Notice of Privacy Practices

Effective September 18, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Who we are

Elevare Health, Inc. (“Elevare,” “we,” “us”) provides a continuous care platform for women’s health. Our virtual care companion, Vera, checks in with you, tracks the signals you share, answers your questions, and connects you with a human care team when something needs attention. In most cases you have access to Elevare through your employer’s health plan, your health system, or a clinician network. Those organizations are “covered entities” under HIPAA, and Elevare works for them as a “business associate.” We follow this Notice, our written agreements with those organizations, and the HIPAA Privacy Rule. Where the organization that sponsors your access has its own Notice of Privacy Practices, that notice also applies to you, and it governs if the two ever conflict.

Our duties

We are required by law to keep your protected health information (PHI) private and secure, to give you this Notice of our legal duties and privacy practices, to follow the terms of the Notice currently in effect, and to notify you if a breach occurs that may have compromised the privacy or security of your information. We reserve the right to change this Notice and to make the new Notice apply to all PHI we maintain. When we do, we will post the revised Notice at www.elevare.health/notice-of-privacy-practices and in the Elevare app, and we will note the new effective date.

How we may use and disclose your information

Treatment. We share your information with your care team, including care navigators and the clinicians in our clinical network, so they can respond to your questions, follow up on symptoms, and coordinate your care. With your consent, we may share information with your own OB, midwife, or physician.

Payment. We may use your information to confirm your eligibility for the program and to report engagement to the organization that pays for your access, in a form that does not identify you.

Health care operations. We use your information to run and improve the service: quality review, safety monitoring, training our care team, auditing, and making sure Vera’s guidance is accurate. Any use of your information to improve our technology happens on de-identified data unless you have given written authorization or our agreement with your sponsoring organization permits otherwise.

Your sponsoring organization. Your employer does not receive your conversations, your symptoms, or whether you use the program. Employers receive only de-identified, aggregate reports. If your access is sponsored by a health system or clinician, that organization may receive your information as part of your care.

Business associates and service providers. We use vendors such as cloud hosting and messaging providers to run the service. Each vendor that handles your information signs an agreement requiring it to protect your information the same way we do.

Required by law. We disclose information when federal, state, or local law requires it.

Public health and safety. We may share information for public health activities, to report suspected abuse or neglect as required by law, to prevent a serious and imminent threat to health or safety, and with health oversight agencies for activities authorized by law.

Legal proceedings and law enforcement. We may share information in response to a court order, or to a subpoena or other lawful process when the required protections are in place, and with law enforcement in the limited situations the law permits. We do not use or disclose your information to investigate or penalize anyone for seeking, obtaining, providing, or facilitating lawful reproductive health care.

Other uses. We will not sell your information, use it for marketing, or share psychotherapy notes without your written authorization. Any other use or disclosure not described in this Notice will be made only with your written authorization, which you may revoke at any time in writing, except to the extent we have already acted on it.

Your rights

See and get a copy of your information. You can view what Vera remembers about you in the app and delete any of it. You can also request a copy of the information we hold about you. We will respond within 30 days. We may charge a reasonable, cost-based fee for copies.

Ask us to correct your information. If you think information we hold is wrong or incomplete, you may ask us to amend it. We will respond within 60 days. If we deny your request we will tell you why in writing and how to add a statement of disagreement to your record.

Ask for confidential communications. You can ask us to contact you in a specific way (for example, only by app rather than by text) or at a specific location. We will accommodate reasonable requests.

Ask us to limit what we use or share. You can ask us not to use or share certain information for treatment, payment, or operations. We are not required to agree, but if we do we will honor the restriction unless it is needed for emergency treatment. If you pay for a service in full out of pocket, you can ask us not to share information about that service with your health plan for payment or operations, and we will agree.

Get a list of who we have shared your information with. You can ask for an accounting of the disclosures we have made of your information for the six years before your request, other than disclosures for treatment, payment, and operations and certain other exceptions. The first accounting in any 12-month period is free.

Get a copy of this Notice. You can ask for a paper or electronic copy at any time, even if you agreed to receive it electronically.

Choose someone to act for you. If you have given someone medical power of attorney or someone is your legal guardian, that person can exercise your rights and make choices about your information. We will verify the person’s authority before we act.

File a complaint. If you believe your privacy rights have been violated, you can file a complaint with us using the contact information below, with the organization that sponsors your access, or with the U.S. Department of Health and Human Services Office for Civil Rights by visiting www.hhs.gov/ocr/privacy/hipaa/complaints, calling 1-800-368-1019, or writing to 200 Independence Avenue S.W., Washington, D.C. 20201. We will not retaliate against you for filing a complaint.

How to exercise your rights or contact us

Send requests and questions to our Privacy Officer:

Kayla Walsh, Privacy Officer, Elevare Health, Inc.
Email: privacy@elevare.health

You can also ask Vera in the app to connect you with a person, and your request will be routed to the Privacy Officer.

This Notice is effective September 18, 2026. Elevare Health, Inc. is a Delaware public benefit corporation.