This Privacy Policy describes how Foresight Health, Inc. ("Foresight Health," "we," "us," or "our") collects, uses, and protects information in connection with the SMS text messaging program through which we send notifications to patients of our partner clinics about Medicare-covered care management programs.

This Privacy Policy applies to information collected through our SMS program. For information about how your treating clinic uses and discloses your health information, please consult your clinic's Notice of Privacy Practices.

1. Who We Are

Foresight Health, Inc. is a management services organization (MSO) that provides care management technology and operational services to specialty clinics. Calls and clinical services associated with this program are provided by Foresight Health Medical PA, an affiliated professional corporation that employs licensed nurses and other clinicians. Both entities operate under appropriate agreements with our partner clinics, including Business Associate Agreements where required by the Health Insurance Portability and Accountability Act ("HIPAA").

2. Information We Collect

We collect only the minimum information necessary to operate the SMS notification program:

• Your name

• Your mobile phone number

• The name of the partner clinic where you receive care

• Your eligibility status for Medicare-covered care management programs

• Your responses to our messages, including opt-out (STOP) and help (HELP) requests

• Standard message metadata such as date, time, and delivery status of messages

We obtain this information from your treating clinic, which has provided your contact information to us as part of its care coordination relationship with us.

3. How We Use Your Information

We use your information solely to:

• Notify you that a nurse from our care team intends to call you about a Medicare-covered care management program offered through your clinic

• Respond to your replies, including HELP requests, and to process opt-out (STOP) requests

• Operate, secure, monitor, and improve the SMS program

• Maintain records required by healthcare and telecommunications regulations

• Comply with applicable law

We do not use your information for advertising or for marketing of unrelated products or services.

4. We Do Not Sell or Share Your Information for Marketing

We do not sell your personal information. We do not share, rent, or disclose your mobile phone number, the contents of your SMS messages, or your SMS opt-in status with any third party for marketing or promotional purposes.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing to subcontractors in support of services you have requested from us is permitted; all other categories exclude text messaging originator opt-in data and consent — this information will not be shared with any third parties.

We share information only with the limited categories of recipients listed below, and only as needed to deliver this program:

• Your treating clinic, for purposes of care coordination

• Foresight Health Medical PA clinical staff, who provide the care management services

• Our SMS messaging platform provider (currently Twilio), which transmits messages on our behalf under contractual confidentiality and security obligations

• Government authorities or other parties, when required by law, subpoena, or other valid legal process, or to protect rights, safety, or property

5. HIPAA and Your Health Information

Communications sent through this program are conducted as part of treatment and care coordination on behalf of your treating clinic. Information that we use to operate this program may constitute "protected health information" (PHI) under HIPAA and is governed by HIPAA, our Business Associate Agreements with your clinic, and the HIPAA Notice of Privacy Practices issued by your clinic.

The SMS messages themselves do not contain protected health information about your specific diagnoses, conditions, treatments, or test results. For more information about how your clinic uses and discloses your protected health information, please consult your clinic's Notice of Privacy Practices.

6. Your Choices

You may opt out of SMS messages at any time by replying STOP to any message you receive from this program. After you opt out, you will receive a one-time confirmation message and will no longer receive SMS messages from this program. Replying HELP will return contact information for support.

You may also contact us using the information in Section 12 to:

• Request access to information we hold about you

• Request correction of inaccurate information

• Request that we delete your information, subject to applicable law and our recordkeeping obligations

• Ask questions about this Privacy Policy

Opting out of the SMS program will not affect your medical care or your relationship with your treating clinic.

7. State Privacy Rights

Residents of certain U.S. states (including California, Virginia, Colorado, Connecticut, Utah, and others) may have additional rights regarding their personal information, such as the right to know, access, correct, delete, or opt out of certain processing. To exercise those rights, please contact us using the information in Section 12. Note that information processed as PHI under HIPAA is generally exempt from these state laws and is governed instead by HIPAA and your clinic's Notice of Privacy Practices.

8. Data Security

We use administrative, technical, and physical safeguards designed to protect your information, consistent with the HIPAA Security Rule and industry practices. SMS messages are transmitted via mobile carriers and through our messaging platform using industry-standard encryption in transit. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Data Retention

We retain SMS-related information for as long as needed to deliver the program, comply with legal and regulatory obligations (including healthcare, telecommunications, and consumer-protection recordkeeping rules), resolve disputes, and enforce our agreements. Opt-out records are retained on an ongoing basis to ensure that opt-out requests are honored.

10. Children

This program is not directed to children under 18. We do not knowingly enroll individuals under 18 in this SMS program.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this policy indicates when it was most recently revised. Material changes will be communicated through our website or, where appropriate, directly through the program.

12. Contact Us

If you have questions about this Privacy Policy or our information practices, please contact us:

Foresight Health, Inc. 2261 Market Street STE 85657 San Francisco, CA 94114 Email: support@foresighthealth.ai Phone: (510) 880-3084