Altura Ventures LLC is the legal entity doing business as Kurea Care. Kurea is the consumer-facing brand. Altura Ventures LLC operates kureacare.com and provides non-clinical administrative and technology services that connect eligible adults with independent licensed healthcare providers and independent licensed pharmacies. This Privacy Policy explains the personal information we collect, how we use and disclose it, and the choices and rights available to you.

This Privacy Policy applies to the Kurea website, account and intake experiences, customer-support communications, and related administrative services. It does not replace the Notice of Privacy Practices provided by the healthcare provider group responsible for your clinical care or by a dispensing pharmacy.

By using Kurea, you acknowledge the practices described in this Privacy Policy.

1. Information We Collect

Information you provide

Depending on how you use Kurea, you may provide:

• Identifiers and contact information, including your name, date of birth, email address, telephone number, billing address, shipping address, and account credentials.

• Identity-verification information, including government-issued identification or photographs when required for patient or prescription verification.

• Transaction information, including selected services, subscription status, payment status, refunds, and shipping information. Payment-card details are processed by our payment processor and are not necessarily stored directly by Kurea.

• Health and medical information submitted through the secure clinical platform, including symptoms, medical history, current medications, allergies, treatment history, photographs, and other information needed by a licensed provider to evaluate you.

• Communications you send to Kurea, participating providers, pharmacies, or customer support.

Information collected automatically

When you use our website, we and our service providers may automatically collect information such as your IP address, browser type, device type, operating system, approximate location derived from IP address, pages viewed, links selected, referring page, timestamps, and interactions with the website.

We use cookies, pixels, software development kits, and similar technologies for site functionality, security, analytics, attribution, and advertising measurement.

Information received from third parties

We may receive information from the Rimo Health technology platform, participating provider groups, licensed pharmacies, payment processors, identity-verification vendors, shipping carriers, fraud-prevention services, website hosts, analytics providers, and advertising partners where necessary to operate or improve the services.

2. How We Use Information

We may use personal information to:

• Operate, maintain, secure, and improve Kurea and its services.

• Create and manage accounts and verify identity and eligibility.

• Facilitate health assessments, provider consultations, prescriptions when clinically appropriate, pharmacy fulfillment, shipping, and follow-up care.

• Enable communications among you, Kurea, the applicable provider group, the technology platform, and the dispensing pharmacy.

• Process payments, recurring subscriptions, cancellations, refunds, and customer-support requests.

• Send administrative, transactional, care-related, security, and account communications.

• Measure public website performance, understand advertising effectiveness, and improve marketing campaigns.

• Detect, investigate, and prevent fraud, abuse, security incidents, and unlawful activity.

• Comply with applicable law, lawful process, professional obligations, and our agreements.

• Establish, exercise, or defend legal claims and enforce our policies.

We do not use clinical intake responses, medical records, prescription information, or other protected health information for targeted advertising.

3. Health Information and HIPAA

Kurea and Altura Ventures LLC do not practice medicine or pharmacy. Clinical services are provided by independent licensed healthcare providers through Digital Medical Care, P.C.; TXMD of California, P.C.; TXMD of Kansas, P.A.; or TXMD of Texas, P.C., as applicable based on patient location. Prescription fulfillment is performed by an independent licensed pharmacy.

Medical information held by an applicable provider group or pharmacy may constitute protected health information (“PHI”) under the Health Insurance Portability and Accountability Act (“HIPAA”). That information is governed by the applicable provider’s or pharmacy’s Notice of Privacy Practices. Kurea and service providers such as Rimo Health LLC may process PHI on behalf of those entities as permitted by HIPAA and applicable agreements.

Information collected by Kurea outside its role supporting a HIPAA-covered provider may not be PHI, but it remains subject to this Privacy Policy and other applicable privacy and consumer-protection laws.

Where HIPAA applies, the healthcare provider group or pharmacy responsible for the applicable medical records will notify affected individuals following a breach of unsecured protected health information as required by law. HIPAA rights may include the right to inspect or obtain copies of applicable medical records, request amendments, request restrictions or confidential communications, receive an accounting of certain disclosures, and obtain a copy of the applicable Notice of Privacy Practices. Additional information is available in our HIPAA Notice of Privacy Practices.

4. How We Disclose Information

We may disclose personal information to:

• Participating provider groups and licensed clinicians for eligibility review, consultations, diagnosis, treatment, prescribing decisions, follow-up care, and medical-record administration.

• Licensed pharmacies for prescription processing, compounding when applicable, dispensing, payment, shipping, safety review, and pharmacy operations.

• Rimo Health LLC and technology vendors that provide intake, patient-portal, identity-verification, messaging, e-prescribing, payment, customer-support, security, and related platform functions.

• Payment processors and financial-service providers to authorize and process payments, recurring charges, refunds, chargebacks, and fraud checks.

• Website, communications, analytics, and advertising providers, including Framer, Meta, Google, and TikTok, for public-site hosting, analytics, advertising attribution, audience measurement, and campaign performance. These technologies must not be placed on secure clinical intake pages or used to disclose PHI or clinical assessment responses.

• Shipping carriers and operational vendors to coordinate delivery and customer service.

• Professional advisers, including attorneys, accountants, auditors, insurers, and compliance consultants.

• Government authorities or other parties when required by law, subpoena, court order, regulatory request, or when reasonably necessary to protect rights, safety, security, or prevent fraud.

• Transaction counterparties in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, subject to appropriate confidentiality protections.

• Other parties with your direction or consent.

We do not sell personal information for money. Our use of Meta, Google, and TikTok advertising technologies on the public website may, however, be considered a “sale,” “sharing,” or use for targeted advertising under certain state privacy laws.

5. Cookies, Analytics, and Advertising Choices

We use cookies and similar technologies to operate the website, remember preferences, prevent fraud, analyze traffic, and measure advertising. Public website data may be processed by Meta, Google, and TikTok according to their own privacy policies.

Where required, you may manage non-essential cookies through our cookie banner or privacy controls. You may also adjust browser settings, delete cookies, use platform advertising controls, or enable a legally recognized opt-out preference signal such as Global Privacy Control. Disabling cookies may affect website functionality.

Kurea does not send marketing SMS messages. We may contact you by email, telephone, secure portal message, or other method necessary to administer your account or facilitate care, consistent with applicable law and your communication preferences.

6. Consumer Health Data

Where state consumer-health privacy laws apply, “consumer health data” may include information that identifies or can reasonably be linked to your physical or mental health status, symptoms, diagnoses, medications, treatment interests, or efforts to obtain healthcare services.

We may collect consumer health data directly from you, from your device and use of Kurea, and from providers, pharmacies, and service providers involved in your requested services. We use this information to provide and administer the services you request, facilitate clinical review and pharmacy fulfillment, maintain security, prevent fraud, comply with law, and process requests you initiate.

We may disclose consumer health data to the applicable provider group, licensed clinicians, pharmacies, Rimo Health LLC, identity-verification services, payment and operational vendors, and other processors necessary to provide the service. We do not sell consumer health data and do not use clinical or prescription information for targeted advertising.

Subject to applicable law, you may request access to, deletion of, or withdrawal of consent relating to consumer health data by contacting us as described below. Withdrawal or deletion may prevent us or the applicable provider from continuing to provide services and may be limited by legal medical-record, transaction, security, or retention requirements.

7. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including providing services, maintaining accounts and transaction records, complying with legal and regulatory requirements, resolving disputes, preventing fraud, and enforcing agreements.

Medical records maintained by provider groups and pharmacies are retained according to applicable federal and state record-retention laws and their own policies. Requests to delete information do not require deletion where retention is legally required or otherwise permitted by law.

8. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including access controls, encryption in transit where appropriate, vendor oversight, and security monitoring. No transmission or storage system is completely secure, and we cannot guarantee absolute security.

If you believe your account or information has been compromised, contact us immediately.

9. Your Privacy Rights

Depending on your state of residence and applicable law, you may have the right to:

• Confirm whether we process your personal information and obtain access to it.

• Request correction of inaccurate information.

• Request deletion of personal information.

• Obtain a portable copy of certain information.

• Opt out of the sale or sharing of personal information, targeted advertising, or certain profiling.

• Limit certain uses or disclosures of sensitive personal information.

• Withdraw consent where processing is based on consent.

• Appeal our decision regarding a privacy request.

• Receive equal service and pricing without unlawful discrimination for exercising privacy rights.

To exercise a right, email contact@kureacare.com or write to the address below. We may need to verify your identity and authority before completing a request. You may use an authorized agent where permitted by law. If we deny a request, you may appeal by replying to our decision and stating that you wish to appeal.

California residents may also use our website’s “Do Not Sell or Share My Personal Information” or cookie-preference control, where available, to opt out of cross-context behavioral advertising. We honor legally required browser-based opt-out preference signals.

These rights are subject to exceptions and may not apply to PHI maintained by a HIPAA-covered provider or pharmacy. Requests concerning medical records should be directed through the secure patient portal or to the applicable provider group.

10. Children’s Privacy

Kurea is intended only for adults age 18 or older. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to Kurea, contact us so we can investigate and take appropriate action.

11. Third-Party Services

Kurea may link to websites or services operated by providers, pharmacies, technology companies, or other third parties. Their privacy practices are governed by their own policies. We encourage you to review them before providing information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised version and update the effective date. When required by law, we will provide additional notice or obtain consent before materially different processing occurs.

13. Contact Us

For privacy questions or requests, contact:

Altura Ventures LLC / Kurea
Attn: Privacy
1309 Coffeen Ave STE 1200
Sheridan, WY 82801
Email: contact@kureacare.com
Telephone: +1 (888) 864-2119