Health Notice

Health Lives Here Consumer Health Data Privacy Notice

Last Updated: July 28, 2026

This consumer health data privacy notice (“Health Data Notice”) supplements the Privacy Policy of Tollo Care, LLC d/b/a Health Lives Here (“Health Lives Here,” “we,” or “us”) and applies to personal data defined as “consumer health data” subject to the Washington State My Health My Data Act (MHMDA) that we collect from users of our Health Lives Here mobile application (the “App”) and website and portal at healthliveshere.ai (the “Website”) (the App and Website, together, the “Application”).  Your access and use of the Application, any part thereof, or anything associated therewith, any products or services provided through the Application or otherwise by Health Lives Here are subject to this notice unless specifically stated otherwise. Capitalized terms not otherwise defined in this Privacy Policy have the same meaning as set forth in the Health Lives Terms and Conditions (“Terms and Conditions”).

This Health Data Notice describes the following:

• The categories of consumer health data collected by Health Lives Here; 
• How we use the consumer health data; 
• With whom we share the consumer health data; and 
• How consumers can withdraw consent from future collection or sharing of their health data.

Categories of consumer health data collected

We collect any information you provide (or consent your authorized third parties such as health care providers and Pharmacies to provide) when you use the Application, as well as some information automatically based on your use of the Application, including, but not limited to:

• Prescription information, including without limitation, the following: the specific drugs prescribed, the quantity of the drugs prescribed, the dosage of the drugs prescribed, the number of refills of the drugs prescribed, the applicable health care providers, and diagnostic codes
• Pharmacies where prescriptions are transferred to and the cost of prescriptions
• Information about user purchases of nutraceuticals
• If you connect wearable devices, mobile health platforms, or similar integrations, we may collect health, wellness, biometric, activity, and device-derived data that you authorize. This may include:
  • Steps, activity, exercise, workouts, and movement data
  • Sleep duration, sleep quality, sleep stages, recovery, and related sleep metrics
  • Heart rate, heart rate variability, resting heart rate, and similar cardiovascular metrics
  • Blood pressure and related health measurements, where available through your connected device or manually entered by you
  • Respiratory, recovery, readiness, strain, stress, mindfulness, and wellness metrics
  • Nutrition, hydration, meal, and dietary information if you enter it, upload it, or enable an integration that provides it
  • Medication, adherence, symptom, condition, care-plan, or related health information if such features are enabled
  • Insights, inferences, trends, or recommendations generated from the above information

• If you utilize AI-enabled coaching and recommendation features, we may collect and process health information contained in:
  • Text messages, prompts, questions, and responses
  • Voice inputs, audio recordings, transcripts, AI-generated voice outputs, and related metadata
  • Journaling, reflection, goal-setting, habit, and coaching content
  • Feedback you provide on AI recommendations
  • AI-generated summaries, classifications, insights, recommendations, and other outputs.

• Health information that you share in our peer community feature (the “Locker Room”) in messages, posts, and interactions you share.

• Usage activity concerning your interactions with the Application and/or third-party websites, networks or applications accessed through the Application
• Statements or content (e.g., comments, videos, photographs, images) and information about such statements or content, which you submit or publish on or through the Application or which are accessed via your public or linked social media pages (e.g., Facebook, Instagram)
• Any other health information you provide when you contact or communicate with us

We also collect certain medical information on behalf of the Telehealth Services Platform, Providers and the Pharmacy, which may include, but is not limited to health and medical data, your prescriptions sent to the Pharmacy, and any summary of your visit provided by the Telehealth Services Platform or Providers.

If you or a third party sends Health Lives Here a comment, message or other communication (such as, by way of example only, email, letter, fax, phone call, text message, chat message or voice message) about you or your activities on or through the Application, then Health Lives Here may collect any health information provided therein or therewith.

It is possible to make inferences about consumers based on their browsing history on our Application. We may learn about our users’ health if they answer an online survey or questionnaire. We may learn health-related information if it is offered to us voluntarily when a user contacts us via email, phone or chat (as applicable). We learn about health-related preferences based on online behavioral advertising collected with tracking technologies. Please see our Privacy Policy for more information about our use of tracking technologies.

How we use the consumer health data

We use the health data we collect for a number of purposes, including, but not limited to:

• Administering your account
• Fulfilling your requests
• Facilitating your movement through the Application
• Facilitating your use of the Application and/or products or services offered through the Application
• Providing personalized coaching, recommendations, reminders, and user experiences
• Generating AI-driven wellness, behavioral, health, nutrition, activity, sleep, calendar, and location-informed insights
• Supporting Connected Data, including data from wearable, health platform, calendar, and location integrations
• Providing AI coach, AI voice functionality, and related interactive features
• Facilitating community interactions and the “Locker Room” peer group
• Sending you push notifications, alerts, and reminders related to the Application, such as coaching prompts, habit reminders, or community updates according to your preferences set in your device or Application settings
• Communicating with you by letter, email, text, telephone or other forms of communication
• Providing you with information about Health Lives Here, the Telehealth Services Platform and the Pharmacy and/or their respective businesses, products and services by letter, email, text, telephone or other forms of communication
• Providing you with customer support
• Providing you with information about third-party businesses, products and services by letter, email, text, telephone or other forms of communication
• Developing, testing or improving the Application and content, features and/or products or services offered via the Application
• Identifying or creating new products, services, marketing and/or promotions for Health Lives Here or the Application
• Promoting and marketing Health Lives Here, the Application, and the products and/or services offered via the Application
• Improving user experiences with the Application
• Analyzing traffic to and through the Application
• Analyzing user behavior and activity on or through the Application
• Conducting research and measurement activities for purposes of product and service research and development, market research, and other activities related to Health Lives Here, the Application or products and services offered via the Application
• Monitoring your activities and those of others permitted as part of your Account on or through the Application
• Placing and tracking orders for products or services on your behalf
• When required by applicable law, court order or other governmental authority (including, without limitation and by way of example only, in response to a subpoena or other legal process)
• Health Lives Here believes in good faith that such use is otherwise necessary or advisable.

We may de-identify or anonymize your information and use, create and sell such de-identified or anonymized information, or any business or other purpose not prohibited by applicable law.

With whom we share the consumer health data

We may disclose your information to third parties in connection with the provision of our Application or as otherwise permitted or required by law. For example, we may disclose your information to:

• Our affiliates in order to provide our services to you, including Tollo Health, LLC, Tollo Meds, LLC, Tollo Bio, LLC, DataMEDS AI, Inc. Corexa Health, LLC, Corexa Pharmacy, LLC, Corexa Tech & Hub, LLC, Corexa Distribution, LLC and NuPath AI, Inc. 
• Pharmacy and Telehealth Services Platform (MDI), Provider
• Our third-party and service providers (collectively “vendors”) that provide services to enable us to provide the Application, to run our business and administrative operations, and to enable us to promote and advertise the Application and the products and/or services offered via the Application;
• The Pharmacy to enable them to provide services to you via the Application and to collect payment on their behalf
• The Telehealth Services Platform and the Providers to enable them to provide services to you via the Application and to collect payment on their behalf
• To a third party in the event of any reorganization, merger, sale, joint venture, assignment, transfer, liquidation or other disposition of all or any portion of our business, assets or stock with such third party (where in such instances, the disclosure may include a transfer and sale of your information);
• To a third party in the event we believe it necessary or appropriate to comply with a legal obligation, when we believe in good faith that the law requires it, at the request of governmental authorities conducting an investigation, to verify or enforce our agreements, terms of use, or other applicable policies, to respond to an emergency, or otherwise to protect the rights, property, safety, or security of third parties, visitors to our website, or the public.
• To any third party where you have provided your consent, including social networking sites such as Facebook, Instagram, or Twitter. If you agree to have your personal information shared with a third party, your personal information will be disclosed to the third party and will be subject to the privacy policy and business practices of that third party.

How consumers can withdraw consent from future collection or sharing of their health data

You have specific rights with respect to your consumer health data:

• You have the right to know if we are collecting, using or disclosing your consumer health data, to access that data, and to receive a list of the affiliates and the categories of third parties with whom we have shared your information.
• If we are processing your consumer health data with your consent, you have the right to withdraw that consent.
• You have the right to request that we delete your consumer health data.

We will do our best to honor your requests subject to any legal and contractual obligations. We will not discriminate against you for exercising any of your rights.

To exercise your rights, you can contact us or otherwise communicate your request by emailing us at privacy@healthliveshere.ai with the heading “Data Rights Request” in the subject line. You may delete the Application at any time.

We will authenticate your request and process it as required by law. Please allow 45 days for a response. If we deny your request, you may appeal that denial by requesting a review of the decision via email to privacy@healthliveshere.ai.