HeyMOE Consumer Health Data Privacy Policy

Version 1.0 · Effective October 15, 2026

Hey Moe, LLC, doing business as HeyMOE, uses consumer health data to provide Medicare Part D research and comparison services. This policy explains what health data we collect, why we use it, who receives it, and how to exercise your rights. The Washington rights described here apply to Washington residents and other consumers whose health data is collected in Washington, as provided by Washington's My Health My Data Act. Other applicable privacy rights remain available.

We do not sell consumer health data or use it to market insurance. Optional agent access requires your separate permission. Accepting the Terms of Service or a privacy policy does not give that permission.

1. Health data and its sources

We collect the medication names, dosages, quantities, pharmacy preferences, current plan information, and location information you provide for your comparison. We link these to your account so we can store your selections, identify available plans, and produce comparisons. Medications and comparison information may reveal or support inferences about health conditions.

We generate and retain comparison results, plan rankings, cost estimates, formulary coverage, related analysis, notes, and flags. Our results identify the plan with the lowest estimated total cost among the plans compared, based on the information provided. That may be your current plan or a different plan. We also handle support messages containing health information and records of your permission choices. Account identifiers, subscription dates, and referral records may constitute health data when they reveal use of a health-related service.

Sources are information you provide, a person authorized to provide it for you, your use of HeyMOE, operational providers acting for us, and public or other plan-data sources used in comparisons. We generate analysis from those inputs. Anyone helping you create or set up your account must have your permission. That assistance does not give them ongoing access to your medications or results. Optional access requires your separate, explicit consent through HeyMOE’s access process. General plan information received from an outside source does not itself disclose your information to that source.

2. Why we collect and use it

We use health data to store your selections, research and compare Part D plans, provide results and related notifications, respond to your requests, manage permissions, and maintain and protect the requested service. Limited account and referral records support billing and referral-payment administration. We do not use health data for unrelated advertising, insurance lead generation, or enrollment.

We obtain consent for collection as required by law before collecting the relevant health data. Optional sharing requires separate consent where required. A general Terms acceptance is not a substitute. We will disclose and obtain affirmative consent before collecting, using, or sharing additional health-data categories or using health data for additional purposes not described here.

3. Who receives information

Our hosting and database providers store and process your information to operate and protect HeyMOE. They may use it only for the services they provide to us, subject to contractual privacy and security requirements. Authorized HeyMOE staff may access your information as needed to operate, support, or protect the service.

Our email delivery provider processes your email address and message contents to send account messages, verification codes, and result-ready notifications. Notifications may include the current plan name you supplied and whether we found a plan with a lower estimated total cost than your current plan. We do not email detailed comparison results.

Our payment provider receives identification and billing information to process subscriptions and refunds. Our analytics provider receives page views and clicks to help us understand use of the service; it is configured not to receive medication lists, pharmacies, plans, ZIP codes, results, or contact details. Limited service-use or payment information can still reveal use of HeyMOE. Providers may process information only for authorized purposes under applicable restrictions.

A referring affiliate may receive your name, email, account-creation date, subscription-start date, and latest renewal date for referral and payment reconciliation, including a signup notification for referrals through a link or code. Neither referral records nor signup notifications sent to affiliates include medications, pharmacy preferences, comparison results, or other information requiring separate access consent. We obtain separate consent before sharing where required by law. Referrers may be individual agents, brokers, agencies, or other participating organizations. Associated umbrella organizations receive information needed to administer their referral payments, without access to medication lists, pharmacies, or comparison results. Referral participation is not permission to view your health account.

Your referring affiliate’s licensed insurance agent or broker—or another professional HeyMOE has approved for client access—may request permission to view your information using the access features HeyMOE provides. Only the professional you separately approve may view the medication, pharmacy, and comparison information specified in your consent. Before you approve, the consent identifies the professional and company, information to be shared, and permitted purpose. The professional may use authorized information only to help you understand your HeyMOE results. Access does not permit editing, marketing, profiling, lead generation, or selling, transferring, or further sharing that information. Neither the professional's company nor its umbrella organization receives a separate right of access.

We may disclose information to government authorities or other recipients only as required or permitted by applicable law, subject to our existing client protections. A successor may receive information in a lawful business transfer only with the applicable privacy and client-protection commitments. Neither situation authorizes marketing-list sales.

We call the people and organizations in our referral program “affiliates.” That does not mean they own HeyMOE, are owned by HeyMOE, or share an owner with HeyMOE. Sharing ownership with HeyMOE does not give another company permission to receive your health data. Before sharing with such a company, we will identify it, obtain any consent required by law, and honor existing client protections.

4. Your choices and rights

Washington consumers may ask whether we collect, share, or sell their health data, access that data, and obtain a list of recipients with an email address or another online contact method. They may withdraw collection or sharing consent and request deletion. These rights do not depend on purchasing another subscription or creating a new account.

Send requests to support@heymoe.com. We verify identity using information reasonably needed to protect your records. You may refuse optional access without affecting your HeyMOE service. You can revoke an authorized professional’s access immediately in Agent Access settings by selecting Remove Agent Access. Access also ends if the authorized professional is no longer eligible for access through the referring affiliate’s account or that affiliate’s participation in the program ends. Revocation cannot undo information already viewed, but continuing confidentiality, use, and deletion obligations still apply. To withdraw other health-data consent or request assistance, contact support. We will stop the processing covered by the withdrawal, subject to applicable law; without information needed for comparisons, we may be unable to continue that service. Withdrawal does not authorize a different use of your data.

We respond without undue delay and within 45 days of receiving a Washington request. If complexity or request volume reasonably requires one additional 45-day period, we notify you and explain within the original period. Verification does not restart that clock. Information is provided without charge up to twice annually, subject to the Act's limited exceptions for manifestly unfounded, excessive, or repetitive requests.

To appeal a denial, reply to our decision or email support@heymoe.com with your request for review. We explain our appeal decision in writing within 45 days. If denied, we provide a way to complain to the Washington Attorney General, whose complaint page is https://www.atg.wa.gov/file-complaint. We do not unlawfully discriminate against you for exercising privacy rights.

5. Deletion and safeguards

To request deletion of your account and personal information, contact support@heymoe.com. Cancelling your subscription in the app does not delete your account. Deletion removes your profile, medication lists, pharmacies, and comparison results and cancels an active subscription. Cancelling renewals alone leaves your account and paid-through access in place. Refunds follow the Terms of Service.

Deleted data ages out of our database backups within seven days. We notify relevant processors, contractors, agents, and other recipients of health-data deletion requests as required by law. Billing records are retained for financial record-keeping only where legally permitted or required; this is not a blanket exception from health-data deletion rights. Retained information remains protected and is not available for unrelated marketing.

We restrict access and use reasonable administrative, technical, and physical safeguards, including encryption of stored subscriber data and backups and of data in transit. Our contracts require service providers to handle your health data only as we instruct and to help us fulfill our privacy obligations, including responding to requests to access or delete your data. No system can guarantee perfect security.

6. Continuing protections and contact

This policy supplements the general Privacy Policy. General terms do not reduce health-data rights, specific consent limits, or existing referred-client protections. A sale, cancellation, affiliate departure, or policy update cannot erase the lasting client protections described in the Terms of Service and Affiliate Agreement. Independent legal rights remain unaffected.

For questions or requests, email support@heymoe.com or write to Hey Moe, LLC dba HeyMOE, 1009 West Glen Oaks Lane, Suite 105, Mequon, WI 53092. Material policy changes receive advance notice and any legally required consent. An update is not permission for a new optional disclosure.