Legal

Privacy Policy

Effective May 27, 2026

---

This Policy describes how NEXPANSE CORP. (“Caliber”) collects, uses, and shares your information when you use our website, app, or Service. Health information that we hold as a business associate of a clinician is separately governed by our Notice of Privacy Practices.

1. What we collect

• Account. Name, email, password, date of birth, state.
• Assessment. Health history, goals, current medications, weight, and related responses.
• Payment. Billing address and card token via our payment processor. We do not store full card numbers.
• Usage. Pages visited, device type, IP address, approximate location, referrer.

2. How we use it

• To route your assessment to a licensed clinician and fulfill prescribed shipments.
• To operate, secure, and improve the Service.
• To send transactional emails (assessment status, shipment, billing).
• To send opt-in marketing (you can unsubscribe at any time).
• To meet legal, accounting, and regulatory obligations.

3. How we share it

• Independent clinicians who review your assessment and prescribe protocols.
• 503B compounding pharmacy partners that prepare and ship medication.
• Service providers for hosting, email, analytics, payment processing, and customer support — bound by confidentiality and use restrictions.
• Legal — if required by law, subpoena, or to protect rights and safety.

We do not sell your personal information. We do not use protected health information for targeted advertising.

4. Your choices

• Access, correct, or delete account data from your member portal.
• Unsubscribe from marketing via the link in any marketing email.
• Withdraw consent — note that withdrawing consent for required data may end your eligibility for the Service.

California residents have additional rights — see our California Privacy notice.

5. Security

We use industry-standard administrative, technical, and physical safeguards including encryption in transit and at rest. No system is perfectly secure; we will notify you of any breach affecting your data as required by law.

6. Retention

We retain account and health information for as long as your account is active, and afterward as required for medical-record laws, tax, audit, or dispute resolution.

7. Children

The Service is not directed to anyone under 18. We do not knowingly collect personal information from children.

8. Changes

We will post any updates on this page and update the effective date. Material changes will be communicated by email.