Privacy Policy

TeraHealth offers medication companion services that help people on prescribed therapies, starting with GLP-1 medications, build healthy habits around food, activity, sleep and side-effect self-care. Some organizations offer our Services to their patients or customers under their own name. Our role and your rights depend on how you reach us:

1. Members of a Partner program. A telehealth provider, telehealth platform, pharmacy, drug manufacturer or other organization (a "Partner") offers you our Services, sometimes under the Partner's brand. We may run the program for the Partner, with our coaches, or provide the technology that the Partner's own app and coaches use.
2. Direct users of Tera Health Coach, our standalone app, who join without a Partner or practitioner.
3. Patients of a practitioner who uses TeraPro or Tera Patient Copilot.
4. Partners, practitioners and their staff who use our dashboards, review tools, API or SDK.
5. Website visitors and business contacts who browse tera.health or contact us.

If you use the Services through a Partner or practitioner, their own privacy policy or Notice of Privacy Practices also applies to you. Section 5 explains when HIPAA applies.

Information you give us

• Account and contact details: name, email, phone number, date of birth, login credentials and communication preferences.
• Health and wellness information: goals, weight and body measurements, conditions, allergies, food preferences, activity, sleep, supplement use, symptoms and, where relevant, reproductive and hormonal information.
• Medication information: the medication you take, its form and dose step, and your titration schedule.
• Side effects and check-ins: side effects or symptoms you report, how you are feeling and how you are following your plan.
• Messages: what you write to coaches or to the AI coach, in the app or by text.
• Lab results: results you or your Partner share with us, or that come from a lab provider you connect.

Information from Partners and practitioners

• Enrollment details such as your name, contact details, eligibility and the program you joined.
• Your titration schedule when you enroll and whenever it changes.
• Prescriber and pharmacy details needed to route your questions and side-effect reports.
• Practitioner-entered information such as protocols or notes in TeraPro or Tera Patient Copilot.

Information from services you connect

If you choose to connect them, we receive information from wearables, lab providers, grocery services, identity providers (such as Google or Apple) and payment processors.

Information about business users

For Partner and practitioner staff: name, role, organization, work contact details, credentials, billing details and how they use our tools.

Information collected automatically

Device and browser type, IP address, general location, app and website activity, and cookie data. See Section 10 for cookies.

• To run your program: build your plan around your medication, titration schedule, goals and preferences, have coaches review it where your program includes human coaching, and update it as your schedule changes.
• To coach and support you: send messages, reminders and check-ins, and answer your questions.
• To route safety questions: pass side effects and questions about medication, dose or labs to your prescriber or Partner (see Section 6).
• To report to Partners: give your Partner the program information its agreement with us allows, such as your progress, time on therapy and reported side effects.
• To connect services you choose, such as turning your plan into a grocery list.
• To improve the Services: analyze usage, outcomes and what members ask the AI coach, in aggregate or de-identified form.
• To communicate with business contacts about our products, including marketing you can opt out of.
• To protect the Services and meet legal duties: prevent fraud and misuse, enforce our terms and comply with the law.

• Rules, not AI, make clinical choices. Plan recommendations follow rules held in curated clinical knowledge bases, for example which foods suit your goals and conditions, or which coaching protocol fits your medication.
• Language models only explain. We use language models to combine those rule outputs and explain them in plain language. They do not create clinical rules or protocols.
• The AI coach. The AI coach is software, not a person. It answers from the same rules. It does not explain lab results, diagnose conditions or provide therapy.
• People approve the rules. Licensed dietitians sign off the food and supplement rules behind every plan. If your program includes human coaching, a health coach and a fitness coach review your plan and tailor it within those rules. If your program is AI-only, no human coach reviews your individual plan.
• No automated medical decisions. We do not prescribe, dose or adjust medication. Those decisions stay with your prescriber.
• Model training. We do not use identifiable health information to train AI models. We do not attempt to re-identify de-identified information, and we require our service providers to commit to the same. Service providers that run language models for us may use your information only to provide that service to us.

When we act as a business associate, we use and share your health information only as our agreement with the Partner and HIPAA allow, and your HIPAA rights are exercised through that Partner. Where this policy and a Business Associate Agreement differ, the agreement controls for that information.

Drug manufacturers are usually not covered by HIPAA. In a manufacturer-sponsored program, the manufacturer receives only aggregate, de-identified program results, apart from the safety reports described in Section 6, unless you agree otherwise.

We share information only as described here, as our agreements allow, or with your consent.

• Your Partner and prescriber, to coordinate your program: enrollment, progress, time on therapy and reported side effects. Questions about your medication, dose or labs go to your prescriber.
• Drug safety teams. If you report a possible side effect in a manufacturer-sponsored program, we may share it with the manufacturer's drug safety team, as the law and our agreement require. These reports include only what safety reporting needs.
• Sponsoring manufacturers, aggregate, de-identified program results only, unless you agree otherwise.
• Coaches, employed or contracted by TeraHealth or by your Partner, who need your information to review your plan and support you. Some are outside the United States (Section 7).
• Service providers that host, secure and support the Services for us, such as cloud hosting, language model processing, messaging, analytics and payment processors. A current list is on our Subprocessors page. They may use your information only to serve us, and those that handle health information covered by HIPAA sign Business Associate Agreements.
• Services you connect, such as grocery services, wearables or lab providers, when you ask us to.
• Legal and safety reasons, when the law requires it or to protect someone's safety, rights or property.
• A business transfer, such as a merger or sale of assets, subject to this policy.

We do not sell personal information, share it for targeted advertising, or let sponsors use your information to market to you.

We store information in the United States. We do not store your information outside the United States. Some coaches and support staff work outside the United States, including in the Philippines, and may view your information to support you. They work under written confidentiality and data-protection obligations, access only what their role needs, and work in our secured systems rather than keeping copies.

If you use the Services from outside the United States, your information is transferred to and processed in the United States.

We keep information while your account or program is active, and afterwards as long as needed to provide the Services, meet legal, safety-reporting and audit duties, resolve disputes and enforce our agreements. For Partner programs, our agreement with the Partner also sets how long we keep information and whether we return or delete it when the program ends. De-identified information may be kept longer.

We use administrative, technical and physical safeguards, including encryption in transit and at rest, role-based access controls, audit logging, staff training and confidentiality agreements. No system is completely secure, so we cannot guarantee the security of information. If a breach affects your information, we will notify you or your Partner as the law and our agreements require.

Our website and apps use cookies and similar tools to keep them working, remember preferences and measure use. You can block or delete cookies in your browser settings, though some features may not work. We honor Global Privacy Control signals where the law requires. Please do not send health information through our website contact form. We do not use advertising trackers inside the coaching app.

If you give us your mobile number, we or your Partner may text you coaching and program messages. Reply STOP to opt out or HELP for help. We do not share your mobile number or text consent with third parties for their marketing.

Depending on where you live, you may have the right to:

• know what personal information we hold about you and get a copy;
• correct inaccurate information;
• delete your information;
• withdraw consent you have given, including consent to share health information;
• opt out of marketing messages;
• appeal if we decline your request.

To make a request, use our contact form. We will verify your identity before acting, and you may use an authorized agent where the law allows. We will not treat you differently for using your rights.

If you joined through a Partner covered by HIPAA, send requests about your health information to that Partner. We will help it respond.

Some state laws protect consumer health data that HIPAA does not cover, including Washington's My Health My Data Act, Nevada's consumer health data law and Connecticut's data privacy law. If you live in one of these states, see our Consumer Health Data Privacy Policy for the data we collect, why we collect it and your rights. For direct users and manufacturer-sponsored programs, the health information we collect is listed in Section 2, how we use it in Sections 3 and 4, and whom we share it with in Section 6. We collect and share consumer health data only with your consent or as needed to provide the Services you asked for, and you can use the rights in Section 12 for it.

If you live in California, the Confidentiality of Medical Information Act may protect medical information we hold about you, in addition to this policy. We do not sell your personal information, and we do not use or disclose medical information for marketing without your authorization. You may ask to access, correct or delete your information through our contact form.

The Services are for adults 18 and older. We do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.

We may update this policy from time to time. We will post the new version here and notify you of material changes through the app, by email or through your Partner. We will ask for your consent before using health information in a materially different way.

Questions or requests about privacy can be sent through our contact form.