Privacy Policy

Effective date: September 13, 2026

Moyava Health LLC ("Moyava Health," "we," "us," or "our") provides Moyava Clinical, including patient-education and clinical-communication services. This Privacy Policy explains how we collect, use, disclose, and protect information through our public website and services.

1. Information we collect

Depending on how you interact with Moyava Clinical, we may collect:

• Website information: basic device, browser, usage, and security information generated when the public website is accessed.
• Contact information: information you voluntarily provide when contacting us, such as your name, organization, email address, phone number, and message.
• Clinic account information: professional contact information, clinic affiliation, role, authentication records, and security events for authorized clinic users.
• SMS consent information: the recipient mobile number, the date, time, and time zone of the consent, the consent method, the versions of the consent text, Privacy Policy, and SMS Terms that were presented, the affirmation itself, the current opt-out status, and, as attribution for who presented the disclosure, the clinic and authorized staff member who did so. Moyava Health LLC is the recipient and controller of this consent; see Section 3.
• Delivery information: the sending clinic, delivery method, delivery status, secure-link status, expiration or revocation events, and access or audit events necessary to operate and secure the service.
• Information handled for clinics: when a clinic uses Moyava Clinical to deliver clinician-approved materials, we may process information on the clinic's behalf as necessary to provide the service.

We seek to limit information to what is reasonably necessary for the relevant function. The SMS consent workflow does not require the patient's name or diagnosis.

2. How we use information

We may use information to:

• Operate, secure, maintain, and improve Moyava Clinical;
• Authenticate authorized clinic users;
• Record and honor SMS consent and opt-out choices;
• Deliver clinician-approved materials using the method selected by the clinic and recipient;
• Detect misuse, investigate security events, and maintain audit records;
• Respond to questions and support requests;
• Meet legal, regulatory, contractual, and carrier requirements; and
• Protect the rights, safety, and integrity of users, clinics, recipients, and Moyava Clinical.

3. SMS and mobile information

The Moyava Clinical text messaging program, operated by Moyava Health LLC, receives and controls SMS consent collected through the Moyava Clinical consent workflow. We use mobile numbers and consent records only to operate the Moyava Clinical messaging program and related support, security, compliance, and auditing functions.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be sold, rented, transferred, or shared with any third parties or affiliates.

This restriction applies notwithstanding any other provision of this Privacy Policy. Vendors providing infrastructure necessary to transmit messages may process this information solely on behalf of Moyava Health LLC, under contractual restrictions, and may not retain, disclose, or use it for their own purposes.

4. How we disclose information

The disclosure categories below exclude text messaging originator opt-in data and consent, which are governed exclusively by Section 3 and are not shared with third parties or affiliates.

We may disclose information:

• To the clinic that initiated or manages the relevant communication;
• To service providers that help us operate, secure, host, or deliver the service;
• When required by law, legal process, or valid governmental request;
• To protect rights, safety, security, and prevent fraud or misuse; or
• In connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to applicable law and contractual duties.

We do not sell personal information.

5. Healthcare information

Clinics are responsible for their clinical relationship with patients and families and for their own privacy notices and legal obligations. When Moyava Health processes protected health information on behalf of a covered healthcare organization, the applicable agreement with that organization governs that processing.

This Privacy Policy is not a clinic's Notice of Privacy Practices.

6. Data retention

We retain information for as long as reasonably necessary to provide the service, maintain security and audit records, honor consent and opt-out choices, resolve disputes, and meet legal or contractual obligations. Retention periods may vary by information type and clinic agreement.

7. Data security

We use administrative, technical, and organizational safeguards designed to protect information. No system or transmission method can be guaranteed to be completely secure.

8. Your choices

You may:

• Reply STOP to opt out of future text messages from the sending number;
• Reply HELP for help information;
• Continue without SMS and use an available QR code, printed copy, or copied secure link; or
• Email privacy@moyavahealth.com with privacy questions.

Opting out of SMS does not prevent a clinic from providing care or sharing materials through another method.

9. Minors' privacy

The public website and provider service are intended for adults, healthcare organizations, authorized clinic users, patients, parents, legal guardians, and authorized representatives. They are not directed to minors for independent use. Clinic staff, parents, legal guardians, or other authorized representatives control the delivery of materials for minors.

10. Third-party links and services

Moyava Clinical may link to or rely on third-party services. Their privacy practices are governed by their own terms and policies.

11. Changes to this policy

We may update this Privacy Policy. We will post the updated version with a revised effective date. Material changes will be communicated when required by law or contract.

12. Contact us

Questions about this Privacy Policy may be sent to:
Moyava Health LLC
Moyava Clinical is a product of Moyava Health LLC.
Email: privacy@moyavahealth.com

See also the SMS Terms and Conditions and Terms of Use.