Monitored Therapeutics GoMobile Privacy Policy Statement

Monitored Therapeutics, Inc. (MTI) provides the GoMobile healthcare application and stores data on Amazon Web Services (AWS) hosted cloud environment. This page informs you of our policies regarding the collection, use and disclosure of Personal Information we may receive from users of the GoMobile application and the healthcare providers for those users. This Privacy Policy is not a contract and does not create any legal rights or obligations.

Privacy is very important to us. We also understand that privacy is very important to you. This Privacy Statement tells you how we protect and use information that we gather through GoMobile that you download and use, and the data entered by your healthcare providers (or those working with your provider). If you have any questions about your data collected and stored by MTI, you can contact our Privacy Officer at privacyofficer@monitoredrx.com.

By using the GoMobile application and the acceptance of the End User License Agreement (EULA) on the application, you agree to the collection and use of information in accordance with this policy. Please read our Terms of Use to understand the general rules about your use of the GoMobile application. Except as written in any other disclaimers, policies, terms of use, or other notices on this website, this Privacy Statement and the Terms of Use are the complete agreement between you and Monitored Therapeutics with respect to your use of GoMobile.

Information Collection and Use
While using our GoMobile application, we receive and store your IP address and basic device information. An IP address is a number assigned to you by your Internet service provider so you can access the Internet. Although we do store IP addresses, we do not use them to identify you personally or disclose them to others.

The GoMobile application does not store any Personal Information. If you use the GoMobile application to collect information for your healthcare provider, he/she may enter your encrypted “Personal Information” into our AWS cloud environment through secure communication running TLS 1.2. However, that Personal Information will not be sent to, or received from any application on your device. Your healthcare provider may have access to the data collected through the application as indicated by your EULA acceptance on the cloud server.

Does MTI Ever Share Personal Information With Third Parties?

MTI will not share your personal information collected from this website with an unrelated third-party without your permission, except as otherwise provided in this Privacy Statement. MTI does not sell personal information of any user. It does not use any personal information for marketing purposes without written consent of the user.

In the ordinary course of business, we will share some personal information with companies that we hire to perform services or functions on our behalf. For example, we may use different vendors or suppliers to ship products to you that you or your provider order. In these cases, we provide the vendor with information to process your order such as your name and mailing address. In cases in which we share your personal information with a third-party vendor, we will not authorize them to keep, disclose or use your information with others, except for the purpose of providing the services we asked them to provide.

We may be legally compelled to release your personal information in response to a court order, subpoena, search warrant, law or regulation. We may cooperate with law enforcement authorities in investigating and prosecuting database visitors who violate our rules or engage in behavior which is harmful to other visitors (or illegal).

We may disclose your personal information to third parties if we feel that the disclosure is necessary to:

• enforce this Privacy Statement and the other rules about your use of this website
• protect our rights or property
• protect someone’s health, safety or welfare
• fulfill obligations relating to a corporate sale, merger, dissolution, or acquisition
• comply with a law or regulation, court order or other legal process
• inform your healthcare provider about your health or those registered on your account (e.g., Friends and Family Members) to receive this information.
Please note: In addition to the ways that we may keep, disclose, and use information described in this Privacy Statement, we also may keep, disclose, and use personal information in ways that we believe are consistent with FDA and other governmental guidance, directions, regulations, and laws, including HIPAA, GDPR or PIPEDA, where applicable.

What Does MTI Do With Non-Personal Information?

Non-personal information is information that cannot identify you or be tied to you. It is information where MTI has removed your personal identifiers (your name, e-mail address, date of birth, etc.). In this case, you would no longer be identified as a single unique individual. We use the HIPAA Safe Harbor method or the HIPAA Expert Determination method to de-identify protected health information regulated under HIPAA, GDPR or PIPEDA. Once we have de-identified information, it is non-personal information, and we may treat it like other non-personal information.
We are always looking for ways to better serve you and improve GoMobile. We will use non-personal information from you to help us make GoMobile more useful. We also may use non-personal information for other business purposes. For example, we may use non-personal information or aggregate non-personal information to:
• create reports for internal use to develop programs, products, services or content
• customize the information or services that are of interest to you or your provider
• provide aggregated information on how visitors use GoMobile

How Does MTI Use and Protect My Information?

The only location of your personal information is on the MTI cloud environment hosted by AWS. Your healthcare provider has permission to create a provider account and login to that account to enter information about you and see the data that has been collected with the MTI application. The information in this section applies to those webpages:

Viewing/Editing Personal Information: Your provider may change the information he/she has entered by logging into their account and editing your information. As a patient, your personal information will be viewable by your provider.

Storage of Personal Information: MTI may store your personal information on cloud environments in countries where MTI operates, including the United States of America. If you choose to stop using the GoMobile application, we will maintain copies of your information in our internal records, systems, and databases, in accordance with our data retention schedules. We will continue to treat your personal information in accordance with this Privacy Statement.

Protecting Personal Information: We take security seriously and take a number of steps to protect your personal information. When an account is created for you, you will be assigned a username and password for GoMobile that is unique to you. These are not stored on your device. You should not give your password to anyone. Upon registration, we send and store a randomized unique character set (Token) on your device. This token is transmitted with any communications from GoMobile to our system and enables us to know who the communications are from. There is no Personal Information contained in the Token. Your healthcare provider will create an account for their practice and will create a unique password for access to their account and your personal information. The cloud environment will log users out after a period of inactivity and require them to log in again.

MTI has implemented security measures to protect your personal information from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. These include physical, electronic and managerial safeguards to protect the information we collect in accordance with our Privacy Policy. While we have implemented security measures, please keep in mind that “perfect security” does not exist on the Internet or elsewhere and no transmission of information is guaranteed to be completely secure. In particular, e-mail sent to MTI may not be secure, and you should therefore take special care in deciding what information you send to MTI via e-mail.

What Happens If The Privacy Statement or EULA Changes?

If we decide to make a significant change to our Privacy Statement or End User License Agreement, we will post a notice on the homepage of our website for a period of time after the change is made. Changes to the EULA will appear on GoMobile for acceptance by the user.

What About Privacy On Other Web Sites?

Our GoMobile application may contain links to other websites (e.g., YouTube). Some of those websites may be operated by third parties. We provide the links for your or your provider’s convenience, but we do not review, control, or monitor the privacy practices of websites operated by others. This Privacy Statement does not apply to any other website. We are not responsible for the performance of websites operated by third parties or for your business dealings with them. Therefore, whenever you leave this website, we recommend that you review each website’s privacy practices and make your own conclusions regarding the adequacy of these practices.

Does MTI Ever Communicate Directly With You or Your Provider?

We may contact you or your provider periodically by e-mail, mail, telephone or text messaging regarding procedures, results of data collection, educational material, questionnaires, your health, instructions, etc.

How To Contact Monitored Therapeutics, Inc.?

If you have questions or comments about this Privacy Statement, please contact us here.

Monitored Therapeutics, Inc.
5160 Blazer Pkwy
Dublin, OH 43017
1.614.761.3555
privacyofficer@monitoredrx.com

Rights Under State Privacy Laws

While these rights vary depending on where you are, you may have some or all of the following rights:

• You may have a right to know of or confirm the existence of your personal data, any processing we do with it, and review our practices of data collection and processing, such as knowing what categories of personal data we process, our purposes of processing, and categories of party to whom we disclose.
• Access and portability: you may have a right to access your personal data, accessing specific pieces of information, and knowing to which third parties your data was disclosed. You may have a right to obtain a copy of your data, including in a machine-readable format.
• Correction: you may have a right to correct or amend your data if it is incomplete, inaccurate, or outdated.
• Deletion or elimination: you may have a right to request your personal data be deleted or eliminated. Subject to applicable law, regulations and agreements you have signed with third parties, we may de-identify this data in certain circumstances.
• Restriction: you may have a right to restrict processing of your data in some circumstances, such as if processing is excessive or unlawful, the accuracy of the data is contested, the controller no longer needs the data for its primary processing purposes but is needed for legal or compliance purposes, or if (in California) the data is sensitive personal data like health information and it is being used for purposes beyond those reasonably necessary to perform services or provide goods requested.
• Objection and opt-out: you may have a right to object to or opt-out of processing of your data in certain circumstances, including in cases where that data is used to make certain decisions or profiles about you by automated or artificial means, used for historical or scientific research, or used to place automated/prerecorded voice telephonic messages to you in some cases.
• Consent: you may have a right to consent, and to withhold or withdraw that consent, for some practices, including processing of sensitive personal data or data on children, or where we use consent as our lawful basis for processing or transfer. If you withdraw consent, we will not further collect or process the personal data covered by that consent unless allowed or required by applicable law.
• Non-discrimination: you will not be discriminated against for your exercise of your rights. This does not necessarily include, depending on applicable law in your jurisdiction, cases where a difference in price or services offered is reasonably related to the value provided by your data, or where you consent to participate in a voluntary loyalty or similar incentive program.
• Complain externally: you may have a right to complain to a regulator, including a Data Protection or Supervisory Authority, a trade standards authority, or a public advocate (such as a state attorney general), if you are not satisfied with our response to your request, such as not having responded to you within a reasonable time or you disagree with our determination, or have concerns about our data practices. If you ask us, we will try to provide you with information about complaint pathways that may be open to you depending on your location and circumstances.

Submitting a Request or Inquiry

For US data subject rights requests contact us via email at privacyofficer@monitoredrx.com or call us at our 1.614.761.3555.

Your request will be confirmed within ten days of receipt, and we will respond within 45 days, unless shorter periods are required by law. If we need more than 45 days, we will notify you that your request is being delayed.

We can only respond to your request if it is verifiable. This means we are obligated to take reasonable steps to verify your identity or your authorized agent’s authority and your right to access the information you request. In the process of verifying your request, we may contact you to ask for additional information that will help us do so, including government-issued IDs containing your name and address, utility bills containing that same information, and/or unique identifiers like usernames. We will only use that additional information in the verification process, and not for any other purpose. Once we have received and verified the requested information from you, we will contact you with our response to your request, including any data, if applicable. If we do not hear from you or are unable to verify your identity for the request, we will contact you to inform you that we cannot process your request because we cannot verify your identity.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Changes To This Privacy Policy

This Privacy Policy is effective as of March 20, 2026 and will remain in effect except with respect to any changes in its provisions in the future, which will be in effect immediately after being posted on this page.

We reserve the right to update or change our Privacy Policy at any time, and you should check this Privacy Policy periodically. Your continued use of the Service after we post any modifications to the Privacy Policy on this page will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified Privacy Policy.

‍