Privacy Policy

1. Introduction

Unika Health, Inc. and its subsidiaries, corporate parents, and corporate affiliates (collectively, “Unika,” “Unika Affiliates,” “we,” “our,” or “us”) respect your privacy, and we are committed to protecting it through our compliance with this policy. This Privacy Policy (our “Privacy Policy”) explains our practices regarding the collection, use, maintenance, protection and disclosure of certain information in connection with use of our website https://unika.health/ (our “Website”) and our mobile application (our “Application”), connected monitoring devices, products, services, portals, and other related materials and technologies (collectively with the Website and Application, our “Services”).

NOTE, UNIKA IS NOT A MEDICAL GROUP. ANY TELEMEDICINE CONSULTS OBTAINED THROUGH OUR WEBSITE, APPLICATION OR SERVICES ARE PROVIDED BY INDEPENDENT MEDICAL PRACTITIONERS (EACH, A “PROVIDER”). YOUR PROVIDER IS RESPONSIBLE FOR PROVIDING YOU WITH A NOTICE OF PRIVACY PRACTICES DESCRIBING ITS COLLECTION AND USE OF YOUR HEALTH INFORMATION, NOT UNIKA. IF YOU DO NOT AGREE TO BE BOUND BY THOSE TERMS, YOU ARE NOT AUTHORIZED TO ACCESS OR USE OUR WEBSITE, APPLICATION, OR SERVICES, AND YOU MUST PROMPTLY EXIT OUR WEBSITE OR APPLICATION. IN THE EVENT OF A CONFLICT BETWEEN THIS PRIVACY POLICY AND THE NOTICE OF PRIVACY PRACTICES, THE NOTICE OF PRIVACY PRACTICES SHALL PREVAIL.

This policy applies to information we collect:

• On our Website and Application;
• through our Services;
• through telephone, email, video, text, and other electronic messages between you and our Services, including SMS text messages, multimedia messages (MMS), and automated, AI generated or prerecorded voice calls;
• when you interact with our advertising and applications on third party websites and services, if those applications or advertising include links to this policy.

It does not apply to information collected by:

• us through any other means, including on any other website operated by Unika or any third party;
• any third party, including through any application or content (including advertising) that may link to or be accessible from or on the Services.

Please read this policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is to not use our Services. Where you access or use our Services, you agree to this Privacy Policy. This Privacy Policy may change from time to time (see Changes to Our Privacy Policy). Your continued use of our Services after we make changes is deemed to be acceptance of those changes, so please check this Privacy Policy periodically for updates.

2. Children Under the Age of 18

We do not knowingly collect personal information from children under the age of 18 without consent from their parents or legal guardians. If you are under the age of eighteen (18) and wish to create an account with Unika, your parent or legal guardian must create the account, submit your personal information, and agree to our Terms of Use and this Privacy Policy on your behalf. If you are under the age of 13, you may only use our Services and access our Website and Application with the supervision and consent of your parents or legal guardians, including the Provider consultation services. If we learn that we have collected personal information from someone under the age of 13 that was not provided with the supervision and consent of the minor’s parents or legal guardian, we will promptly delete that information. If you believe we have impermissibly collected personal information from someone under the age of 13, please contact us at support@unika.health or call us at 866-899-3998.

California residents under 16 years of age may have additional rights regarding the collection and sale of their personal information. Please see State Specific Privacy Rights in Section 11 for more information.

3. Information We Collect About You and How We Collect It

Generally

We collect several types of information from and about users of our Services, specifically information:

• by which you may be personally identified, such as name, postal address, telephone number, email address, date of birth, Medicare ID (MBI), gender, health and medical information, credit card or debit card number (for product purchases) (“Personal Data”); and
• about your Internet connection, the equipment you use to access our Website, Application or use our Services and usage details, such as traffic data, logs, referring/exit pages, date and time of your visit to our Website, or use our Application or Services, error information, clickstream data, and other communication data and the resources that you access and use our Website, Application or Services.

We collect this information:

• directly from you when you provide it to us, for example, when you use connected monitoring devices (such as RPM and CGM equipment) to securely transmit physiological, health, and glucose metrics;
• automatically as you navigate through the Website and Application. Information collected automatically may include usage details, IP addresses, and information collected through cookies; and
• From third parties, for example, from your Provider, a clinic or hospital in which you are receiving health care (a “Facility”), or from the Centers for Medicare & Medicaid Services (CMS).

Information You Provide to Us

The information we collect on or through our Service includes information that you provide to us or grant us access to when you use our Services and the details of transactions you carry out through our Website or Application and of the fulfillment of your orders. You may be required to provide financial information before placing an order through our Website or Application. Your Provider or Facility may provide us with your medical history and communications between you and your Provider. We also collect information that you provide or upload through our Services, including health assessments or surveys, test results and physiological metrics, uploaded images or records, and data generated during telephone, video calls, or AI voice communications with your care team. All such clinical information and metrics reported through our Application are securely transmitted directly into our integrated Electronic Health Record (EHR) systems for care team review and care coordination. The information we collect through the Services may be maintained or associated with Personal Data we collect in other ways or receive from third parties, such as your Provider or Facility.

Information We Collect Through Automatic Data Collection Technologies

As you navigate through and interact with our Website and Application, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns:

• Usage Details. Details of your visits to our Website and Application, such as traffic data, location, logs, referring/exit pages, date and time of your visit to our Website and use of our Application, error information, clickstream data, and other communication data and the resources that you access and use on the Website and Application;
• Device Information. Information about your computer, mobile device, and Internet connection, specifically your IP address, operating system, browser type, and Application version information;
• Stored Information and Files. Where video files and photographs are submitted through the Application, the Application collects metadata and other information associated with those photographic and videographic images; and
• Real-time Location Data. The Application collects real-time information about the location of your device. If you do not want us to collect this information do not download the Application or delete it from your device. For more information, see Choices About How We Use and Disclose Your Information.

The technologies we use for this automatic data collection may include Cookies (or browser cookies), Analytics Services (such as PostHog and Mixpanel), and Session Recording Services (such as Hotjar) to help us analyze how users use the Application and understand our users' experience.

Information We Collect From Third Parties

• Account information for third party services. If you provide your third-party account credentials to us or otherwise sign in to the service through a third party site or service, you understand some content and/or information in those accounts (“Third Party Account Information”) may be transmitted into your account with us if you authorize such transmissions, and that Third Party Account Information transmitted to our Services is covered by this Privacy Policy; for example, information from your public profile, if the third party service and your account settings allow such sharing. The information we receive will depend on the policies and your account settings with the third party service.
• Information from Providers and Facilities. We may request from your Provider or a Facility where you are receiving care, your coverage, benefit, and related information on your behalf in order to provide the Service to you.
• Medicare Claims Data. Your Medicare claims data may be shared with Unika Health and its Affiliates by CMS as part of the ACCESS Model, subject to your right to opt-out.
• Information from Device Manufacturers. We may receive your biometric and health data from third-party device manufacturers when you use connected equipment to transmit your vital signs and glucose data to our systems.
• Information from our service providers. We receive information collected by third parties about your use of the Services, such as analytics service providers to analyze how you interact and engage with the Service.

4. How We Use Your Information

We use information that we collect about you or that you provide to us, including any Personal Data:

• to provide, process, fulfill, support, and administer Services ordered by you or your Provider or Facility, including Chronic Care Management (CCM), Remote Patient Monitoring (RPM), Advanced Primary Care Management (APCM), and Continuous Glucose Monitoring (CGM) services;
• to track treatment trends, update care plans, and coordinate medical services through our integrated Electronic Health Record (EHR) systems;
• to facilitate your participation in the Advancing Chronic Care with Effective, Scalable Solutions (ACCESS) Model if you voluntarily align with us;
• to present our Website and Application and their contents to you;
• to provide you with information, devices, products, or services that you or your Provider or Facility requests from us;
• to process, fulfill, support, and administer transactions and orders for devices, products and Services ordered by you;
• to provide you with notices about your Unika account;
• to administer surveys about our Services;
• to fulfill any other purpose for which you provide it;
• to carry out our obligations and enforce our rights arising from any contracts entered into between you and us or your Provider or Facility and us, including for billing and collection;
• in any other way we may describe when you provide the information; and
• for any other purpose with your consent.

We may also use your information to contact you about devices, products and Services that may be of interest to you, including through newsletters. Some information Unika collects constitutes protected health information (“PHI”) under the U.S. Health Insurance Portability and Accountability Act (“HIPAA”). Unika will use and disclose PHI only as permitted in accordance with the Notice of Privacy Practices and we only collect the PHI we need to fully perform our Services and to respond to you or your Provider or Facility.

5. Use of AI and Automated Communications

Unika aligns to the United States Department of Health and Human Services (“HHS”) provided guidelines on the use of Artificial Intelligence (“AI”). Unika Health and its Affiliates use AI voice systems, automated text messaging, and other digital outreach systems to provide recurring operational text messages (SMS), multimedia messages (MMS), and automated, AI generated or prerecorded voice calls regarding your healthcare, including but not limited to treatment reminders, appointment management, care follow ups, prescription notifications, and clinical coordination updates.

To ensure accurate medical record keeping and coordination of care, these AI voice interactions are securely processed and transcribed by Unika Health, its Affiliates, and their AI vendors. We do not use your data to train our AI/large language model (LLM). Human reviews are performed to ensure that AI outputs align with HHS guidelines and applicable laws.

You may request to override or opt out of using our AI customer-facing tool. You may also opt out of AI interactions at any time by stating “STOP” or “Opt-out” to our or our Affiliates’ AI voice agent during a call.

While we make reasonable efforts to ensure that Unika's AI tool provides accurate and appropriate responses, AI is a new, emerging technology and may be prone to inaccuracies. The information provided is not medical advice and cannot replace guidance from your healthcare professional. AI systems may provide inaccurate, incomplete, or misleading information. You should independently review and verify any AI-generated outputs before relying on them.

6. Disclosure of Your Information

We do not share, sell, or otherwise disclose your Personal Data for purposes other than those outlined in this Privacy Policy. However, we may disclose aggregated information about our users, and information that does not identify any individual, without restriction.

We may disclose Personal Data that we collect or you provide as described in this privacy policy:

• to a Provider, Facility and/or healthcare team for healthcare purposes, including transmitting physiological, health, and glucose metrics into integrated Electronic Health Record (EHR) systems;
• to the Centers for Medicare & Medicaid Services (CMS) as required to participate in the ACCESS Model;
• to our affiliates, contractors, service providers, AI vendors, and other third parties we use to support our business and who are bound by contractual obligations to keep Personal Data confidential;
• to a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets;
• for any other purpose disclosed by us when you provide the information; and
• with your consent.

We may also disclose your Personal Data to comply with any court order, law, or legal process; to enforce or apply our agreements; and if we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Unika, our customers, or others.

7. Choices About How We Use and Disclose Your Information

We strive to provide you with choices regarding the Personal Data you provide to us:

• TCPA and Automated Communications Opt-out: You retain the right to revoke your consent for automated text messaging and AI voice calls at any time by replying "STOP" to any text message, stating “STOP” or “Opt-out” to our or our Affiliates’ AI voice agent during a call, or contacting us directly.
• Medicare Claims Data Opt-Out: You have the right to refuse (opt-out of) sharing your Medicare claims data with Unika Health and its Affiliates at any time by notifying Unika Health’s compliance office in writing, or by calling 1-800-MEDICARE (1-800-633-4227).
• Tracking Technologies and Advertising: You can set your browser or operating system to refuse all or some cookies, or to alert you when cookies are being sent.
• Promotional Offers from Unika: If you do not wish to have your email address used by Unika to promote our own products and Services, you can opt-out at any time by clicking the unsubscribe link.

8. Your Rights Regarding Your Information and Accessing and Correcting Your Information

You can review and change your Personal Data by logging into our Website or Application and visiting the profile page of our Application or Website. You may also notify us through the Contact Information below of any changes or errors in any Personal Data we have about you to ensure that it is complete, accurate, and as current as possible or to delete your account. With respect to any PHI Unika may obtain, you have certain rights under HIPAA to access your data, to restrict use and disclosure of it, to request communication methods, to request corrections to your data, to receive an accounting of disclosures and to receive notice of any breach.

9. Do Not Track Signals

At this time, we do not honor "do not track" signals, but we currently do not use automated data collection technologies to collect information about your online activities over time and across third party websites or other online services.

10. Data Security

We have implemented measures designed to secure your Personal Data from accidental loss and from unauthorized access, use, alteration, and disclosure. We use encryption technology for information sent and received by us. The safety and security of your information also depends on you. Any transmission of Personal Data is at your own risk.

11. State Specific Privacy Rights

The law in some states may provide you with additional rights regarding our use of Personal Data. To learn more about any additional rights that may be applicable to you as a resident of one of these states, please see the privacy addendum for your state that is attached to this Privacy Policy.

12. Changes to Our Privacy Policy

We may change this Privacy Policy at any time. It is our policy to post any changes we make to our Privacy Policy on this page with a notice that the Privacy Policy has been updated on the Services.

13. Contact Information

If you have any questions, concerns, complaints or suggestions regarding our Privacy Policy or otherwise need to contact us, you may contact us at the contact information below.

How to Contact Us:

Unika Privacy Addendum for California Residents

Effective Date: August 26, 2026
Last Reviewed on: August 25, 2026

This Privacy Addendum for California Residents (“Privacy Addendum”) supplements the information contained in the Unika Privacy Policy that this is attached to and applies solely to all visitors, users, and others who reside in the State of California (“consumers” or “you”). We adopt this notice to comply with the California Consumer Privacy Act of 2018 (“CCPA”), as amended.

INFORMATION WE COLLECT

In particular, Unika collects and has collected Personal Information through its Services from its consumers, as provided below. Categories of Personal Information Unika has collected in the preceding 12 months include: Identifiers, California Customer Records statute categories, Protected classification characteristics, Commercial information, Biometric information (e.g., physiological patterns, and sleep, health, or exercise data from RPM/CGM equipment), Internet or other similar network activity, Geolocation data, and Inferences drawn from other Personal Information.

Categories of sources from which Unika has collected Personal Information:

• Directly from you.
• Indirectly from you.
• Service providers.
• Business partners who we partner with to offer our Services, such as your Provider or a Facility where you are receiving care.

USE OF PERSONAL INFORMATION

We may use or disclose the Personal Information we collect for one or more of the following business purposes: To fulfill or meet the reason you provided the information; To provide, support, develop and improve our Services and products; To create, maintain, and secure your account with us; To process your requests, purchases, transactions, and payments and prevent transactional fraud; To provide you with support and to respond to your inquiries; To help maintain the safety, security, and integrity of our Services and products; To respond to law enforcement requests; Undertaking internal research; As described to you when collecting your Personal Information; To evaluate or conduct a merger, divestiture, or restructuring.

SHARING PERSONAL INFORMATION

We do not sell, rent, release, disclose, disseminate, make available, transfer, or otherwise communicate your Personal Information to another organization for monetary or other valuable consideration. We share your Personal Information with the following categories of third parties: Service providers (including AI vendors) and Business partners, such as your Provider or a Facility where you are receiving care.

Sales of Personal Information: We do not sell your Personal Information. In the preceding twelve (12) months, Unika had not sold any Personal Information.

YOUR RIGHTS AND CHOICES

The CCPA provides consumers (California residents) with specific rights regarding their Personal Information, including Access request rights and Deletion request rights.

Exercising Access and Deletion Rights To exercise the access and deletion rights described above, please submit a verifiable consumer request to us by either:

• Calling us at 866-899-3998; or
• Emailing us at support@unika.health.

Right to opt-in/out of the sale and/or sharing of your personal information Unika provides users with the ability to opt in or opt out of sharing and selling personal information in compliance with CIPA and CCPA. A ‘Do Not Sell My Personal Information’ option is prominently displayed on our website’s landing page.

NON-DISCRIMINATION

We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:

• Deny you goods or services.
• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
• Provide you a different level or quality of goods or services.
• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

CHANGES TO OUR CALIFORNIA ADDENDUM

We reserve the right to amend this Privacy Addendum at our discretion and at any time.

CONTACT INFORMATION

If you have any questions or comments about this Privacy Addendum, please do not hesitate to contact us at: