May Opt-Out of the Sale of Your Personal Information and Your Privacy Choices.

Please note, however, that K Health does not process personal information for purposes of targeted advertising or profiling within the meaning of the OCPA.

Exercising Your OCPA Privacy Rights

To exercise the rights described above, please submit a request (a “Consumer Request”) to us by either:

Emailing us at [email protected]
Writing to us at Privacy Office, 387 Park Avenue South, 9th Floor, NY, NY 10016
Visiting www.khealth.com

All Consumer Requests must:

Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an Authorized Agent of such a person. This may include:
- Verifying personal information that we may already have about you, such as your name, address, telephone number, and/or other similar information.
Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

Making a Consumer Request does not require you to create a password-protected, online account with us. However, if you do have such an account, we may require you to use it in order to make your request. Doing so will enable us to consider your requests through that account to authenticate that the personal information that is the subject of your request relates to you.

Response Timing and Format

Unless otherwise stated, we do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Appeals Process

Within 45 days after we receive your appeal, we will inform you in writing of any action taken or not taken in response to your appeal, including any explanations for the reasons for the decision. If your appeal is denied, you may lodge a complaint with the Oregon Attorney General through his/her contact information available at: https://www.doj.state.or.us/oregon-department-of-justice/office-of-the-attorney-general/ellen-f-rosenblum-attorney-general/.

Non-Discrimination

We will not discriminate against you for exercising any of your OCPA rights. Unless permitted by the OCPA, we will not:

Deny you goods or services.
Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
Provide you a different level or quality of goods or services.

Authorized Agents

You may authorize your agent to exercise your rights under the OCPA. We may request that your Authorized Agent submit proof of identity and that they have been authorized to exercise your rights on your behalf. We may deny a request from your Authorized Agent to exercise your rights on your behalf if they fail to submit adequate proof of identity or adequate proof that they have the authority to exercise your rights.

How You May Opt-Out of the Sale of Your Personal Information

Your Privacy Choices

Privacy Control Signals

Global privacy control (for more information on how to configure your mobile operating system to send this signal, please see https://globalprivacycontrol.org/).

When we receive one of these privacy control signals, we will opt you out of any further “sales” of your personal information when you interact with our Platform through that mobile device. We are only able to propagate your choice to opt-out to your account if you are currently logged in when we receive the privacy control signal from your mobile device. When we are able to propagate your choice to your account, you will be opted out of the “sale” of your personal information on all devices on which you are logged in, and for both online and offline “sales.”

Personal Information of Children

Changes to This Oregon Privacy Addendum

K Health reserves the right to amend this Oregon Privacy Addendum at our discretion and at any time. When we make changes to this Oregon Privacy Addendum, we will post the updated addendum on the Platform and update the addendum’s effective date.

Your continued use of our Platform and Services following the posting of changes constitutes your acceptance of such changes.

Contact Information

If you have any questions or comments about this Oregon Privacy Addendum, the ways in which K Health collects and uses your information, your choices and rights regarding such use, or wish to exercise your rights under Oregon law, please do not hesitate to contact us at:

K Health, Inc.
Website: www.khealth.com
Email: [email protected]
Postal Address:
K Health, Inc.
Privacy Office
387 Park Avenue South, 9th Floor
NY, NY 10016

This notice for Oregon residents was last updated on June 26, 2024.

Notice to Texas Residents

Introduction

This Privacy Addendum for Texas Residents (the “Texas Privacy Addendum”) supplements the information contained in K Health, Inc.’s (“K Health” or “we” or “us”) Privacy Policy above and further describes our collection and use of personal information (as defined below). This Texas Privacy Addendum applies solely to all visitors, users, and others who reside in Texas (“Consumers” or “you”). We adopt this Texas Privacy Addendum to comply with the Texas Data Privacy and Security Act (“TDPSA”) and any terms defined in the TDPSA have the same meaning when used in this Texas Privacy Addendum. We may update this Texas Privacy Addendum at any time as necessary in the event of changes to the TDPSA.

This Texas Privacy Addendum applies to information that we collect through our “Services,” as described in our Privacy Policy above that is linked or reasonably linkable to an identified or identifiable individual, including pseudonymous data used in conjunction with additional information that reasonably links the data to an identifiable individual (“personal information”). However, publicly available information that we collect from government records and deidentified data (when deidentified as described in the TDPSA) are not considered personal information and this Texas Privacy Addendum does not apply to such information. This Texas Privacy Addendum also does not apply to protected health information covered by the Health Insurance Portability and Accountability Act (“HIPAA”).

Personal Information We Collect and Disclose About You

The following chart outlines the personal information that we may collect about you and the categories of third parties to whom we may disclose your personal information.

Personal Information We Collect	Categories of Third Parties to Whom We Disclose Personal Information
Identifiers, such as name, contact information, signature, unique personal identifiers, and IP address that can reasonably be linked or associated with a particular consumer or household online identifiers, physical characteristics or description.	Affiliated clinicians, pharmacy, and pharmacy providers; advisors and agents; regulators, government entities, and law enforcement; affiliates and subsidiaries; advertising networks; data analytics providers; social networks; internet service providers, operating systems, and platforms; and others as permitted by law.
Government Issued Identifiers, such as Social Security number, driver’s license number and other government issued identifiers	Affiliated clinicians, pharmacy, and pharmacy providers; advisors and agents; regulators, government entities, and law enforcement; affiliates and subsidiaries; and others as permitted by law.
Education or Employment Information, such as education information and employment information.	Advisors and agents; regulators, government entities, and law enforcement; affiliates and subsidiaries; and others as permitted by law.
Commercial Information, such as transaction information and purchase history, including purchases considered.	Advisors and agents; regulators, government entities, and law enforcement; affiliates and subsidiaries; advertising networks; data analytics providers; social networks; internet service providers, operating systems, and platforms; and others as permitted by law.
Medical, Health or Insurance Information, such as insurance policy number, medical information, or insurance information.	Advisors and agents; regulators, government entities, and law enforcement; affiliates and subsidiaries; and others as permitted by law.
Financial or Payment Information, such as financial account number.	Advisors and agents; regulators, government entities, and law enforcement; affiliates and subsidiaries; and others as permitted by law.
Internet or network activity information, such as browsing history, search history and interactions with our online properties or ads. Session replay software may be used to record and replay your interaction.	Affiliated clinicians, pharmacy, and pharmacy providers; advisors and agents; regulators, government entities, and law enforcement; affiliates and subsidiaries; advertising networks; data analytics providers; social networks; internet service providers; operating systems and platforms; and others as permitted by law.
Geolocation Data, such as non-precise or approximate location derived from IP address.	Affiliated clinicians, pharmacy, and pharmacy providers; advisors and agents; regulators, government entities, and law enforcement; affiliates and subsidiaries; internet service providers; operating systems and platforms; and others as permitted by law.
Audio, electronic, visual, thermal, olfactory, or similar information includes information collected via call recordings if you are interacting with us in a customer service capacity or if you call us on a recorded line, recorded meetings, events and webinars, videos, photograph and images, and CCTV or video footage to secure our offices and premises.	Affiliated clinicians, pharmacy, and pharmacy providers; advisors and agents; regulators, government entities, and law enforcement; affiliates and subsidiaries; internet service providers, operating systems and platforms; and others as permitted by law.
Inferences including inferences drawn from any of the information identified above to create a profile reflecting a consumer’s preferences, characteristics, behavior, or attitudes.	Affiliated clinicians, pharmacy, and pharmacy providers; affiliates and subsidiaries; advertising networks; data analytics providers; social networks; internet service providers; operating systems and platforms; and others as permitted by law.
Sensitive Personal Information including data revealing a consumer’s racial or ethnic origin, mental or physical health diagnosis, or sexual orientation.	Affiliated clinicians, pharmacy, and pharmacy providers; advisors and agents; regulators, government entities, and law enforcement; affiliates and subsidiaries; and others as permitted by law.
Protected Class Information, such as characteristics of protected classifications under federal law, such as sex, age, gender, race, medical conditions, sexual orientation, gender identity and expression, and marital status.	Affiliated clinicians, pharmacy, and pharmacy providers; advisors and agents; regulators, government entities, and law enforcement; affiliates and subsidiaries; and others as permitted by law.

K Health will not collect additional categories of personal information without providing you notice.

Sources of Personal Information

Processing of Your Personal Information

In addition, where applicable, we will obtain your express, affirmative consent before processing any Sensitive Personal Information.

We do not knowingly process the personal information of minors under 18 years of age without parental or lawful guardian consent.

Sale of Personal Information

The TDPSA defines the sale of personal information as the “sharing, disclosing, or transferring of personal data for monetary or other valuable consideration by the controller to a third party.” Although we do not monetize your personal information, we may disclose the following categories of personal information:

non-governmental identifiers;
commercial information;
internet or other electric network activity information and inferences

to the following categories of third parties:

affiliated clinicians, pharmacy, and pharmacy providers;
joint partners;
advertising networks;
internal service providers;
data analytics providers;
social networks; and
operating systems and platforms

Your Rights and Choices

The TDPSA provides Texas residents with specific rights regarding their personal information. This section describes your TDPSA rights and explains how to exercise those rights. For more information on how you can exercise your rights, please see Exercising Your TDPSA Privacy Rights.

Confirmation and Access. You have the right to confirm whether we process your personal information and to request access to that personal information we have collected and maintain about you. You may exercise this right as described below.
Correction. You have the right to correct any inaccuracies in your personal information processed by us, taking into account the nature of the personal information and the purposes of the processing of your personal information. We may also not be able to accommodate your request to change the personal information if we believe it would violate any law or legal requirement or cause the personal information or the information associated with the personal information to be incorrect.
Deletion. You have the right to request that we delete your personal information. We cannot delete your personal information except by also deleting your user account, however we may not accommodate a request to erase your personal information if we believe the deletion would violate any law or legal requirement or cause any information associated with the personal information to be incorrect.
Portability. To the extent we maintain your personal information in a digital format, you have the right to request that we provide you a copy of, or access to, all or part of such personal information in portable, and to the extent technically feasible, readily usable format that allows you to transmit the personal information to another controller without hindrance.
Opt-Out of Certain Processing. To the extent applicable, you have the right to opt-out of processing your personal information for the purposes of: (i) targeted advertising; (ii) the sale of your personal information; or (iii) profiling in furtherance of a decision that produces a legal or similarly significant effect concerning the consumer. This would include a decision that results in the provision or denial of health care services. For more information on how to Opt-Out, please see How You May Opt-Out of the Sale of Your Personal Information and Your Privacy Choice. You may exercise this right yourself or through your Authorized Agent.

Please note, however, that K Health does not process personal information for purposes of targeted advertising or profiling within the meaning of the TDPSA.

Exercising Your TDPSA Privacy Rights

To exercise the rights described above, please submit a request (a “Consumer Request”) to us by either:

Emailing us at [email protected]
Writing to us at Privacy Office, 387 Park Avenue South, 9th Floor, NY, NY 10016
Visiting www.khealth.com

Personal information provided in response to a request to exercise these rights may be provided free of charge at least twice per Texas resident annually. If applicable, you may also make a Consumer Request on behalf of your minor child. For requests to opt out, you may also authorize an Authorized Agent to make the request on your behalf. To designate an Authorized Agent, see Authorized Agents below.

All Consumer Requests must:

Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an Authorized Agent of such a person. This may include:
- Verifying personal information that we may already have about you, such as your name, address, telephone number, and/or other similar information.
Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

Response Timing and Format

Appeals Process

You may appeal a refusal by us to take action on your request to exercise any of the above rights within a reasonable period of time after we provide you notice of such refusal by contacting us through the contact information listed below. Within 60 days after we receive your appeal, we will inform you in writing of any action taken or not taken in response to your appeal, including any explanations for the reasons for the decision. If your appeal is denied, you may lodge a complaint with the Texas Attorney General available at: https://www.texasattorneygeneral.gov/consumer-protection/file-consumer-complaint.

Non-Discrimination

We will not discriminate against you for exercising any of your TDPSA rights. Unless permitted by the TDPSA, we will not:

Deny you goods or services.
Charge you different prices or rates for goods or services.
Provide you a different level or quality of goods or services.

However, we may offer you certain financial incentives permitted by the TDPSA that can result in different prices, rates, quality levels, or selection of goods and services (including the possibility of offering our Services for no fee), if you have exercised your rights to opt-out of certain processes as described above or if the offer is related to your voluntary participation in a bona fide loyalty, rewards, premium features, discounts, or club card program.

Authorized Agents

You may authorize your agent to exercise your right to opt out under the TDPSA. We may request that your Authorized Agent submit proof of identity and that they have been authorized exercise your rights on your behalf. We may deny a request from your Authorized Agent to exercise your rights on your behalf if they fail to submit adequate proof of identity or adequate proof that they have the authority to exercise your rights.

How You May Opt-Out of the Sale of Your Personal Information

To exercise the right to opt-out of the “sale” or exchange of your personal information for monetary or other valuable consideration, you (or your Authorized Agent) may submit a request to us via the link below or by setting your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. However, if you do not consent to our use of cookies or select this setting you may be unable to access certain features or parts of our Services or other websites. You can find more information about cookies at http://www.allaboutcookies.org and http://youronlinechoices.eu.

Your Privacy Choices

Privacy Control Signals

Global privacy control (for more information on how to configure your mobile operating system to send this signal, please see https://globalpriv acycontrol.org/).

Personal Information of Children

K Health understands the importance of protecting children’s privacy in the interactive online world. K Health’s Platform and Services are not designed for, or intentionally targeted at, children under 18 years of age. It is not our policy to intentionally collect or maintain information about anyone under the age of 18. No one under the age of 18 should submit any personal information on our Platform, and if we learn that we have collected or received personal information from a child under 18, we will delete that information. If you are the parent or guardian of a child under 18 years of age whom you believe might have provided us with their personal information, you may contact us to request the personal information be deleted.

Changes to This Texas Privacy Addendum

K Health reserves the right to amend this Texas Privacy Addendum at our discretion and at any time. When we make changes to this Texas Privacy Addendum, we will post the updated addendum on the Platform and update the addendum’s effective date. If we make a material change to this Texas Privacy Addendum, we will email you at the email address listed in your online account.

Your continued use of our Platform and Services following the posting of changes constitutes your acceptance of such changes.

Contact Information

If you have any questions or comments about this Texas Privacy Addendum, the ways in which K Health collects and uses your information, your choices and rights regarding such use, or wish to exercise your rights under Texas law, please do not hesitate to contact us at:

K Health, Inc.
Website: www.khealth.com
Email: [email protected]
Postal Address:
K Health, Inc.
Privacy Office
387 Park Avenue South, 9^th Floor
NY, NY 10016

This notice for Texas residents was last updated on June 26, 2024.

Notice to Utah Residents

Introduction

This Privacy Addendum for Utah Residents (the “Utah Privacy Addendum”) supplements the information contained in K Health, Inc.’s (“K Health” or “we” or “us”) Privacy Policy above and further describes our collection and use of personal information (as defined below). This Utah Privacy Addendum applies solely to all visitors, users, and others who reside in Utah (“Consumers” or “you”). We adopt this Utah Privacy Addendum to comply with the Utah Consumer Privacy Act (“UCPA”) and any terms defined in the UCPA have the same meaning when used in this Utah Privacy Addendum. We may update this Utah Privacy Addendum at any time as necessary in the event of changes to the UCPA.

This Utah Privacy Addendum applies to information that we collect through our “Services,” as described in our Privacy Policy above that is linked or reasonably linkable to an identified or identifiable individual (“personal information”). However, publicly available information that we collect from government records, aggregated data, and deidentified data (when deidentified as described in the UCPA) are not considered personal information and this Utah Privacy Addendum does not apply to such information. This Utah Privacy Addendum also does not apply to protected health information covered by the Health Insurance Portability and Accountability Act (“HIPAA”).

Personal Information We Collect and Disclose About You

The following chart outlines the personal information that we may collect about you and the categories of third parties to whom we may disclose your personal information.

Personal Information We Collect	Categories of Third Parties to Whom We Disclose Personal Information
Identifiers, such as name, contact information, signature, unique personal identifiers, and IP address that can reasonably be linked or associated with a particular consumer or household online identifiers, physical characteristics or description.	Affiliated clinicians, pharmacy, and pharmacy providers; advisors and agents; regulators, government entities, and law enforcement; affiliates and subsidiaries; advertising networks; data analytics providers; social networks; internet service providers, operating systems, and platforms; and others as permitted by law.
Government Issued Identifiers, such as Social Security number, driver’s license number and other government issued identifiers	Affiliated clinicians, pharmacy, and pharmacy providers; advisors and agents; regulators, government entities, and law enforcement; affiliates and subsidiaries; and others as permitted by law.
Education or Employment Information, such as education information and employment information.	Advisors and agents; regulators, government entities, and law enforcement; affiliates and subsidiaries; and others as permitted by law.
Commercial Information, such as transaction information and purchase history, including purchases considered.	Advisors and agents; regulators, government entities, and law enforcement; affiliates and subsidiaries; advertising networks; data analytics providers; social networks; internet service providers, operating systems, and platforms; and others as permitted by law.
Medical, Health or Insurance Information, such as insurance policy number, medical information, or insurance information.	Advisors and agents; regulators, government entities, and law enforcement; affiliates and subsidiaries; and others as permitted by law.
Financial or Payment Information, such as financial account number.	Advisors and agents; regulators, government entities, and law enforcement; affiliates and subsidiaries; and others as permitted by law.
Internet or network activity information, such as browsing history, search history and interactions with our online properties or ads. Session replay software may be used to record and replay your interaction.	Affiliated clinicians, pharmacy, and pharmacy providers; advisors and agents; regulators, government entities, and law enforcement; affiliates and subsidiaries; advertising networks; data analytics providers; social networks; internet service providers; operating systems and platforms; and others as permitted by law.
Geolocation Data, such as non-precise or approximate location derived from IP address.	Affiliated clinicians, pharmacy, and pharmacy providers; advisors and agents; regulators, government entities, and law enforcement; affiliates and subsidiaries; internet service providers; operating systems and platforms; and others as permitted by law.
Audio, electronic, visual, thermal, olfactory, or similar information includes information collected via call recordings if you are interacting with us in a customer service capacity or if you call us on a recorded line, recorded meetings, events and webinars, videos, photograph and images, and CCTV or video footage to secure our offices and premises.	Affiliated clinicians, pharmacy, and pharmacy providers; advisors and agents; regulators, government entities, and law enforcement; affiliates and subsidiaries; internet service providers, operating systems and platforms; and others as permitted by law.
Inferences including inferences drawn from any of the information identified above to create a profile reflecting a consumer’s preferences, characteristics, behavior, or attitudes.	Affiliated clinicians, pharmacy, and pharmacy providers; affiliates and subsidiaries; advertising networks; data analytics providers; social networks; internet service providers; operating systems and platforms; and others as permitted by law.
Sensitive Personal Information including, in limited circumstances, data revealing a consumer’s sexual orientation, an individual’s medical history, mental or physical health condition, or medical treatment or diagnosis by a health care professional, and data revealing a consumer’s racial or ethnic origin, or specific geolocation data.	Affiliated clinicians, pharmacy, and pharmacy providers; advisors and agents; regulators, government entities, and law enforcement; affiliates and subsidiaries; and others as permitted by law.
Protected Class Information, such as characteristics of protected classifications under federal law, such as sex, age, gender, race, medical conditions, sexual orientation, gender identity and expression, and marital status.	Affiliated clinicians, pharmacy, and pharmacy providers; advisors and agents; regulators, government entities, and law enforcement; affiliates and subsidiaries; and others as permitted by law.

K Health will not collect additional categories of personal information without providing you notice.

Sources of Personal Information

Processing of Your Personal Information

In addition, where applicable, we will provide you notice and an opportunity to opt out before processing any Sensitive Personal Information.

We do not knowingly process the personal information of minors under 18 years of age without parental or lawful guardian consent.

Sale of Personal Information

The UCPA defines the sale of personal information as the “exchange of personal data for monetary consideration by a controller to a third party.” We do not engage in the “sale” of your personal information as defined in UCPA.

Your Rights and Choices

The UCPA provides Utah residents with specific rights regarding their personal information. This section describes your UCPA rights and explains how to exercise those rights. You may exercise these rights yourself or for consumers subject to guardianship, conservatorship, or other protective arrangement, your guardian or conservator can exercise your rights on your behalf. For more information on how you or your guardian or conservator can exercise your rights, please see Exercising Your UCPA Privacy Rights.

Confirmation and Access. You have the right to confirm whether we process your personal information and to request access to that personal information we have collected and maintain about you. You may exercise this right as described below.
Deletion. You have the right to request that we delete your personal information. We cannot delete your personal information except by also deleting your user account, however we may not accommodate a request to erase your personal information if we believe the deletion would violate any law or legal requirement or cause any information associated with the personal information to be incorrect.
Portability. You have the right to request that we provide you a copy of, or access to, all or part of your personal information, to the extent technically feasible, in a portable and readily usable format and that allows you to transmit the personal information to another controller without impediment, where the processing is carried out by automated means.
Opt-Out of Certain Processing. To the extent applicable, you have the right to opt-out of processing your personal information for the purposes of: (i) targeted advertising; or (ii) the sale of your personal information. For more information on how to Opt-Out, please see Your Privacy Choices. Please note, however, that K Health does not process personal information for purposes of targeted advertising or sell your personal information within the meaning of the UCPA.

Exercising Your UCPA Privacy Rights

To exercise the rights described above, please submit a request (a “Consumer Request”) to us by either:

Emailing us at [email protected]
Writing to us at Privacy Office, 387 Park Avenue South, 9th Floor, NY, NY 10016
Visiting www.khealth.com

Personal information provided in response to a request to exercise these rights may be provided free of charge at least once per Utah resident annually. Only you or your guardian or conservator may make a Consumer Request related to your personal information. If applicable, you may also make a Consumer Request on behalf of your minor child.

All Consumer Requests must:

Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or a guardian or conservator of such a person. This may include:
- Verifying personal information that we may already have about you, such as your name, address, telephone number, and/or other similar information.
Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

Response Timing and Format

We do not charge a fee to process or respond to your verifiable consumer request unless (i) the request is excessive, repetitive, technically infeasible, or manifestly unfounded, (ii) we reasonably believe that the primary purpose of the request is something other than exercising a right, or (iii) the request, individually or as part of an organized effort, harasses, disrupts, or imposes undue burden on the resources of our business. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Non-Discrimination

We will not discriminate against you for exercising any of your UCPA rights. Unless permitted by the UCPA, we will not:

Deny you goods or services.
Charge you different prices or rates for goods or services.
Provide you a different level or quality of goods or services.

However, we may offer you certain financial incentives permitted by the UCPA that can result in different prices, rates, level, quality, or selection of good or service (including the possibility of offering our Services for no fee), if you have exercised your rights to opt-out of certain processes as described above or if the offer is related to your voluntary participation in a bona fide loyalty, rewards, premium features, discounts, or club card program.

Requests by Guardian or Conservator

For consumers subject to guardianship, conservatorship, or other protective arrangement, your guardian or conservator can exercise your rights on your behalf. We may request that your guardian or conservator submit proof of identity and that they have been authorized exercise your rights on your behalf. We may deny a request from your guardian or conservator to exercise your rights on your behalf if they fail to submit adequate proof of identity or adequate proof that they have the authority to exercise your rights.

Personal Information of Children

K Health understands the importance of protecting children’s privacy in the interactive online world. K Health’s Platform and Services are not designed for, or intentionally targeted at, children under 18 years of age. It is not our policy to intentionally collect or maintain information about anyone under the age of 18. No one under the age of 18 should submit any personal information on our Platform, and if we learn that we have collected or received personal information from a child under 18, we will delete that information. If you are the parent or guardian of a child under 18 years of age whom you believe might have provided us with their personal information, you may contact us to request the personal information be deleted.

Changes to This Utah Privacy Addendum

K Health reserves the right to amend this Utah Privacy Addendum at our discretion and at any time. When we make changes to this Utah Privacy Addendum, we will post the updated addendum on the Platform and update the addendum’s effective date. If we make a material change to this Utah Privacy Addendum, we will email you at the email address listed in your online account.

Your continued use of our Platform and Services following the posting of changes constitutes your acceptance of such changes.

Contact Information

If you have any questions or comments about this Utah Privacy Addendum, the ways in which K Health collects and uses your information, your choices and rights regarding such use, or wish to exercise your rights under Utah law, please do not hesitate to contact us at:

K Health, Inc.
Website: www.khealth.com
Email: [email protected]
Postal Address:
K Health, Inc.
Privacy Office
387 Park Avenue South, 9th Floor,
NY, NY 10016

This notice for Utah residents was last updated on June 26, 2024.

LAST MODIFIED: June 26, 2024

Information for California Residents

Notice to Virginia Residents

Exercising Your VCDPA Privacy Rights

Notice to Connecticut Residents

Exercising Your CTDPA Privacy Rights

Your Privacy Choices

Notice to Colorado Residents

Your Privacy Choices

Notice to Oregon Residents

Exercising Your OCPA Privacy Rights

How You May Opt-Out of the Sale of Your Personal Information

Your Privacy Choices

Personal Information of Children

Changes to This Oregon Privacy Addendum

Contact Information

Notice to Texas Residents

Introduction

Personal Information We Collect and Disclose About You

Sources of Personal Information

Processing of Your Personal Information

Sale of Personal Information

Your Rights and Choices

Exercising Your TDPSA Privacy Rights

Response Timing and Format

Appeals Process

Non-Discrimination

Authorized Agents

How You May Opt-Out of the Sale of Your Personal Information

Your Privacy Choices

Privacy Control Signals

Personal Information of Children

Changes to This Texas Privacy Addendum

Contact Information

Notice to Utah Residents

Introduction

Personal Information We Collect and Disclose About You

Sources of Personal Information

Processing of Your Personal Information

Sale of Personal Information

Your Rights and Choices

Exercising Your UCPA Privacy Rights

Response Timing and Format

Non-Discrimination

Requests by Guardian or Conservator

Personal Information of Children

Changes to This Utah Privacy Addendum

Contact Information

Primary Care

Medical Weight Management New

Urgent Care

Mental Health

Health Guides

Support

Symptom Checker

Acid reflux

Asthma

Diabetes (type 2)

Gout

High cholesterol

High blood pressure

Hypothyroidism

Migraine

Metformin

Ozempic®

Saxenda®

Wegovy®

Back & neck pain

Bacterial vaginosis (BV)

Dental infection

Diarrhea

Lice

Rash

Urinary tract infection (UTI)

Yeast infection

Generic for Buspar®

Generic for Effexor®

Generic for Lexapro®

Generic for Prozac®