BRG Patient App Privacy Policy and Account Deletion Policy

Effective Date: April 27, 2026

Buffalo Rehab Group Physical & Occupational Therapy, PLLC (“Buffalo Rehab Group,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how information is collected, used, disclosed, and safeguarded when you use the Buffalo Rehab Group mobile application, website features related to the app, and related services (collectively, the “Services”).

By using the Services, you agree to the practices described in this Privacy Policy.

1. Information We Collect
We may collect the following categories of information:

Information You Provide to Us

• • Name
  • Email Address
  • Date of Birth
  • Phone Number
  • Profile Photo
  • Messages and communications sent through the app
  • Information submitted through forms or support requests
  • Payment information submitted through our payment processor

Health and Care-Related Information
Depending on your relationship with Buffalo Rehab Group, we may collect or receive:

• • Appointment details
  • Home exercise program assignments
  • Exercise progress and completion activity
  • Provider notes or care-plan related content made available through connected systems
  • Other treatment-related information necessary to support your care experience

Information Received from Third Parties
We may receive information from systems we integrate with, including Athelas and other authorized healthcare or scheduling platforms.

Automatically Collected Information
When you use the app, we may automatically collect:

• • Device type
  • Operating System
  • App version
  • IP address
  • Crash logs
  • Usage analytics
  • Push notification tokens
  • Diagnostic and performance information

2. How We Use Information
We use information to:

• • Create and manage your account
  • Verify your identity
  • Provide access to appointments, exercises, and care resources
  • Enable secure messaging with providers and support staff
  • Process payments through authorized vendors
  • Improve app performance and user experience
  • Provide customer support
  • Send notifications, reminders, and service updates
  • Maintain security, prevent fraud, and troubleshoot issues
  • Comply with legal and regulatory obligations

3. How We Share Information
We may share information:

• • With healthcare providers and authorized staff involved in your care
  • With vendors that help operate our Services (hosting, analytics, messaging, payment processing, customer support)
  • With integrated systems such as Athelas
  • If required by law, subpoena, or legal process
  • To protect the rights, safety, or security of users or others
  • In connection with a business transaction such as a merger, acquisition, or reorganization

We do not sell your personal information.

4. Healthcare Information
Some information processed through the Services may be subject to applicable healthcare privacy and security laws. Where required, Buffalo Rehab Group handles such information in accordance with applicable law and contractual obligations.

5. Payments
If you make payments through the app, payment transactions are securely processed by Stripe, a trusted third-party payment processor. We do not store full payment card numbers on our own systems unless expressly stated.

6. Data Retention
We retain information for as long as necessary to provide Services, comply with legal obligations, resolve disputes, enforce agreements, and support healthcare recordkeeping requirements.

7. Your Choice and Rights
Depending on applicable law, you may have rights to:

• • Access certain personal information
  • Request correction of inaccurate information
  • Request deletion where permitted
  • Manage notifications and communication preferences

To make a request, contact us using the information below.

8. Third-Party Services
The app may link to or rely on third-party services. We are not responsible for the privacy practices of third parties except as required by law.

9. White-Labeled Versions
In the future, this platform may be offered on behalf of other healthcare organizations under different branding. In those cases, supplemental privacy notices may apply.

10. Changes to This Privacy Policy
We may update this Privacy Policy periodically. Changes will be posted within the app, on our website, or through other appropriate channels. The updated effective date will reflect the latest revision.

11. Contact Us
If you have questions about this Privacy Policy or our privacy practices, please contact:

Buffalo Rehab Group Physical & Occupational Therapy, PLLC

Email: oprzywuski@buffalorehab.com

Account Deletion
You may request deletion of your Lanna app account at any time through the Account Settings section of the app.

When you choose to delete your account, your access credentials and app profile information will be removed or deactivated from the app within a reasonable timeframe, subject to applicable legal, regulatory, security, and healthcare recordkeeping obligations.

Please note that deleting your app account does not automatically delete medical records, treatment documentation, billing records, or other information that Buffalo Rehab Group Physical & Occupational Therapy, PLLC is required or permitted to retain under applicable law.

If you need assistance with account deletion, please contact:
oprzywuski@buffalorehab.com