Privacy Policy

Effective Date: June 1, 2026

VitaCredit, Inc. ("VitaCredit," "we," "us," or "our") values your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit our website, use the VitaCredit app, interact with our services, or otherwise communicate with us.

By using our website or services, you agree to the practices described in this Privacy Policy.

1. Scope

This Privacy Policy applies to information collected through:

• the VitaCredit website;
• the VitaCredit mobile or web application;
• partner clinic onboarding and communications;
• demo requests, contact forms, and other interactions with us.

This Privacy Policy does not govern information collected directly by participating clinics, payment processors, or third parties operating their own services, which are subject to their own privacy policies.

2. Information We Collect

We may collect the following categories of information:

A. Information You Provide

• Name
• Email address
• Phone number
• Mailing or billing address
• Account credentials
• Family member information you provide to register Family Members under your account
• Messages, inquiries, and support communications
• Information you provide when purchasing or redeeming VitaCredits

B. Transaction and Account Information

• VitaCredit purchase history
• Redemption history, including the participating clinic, the service category or product redeemed, the amount redeemed, and the date and time of redemption
• Treatment Credit balances and usage
• Account balance information
• Family transfer history
• Refund and adjustment records
• Device, session, and login records related to your account

C. Activity, Engagement, and Behavioral Information

In the course of using the platform, we collect information about how you interact with services and content offered by participating clinics, including:

• services, products, and clinic pages you view;
• items you express interest in or add to a cart;
• engagement signals such as session duration and active browse time;
• frequency, recency, and patterns of platform use;
• derived classifications and member segments (for example, new member, active member, abandoned cart, at-risk, or VIP, calculated based on activity thresholds we configure).

We use this information to operate the platform, support clinics' ability to serve their members, and provide relevant features, recommendations, and communications. Member-segment classifications are derived inferences, not statements of fact, and may change over time as your activity changes.

D. Technical and Usage Information

• IP address
• Browser type
• Device type
• Operating system
• Pages viewed
• Referral URLs
• Session activity
• Basic analytics and diagnostic information

E. Payment Information

Payments are processed by third-party payment processors. We may receive limited transaction-related information, such as payment status, transaction identifiers, and partial billing details. We do not store full payment card information ourselves.

3. Information We Do Not Collect

VitaCredit is a closed-loop prepaid credit platform, not a medical or clinical record system. We do not collect or store:

• medical diagnoses;
• clinical notes or treatment records;
• before-and-after photographs;
• health history, medications, or allergies;
• any other Protected Health Information ("PHI") as defined under HIPAA.

Participating clinics are independently responsible for handling any clinical or medical information under their own privacy and compliance obligations. VitaCredit is not a HIPAA Business Associate of participating clinics.

4. Sensitive Personal Information

Some of the information we collect relates to your interest in or use of health, wellness, or aesthetic services offered by participating clinics. Depending on your jurisdiction, this may be considered "sensitive personal information." We collect and use such information only to:

• provide and operate the platform you have signed up for;
• support the participating clinic's ability to serve you as its member;
• improve and secure the platform;
• comply with legal obligations.

We do not use sensitive personal information for purposes incompatible with the operation of the platform, and we do not sell sensitive personal information.

California residents may request to limit the use of sensitive personal information as described in Section 12.

5. How We Use Information

We use information to:

• provide, operate, maintain, and improve the VitaCredit platform;
• create and manage user accounts;
• process VitaCredit purchases, redemptions, transfers, refunds, and related transactions;
• support participating clinic workflows and partner operations, including by providing clinics with activity, interest, redemption, and member-segment information about their own members;
• derive member-segment classifications and analytics that help clinics understand and serve their members;
• respond to inquiries and support requests;
• send transactional communications such as account verification, security alerts, transaction confirmations, and required legal notices;
• send marketing or promotional communications, where you have opted in;
• analyze performance, usage trends, and platform reliability;
• protect against fraud, abuse, misuse, and security risks;
• comply with legal, tax, accounting, and regulatory obligations;
• enforce our Terms and policies.

6. How We Share Information

A. Participating Clinics

We share information with the participating clinic associated with your account, including the clinic's Owner and authorized administrators, in order to support the clinic's relationship with its members. The information shared may include:

• your account profile information necessary to identify you as a clinic member;
• your transaction, redemption, and Treatment Credit activity at that clinic;
• your activity, interest, and engagement information at that clinic, including items viewed, items added to cart, browse time, and similar signals;
• your member-segment classification (for example, new, at-risk, abandoned cart, VIP).

Participating clinics are contractually required to use this information only within the VitaCredit platform for the purpose of operating their relationship with their members, and not to export, copy, sell, share, transfer, or otherwise disclose this information outside the platform. Clinics and their personnel are also required to maintain the confidentiality of this information during and after their participation in the platform.

If you have additional concerns about how a particular clinic handles information it receives through the platform, you should review that clinic's own privacy practices and policies.

B. Service Providers and Other Recipients

We may also share information:

• with service providers and vendors who perform services on our behalf, such as hosting, analytics, communications, payment processing, customer support, and security monitoring;
• with professional advisors, including lawyers, accountants, auditors, and insurers;
• in connection with a merger, acquisition, financing, restructuring, sale of assets, or other corporate transaction;
• where required by law, legal process, or governmental request;
• where necessary to protect our rights, users, clinics, partners, or the public.

C. No Sale or Cross-Context Behavioral Advertising

We do not sell personal information for money. We do not share personal information for cross-context behavioral advertising in a manner intended to constitute a "sale" or "sharing" under applicable law.

7. Cookies and Analytics

We may use cookies, pixels, local storage, and similar technologies to:

• operate and secure the website and app;
• remember preferences;
• understand usage patterns;
• improve performance and user experience.

We may also use third-party analytics tools that collect technical and usage information.

8. Data Retention

We retain information based on the following general criteria:

• Account information (name, email, credentials): retained for the life of the account, plus up to seven (7) years following account closure for tax, audit, fraud prevention, and legal purposes.
• Transaction and redemption records: retained for at least seven (7) years to comply with tax, accounting, and audit obligations.
• Activity, engagement, and behavioral information: retained for as long as reasonably necessary to operate the platform, support clinics' relationships with their members, and improve services, generally not exceeding the period for which the account is active plus a reasonable post-closure period.
• Technical and usage logs: retained for up to twenty-four (24) months for security and analytics purposes.
• Marketing preferences: retained until you opt out, plus a reasonable period to honor your opt-out request.

We may retain information longer where required by law, regulation, legal process, or to resolve disputes and enforce agreements.

If your account is suspended or terminated, your transaction history is retained on our systems for the periods described above. Account deletion does not result in deletion of records we are legally required to retain.

9. Data Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

In the event of a data breach affecting your personal information, we will notify you and applicable authorities as required by law, including California Civil Code §1798.82.

10. Children's Privacy

VitaCredit services are intended only for users 18 years of age or older. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a person under 18, we will close the account and delete the information to the extent permitted by law, while retaining any records we are legally required to keep.

11. Your Rights

Depending on your jurisdiction, you may have rights to:

• request access to certain personal information we hold about you;
• request correction of inaccurate information;
• request deletion of certain information, subject to legal retention requirements;
• request a copy of your personal information in a portable format;
• request information about how your personal information is used or disclosed;
• limit the use of sensitive personal information for purposes other than operating the platform;
• opt out of marketing communications.

To exercise applicable rights, contact us at: support@vitacredits.com

We may need to verify your identity before processing certain requests. We will respond within the time period required by applicable law.

12. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act ("CCPA") and the California Privacy Rights Act ("CPRA"), including:

• the right to know what personal information we collect, use, disclose, and (if applicable) sell or share;
• the right to delete personal information, subject to legal exceptions;
• the right to correct inaccurate personal information;
• the right to opt out of the sale or sharing of personal information (we do not sell or share personal information as those terms are defined under California law);
• the right to limit the use of sensitive personal information;
• the right to non-discrimination for exercising your privacy rights.

To submit a request, contact us at: support@vitacredits.com

You may designate an authorized agent to make a request on your behalf, subject to verification.

13. Third-Party Links

Our website or app may contain links to third-party websites or services. We are not responsible for the privacy, security, or content practices of those third parties.

14. Geographic Scope

VitaCredit services are intended for users located in the United States. If you access VitaCredit from outside the United States, you understand that your information may be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version with a revised Effective Date. For material changes, we will provide reasonable notice through the app or by email. Continued use of the website or services after changes become effective constitutes acceptance of the revised Privacy Policy.

16. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact:

VitaCredit, Inc.
440 North Barranca Avenue, STE 1020
Covina, CA 91723
United States
Email: support@vitacredits.com