Privacy Policy

Effective Date: September 9, 2025

Questions? Email us at letsconnect@myluahealth.com

1. Introduction

This privacy policy (the "Policy") of MyLÚA Health is designed to inform users of our website, mobile applications, technology, and services (collectively, the "Services") about how we collect, use, and disclose personal information in connection with the Services. MyLÚA Health takes individual privacy seriously and we endeavor to inform you of the uses that we have for personal information that we obtain from you (collectively, "Personal Information").

In this Policy, "user," "your," or "you" refers to any individual from whom we obtain Personal Information. By accessing or using our Services, you acknowledge that you have read, understand, and agree to be bound by this Policy. If you do not agree to the terms of this Policy, do not use our Services.

2. SMS and Mobile Messaging Communications

We may collect your mobile phone number when you register for or use the MyLÚA Health Services. If you choose to provide your mobile phone number and affirmatively opt in during registration or onboarding, you consent to receive SMS text messages from MyLÚA Health at the number you provide.

These messages may include appointment reminders, wellness check-ins, educational resources, care navigation updates, and other service-related notifications. Message frequency may vary depending on your engagement with the platform. Message and data rates may apply based on your mobile carrier plan.

You may opt out of receiving SMS messages at any time by replying STOP to any MyLÚA text message, or by managing your preferences within your account settings. For assistance, reply HELP or contact us at letsconnect@myluahealth.com.

Consent to receive SMS messages is not a condition of purchase or use of the core Services. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing with subcontractors supporting our SMS services (such as messaging platform providers) is permitted solely to deliver the messages you have consented to receive. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. We do not sell or share your mobile phone number with third parties for marketing purposes.

3. User Types and Authorizations

The Services may be utilized for personal use by individuals; professional use by doulas, care coordinators, or other clinicians; or certain other purposes by employers or healthcare organizational users. If you upload the Personal Information of another individual to the Services, you are solely responsible for obtaining written authorization from that individual in accordance with all applicable law.

4. What Information Do We Collect?

4.1 Individualized Information

We may collect certain individualized information when you use our Services, subscribe to any mailing list, submit any request, create an account, or otherwise interact with MyLÚA Health. This may include your name, email address, telephone number, postal address, demographic data, and other information related to your use of our services.

4.2 Device Information

We may collect web tracking information about the device you use to connect to our Services, including browser type, IP address, websites visited, how you interact with our Services, time zone, and cookie information.

4.3 Cookies

A cookie is a small file sent to your browser when you visit a website. MyLÚA Health may use cookies for technical reasons and to track and target user interests to enhance their experience. You can generally accept, block, or reject cookies through your browser controls. Rejecting cookies may restrict access to some functionality.

5. How Do We Use Your Information?

5.1 Use of Personal Information

We may use Personal Information to provide personalized wellness content; communicate with you regarding our services; establish and maintain user accounts; process orders and transactions; verify user information; detect security incidents; and maintain or improve the quality and safety of our services.

We may utilize AI technologies, including machine learning and natural language processing, to carry out these functions. We apply data minimization techniques when using AI and monitor our AI technology for accuracy and bias.

5.2 Use of Device Information

We may use Device Information to screen for fraud, diagnose errors, administer and optimize our Services, generate analytics, and assess the success of marketing campaigns.

5.3 Aggregated Data

We may create statistical, de-identified, anonymized, or aggregated data to train and improve our AI models and technologies, or for analytical and research purposes. Aggregated data has been anonymized so that it cannot reasonably be used to identify any individual.

6. What Information Do We Share or Disclose?

We generally will not share or disclose Personal Information with third parties except as set out below. The categories below do not authorize the sharing of mobile phone numbers or SMS opt-in data for marketing or promotional purposes by any third party, including affiliates.

We may share or disclose Personal Information:

• When you have consented to the sharing or disclosure.
• With parent companies, subsidiaries, or entities under common control, to achieve purposes described in this Policy.
• In connection with a business deal, merger, financing, or acquisition, subject to a confidentiality agreement.
• With third-party contractors engaged to provide support services on our behalf, subject to confidentiality obligations.
• To detect, prevent, or address security, fraud, or technical issues.
• To ensure the personal safety of any individual.
• As required to comply with legal obligations, processes, or requests.

7. Your Rights Regarding Your Information

7.1 Right to Remove

If you would like MyLÚA Health to permanently remove your Personal Information from our database, please email us at letsconnect@myluahealth.com. The removal of your Personal Information may take some time and may be subject to restrictions consistent with applicable law.

7.2 Access and Updates

MyLÚA Health will, to the best of our ability and in accordance with applicable law, allow you to access, review, correct, or add to your Personal Information. We will confirm receipt of your request within 10 days and respond within 45 days.

8. Security

MyLÚA Health will utilize appropriate, commercially reasonable administrative, technical, and physical safeguards to protect Personal Information against unauthorized access, deletion, loss, alteration, or misuse. No Internet transmission is completely secure, and we cannot guarantee that security breaches will not occur. If your use of the Services requires you to create an account and password, you are solely responsible for maintaining the secrecy of that login information.

9. Data Retention

Unless you ask us to delete your Personal Information sooner, we will maintain it until we determine it is no longer necessary for any purpose for which we may use it in accordance with this Policy, and it may be destroyed or deleted in accordance with applicable law.

10. Children

For personal use of the Services by an individual, you must be at least 13 years old and permitted to make decisions regarding your own reproductive health pursuant to the applicable laws of the jurisdiction in which you are located. MyLÚA Health does not knowingly collect or maintain Personal Information from persons under 13 years of age. We will delete the Personal Information of persons under the age of 13 if we determine it has been collected without verifiable parental consent.

11. Users from Outside the United States

MyLÚA Health and its servers are located and operate in the United States. By using our Services, you consent to our collection of your Personal Information as described in this Policy and the transfer of your Personal Information to the United States.

12. Notice for Residents of the European Economic Area, United Kingdom, or Switzerland

We do not market or promote our services and products to residents of Europe, the United Kingdom, or Switzerland, and are not subject to the GDPR. If you reside in the EEA, UK, or Switzerland and voluntarily provide us with Personal Information, that information will be transferred to data centers located in the United States for processing, with your consent.

Although we are not subject to the GDPR, we will generally make commercially reasonable efforts to honor your data privacy rights upon request, including the right to access, correct, delete, or withdraw consent to the processing of your Personal Information. Please email us at letsconnect@myluahealth.com to make any such request.

13. Amendments

MyLÚA Health may modify or amend this Policy from time to time to comply with applicable law or to reflect changes to our practices. If we make any material changes to how Personal Information is collected, used, disclosed, or transferred, we will notify you by modifying the version of this Policy available on our Services.

14. Contact

Please email us at letsconnect@myluahealth.com if you have any questions, requests, or complaints about how we have processed any Personal Information.

Terms of Service · HIPAA Compliance