Move Health Client Privacy Policy

Overview & Purpose

This Privacy Policy governs how Move Health, LLC ("Company," "we," or "us") collects, uses, and protects personal information provided by individual clients ("Clients," "you"). This includes Clients whose details are submitted into our HealthPlanner software tool (via your financial advisor or directly), as well as Clients who engage with Move Health for general insurance planning and advisory services outside of the platform.

Information We Collect

Depending on how you interact with the Company, we may collect the following categories of personal information:

• Contact & Demographic Details: First and last name, mailing address, email address, phone number, date of birth, and household profile details.
• Insurance & Financial Planning Information: Current health insurance coverage details, Medicare preferences, and financial or planning parameters required to perform insurance analysis and modeling.
• Advisor Information: Details regarding your financial advisor or broker-dealer firm managing your planning request.
• Platform Usage Data (For HealthPlanner Users): Technical identifiers, access times, and system interaction logs when you log in or interact with the HealthPlanner tool.

How We Use Your Information

We use Client information strictly to operate our services and fulfill your requested planning needs. Specifically, we use your data to:

• Generate customized health insurance comparisons, models, and planning recommendations.
• Facilitate administrative, enrollment, or support services requested by you or your advisor.
• Maintain system security, verify identity, and prevent fraud.
• Comply with applicable federal, state, and legal/regulatory reporting obligations.

We do not sell, rent, or lease Client personal information to third parties, nor do we use your personal or health planning data for secondary marketing purposes.

Sharing Information with Service Providers & Partners

We share Client data only with trusted third-party service providers and enterprise tools necessary to deliver our services (e.g., secure hosting providers, scheduling integrations, and administrative communication software). All third parties are prohibited from using your personal information except to provide these specific services to us and are required to maintain strict confidentiality.

We may also disclose personal information if required to do so by law, court order, or regulatory mandate.

Insurance Carriers and Other Service Providers

To provide the insurance planning, comparison, enrollment, and support services you request, we may share your personal information with insurance carriers, insurance-related service providers, enrollment partners, and other parties reasonably necessary to provide those services. We may also share information with your financial advisor or other authorized representative when you have directed us to do so or otherwise authorized the disclosure.

We limit these disclosures to information reasonably necessary for the applicable service and handle such information in accordance with applicable law and our contractual obligations.

Advisor Access and Client Consent

The Company will not grant financial advisors or third-party representatives access to your personal information, insurance profiles, or health planning data within the Platform without your explicit authorization or direction. You maintain control over who can view or manage your account information, and you may revoke an advisor’s access to your active profile at any time by contacting us at info@movehealth.io. (Note: Revocation of access applies to active operational views and does not alter records held under mandatory legal or regulatory retention obligations.)

Data Retention & Mandatory Regulatory Holds

The Company retains Client records for as long as necessary to fulfill the operational purpose for which it was provided, maintain active planning services, or comply with governing legal and regulatory record-keeping obligations.

Your Privacy Rights

Depending on applicable law and the nature of the information we maintain, you may have the right to:

• Request access to personal information we maintain about you;
• Request correction or updating of inaccurate or incomplete information;
• Request deletion of your personal information, subject to applicable legal, regulatory, contractual, and record-retention requirements;
• Request information about certain disclosures of your information, where required by applicable law;
• Request reasonable restrictions or limitations on certain uses or disclosures, where applicable, and;
• Receive a copy of this Privacy Policy.

You may exercise applicable privacy rights by contacting us at security@movehealth.io. We may need to verify your identity before processing a request.

We will review and respond to requests in accordance with applicable law. Certain requests may be denied or limited where permitted or required by law.

Limitations on Deletion Requests

Upon receipt of a verifiable deletion request, the Company will delete your personal data from active systems to the fullest extent permitted by law. However, the Company cannot delete records that are subject to mandatory legal, statutory, or regulatory, or contractual retention obligations.

Where Client records fall under mandatory legal or statutory retention rules:

• The record set will be removed from active operational views and advisor dashboards.
• The underlying data will be securely archived and restricted solely to compliance, audit, regulatory reporting, or legal defense purposes until the expiration of the required retention period.

Data Security

We implement industry-standard administrative, physical, and technical security safeguards—including encryption in transit (SSL/TLS) and at rest (AES)—to protect Client personal information against unauthorized access, loss, or disclosure. Data is hosted on secure enterprise-grade cloud servers located within the United States.

Changes to This Policy

We reserve the right to update this Client Privacy Policy to reflect changes in our services, technology, or legal requirements. Any updates will be posted with a revised "Effective Date".

Contact Us

If you have questions or wish to exercise your privacy rights, please contact us at: