Privacy Policy

1. INTRODUCTION This privacy policy (“Privacy Policy”) of ThoroughCare, Inc. (“ThoroughCare” or “Us” or “We”) sets forth the terms applicable to you (“You” or “Your”) and describes how we collect, use, process, and disclose your Personal Information, in conjunction with your access to and use of the ThoroughCare Application including https://www.thoroughcare.net/(the “Website”) and any application(s), including updates, available on the Website (the “Application”) and also the terms of service that apply to any of the services accessible through any such Application (collectively, the “Services”), plus any information we collect in our capacity as a Business Associate to your health care provider, which is a Covered Entity under the Health Insurance Portability and Accountability Act (“HIPAA”). Your trust is important to us and we’re committed to protecting the privacy and security of your Personal Information. BY ACCESSING AND/OR USING THE APPLICATION OR WEBSITE, YOU ARE ACKNOWLEDGING THAT YOU HAVE READ AND AGREE TO THE TERMS OF THIS PRIVACY POLICY. IF YOU DO NOT AGREE, YOU MUST IMMEDIATELY CEASE USING THE APPLICATION AND WEBSITE.
   
   
2. INFORMATION WE COLLECT There are three general categories of information we collect: Information You Give to Us, Information We Automatically Collect from Your Use of the ThoroughCare Application and Services, and Information We Collect from Third Parties (collectively the “Personal Information”).

2.1 Information You Give to Us.

2.1.1 Information that is necessary for the use of the thoroughfare Application. We ask for and collect the following Personal Information about you when you use the ThoroughCare Application. This information is necessary for the adequate performance of the contract between you and us and to allow us to comply with our legal obligations. Without it, we may not be able to provide you with all the requested services.

• Account Information. When you sign up for a ThoroughCare Account, we require certain information such as your first name, last name, email address, and date of birth.
• Profile and Offering Information. To use certain features of the ThoroughCare Application (such as creating an Offering), we may ask you to provide additional information, which may include your address, phone number, and a profile picture.
• Identity Verification Information. To help create and maintain a trusted environment, we may collect identity verification information (such as images of your government issued ID, passport, national ID card, or driving license, as permitted by applicable laws) or other authentication information.
• Payment Information. To use certain features of the ThoroughCare Application (such as creating an Offering), we may require you to provide certain financial information (like your bank account or credit card information) in order to facilitate the processing of payments (via ThoroughCare Payments).
• Communications with ThoroughCare and other Users. When you communicate with ThoroughCare or use the ThoroughCare Application to communicate with other Users, we collect information about your communication and any information you choose to provide.

You may choose to provide us with additional Personal Information in order to obtain a better user experience when using ThoroughCare Application. This additional information will be processed based on our legitimate interest or when applicable, your consent.

2.1.3 Information We Automatically Collect from Your Use of the ThoroughCare Application and Services. When you use the ThoroughCare Application, we automatically collect Personal Information about the services you use and how you use them. This information is necessary for the adequate performance of the contract between you and us, to enable us to comply with legal obligations and given our legitimate interest in being able to provide and improve the functionalities of the ThoroughCare Application and Payment Services.

• Geo-location Information. When you use certain features of the ThoroughCare Application, we may collect information about your precise or approximate location as determined through data such as your IP address or mobile device’s GPS to offer you an improved user experience. Most mobile devices allow you to control or disable the use of location services for applications in the device’s settings menu. ThoroughCare may also collect this information even when you are not using the app if this connection is enabled through your settings or device permissions.
• Usage Information. We collect information about your interactions with the ThoroughCare Application such as the pages or content you view, your searches for Offerings, you have made, and other actions on the ThoroughCare Application.
• Log Data and Device Information. We automatically collect log data and device information when you access and use the ThoroughCare Application, even if you have not created a ThoroughCare Account or logged in. That information includes, among other things: details about how you’ve used the ThoroughCare Application (including if you clicked on links to third party applications), IP address, access dates and times, hardware and software information, device information, device event information, unique identifiers, crash data, cookie data, and the pages you’ve viewed or engaged with before or after using the ThoroughCare Application.
• Cookies and Similar Technologies. We use cookies and other similar technologies when you use our platform, use our mobile app, or engage with our online ads or email communications. We may collect certain information by automated means using technologies such as cookies, web beacons, pixels, browser analysis tools, server logs, and mobile identifiers. In many cases the information we collect using cookies and other tools is only used in a non-identifiable without reference to Personal Information. For example, we may use information we collect to better understand website traffic patterns and to optimize our website experience. In some cases, we associate the information we collect using cookies and other technology with your Personal Information. Our business partners may also use these tracking technologies on the ThoroughCare Application or engage others to track your behavior on our behalf.

• You have the right to decide whether to accept or reject cookies. You can set or amend your web browser controls to accept or refuse cookies. If you choose to reject cookies, you may still use our website, though your access to some functionality and areas of our site may be restricted. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. Additionally, you can enable the "Do Not Track" (DNT) feature in your browser settings, which sends a signal to websites requesting that your browsing activity not be tracked. Please refer to your browser's help menu for more information on how to manage your cookie settings and DNT signals. ThoroughCare is committed to remaining apprised of DNT standards. However, ThoroughCare does not support DNT browser settings and does not currently participate in any DNT frameworks that would allow ThoroughCare to respond to signals or other mechanisms regarding the collection of your personal information.

2.1.4 Information We Collect from Third Parties. ThoroughCare may collect information, including Personal Information, that others provide about you when they use the ThoroughCare Application, or obtain information from other sources and combine that with information we collect through the ThoroughCare Application. We do not control, supervise or respond for how the third parties providing your information process your Personal Information, and any information request regarding the disclosure of your Personal Information to us should be directed to such third parties.

2.3 Children’s Data. Our websites and applications are not directed to children under 13 and we do not knowingly collect any Personal Information directly from children under 13. If you believe that we processing the Personal Information pertaining to a child inappropriately, we take this very seriously and urge you to contact us using the information provided under the “Contact Us” section below.

3. HOW WE USE INFORMATION WE COLLECT We may use, store, and process Personal Information to (1) provide, understand, improve, and develop the ThoroughCare Application, (2) create and maintain a trusted and safer environment (such as to comply with our legal obligations and ensure compliance with ThoroughCare Policies) and (3) provide, personalize, measure, and improve our advertising and marketing.

3.1 Provide, Improve, and Develop the ThoroughCare Application. We may use the Personal Information to provide, improve, and develop the ThoroughCare Application. We process this Personal Information for these purposes given our legitimate interest in improving the ThoroughCare Application and our Users’ experience with it, and where it is necessary for the adequate performance of the contract with you.

3.2 Create and Maintain a Trusted and Safer Environment. We may use the Personal Information to create and maintain a trusted and safer environment such as to:

• detect and prevent fraud, spam, abuse, security incidents, and other harmful activity,
• conduct security investigations and risk assessments,
• verify or authenticate information or identifications provided by you (such as to verify your Accommodation address or compare your identification photo to another photo you provide),
• conduct checks against databases and other information sources, including background or police checks, to the extent permitted by applicable laws and with your consent where required,
• comply with our legal obligations,
• Resolve any disputes with any of our Users and enforce our agreements with third parties,
• enforce our Terms of Use and other policies, and
• in connection with the activities above, we may conduct profiling based on your interactions with the ThoroughCare Application, your profile information and other content you submit to the ThoroughCare Application, and information obtained from third parties. In limited cases, automated processes may restrict or suspend access to the ThoroughCare Application if such processes detect activity that we think poses a safety or other risk to the ThoroughCare Application, our community, or third parties. If you challenge the decisioning based on the automated process, please contact us as provided in the Contact Us section below.

We process this Personal Information for these purposes given our legitimate interest in protecting the ThoroughCare Application, to measure the adequate performance of our contract with you, and to comply with applicable laws.

3.3 Provide, Personalize, Measure, and Improve our Advertising and Marketing. We may use the Personal Information to provide, personalize, measure, and improve our advertising and marketing. We will process your Personal Information for the purposes listed in this section given our legitimate interest in undertaking marketing activities to offer you products or services that may be of your interest. You may opt-out of receiving any marketing or advertisement materials from ThoroughCare at any time by following the unsubscribe link or by contacting us.

3.5 SMS Terms for U.S. For text messaging in the United States, by requesting, joining, agreeing to, enrolling in, signing up for, acknowledging, or otherwise consenting to receive one or more text messages (“Opting In”) or using a ThoroughCare arrangement in which ThoroughCare sends (or indicates that it may send, or receives a request that it send) one or more text messages (“Text Message Service”), you accept these SMS Terms for U.S. (“SMS Terms”), consent to the handling of your Personal Information as described in the ThoroughCare Privacy Policy, and agree to resolve disputes with ThoroughCare as described in our Terms of Service. Message and data rates may apply. ThoroughCare will use reasonable commercial efforts to deliver the automated marketing text messages to the number you provide through compatible wireless carriers. Carriers and ThoroughCare are not liable for delayed or undelivered messages. The short code we use for some Text Message Services may not be supported on all U.S. carriers.

Opting In

By Opting In to a Text Message Service:

• You expressly authorize ThoroughCare to use auto dialer or non-auto dialer technology to send text messages to the cell phone number associated with your Opt-In (i.e., the number listed on the Opt-In form or instructions, or, if none, the number from which you send the Opt-In, or, if none, the number on file for your account). You also authorize ThoroughCare to include marketing content in any such messages. You do not have to Opt In or agree to Opt In as a condition of purchase.
• You consent to the use of an electronic record to document your Opt-In. To withdraw that consent, request a free paper or email copy of the Opt-In, or to update our records with your contact information, please contact us via the methods described in the Contact Us section. To view and retain an electronic copy of these SMS Terms or the rest of your Opt-In, you will need (i) a device (such as a computer or cell phone) with internet access, and (ii) either a printer or storage space on such device. If you withdraw your consent, certain features of our service may not be available to you. To update information on how we would contact you electronically, visit your Notification settings in your account settings.
• You confirm that you are the subscriber to the relevant phone number or that you are the customary user of that number on a family or business plan and that you are authorized to Opt In.
• You consent to the use of an electronic record to document your Opt-In. To withdraw that consent, update our records with your contact information, please visit your ThoroughCare account Notifications settings or contact customer support.
• These SMS Terms still will apply if you withdraw the consent mentioned above or opt out of the Text Message Service.

After Opting In, in addition to the main messages the service offers, you may receive one or more welcome messages or administrative messages, such as (in some cases) a request to confirm your Opt-In.

About the Text Message Services and Opting Out

Message and data rates may apply. Unless otherwise noted, Text Message Services send multiple, recurring messages. ThoroughCare may terminate any Text Message Service or your participation in it at any time with or without notice, including, for example, before you have received any or all messages that you otherwise would have received, but these SMS Terms still will apply. Text STOP to any promotional message to opt out or if applicable update your “Notification” settings on your ThoroughCare account.

For additional help, text HELP in response to a marketing message or contact customer service.

3.6 Your Choices You have choices on the promotional messages that you choose to receive.

• You can limit the information you provide to ThoroughCare. Participation
• You can limit the communications that ThoroughCare sends to you.
  • To opt-out of marketing emails, simply click the link labeled “unsubscribe” at the bottom of any marketing email we send you or access the notification settings in your ThoroughCare Account.
  • To revoke permissions that you may have given to send promotional text messages, text STOP in response to any message.
  • You can always update your notification settings within your ThoroughCare Account by visiting the Notifications section of your ThoroughCare Account. Please note that even if you opt out of marketing communications, we may still need to contact you with important transactional information about your account. For example, even if you opt-out of emails, we may still send you activity confirmations or fraud alerts.

4. SHARING & DISCLOSURE

4.1 Sharing With Your Consent. Where you have provided consent, we share your information, including Personal Information, as described at the time of consent, such as when you authorize a third party application or website to access your ThoroughCare Account or when you participate in promotional activities conducted by ThoroughCare partners or third parties.

We will disclose your information when:

• You have given us your consent to share or use information about you;
• We believe that we need to share information about you to provide a service that you have requested from us or from your provider;
• We are complying with laws or responding to lawful requests and legal process or responding in an emergency situation;
• We believe it is necessary to protect our rights and the security of our Application, or the rights of our customers or partners, or to avoid liability or violations of the law; or
• We may also disclose your information in connection with or during negotiation of any merger, financing, acquisition or bankruptcy transaction or proceeding involving sale or transfer of all or a portion of our business or assets to another company.

In addition when sharing certain information protected by HIPAA,

• We share your information with our HIPAA Covered Entity clients who provide you with services, including medical groups, practices, hospitals, health systems, and physicians, specialists and staff;
• We share your information with third parties that you consent to or direct us to send/receive information to/from;
• We may share your information with our third party vendors, consultants, agents, and other service providers with whom we contract as a Business Associates under HIPAA to help us provide or improve the Application. For example, we may work with companies to host and maintain our data, website or mobile application properties, analyze our data or provide marketing assistance;
• We may disclose your health information to third party vendors in accordance with HIPAA requirements and your providers' internal privacy practices. For further details regarding these requirements, refer to the HIPAA Privacy Rule at 45 C.F.R. section 164.506;

We may also share aggregated information (information about our users that we combine together so that it no longer identifies or references an individual user) and other anonymized information for regulatory compliance, industry and market analysis, research, demographic profiling, marketing and advertising, and other business purposes. We may de-identify and aggregate your data, for business purposes in accordance with our agreements with our HIPAA Covered Entity Clients (healthcare providers)

5. OTHER IMPORTANT INFORMATION

5.1 Analyzing your Communications. We may review, scan, or analyze your communications on the ThoroughCare Application for fraud prevention, risk assessment, regulatory compliance, investigation, product development, research, analytics, and customer support purposes. These activities are carried out based on ThoroughCare's legitimate interest in ensuring compliance with applicable laws and our Terms, preventing fraud, promoting safety, and improving and ensuring the adequate performance of our services.

5.2 Linking Third Party Accounts. You may link your ThoroughCare Account with your account at a third party social networking service and must comply with the Terms of those sites. Any information you disclose to those sites may be used by those sites. We only collect your information from linked third party accounts to the extent necessary to ensure the adequate performance of our contract with you, or to ensure that we comply with applicable laws, or with your consent.

5.3 Third Party Partners & Integrations The ThoroughCare Application may contain links to third party websites or services, such as third party integrations, co-branded services, or third party-branded services (“Third Party Partners”). ThoroughCare doesn’t own or control these Third Party Partners and when you interact with them, you may be providing information directly to the Third Party Partner, ThoroughCare, or both. These Third Party Partners will have their own rules about the collection, use, and disclosure of information. We encourage you to review the privacy policies of the other websites you visit.

5.3.1. Google API Services ThoroughCare’s use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

5.4 Personal Information Processing Location The Personal Information we collect through the Application and Website will be stored on secure servers in the United States. Personal Information may be transmitted to third parties, which parties may store or maintain the data on their secure servers. These third parties are not permitted to transfer your Personal Information outside of the United States.

6. YOUR RIGHTS You may exercise any of the rights described in this section by sending an email to privacy@thoroughcare.net. Please note that we may ask you to verify your identity and request before taking further action on your request.

6.1 Managing Your Information. You may access and update some of your information through your Account settings. If you have chosen to connect your ThoroughCare Account to a third-party application you can change your settings and remove permission for the app by changing your Account settings. You are responsible for keeping your Personal Information up-to-date.

6.2 Rectification of Inaccurate or Incomplete Information. You have the right to ask us to correct inaccurate or incomplete Personal Information about you (and which you cannot update yourself within your ThoroughCare Account).

6.3 Data Access and Portability. In some jurisdictions, applicable law may entitle you to request copies of your Personal Information held by us. You may also be entitled to request copies of Personal Information that you have provided to us in a structured, commonly used, and machine-readable format and/or request us to transmit this information to another service provider (where technically feasible).

• Data Retention and Erasure. We generally retain your Personal Information for as long as is necessary for the performance of the contract between you and us and to comply with our legal obligations. In certain jurisdictions, you can request to have all your Personal Information deleted entirely." Please note that if you request the erasure of your Personal Information, we may retain some of your Personal Information as necessary for our legitimate business interests, such as fraud detection and prevention and enhancing safety. For example, if we suspend a ThoroughCare Account for fraud or safety reasons, we may retain certain information from that ThoroughCare Account to prevent that User from opening a new ThoroughCare Account in the future; we may retain and use your Personal Information to the extent necessary to comply with our legal obligations. For example, ThoroughCare may keep some of your information for tax, legal reporting and auditing obligations and because we maintain the ThoroughCare Application to protect from accidental or malicious loss and destruction, residual copies of your Personal Information may not be removed from our backup systems for a limited period of time.

6.5 Withdrawing Consent and Restriction of Processing. If we are processing your Personal Information based on your consent you may withdraw your consent at any time by changing your Account settings or by sending a communication to ThoroughCare specifying which consent you are withdrawing. Please note that the withdrawal of your consent does not affect the lawfulness of any processing activities based on such consent before its withdrawal. Additionally, in some jurisdictions, applicable law may give you the right to limit the ways in which we use your Personal Information, in particular where (i) you contest the accuracy of your Personal Information; (ii) the processing is unlawful and you oppose the erasure of your Personal Information; (iii) we no longer need your Personal Information for the purposes of the processing, but you require the information for the establishment, exercise or defense of legal claims; or (iv) you have objected to the processing pursuant to Section 6.6 and pending the verification whether the legitimate grounds of ThoroughCare override your own.

6.6 Objection to Processing. In some jurisdictions, applicable law may entitle you to require ThoroughCare not to process your Personal Information for certain specific purposes (including profiling) where such processing is based on legitimate interest. If you object to such processing ThoroughCare and/or ThoroughCare Payments will no longer process your Personal Information for these purposes unless we can demonstrate compelling legitimate grounds for such processing, or such processing is required for the establishment, exercise or defense of legal claims. Where your Personal Information is processed for direct marketing purposes, you may, at any time ask ThoroughCare to cease processing your data for these direct marketing purposes by sending an e-mail to privacy@thoroughcare.net.

6.7 Lodging Complaints. You have the right to lodge complaints about our data processing activities by filing a complaint with our Data Protection Officer who can be reached by the “Contact Us” section below or with a supervisory authority.

7. OPERATING TRANSFERS To facilitate our operations ThoroughCare may transfer, store, and process your information within our family of companies, partners, and service providers. Laws may differ from the laws in your residence.
   
   
8. We are continuously implementing and updating administrative, technical, and physical security measures to help protect your information against unauthorized access, loss, destruction, or alteration. Some of the safeguards we use to protect your information are firewalls and data encryption, and information access controls. If you know or have reason to believe that your ThoroughCare Account credentials have been lost, stolen, misappropriated, or otherwise compromised or in case of any actual or suspected unauthorized use of your ThoroughCare Account, please contact us following the instructions in the Contact Us section below. These safeguards are intended to secure our system and meet our obligations under the HIPAA Security Standards. While ThoroughCare uses reasonable security controls, WE CANNOT GUARANTEE OR WARRANT THAT SUCH TECHNIQUES WILL PREVENT UNAUTHORIZED ACCESS TO YOUR PERSONAL INFORMATION. THOROUGHCARE IS UNABLE TO GUARANTEE THE SECURITY OR INTEGRITY OF PERSONAL DATA TRANSMITTED OVER THE INTERNET, AND THERE IS NO GUARANTEE THAT YOUR PERSONAL INFORMATION WILL NOT BE ACCESSED, DISCLOSED, ALTERED, OR DESTROYED BY BREACH OF ANY OF OUR SAFEGUARDS. ACCORDINGLY, WE DO NOT AND CAN NOT ENSURE OR WARRANT THE SECURITY OR INTEGRITY OF ANY PERSONAL INFORMATION YOU TRANSMIT TO US. YOU ASSUME THE RISK THAT UNAUTHORIZED ENTRY OR USE, HARDWARE OR SOFTWARE FAILURE, AND OTHER FACTORS MAY COMPROMISE THE SECURITY OF YOUR PERSONAL INFORMATION AT ANY TIME.
   • How Can Users Protect Their Personal Information? You are solely responsible for preventing unauthorized access to your devices and your ThoroughCare account by protecting your account credentials and limiting access to your devices. ThoroughCare has no access to or control over your device’s security settings, and it is your responsibility to implement any device-level security features and protections you feel are appropriate (e.g., password protection, encryption, remote wipe capability). We recommend that you take all appropriate steps to secure any device that you use to access our Application and Website. Please note that ThoroughCare will never send you an email requesting confidential information, such as account numbers, usernames, passwords, or Social Security Numbers. If you receive a suspicious email from ThoroughCare , please notify us at privacy@thoroughcare.net. Further, if you know of or suspect any unauthorized use or disclosure of your ThoroughCare account information or any other security concern, please notify ThoroughCare immediately.
9. CHANGES TO THIS PRIVACY POLICY. ThoroughCare reserves the right to modify this Privacy Policy at any time in accordance with this provision. If we make changes to this Privacy Policy, we will post the revised Privacy Policy on the ThoroughCare Application and update the “Last Updated” date at the bottom of this Privacy Policy. We will do our best to notify you (with the updated terms being displayed on-screen or with a link to the updated terms). If you disagree with the revised Privacy Policy, you may cancel your Account. If you do not cancel your Account before the date the revised Privacy Policy becomes effective, your continued access to or use of the ThoroughCare Application will be subject to the revised Privacy Policy
   
   
10. STATE PRIVACY RIGHTS. Depending on what state you live in, you may have rights in addition to the rights listed above. These rights may include:

1. Right to access a copy of your Personal Information.
2. Right to correction of your Personal Information.
3. Right to delete your Personal Information from our Services.
4. Right to receive your Personal Information in a structured, commonly used and machine-readable format.
5. Right to opt out of certain uses of your Personal Information.
6. Right to prohibit our collection of Personal Information if it isn’t relevant and necessary to providing you Services.

If you would like to learn more and/or exercise one or more of these rights, please contact us at privacy@thoroughcare.net.

11. CONTACT US. If you have any questions or concerns after reading this Privacy Policy, please do not hesitate to contact us at privacy@thoroughcare.net. We appreciate your feedback.

Last Updated: January 8, 2026