PRIVACY POLICY

MitoCollar™

Effective Date: February 3, 2026

Erchonia Corporation ("Erchonia," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use the MitoCollar™ electronic device ("Device"), the MitoCollar™ mobile application ("App"), the MitoCollar™ website and subscription portal (collectively, "Services"), and any related services we provide.

By using the Device, App, or Services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein.

If you do not agree with the terms of this Privacy Policy, please do not use the Device, App, or Services.

1. INFORMATION WE COLLECT

We collect several types of information from and about users of our Services, including:

1.1 Information You Provide Directly

We collect information that you voluntarily provide when you:

•       Create an account or register for a Subscription;

•       Register your Device;

•       Contact customer support;

•       Complete surveys or provide feedback;

•       Sign up for promotional communications; or

•       Otherwise interact with our Services.

This information may include:

•       Personal identifiers such as name, email address, phone number, and mailing address;

•       Account credentials (username and password);

•       Device serial number and registration information;

•       Animal information you choose to provide (such as name, breed, age, or weight) for Device usage settings;

•       Subscription and billing information (though full payment card details are processed by third-party payment processors as described in Section 1.3);

•       Communications with customer support, including the content of messages, emails, and support tickets; and

•       Any other information you choose to provide.

1.2 Device and App Usage Information

When you use the Device and App, we automatically collect information about your usage, including:

•       Device operational data, including therapy session start and end times, session duration, and frequency of use;

•       Device settings and configurations, and therapy protocols selected;

•       App usage data, including features accessed, pages viewed, time spent in the App, and navigation patterns;

•       Subscription status and billing cycle information; and

•       Aggregated usage statistics and analytics.

1.3 Information Collected Automatically

When you access or use our Services, we may automatically collect certain technical information, including:

•       Device information, including mobile device type, model, manufacturer, operating system, and version;

•       Network and connection information, including IP address, Internet Service Provider (ISP), and mobile network carrier;

•       App version and installation identifiers;

•       Browser type and version (if accessing our website);

•       Log files, including timestamps, page requests, and referral URLs;

•       Crash reports and error logs; and

•       Cookies and similar tracking technologies as described in Section 1.4.

1.4 Cookies and Tracking Technologies

We may use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your use of our website and Services. These technologies help us:

•       Remember your preferences and settings;

•       Authenticate users and prevent fraud;

•       Analyze usage patterns and improve our Services;

•       Provide relevant content and advertisements; and

•       Measure the effectiveness of our marketing campaigns.

Most web browsers are set to accept cookies by default. You can adjust your browser settings to refuse cookies or alert you when cookies are being sent. However, some features of our Services may not function properly without cookies.

1.5 Payment Information

Subscription payments are processed through third-party payment processors. We do not directly collect, store, or process full payment card numbers (credit or debit cards). Our payment processors collect and store payment information in accordance with Payment Card Industry Data Security Standards (PCI DSS).

We may receive limited payment information from our payment processors, such as the last four digits of your card number, card type, expiration date, and billing address, to facilitate Subscription management, billing inquiries, and refund processing.

2. INFORMATION WE DO NOT COLLECT

The MitoCollar™ Device and Services are designed for general pet wellness purposes and are not medical devices. We do not intentionally collect or solicit the following types of sensitive information:

•       Medical records, veterinary diagnoses, or treatment plans;

•       Health insurance information;

•       Government-issued identification numbers (such as Social Security numbers, driver's license numbers, or passport numbers);

•       Full financial account information or full payment card numbers (these are processed by third-party payment processors as described in Section 1.5);

•       Biometric data;

•       Genetic or genomic information; or

•       Precise geolocation data (we do not track your physical location through GPS or similar technologies).

If you voluntarily provide any such information to us (for example, in a customer support communication), we will handle it in accordance with applicable privacy laws and will not use it for purposes other than responding to your inquiry.

3. HOW WE USE YOUR INFORMATION

We use the information we collect for the following purposes:

3.1 To Provide and Maintain Our Services

•       Enable Device operation and deliver light therapy sessions;

•       Process and manage Subscription registrations, activations, renewals, and cancellations;

•       Authenticate users and maintain account security;

•       Provide customer support and respond to inquiries;

•       Process warranty claims and replacement requests; and

•       Deliver firmware updates and Service enhancements.

3.2 To Improve and Optimize Our Services

•       Analyze usage patterns and trends to understand how users interact with the Device and Services;

•       Identify and diagnose technical issues, bugs, and performance problems;

•       Conduct research and development to improve Device functionality and develop new features;

•       Perform data analytics and generate aggregated, anonymized statistics; and

•       Test and evaluate new products, services, and features.

3.3 To Communicate With You

•       Send transactional communications, including order confirmations, Subscription renewal reminders, payment receipts, and service notifications;

•       Provide important updates about changes to our Services, Terms, or Privacy Policy;

•       Respond to customer service requests, questions, and feedback;

•       Send marketing and promotional communications about new products, features, or special offers (with your consent where required by law); and

•       Request feedback through surveys or reviews.

3.4 To Ensure Security and Prevent Fraud

•       Detect, prevent, and investigate fraudulent transactions, unauthorized access, and other illegal activities;

•       Monitor and protect the security and integrity of our Services;

•       Verify Subscription status and prevent circumvention of Subscription requirements; and

•       Enforce our Terms of Use and other policies.

3.5 To Comply With Legal Obligations

•       Comply with applicable laws, regulations, legal processes, and governmental requests;

•       Respond to subpoenas, court orders, or other legal demands;

•       Establish, exercise, or defend legal claims; and

•       Protect the rights, property, and safety of Erchonia, our users, or others.

4. HOW WE SHARE YOUR INFORMATION

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information in the following circumstances:

4.1 Service Providers and Business Partners

We may share your information with trusted third-party service providers who perform services on our behalf, including:

•       Payment processors to facilitate Subscription billing and payment transactions;

•       Cloud storage and hosting providers to store data and maintain our IT infrastructure;

•       Customer support and help desk platforms;

•       Email and communication service providers;

•       Analytics and data processing providers;

•       Marketing and advertising service providers (with your consent where required); and

•       Shipping and fulfillment providers for warranty replacements.

These service providers are contractually obligated to use your information only for the purposes of providing services to us and are required to maintain appropriate security measures to protect your information.

4.2 Legal Compliance and Protection

We may disclose your information if required or permitted by law, including to:

•       Comply with legal obligations, court orders, subpoenas, or other legal processes;

•       Respond to lawful requests from government authorities, law enforcement, or regulatory agencies;

•       Protect and defend our rights, property, or safety, or the rights, property, or safety of our users or others;

•       Detect, prevent, or investigate fraud, security breaches, or illegal activities;

•       Enforce our Terms of Use, Privacy Policy, or other agreements; and

•       Protect against imminent harm to persons or property.

4.3 Business Transfers

If Erchonia is involved in a merger, acquisition, sale of assets, bankruptcy, reorganization, or other business transaction, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any change in ownership or uses of your personal information, as well as any choices you may have regarding your information.

4.4 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you. This data may be used for research, analytics, marketing, or other purposes and may be shared with third parties without restriction.

4.5 With Your Consent

We may share your information with third parties when you have given us explicit consent to do so for a specific purpose.

5. DATA RETENTION

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to:

•       Provide and maintain our Services;

•       Comply with legal, regulatory, accounting, or reporting requirements;

•       Resolve disputes and enforce our agreements; and

•       Protect against fraud and ensure security.

When we no longer need your information, we will securely delete or anonymize it in accordance with applicable laws and our internal data retention policies.

6. DATA SECURITY

We implement reasonable administrative, technical, and physical security measures designed to protect your personal information from unauthorized access, use, disclosure, alteration, or destruction. These measures include:

•       Encryption of data in transit using industry-standard protocols (TLS/SSL);

•       Encryption of sensitive data at rest;

•       Secure authentication and access control mechanisms;

•       Regular security assessments and vulnerability testing;

•       Employee training on data protection and privacy practices;

•       Restricted access to personal information on a need-to-know basis; and

•       Incident response and breach notification procedures.

However, please be aware that no security measures are perfect or impenetrable, and no method of data transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and should notify us immediately if you suspect any unauthorized access to your account.

7. YOUR PRIVACY RIGHTS AND CHOICES

Depending on your location and applicable privacy laws, you may have certain rights regarding your personal information, including:

7.1 Access and Portability

You have the right to request access to the personal information we hold about you and to receive a copy of that information in a structured, commonly used, and machine-readable format (where technically feasible).

7.2 Correction

You have the right to request that we correct any inaccurate or incomplete personal information we hold about you. You may also update certain information directly through your account settings in the subscription portal.

7.3 Deletion

You have the right to request deletion of your personal information, subject to certain exceptions (such as when we are required to retain information for legal, tax, or regulatory purposes, or to fulfill our contractual obligations). Please note that deleting your information may result in termination of your account and Subscription.

7.4 Objection and Restriction

You may object to certain uses of your personal information or request that we restrict processing of your information in certain circumstances, such as when you contest the accuracy of the data or object to our legitimate interests as a basis for processing.

7.5 Marketing Communications

You may opt out of receiving promotional emails from us by clicking the "unsubscribe" link in any promotional email or by contacting us at support@mitocollar.com. Please note that even if you opt out of marketing communications, we will still send you transactional and Service-related communications (such as Subscription renewal reminders and important Service updates).

7.6 Do Not Track

Some web browsers have a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activities tracked. Our Services do not currently respond to DNT signals or similar mechanisms.

7.7 Exercising Your Rights

To exercise any of these rights, please contact us at:

Email: support@mitocollar.com

Mailing Address: Erchonia Corporation, 112 Southchase Blvd, Fountain Inn, SC 29644

We will respond to your request within the timeframe required by applicable law (typically 30-45 days). We may need to verify your identity before processing your request to protect your privacy and security.

8. CHILDREN'S PRIVACY

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us at support@mitocollar.com.

If we become aware that we have collected personal information from a child under 18 without verified parental consent, we will take steps to delete that information as quickly as possible.

9. THIRD-PARTY SERVICES AND LINKS

Our Services may contain links to third-party websites, applications, or services that are not owned or controlled by Erchonia. This Privacy Policy applies only to our Services. We are not responsible for the privacy practices of third-party websites or services.

We encourage you to review the privacy policies of any third-party services you access through our Services. Your interactions with third-party services are governed by their respective privacy policies, and we are not responsible for their data practices.

10. INTERNATIONAL DATA TRANSFERS

Your information may be transferred to, stored, and processed in the United States or other countries where Erchonia or our service providers operate. These countries may have data protection laws that differ from the laws of your country.

By using our Services, you consent to the transfer of your information to countries outside of your country of residence, including the United States, which may have different data protection rules than your country. We will take appropriate measures to ensure that your personal information receives an adequate level of protection in the jurisdictions in which we process it.

11. CALIFORNIA PRIVACY RIGHTS

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:

•       The right to know what personal information we collect, use, disclose, and sell (if applicable);

•       The right to request deletion of your personal information;

•       The right to opt out of the sale or sharing of your personal information (note: we do not sell personal information);

•       The right to correct inaccurate personal information;

•       The right to limit the use and disclosure of sensitive personal information; and

•       The right to non-discrimination for exercising your CCPA/CPRA rights.

To exercise these rights, please contact us using the information provided in Section 7.7. We will not discriminate against you for exercising your CCPA/CPRA rights.

12. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you by:

•       Posting the updated Privacy Policy on our website and in the App;

•       Updating the "Effective Date" at the top of this Privacy Policy;

•       Sending you an email notification to the address associated with your account (for material changes); and/or

•       Providing a prominent notice through our Services.

We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your information. Your continued use of our Services after we post changes constitutes your acceptance of the updated Privacy Policy.

The current version of this Privacy Policy is always available at www.mitocollar.com/privacy.

13. CONTACT INFORMATION

If you have any questions, concerns, or complaints about this Privacy Policy or our privacy practices, please contact us at:

Email: support@mitocollar.com

Website: www.mitocollar.com

Subscription Portal: www.mitocollar.com/subscription

Mailing Address: Erchonia Corporation, 112 Southchase Blvd, Fountain Inn, SC 29644

By using the MitoCollar™ Device, App, or Services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein.