Privacy Policy

1. Who We Are

This Privacy Policy applies to the website located at g1v.me (the "Website") and to the g1v.me member app, including its mobile app versions (the "Member App"), both operated by C1V Technologies Inc. ("C1V," "we," "us," or "our"), a Wyoming corporation that provides management services organization (MSO) and business associate functions in support of physician-directed weight-management and telehealth services.

g1v.me is the brand under which C1V Technologies Inc. operates the Website and the Member App.

C1V Technologies Inc. is a Wyoming corporation. Its mailing address is 1621 Central Ave, Cheyenne, WY 82001.

Treeline Medical Inc. ("Treeline Medical") is a licensed medical entity and HIPAA Covered Entity operated by Dr. Fahad Akhtar, MD, responsible for all clinical care and the Notice of Privacy Practices applicable to patient health information. Treeline Medical clinicians are licensed in the following U.S. states and the District of Columbia: Alabama, Arizona, California, Colorado, Connecticut, Delaware, District of Columbia, Florida, Georgia, Hawaii, Idaho, Illinois, Indiana, Iowa, Kansas, Kentucky, Louisiana, Maine, Maryland, Michigan, Minnesota, Missouri, Montana, Nebraska, Nevada, New Hampshire, New York, North Carolina, North Dakota, Ohio, Oklahoma, Pennsylvania, South Dakota, Tennessee, Texas, Utah, Vermont, Washington, West Virginia, Wisconsin, and Wyoming. Treeline Medical and C1V Technologies Inc. operate under a HIPAA Business Associate Agreement ("BAA") and a Management Services Agreement ("MSA").

For privacy questions related to this Website, contact us at: privacy@g1v.me.

2. Scope of This Privacy Policy

This Privacy Policy governs information we collect through the Website and the Member App, including lead forms, contact requests, informational pages, public calculators, and the member features described in Section 4.4.

This Privacy Policy is not a HIPAA Notice of Privacy Practices ("NPP"). If you are or become a patient of Treeline Medical, a separate NPP governs how your Protected Health Information ("PHI") is handled in the clinical context. Please request a copy of Treeline Medical's NPP directly from the practice.

3. Definitions

For purposes of this Privacy Policy:

• "Personal Information" means any information that identifies, relates to, or could reasonably be linked to a specific individual.
• "Protected Health Information" or "PHI" has the meaning set forth in 45 C.F.R. § 160.103 and applies only to information created or received in connection with healthcare operations as a Covered Entity or Business Associate.
• "Visitor" means any person who accesses the Website without submitting a lead form or health questionnaire.
• "Prospective Patient" means a Visitor who submits a contact or lead form expressing interest in physician-guided weight-management services.
• "Patient" means an individual who has entered into a clinical relationship with Treeline Medical.

4. Information We Collect

4.1 Information You Provide Directly

When you interact with the Website, you may provide:

• Contact information: name, email address, phone number, and state of residence
• A message you type into the contact form, which may describe your health or weight-management goals
• Your choices about SMS and marketing communications, and your acceptance of our Terms
• If you purchase a membership, payment information processed by Stripe. Stripe holds your card details. We do not see or store your full card number.

We collect only the information necessary for the purposes described in this Policy.

4.2 Information Collected Automatically

When you visit the Website, our hosting provider, Vercel, records standard server logs. Those logs include your IP address, browser type, and the pages requested. When you sign in to the Member App, change your password, or delete your account, we record the time and IP address of that event in a security log.

We do not run a third-party analytics tool on the Website or the Member App today. Please see Section 8 (Advertising, Analytics, and Tracking Technologies) for more detail.

4.3 Information We Do Not Knowingly Collect Through This Website

Unless expressly stated otherwise for a specific feature:

• We do not collect Social Security numbers, government ID numbers, or financial account numbers through this Website.
• We do not collect biometric data.
• We do not collect precise geolocation data.

4.4 Information You Provide in the Member App

When you create a member account, we collect your email address and a password. We store the password as a one-way hash. During setup you may enter your name, age, height, weight, goal weight, training experience, available equipment, weekly workout days, and food preferences or foods to avoid. The Member App generates a weekly meal plan and a workout plan from those answers and stores both.

If you use the meal scan, the Member App sends a photo of your meal to our AI provider to identify the foods, then estimates calories and macros and saves that estimate. The photo itself is not stored on our servers.

If you use the form check, we store the workout session and the feedback text. If you ask the in-app coach a question, we store your question and the answer.

We also store your reminder preferences.

5. How We Use Information

We use the information we collect for the following purposes:

• To respond to your inquiries and connect you with Treeline Medical or its staff
• To facilitate or coordinate appointment requests or consultations
• To communicate with you about services, updates, or follow-ups you have requested
• To generate and personalize your meal plan and workout plan in the Member App
• To answer your fitness and nutrition questions through the in-app coach
• To operate, maintain, and improve the Website and the Member App
• To detect, prevent, and address fraud, security incidents, or technical issues
• To comply with applicable legal obligations
• If you have consented: to send marketing or promotional communications via email or SMS — see Section 14 for opt-out rights

We do not use information collected through this Website to make automated decisions that produce legal or similarly significant effects without appropriate human review.

6. How We Share or Disclose Information

6.1 Treeline Medical Inc.

As the MSO and Business Associate supporting Treeline Medical, C1V Technologies Inc. may share information you provide (including lead and contact form submissions) with Treeline Medical Inc. for the purpose of facilitating physician-directed weight-management services. This sharing is governed by our BAA where applicable.

6.2 Service Providers

We may share information with third-party service providers acting on our behalf, including:

• Hosting and infrastructure: Vercel
• Database: Supabase, a hosted PostgreSQL database located in the United States
• AI processing: Anthropic. For each feature we send only what it needs: the meal photo for a meal scan, your typed question for the coach, your meal plan text with your diet preference for meal personalization, and your workout plan text with your stated goal for workout coaching. We do not send Anthropic your name, email address, age, height, or weight. Anything you type into the coach is sent as you wrote it.
• Transactional email: Resend, which delivers password reset emails
• Payment processing: Stripe, when memberships are sold
• Practice platform: CharmHealth, which Treeline Medical uses for medical records, scheduling, and secure messaging. The booking calendar on our Start page is CharmHealth's, and the patient portal is CharmHealth's. Information you enter there is governed by Treeline Medical's notices and CharmHealth's privacy policy.

These providers are contractually required to use information only as directed by us and in accordance with applicable law.

6.3 Legal Disclosures

We may disclose information when required by law, court order, or governmental authority, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, information we hold may be transferred to the successor entity, subject to the same privacy commitments described in this Policy.

6.5 What We Do Not Do

• We do not sell your personal information to third parties for monetary consideration.
• We do not rent or lease personal information to unaffiliated marketers.
• We do not share health-related form data with advertising platforms for ad targeting.

7. HIPAA and Health Information

Treeline Medical Inc. is a HIPAA Covered Entity. C1V Technologies Inc. operates as a Business Associate of Treeline Medical under a Business Associate Agreement, as required by 45 C.F.R. Parts 160 and 164.

To the extent that C1V Technologies Inc. creates, receives, maintains, or transmits PHI on behalf of Treeline Medical, it does so in accordance with the terms of the BAA and applicable HIPAA rules.

Scope Limitation:
Not all information collected through this Website constitutes PHI. A general inquiry submitted through a lead form — for example, a name and email address indicating interest in weight-management services — may not be PHI depending on context. This Policy governs non-PHI website data. PHI, if any is transmitted through the Website, is governed by the BAA and Treeline Medical's Notice of Privacy Practices.

Treeline Medical's Notice of Privacy Practices is available on request from Treeline Medical at treeline.medical@gmail.com.

8. Advertising, Analytics, and Tracking Technologies

8.1 Analytics

We do not currently use a third-party analytics tool on the Website or the Member App. Our hosting provider's server logs are the only automatic record of usage. If we add an analytics tool, we will update this section before it goes live.

8.2 Advertising Pixels and Remarketing

The Website does not currently use third-party advertising pixels or conversion tags. No Meta Pixel, Meta Conversions API, Google Ads tag, Google Tag Manager, or TikTok pixel is installed.

Health-related form submissions are not transmitted to advertising platforms. If we add advertising measurement in the future, we will update this section first and, where the law requires it, ask for your consent.

8.3 Consent for Non-Essential Cookies

We set no analytics or advertising cookies today, so the Website does not present a cookie consent banner. The only cookie we set is the strictly necessary session cookie described in Section 9. If we add non-essential cookies, we will add a consent mechanism where the law requires one.

9. Cookies and Similar Technologies

For visitors and members, the Website sets one cookie today: a strictly necessary session cookie that keeps you signed in to the Member App. It is marked HttpOnly, Secure, and SameSite, and it cannot be disabled without signing out.

The categories below describe what we may use in the future. Section 8 states which are active.

• Strictly necessary cookies: Required for the Website to function (e.g., session management). These cannot be disabled.
• Performance/analytics cookies: Help us understand how visitors use the Website. These are non-essential.
• Functional cookies: Remember your preferences or settings.
• Targeting/advertising cookies: Used to deliver relevant advertising. These are non-essential and, where required, subject to your consent.

You may manage cookies through your browser settings. Disabling the session cookie signs you out of the Member App.

10. Data Retention

We retain personal information collected through this Website for as long as necessary to fulfill the purposes described in this Policy, or as required by applicable law, whichever is longer.

Lead and contact form data is retained for 7 years from your last contact with us, unless you ask us to delete it sooner (see Section 13).

PHI, if any, is retained in accordance with the BAA and applicable federal and state medical records retention laws in the states where Treeline Medical's clinicians are licensed (see Section 1).

Member App data is kept while your account is active. When you delete your account in the Member App (Me, then Privacy and data, then Delete my account), we erase your profile, plans, meal scan history, form check history, coach conversations, and any pending password reset tokens immediately, and we close your sign-in. We keep the account record, with your email address marked as deleted, and the security log described in Section 4.2, for fraud prevention and legal compliance. Database backups held by our provider expire on its rolling schedule.

When information is no longer needed, we delete or de-identify it using reasonable security measures.

11. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, or destruction. These measures are appropriate to the nature of the information collected and the risks associated with processing it.

Specific security measures include encryption in transit (TLS), encryption at rest by our database provider, one-way hashed passwords, session cookies marked HttpOnly, Secure, and SameSite, access controls limited to named personnel, and vendor security reviews.

No security system is impenetrable. We cannot guarantee absolute security of information transmitted over the internet. If you have reason to believe that your interaction with us is no longer secure, please contact us immediately.

12. Children's Privacy and Age Restrictions

This Website is intended for adults aged 18 and older. GLP-1 weight-management services offered through Treeline Medical are provided to adult patients only. We do not knowingly collect personal information from individuals under 18 years of age.

If we become aware that we have collected personal information from a minor without appropriate parental consent, we will take steps to delete it promptly. To report a concern, contact us at the address in Section 18.

13. Your Privacy Rights and Choices

13.1 General Rights

Depending on your location and applicable law, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate personal information
• Request deletion of your personal information, subject to legal retention obligations
• Object to or restrict certain processing
• Receive a portable copy of your information

13.2 California Residents (CCPA/CPRA)

Applicability:
The California Consumer Privacy Act, as amended by the CPRA, applies to businesses that meet statutory thresholds for revenue or data volume. Whether or not C1V meets those thresholds, we extend the following rights to California residents.

California residents have the right to know what personal information we hold, to delete it, to correct it, and to opt out of the sale or sharing of personal information for cross-context behavioral advertising. We do not sell personal information, and we do not share it for cross-context behavioral advertising. To submit a request or exercise your rights, contact us at: privacy@g1v.me. We will respond within 45 days.

13.3 Patients — HIPAA Rights

If you are a patient of Treeline Medical, you have additional rights with respect to your PHI under HIPAA, including the right to access, amend, and receive an accounting of disclosures. These rights are governed by Treeline Medical's Notice of Privacy Practices, not by this Website Privacy Policy.

13.4 How to Submit a Request

To exercise any of the rights described above, contact us at: privacy@g1v.me. We may need to verify your identity before processing your request. Members can also open Me, then Privacy and data, in the Member App to request a copy of their data or to delete their account.

14. SMS and Email Communications

14.1 Email Communications

If you provide your email address, we may send you transactional communications (e.g., confirmation of your inquiry) and, with your consent, marketing or promotional messages about medical weight-management services available through Treeline Medical.

You may unsubscribe from marketing emails at any time by clicking the "Unsubscribe" link in any marketing email or by contacting us at privacy@g1v.me. Transactional emails related to your account or appointments are not subject to opt-out while a service relationship exists.

15. International Data Transfers

This Website is operated from the United States. C1V Technologies Inc. is a Wyoming corporation, and Treeline Medical Inc. serves patients through g1v.me only in the U.S. states and the District of Columbia listed in Section 1. If you are located outside the United States, be aware that information you provide will be transferred to and processed in the U.S., which may have different data protection laws than your country.

16. Third-Party Websites and Services

This Website may contain links to third-party websites or embedded third-party tools (e.g., Treeline Medical's booking calendar and patient portal on CharmHealth, Stripe payment pages). This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access through our Website.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors — including upon completion of LegitScript certification and any resulting expansion of advertising activities. When we make material changes, we will update the Effective Date at the top of this page and, where appropriate, provide additional notice (e.g., a banner on the Website or an email notification).

Your continued use of the Website after the Effective Date of an updated Policy constitutes your acceptance of the revised terms.

18. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or our data practices, please contact us:

C1V Technologies Inc. (operator of g1v.me)
Attn: Client Operations
1621 Central Ave
Cheyenne, WY 82001
Email: support@g1v.me
Phone: 855-502-0037

For clinical questions or matters related to medical care:

Treeline Medical Inc.
Attn: Dr. Fahad Akhtar, MD
30 Saddle Ct
Monroe, NJ 08831
Email: treeline.medical@gmail.com