OSTEOCORE, INC. – PRIVACY POLICY

Effective Date: March 11, 2026

Note: This privacy policy applies to our collection, use, and disclosure of data received or created due to your access to and use of certain items provided by us, “OsteoCore, Inc.” (referred to here as “OsteoCore,” “we,” “us,” or “our”). These items consist of our website at www.osteocore.com and www.theosteocore.com (the “Site”), the OsteoCore mobile application (the “Application”).  The Site and Application are referred to collectively as the “Services.”

WE MAY USE COOKIES, PIXELS, AND OTHER TRACKING TECHNOLOGIES, INCLUDING THIRD-PARTY TRACKING TECHNOLOGIES, OR (COLLECTIVELY, “ADTECH”) ON OUR SERVICES. WE USE ADTECH TO COLLECT DATA AND PERFORM DATA ANALYTICS, TO RECORD HOW YOU INTERACT WITH THE SITE AND OUR CONTENT, THE INFORMATION YOU TYPE, AND OTHER USER-RELATED ACTIVITIES, WHICH MAY BE USED TO SERVE YOU WITH TARGETED ADVERTISING. 

BY VISITING AND USING THE SITE, YOU ARE CONSENTING TO OUR USE OF ADTECH AND YOU UNDERSTAND AND AGREE THAT WE MAY SHARE PERSONAL INFORMATION ABOUT YOU THAT WE COLLECT FROM THE USE OF ADTECH WITH OUR ADTECH PARTNERS. FOR MORE INFORMATION ABOUT HOW WE USE ADTECH, PLEASE SEE THE INFORMATION BELOW.

Your Consent

By accessing or using the Services, you are consenting to our processing of the information described in this Privacy Policy. “Processing,” means using cookies on a computer or mobile device or using or touching information in any way, including, but not limited to, collecting, storing, deleting, using, combining, and disclosing information. Information processed by the Services will be transferred, processed, and stored in accordance with United States state and federal law.

What information is collected by the Services and how is it used?

We collect personal information (such as your name, mailing address, email address and phone number) from you when you download and log into the Application and/or submit information to us through the Site (“User Information”). We keep User Information to provide you with the Services. For us to provide you with the Services, it is required that we collect the User Information.

We collect your personal health and wellness information, inputs from user surveys and data created through your interaction with the Application (“Application Information”).  Application Information may include clinical information (such as height and weight, current disease information, symptom history and other medical data related to your health) and non-clinical lifestyle information (such as eating habits and exercise activity). OsteoCore will only use this information as it relates to providing the Services. 

In addition, the Site and Application may collect certain information automatically, such as the type of mobile device you use, your mobile device’s unique device ID, the IP address of your mobile device, your mobile operating system, the type of mobile Internet browsers you use, and information about your use of the Application (“Usage Data”). Usage Data will be used by us either individually or in aggregated form to enhance and improve the Application.

What AdTech do we use on the Site?

  1. Cookies.

Cookies are pieces of information stored directly on your device. Cookies allow us to collect information such as browser type, time spent on our Site, pages visited, language preferences, and other anonymous traffic data. We and our service providers use the information for security purposes, to facilitate navigation, to display information more effectively, and to personalize your experience while using the Site and to enhance user engagement. We also use cookies to gather statistical information about use of the Site to continually improve its design and functionality, to understand how it is used, and to answer questions regarding the Site. We may also use cookies for advertising purposes. Among other uses, these cookies limit the number of times you may see our advertisements and help us measure the effectiveness of our outreach campaigns.

  1. Tracking Technologies

Advertising companies and analytics providers that we work with also may place cookies or tracking pixels on our behalf. They may track that you have visited this Site, and we then share this information with the advertising network, either automatically, or manually (this practice is sometimes referred to as “retargeting”). We work with the following advertising networks, and more information about their policies, and how you can customize or opt out of certain types of ads, are available using the links provided:

• Google Ads

• Meta Ads

• Microsoft Ads


Do third parties see and/or have access to information obtained by the Services?

User Information and Usage Data may be shared with the third-party service providers who host and support the application on OsteoCore’s behalf. These service providers do not have any right to independently use any personal information that we share with them.

We may provide paid products and/or services within the Site or Application. In those cases, we work with third-party service providers to perform payment processing on our behalf (e.g. payment processors).

We will not store or collect your payment card details. Information that you provide to our third-party payment processors is governed by their Privacy Policy. These payment processors adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of payment information.

What are my opt-out rights?

We only collect the User Information, Usage Data, and Application Information that is necessary to provide you with the Services. Because of this, the only way to opt out of information collection is by stopping your use of the Services, not visiting the Site, and uninstalling the Application.

If you do not wish to receive marketing emails from us, you can opt out of future marketing emails by following the instructions provided in the marketing emails. Opting out of marketing emails will not affect our administrative emails to you (e.g., emails about your transactions or policy changes).

Data retention policy

We retain personal information about you for as long as you use the Site, Application, or consume the Services, and for a reasonable period after you stop using the Application. We use and retain Usage Data, in both individualized or in aggregate form, indefinitely. 

Statement regarding the Categories of Personal Information being collected.

We collect “Personal Information” from the following categories:

  • (A) Identifiers (ex. real name, alias, postal address, unique identifiers, online identifiers, internet protocol (“IP”) address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers.
  • (B) Information about your health, including your mental or physical health conditions or diagnoses. More information about the health information we collect is available in our Consumer Health Information Privacy Notice, available at www.osteocore.com/health-privacy.
  • (B) Characteristics of protected classifications under federal law, including racial or ethnic origin.
  • (C) Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
  • (D) Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an internet website, application or advertisement.
  • (E) Geolocation data.
  • (F) Inferences drawn from any of the information identified in this subdivision to create a profile about a reflection of the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

Your Personal Information Rights

You may make certain requests regarding our use of your personal information by emailing us at support@osteocore.com. If you are a resident of the State of California, some of these requests may be governed by CCPA. If you are not a California resident, or a response to any given request is not required by CCPA or other applicable law, you agree that we are under no obligation to provide a specific response to any such request, however, we agree to make commercially reasonable efforts to respond to any request we receive, subject to local laws.  For your protection, we may need to verify your identity before acting on your request.

• You may request to review and obtain a copy of your personal information. We will provide a copy or a summary of your information, usually within 30 days of your request. We may charge a reasonable, cost-based fee.

• You may request to amend your personal information. You can ask us to correct personal information about you that you think is incorrect or incomplete. In your request, please make clear what personal information you would like to have changed. We may say “no” to your request, but we’ll tell you why in writing within 60 days.

• You may request to restrict use or disclosure of Personal Information in certain circumstances. Although we do not sell personal information about our users, you do have the right to explicitly ask us not to sell your personal information to third-parties. This opt-out right does not apply to personal information that we share with third-party service providers involved in the operation of the Site or the Application.

• You may ask for a list of those with whom we’ve shared personal information with. You can ask for a list of who we’ve shared your personal information with, and why. We will usually deliver the list within 30 days of your request.

• You may request confidential communications. Within reason, we will act upon requests to contact you in a specific way (for example, home or office phone) or to send mail to a different address.

• You may request a copy of this Privacy Notice. You can ask for a paper copy of this notice at any time, even if you have agreed to receive the notice electronically. We will provide you with a paper copy promptly.

Age Requirements

The Site and Application are not designed or intended to appeal to minors and we do not knowingly collect User Data from children under the age of 13. As a tool for providing the Services, users of the Application may enter Application Information related to minors into the application where a parent or guardian has consented to use of the Services with that individual. It is your responsibility to make sure that consent from the parent or guardian is collected and documented.

If a parent or guardian becomes aware that his or her child has provided us with information without their consent, he or she should contact us at contact@osteocore.com so we can promptly delete such information.

Security

We are concerned about protecting the confidentiality of all information that we interact with in providing the Services. We and our service providers make use of physical, electronic, and procedural safeguards to protect the information that we process and maintain. Although we endeavor to provide security for the information that we process and maintain based on the sensitivity of that information, no security system can prevent all potential security breaches.

In addition to the security safeguards we provide, we urge you to take precautionary measures in maintaining the integrity of your data. Please be responsible for making sure that no one can see or access your account or log-in/password information, or your mobile device.

Links to other sites and services

The Site or Application may contain links to other sites or services that are not operated by us. If you click an outside link, you will be directed to that outside site or service. We strongly advise you to review the privacy policy of every site you visit. We are not responsible for the privacy practices or the content of any outside sites or services

Changes

We reserve the right to modify this Privacy Policy at any time in our sole discretion by including such alteration and/or modification in this Privacy Policy, along with a notice of the effective date of such modified Privacy Policy. Any continued use by you of the Site after the posting of such modified Privacy Policy shall be deemed to indicate your agreement to such modified Privacy Policy. Accordingly, if at any time you do not agree to be subject to any modified Privacy Policy, you may no longer use the Site.