California Privacy Notice

Last updated August 20, 2026

This California Privacy Notice supplements our Privacy Policy and applies to residents of California. It describes how Corivo, LLC (doing business as “Corivo Health,” “we,” or “us”) collects, uses, discloses, and, where applicable, “sells” or “shares” personal information, and the rights California residents have under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the “CCPA”). Capitalized terms not defined here have the meaning given in our Privacy Policy.

Categories of Personal Information We Collect, Disclose, and Sell or Share

The following table summarizes the categories of personal information we collect, the categories of third parties to which we disclose them for business purposes, the purposes for which we use them, and whether we “sell” or “share” them as those terms are defined by the CCPA. We have collected these categories of personal information within the preceding twelve months.

CategoryDisclosed for business purposes toPurposesSold / shared for advertising
Identifiers and contact informationService providers; Telehealth Partners (at your direction); Concorde; referral partners (enrollment confirmation only); legal/fraud preventionProvide and manage the Services; communications; advertising and marketing; legal purposesAdvertising partners (identifiers and hashed contact information only)
Health information (quiz and intake responses, coaching information)Telehealth Partners (at your direction); Concorde; service providers; legal/fraud preventionProvide and manage the Services; facilitate care and coaching; legal purposesNot sold or shared
Commercial and transactional informationService providers; legal/fraud preventionProvide and manage the Services; analytics; legal purposesNot sold or shared
Payment informationPayment processors; legal/fraud preventionPayment processing; fraud preventionNot sold or shared
Internet and device activityService providers; analytics and advertising partners; legal/fraud preventionProvide and improve the Services; analytics; advertising and marketing; legal purposesAdvertising partners
General geolocation (city/state/zip)Service providers; Telehealth Partners (state routing)Provide the Services; state-based routing; analyticsNot sold or shared
Customer support communicationsService providers; legal/fraud preventionProvide and manage the Services; legal purposesNot sold or shared
Account credentialsService providers; legal/fraud preventionProvide and secure the ServicesNot sold or shared

We do not knowingly collect or sell the personal information of consumers under 16 years of age. We retain each category of personal information for as long as necessary to provide the Services and for the purposes described in our Privacy Policy, and as required by law.

Sources of Personal Information

We collect personal information from the following categories of sources: directly from you (for example, when you complete a form, create an account, submit an eligibility quiz, or contact support); automatically from your devices as you use our Websites and Apps (for example, through cookies and similar technologies); from the licensed providers, pharmacies, and coaching partners involved in your care; and from our service providers, payment processors, referral or employer partners, and analytics and advertising partners.

Purposes for Collecting Personal Information

We collect and use personal information for the business and commercial purposes described in our Privacy Policy, including to provide, manage, and improve the Services; to communicate with you; to facilitate your care and coaching; to process payments; for analytics; for advertising and marketing; for security and fraud prevention; and to comply with legal obligations.

Sensitive Personal Information

Some of the information we collect, such as health-related information, account log-in credentials, and financial or payment information, may be considered “sensitive personal information” under the CCPA. We use and disclose sensitive personal information only to provide and manage the Services you request and for other purposes permitted by the CCPA that are not subject to the right to limit, and we do not use it to infer characteristics about you. California residents nonetheless have the right to direct us to limit the use of their sensitive personal information, as described below.

How We “Sell” or “Share” Personal Information

We do not sell your personal information for money. However, our use of cookies, pixels, and similar technologies to deliver Corivo advertising on other websites and to measure our marketing may be considered a “sale” of personal information or “sharing” of personal information for cross-context behavioral (targeted) advertising under the CCPA, as reflected in the table above. We do not sell or share health information, and we do not sell or share the personal information of consumers we know to be under 16 years of age. You can opt out of these activities at any time, see “Do Not Sell or Share My Personal Information” below.

Your California Privacy Rights

Subject to certain exceptions, California residents have the following rights:

  • Right to know / access, to confirm whether we process your personal information and to access a copy of it, including in a portable format, along with information about the categories collected, sources, purposes, and third parties to whom it is disclosed.
  • Right to delete, to request deletion of personal information we hold about you.
  • Right to correct, to request correction of inaccurate personal information.
  • Right to opt out of sale or sharing, to opt out of the “sale” of personal information and the “sharing” of personal information for cross-context behavioral advertising.
  • Right to limit sensitive personal information, to direct us to limit the use and disclosure of your sensitive personal information to permitted purposes.
  • Right to non-discrimination. We will not discriminate against you for exercising your rights.

How to Exercise Your Rights

You may exercise these rights by emailing privacy@corivohealth.com or through the Your Privacy Choices link on our Websites. We will verify your identity before acting on a request, and we may ask for additional information to do so; we will never ask for your password or full payment card number to verify your identity. We will respond within the timeframe required by applicable law. If you use an authorized agent to submit a request, we may require proof of the agent’s written authorization and verification of your identity. If we deny your request, you may appeal where your state’s law provides an appeal right.

Do Not Sell or Share My Personal Information

You can opt out of the sale or sharing of your personal information for targeted advertising using the control on our Your Privacy Choices page, which takes effect immediately on the browser you use it on. We also honor recognized browser-based opt-out preference signals, such as the Global Privacy Control (GPC), as required by law; if your browser or extension sends a GPC signal, we treat it as an opt-out of sale and sharing for that browser.

Shine the Light and Do Not Track

We do not disclose personal information to third parties for their own direct marketing purposes within the meaning of California’s “Shine the Light” law. We do not currently respond to “Do Not Track” browser signals, which are distinct from the opt-out preference signals (such as GPC) that we do honor.

Financial Incentives

We do not offer financial incentives or price or service differences in exchange for the collection, sale, or retention of your personal information.

Contact Us

If you have questions about this California Privacy Notice or wish to exercise your rights, contact us at:

Corivo, LLC (d/b/a Corivo Health)
3608 Spruce Avenue, West Palm Beach, FL 33407
privacy@corivohealth.com

Changes to This Notice

We may update this notice from time to time. If we make material changes, we will post the revised notice on our website with a new “Last updated” date.