Consumer Health Data Privacy Notice

Depending on what you choose to share, consumer health data may include information that identifies or can reasonably be linked to a person's health, function, care needs, or home safety. This may include:

• Mobility, balance, transfer, bathing, dressing, toileting, meal, sleep, and daily routine concerns.
• Falls, near-falls, hospital discharge, caregiver strain, equipment use, and home accessibility needs.
• Home photos, room notes, floor transitions, stairs, bathroom setup, bedroom setup, entryways, lighting, and other home details connected to safety or function.
• Health conditions, disabilities, cognitive support needs, medication-related context, or medical history you choose to provide when relevant to home planning.
• Information about caregivers, family support, home tasks, and referrals when connected to the requested plan.
• Inferences we make from the information above to prepare an OT-reviewed home plan or decide whether remote review is appropriate.

We may collect consumer health data from:

• You, when you answer guided home questions, upload photos, send messages, or request support.
• Family members, caregivers, representatives, or referral partners who provide information with permission.
• Lantern Years reviewers and team members who create notes, plans, recommendations, safety flags, and support records.
• Service providers that help host, secure, process, store, or support Lantern Years information.

Lantern Years may collect and use consumer health data to:

• Provide, review, update, and support OT-reviewed home plans.
• Help families choose practical next steps for safer daily routines and clearer home setup.
• Determine whether remote review is appropriate or whether local in-person care should come first.
• Coordinate family access, task boards, dashboard support, and plan updates you request.
• Respond to questions, privacy requests, safety concerns, account issues, and billing support needs.
• Protect accounts, detect misuse, investigate security issues, comply with law, and maintain appropriate records.
• Improve Lantern Years quality, reliability, accessibility, and family-facing guidance.

We may share consumer health data when needed to provide the service you requested, when you authorize sharing, or when permitted or required by law. Sharing may include:

• Lantern Years team members and licensed reviewers who need access to prepare, review, support, or quality-check a plan.
• Family members, caregivers, referral partners, or representatives you invite or authorize.
• Service providers that support hosting, storage, security, authentication, payment status, email delivery, customer support, logging, error monitoring, legal, accounting, and similar support.
• Professional advisors, courts, regulators, law enforcement, or other parties when needed to comply with law, respond to legal process, prevent harm, protect rights, or enforce our Terms.
• A successor organization in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar business change, subject to appropriate protection for sensitive data.

Lantern Years does not sell consumer health data. We do not use uploaded home photos, plan content, or detailed health-related answers for targeted advertising. We do not use geofencing around health care facilities to identify, track, collect data from, or send advertising to people based on visits to those facilities.

If our practices change in a way that requires consent, opt-out, or signed authorization under applicable consumer health privacy laws, we will update this notice and provide the required choice before using consumer health data in that way.

Depending on your state and the law that applies, you may have the right to:

• Confirm whether we collect, share, or sell consumer health data.
• Access consumer health data we maintain about you.
• Request a list of third parties or affiliates with whom consumer health data has been shared when required by law.
• Correct inaccurate consumer health data.
• Delete consumer health data, subject to legal and operational exceptions.
• Withdraw consent for future collection or sharing where our processing is based on consent.
• Appeal a decision denying a privacy request where an appeal right applies.

We will not discriminate against you for exercising applicable privacy rights. Some requests may limit our ability to provide a plan, update a plan, maintain a dashboard, or support family access.

Email contact@lanternyears.com with the subject "Consumer Health Data Request." Please include the account email and the right you want to exercise. We may need to verify your identity and your authority to act for another person before completing a request.

If we deny a request and the law gives you an appeal right, our response will explain how to appeal.

We retain consumer health data for as long as needed to provide Lantern Years, support accounts and plans, comply with law, maintain records, protect safety, prevent misuse, resolve disputes, and enforce our Terms.

Lantern Years uses safeguards intended for sensitive home and health-related information, including authenticated access, limited team access, private file handling, encryption in transit, encryption at rest where supported by our providers, logging, and security review. No online service can guarantee perfect security.

We may update this notice as our services, legal requirements, and privacy practices change. Questions can be sent to contact@lanternyears.com.