Privacy Policy

Effective Date: April 6, 2026

LERA operates an organized healthcare arrangement designed to deliver whole-body care through a coordinated structure.

Clinical services are provided exclusively by LERA Medical Informatics LLC ("LMI"), a healthcare services entity. Your clinical relationship as a member is with LMI.

LMI delivers health and wellness services through a team of licensed medical practitioners, whole-body health coaches, and mindful resilience coaches, all of whom are independent contractors of LMI.

LERA Health LLC ("LERA Health") provides the technology platform, administrative services, and operational support that enable care delivery.

LERA Nutraceuticals LLC ("LN") provides LERA's proprietary professional-grade supplements.

LMI, LERA Health and LN may be referred to collectively as "LERA" where appropriate; however, clinical services and medical decision-making are provided solely by LMI.

This Privacy Policy explains how LERA (also "we," "us," or "our") collects, uses, and protects personal information when you visit our website, use our platform, or interact with us outside of direct clinical care.

This Policy applies to information that is not governed by the HIPAA Notice of Privacy Practices ("NPP"). If information is protected health information ("PHI") under HIPAA, the NPP controls.

Our Approach to Privacy

We believe privacy is part of care.

We collect only what we need, use it thoughtfully, and protect it as sensitive information.

We do not sell personal data.

We do not share personal data for advertising purposes.

Information We Collect

1) Information You Provide Directly

This may include:

• name, email address, phone number
• account credentials
• demographic information
• intake or onboarding information not yet part of clinical care
• communications with our team
• payment or billing information (processed through secure third parties)

2) Website and Platform Usage Information

When you visit our website or use our platform, we may automatically collect:

• device type and browser
• IP address
• pages viewed and actions taken
• referral URLs
• cookies and similar technologies

This information helps us understand how our platform is used and how to improve it.

We may offer optional community discussion spaces intended for general education and peer support. These forums are not designed for the exchange of personal health information.

3) Information That Becomes PHI

If you enroll in clinical services, some information you provide may become protected health information (PHI).

Once information is PHI, it is governed by our HIPAA Notice of Privacy Practices, not this Privacy Policy.

How We Use Information

We use personal information to:

• provide and operate our website and platform
• create and manage your account
• communicate with you about services, updates, and support
• process payments and transactions
• improve our products and user experience
• maintain security and prevent fraud
• comply with legal obligations

Cookies and Analytics

We use cookies and similar technologies to:

• remember preferences
• understand how visitors use our site
• improve performance and usability

You can manage cookie preferences through your browser settings. Some features may not function properly if cookies are disabled. We may also record server logs to record a visitor's IP address and collect general information about the visit to our site.

AI, Analytics, and Personalization (Non-Clinical)

Outside of clinical care, we may use analytics and rules-based systems to:

• improve platform functionality
• personalize educational content
• support product development

We may use one or more systems/tools that use artificial intelligence (AI). We do not use AI applications that use your information in public-facing learning libraries and your information will not be used by such AI applications to produce results for others. These systems are designed to be traceable, verifiable, and grounded in evidence. They do not replace clinical judgment.

How We Share Information

We may share personal information with:

Service Providers

Trusted vendors who help us operate our business (for example, hosting, analytics, payment processing, customer support).

These providers are required to protect your information and use it only for permitted purposes.

Legal and Compliance Purposes

We may disclose information if required by law, court order, or to protect the rights, safety, or security of LERA or others.

Business Transitions

If LERA is involved in a merger, acquisition, or similar transaction, information may be transferred as part of that process, subject to appropriate safeguards.

What We Do Not Do

• We do not sell personal information.
• We do not share personal information with third parties for targeted advertising.
• We do not allow employers to access individual-level health data.

Enterprise and Partner Programs

If LERA is offered through an employer or partner organization:

• individual data is not shared
• reporting is aggregated and de-identified
• participation cannot be used for employment decisions

Third Party Websites

Our services may, from time to time, contain links to and from third party websites. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for their policies. Please check the individual policies before you submit any information to those websites.

Data Security

We use administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, disclosure, or misuse.

No system is 100% secure, but we take reasonable and appropriate measures to protect your data.

Data Retention

We retain personal information only as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, or resolve disputes.

PHI retention is governed by applicable healthcare laws and our HIPAA policies.

Your Privacy Rights

Depending on where you live, you may have rights to:

• access your personal information
• request correction or deletion
• opt out of certain communications
• request information about how data is used

Requests can be made by contacting us at the email address below.

Children's Privacy

LERA is not intended for children under 18, and we do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time.

Changes will be posted on our website with an updated effective date.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact:

Privacy Team
LERA Health
Email: support@lerahealth.com