MedEffects App Terms of Use and End User License Agreement

Effective date: September 8, 2026

These Terms of Use and End User License Agreement (the Terms) are a binding agreement between MedEffects LLC (MedEffects, we, us, or our) and the individual who accesses or uses the MedEffects web application, iOS application, Android application, and related services (collectively, the App or Services). The App supports insurance verification requests, product ordering, shipment tracking, invoices, statements, and payments for authorized healthcare practices, independent sales representatives, and MedEffects personnel.

By selecting I Agree, signing in, or using the App after being presented with these Terms, you agree to them each time you use the App. If you use the App for a practice, company, or other organization (Organization), you also represent that you are authorized to use the App for that Organization and to provide the information you submit. If you do not agree, do not access or use the App.

These Terms govern use of the App. A customer, distribution, sales-representative, employment, Business Associate Agreement (BAA), or other written agreement between MedEffects and you or your Organization may impose additional obligations. If there is a conflict, the BAA controls for protected health information (PHI), the applicable customer or distribution agreement controls for product sales and commercial terms, and the applicable contractor or employment agreement controls for the relationship between MedEffects and its representative or personnel.

1 Eligibility and authorized users

The App is a business-to-business service. You must be at least 18 years old and be an authorized user of a participating healthcare practice, an authorized independent sales representative, or MedEffects personnel. You may use only the role and access assigned to you. Access is personal to you and may not be shared.

Your Organization is responsible for approving its users, assigning appropriate roles, promptly removing access when a user changes duties or leaves, and periodically reviewing access. MedEffects may rely on instructions from an Organization's authorized administrator.

Nothing in these Terms appoints an independent sales representative as an employee, partner, joint venturer, fiduciary, or agent of MedEffects, or authorizes a representative to bind MedEffects. MedEffects personnel and representatives remain subject to their applicable employment, contractor, confidentiality, compliance, and information-security obligations.

2 Accounts and security

You must provide accurate, current information and keep it current. You are responsible for activity performed through your account except to the extent caused by MedEffects. You will:

• keep credentials confidential, use a unique password, and use multifactor authentication when offered or required;
• not share accounts, allow another person to impersonate you, or use another person's credentials;
• use devices and networks that satisfy your Organization's security policies;
• lock or log out of unattended devices and protect downloaded or displayed information from unauthorized viewing;
• promptly notify MedEffects at support@medeffectsllc.com and your Organization's administrator of suspected unauthorized access, credential compromise, misdirected PHI, or another privacy or security incident; and
• cooperate with reasonable investigation, containment, and remediation steps.

MedEffects may require a password reset, multifactor authentication, updated software, or other reasonable safeguards as a condition of access.

3 Limited license

Subject to these Terms and any applicable Organization agreement, MedEffects grants you a limited, revocable, non-exclusive, non-transferable, non-sublicensable license to access and use the App in the United States for authorized internal business purposes. On a mobile device, the license is limited to a device you own or control and is subject to the applicable app-store usage rules. No rights are granted except as expressly stated.

4 Permitted business purposes

Authorized users may use the App only for legitimate business functions within their assigned role, including:

• submitting and monitoring insurance verification requests (IVRs);
• viewing payer responses and related status information;
• preparing, submitting, reviewing, approving, or tracking product orders and shipments;
• viewing invoices, statements, and payment status and initiating authorized payments;
• administering authorized practices, providers, representatives, products, and users; and
• obtaining support and reviewing audit or operational records when authorized.

The App is not a patient portal, emergency service, clinical decision-support system, medical record system, or substitute for professional judgment. Do not use it for an emergency or time-critical patient-care communication.

5 Patient and insurance information

Patient names, Medicare Beneficiary Identifiers, other insurance identifiers, eligibility information, documents, and related data may be PHI or otherwise sensitive information. Before submitting such information, you and your Organization represent, warrant, and agree that:

1. you are authorized by your Organization to submit it;
2. the submission and requested use or disclosure are permitted by HIPAA and other applicable law and are consistent with the Organization's notices, policies, authorizations, and agreements;
3. only the minimum information reasonably necessary for the permitted purpose will be submitted;
4. the information is accurate, complete, and associated with the correct individual;
5. access will be limited to persons with a legitimate role-based need to know; and
6. you will not enter PHI in free-text fields, support messages, notes, or uploads unless the field is designated for that information and the information is necessary for the stated workflow.

You must verify patient identity, insurance identifiers, payer, provider, product, quantity, shipping information, and other material details before submission. MedEffects is not responsible for loss, delay, denial, overpayment, recoupment, claim liability, or patient impact caused by inaccurate, incomplete, duplicate, untimely, unauthorized, or misdirected information supplied by a user or Organization.

6 HIPAA and Business Associate Agreements

When MedEffects creates, receives, maintains, or transmits PHI on behalf of a HIPAA covered entity or business associate, the applicable BAA governs MedEffects' permitted uses and disclosures, safeguards, subcontractors, incident reporting, individual-rights assistance, and return or destruction of PHI. A practice must have an effective BAA or other legally sufficient arrangement with MedEffects before using the App to transmit PHI when one is required by law.

These Terms do not authorize either party to use or disclose PHI in a manner prohibited by HIPAA, do not replace a required BAA, and do not waive any non-waivable duty or liability under applicable privacy or security law. If a BAA and these Terms conflict concerning PHI, the BAA controls.

Practices remain responsible for their own HIPAA compliance, including determining the legal basis and minimum necessary information for submissions; maintaining notices, policies, authorizations, and sanctions; training workforce members; responding to patients; and making required regulatory or individual notifications except to the extent an applicable BAA assigns a specific task to MedEffects.

7 Insurance verification results

IVR and eligibility information is obtained from payers, clearinghouses, or other third-party sources, including pVerify. Results may be delayed, incomplete, inaccurate, unavailable, or changed after retrieval. An IVR is informational only and is not a promise or guarantee of coverage, medical necessity, coding, reimbursement, prior authorization, claim acceptance, or payment.

The healthcare practice is solely responsible for confirming current benefits and coverage when appropriate; satisfying payer documentation, coding, authorization, claim, and billing requirements; determining medical necessity and treatment; communicating financial responsibility to the patient; and deciding whether to order or use a product. No IVR result creates an insurance contract or obligates MedEffects, a payer, or another third party to pay a claim.

8 Orders shipments invoices and payments

8.1 Orders

An order submitted through an authorized account is an electronic instruction from the applicable Organization and may be relied on by MedEffects. The Organization is responsible for confirming the product, size, quantity, practice, patient association, provider, sales representative, shipping address, and requested timing before submission. An order is subject to MedEffects' acceptance, product availability, credit approval, applicable law, and any separate commercial agreement. MedEffects may reject, hold, cancel, or request clarification of an order.

Edits may be restricted after submission. Contact MedEffects promptly if a correction is needed. MedEffects does not guarantee that a submitted order can be changed or canceled before processing or shipment.

8.2 Shipments

Shipment dates and tracking information are estimates and may depend on vendors and carriers. Title, risk of loss, delivery terms, returns, product warranties, and recalls are governed by the applicable sales, distribution, or product terms. You must promptly report apparent shipping errors, damage, or delivery to an unauthorized location.

8.3 Invoices and payments

Invoices may be created or synchronized through Intuit QuickBooks. By initiating a payment, you represent that you are authorized to use the selected payment method and authorize the applicable processor and financial institutions to debit the amount shown, including any separately disclosed lawful fee. Bank-account and payment services may be governed by additional processor terms and the rules of the applicable payment network.

Amounts due, taxes, credits, refunds, payment timing, returned-payment fees, and invoice disputes are governed by the applicable customer or sales agreement and invoice terms. The App's status is a convenience; records of the payment processor and MedEffects' accounting system control if there is a discrepancy. You must notify MedEffects promptly of a suspected error and continue to protect payment credentials.

9 Acceptable use

You will not, and will not help another person to:

• use the App or data obtained through it for an unlawful, fraudulent, discriminatory, or unauthorized purpose;
• access, submit, disclose, download, print, photograph, copy, or retain information beyond your assigned role or legitimate business need;
• submit information without a lawful basis, required permission, or accurate patient and Organization association;
• use IVR results to make misleading statements or guarantees about coverage or payment;
• disclose PHI through personal email, consumer messaging, unapproved storage, or another unauthorized channel;
• circumvent access controls, probe or test security, interfere with operation, introduce malicious code, scrape, harvest, or use automated means except through an authorized interface;
• reverse engineer, decompile, disassemble, modify, translate, frame, mirror, resell, sublicense, or create derivative works of the App except where a restriction is prohibited by law;
• remove proprietary notices or use MedEffects names, marks, or content without permission;
• use App data to train or improve a public or third-party artificial-intelligence model unless MedEffects and the applicable Organization have expressly approved it in writing and all legal requirements are satisfied; or
• use the App in a way that could harm a patient, payer, practice, supplier, MedEffects, or another person.

10 Monitoring audit and records

To secure and operate the App, meet legal obligations, investigate misuse, and support Organizations, MedEffects may log and audit sign-ins, access, searches, submissions, changes, approvals, downloads, payment events, device and network information, and administrative actions. You have no expectation of personal privacy in activity performed through a business account, subject to applicable law. Your Organization and authorized MedEffects personnel may review activity within their lawful scope.

Electronic records, timestamps, audit logs, approvals, and communications maintained in the ordinary course may be used as evidence of activity. You agree to the use of electronic records and signatures and may retain a copy of these Terms.

11 Third party services

The App may interoperate with services provided by pVerify, Intuit QuickBooks and payment services, cloud hosting and storage providers, email providers, vendors, suppliers, and shipping carriers. Third-party services may have separate terms and privacy notices. MedEffects does not control and is not responsible for a third party's independent acts, systems, availability, data, or decisions, but this sentence does not limit MedEffects' obligations for a subcontractor or service provider to the extent imposed by an applicable BAA or law.

You authorize MedEffects to transmit information to and receive information from applicable third parties as necessary to perform an authorized request, subject to the Privacy Policy, any BAA, and applicable law.

12 Privacy confidentiality and ownership of data

The MedEffects Privacy Policy explains general information practices and is incorporated into these Terms. Each party will protect the other's nonpublic confidential information using reasonable safeguards and will use it only for the relationship, authorized Services, or as required by law. PHI is governed by the applicable BAA.

As between MedEffects and the applicable Organization, the Organization retains its rights in data it submits or directs MedEffects to process (Organization Data). The Organization grants MedEffects and its authorized service providers a non-exclusive right to host, process, transmit, display, reproduce, and otherwise use Organization Data only as needed to provide, secure, support, and comply with law concerning the Services, and as otherwise permitted by written agreement. MedEffects may create and use data that has been de-identified in accordance with applicable law and the BAA, if the BAA permits it. MedEffects will not attempt to re-identify properly de-identified data.

13 App and intellectual property

The App, documentation, workflows, visual design, software, and MedEffects content, excluding Organization Data, are owned by MedEffects, Rockbound Solutions, LLC, or their licensors and are protected by intellectual-property and other laws. Rockbound Solutions, LLC is MedEffects' technology provider and is an intended third-party beneficiary of provisions protecting the App and limiting claims based on the technology it provides.

If you voluntarily provide an idea or suggestion that does not include PHI or another person's confidential information, you grant MedEffects a perpetual, irrevocable, worldwide, royalty-free right to use it without restriction or compensation.

14 App availability changes and support

MedEffects may update, maintain, limit, or discontinue features. Maintenance, emergencies, third-party outages, security threats, legal requirements, or events beyond reasonable control may interrupt access. MedEffects does not promise uninterrupted availability. You and your Organization must maintain appropriate downtime procedures, alternate payer-verification methods, order-confirmation processes, and copies of records required for care, billing, and compliance.

Support is available at support@medeffectsllc.com. Support communications should not include PHI unless MedEffects directs you to an approved secure channel.

15 Suspension termination and data after termination

MedEffects may suspend, restrict, or terminate access immediately when reasonably necessary to address a suspected security or privacy incident, unlawful activity, unauthorized access, nonpayment, risk to a patient or other person, material breach, legal requirement, or threat to the App. Where practicable, MedEffects will provide notice to the applicable Organization.

You may stop using the App at any time. Your Organization may request account deactivation. Termination ends the license but does not cancel accrued payment obligations or provisions that by their nature should survive, including confidentiality, ownership, disclaimers, liability limits, indemnification, dispute terms, and records provisions. PHI and other data will be retained, returned, deleted, or destroyed under the applicable BAA, Organization agreement, Privacy Policy, and law.

16 Disclaimers

TO THE MAXIMUM EXTENT PERMITTED BY LAW, AND EXCEPT FOR AN EXPRESS WRITTEN WARRANTY IN AN APPLICABLE AGREEMENT, THE APP AND ALL IVR, PAYER, SHIPPING, INVOICE, AND THIRD-PARTY INFORMATION ARE PROVIDED AS IS AND AS AVAILABLE. MEDEFFECTS AND ITS AFFILIATES, LICENSORS, AND SERVICE PROVIDERS DISCLAIM ALL EXPRESS, IMPLIED, AND STATUTORY WARRANTIES, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, ACCURACY, QUIET ENJOYMENT, AND WARRANTIES ARISING FROM COURSE OF DEALING OR USAGE OF TRADE.

MEDEFFECTS DOES NOT WARRANT THAT THE APP OR ANY RESULT WILL BE UNINTERRUPTED, SECURE, ERROR-FREE, COMPLETE, CURRENT, OR SUITABLE FOR A PARTICULAR CLINICAL, COVERAGE, CODING, REIMBURSEMENT, ORDERING, OR PAYMENT DECISION. YOU ARE RESPONSIBLE FOR INDEPENDENT REVIEW AND FOR APPROPRIATE BUSINESS, CLINICAL, COMPLIANCE, AND DOWNTIME PROCEDURES.

Some laws do not allow certain disclaimers, so a disclaimer applies only to the extent permitted.

17 Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, MEDEFFECTS, ITS AFFILIATES, LICENSORS, SERVICE PROVIDERS, AND THEIR RESPECTIVE OWNERS, DIRECTORS, OFFICERS, EMPLOYEES, AND AGENTS WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, CONSEQUENTIAL, OR PUNITIVE DAMAGES; LOSS OF PROFITS, REVENUE, BUSINESS, GOODWILL, DATA, OR USE; COST OF SUBSTITUTE SERVICES; OR CLAIM DENIAL, RECOUPMENT, LOSS OF COVERAGE, OR BUSINESS INTERRUPTION, EVEN IF ADVISED THAT SUCH DAMAGES ARE POSSIBLE.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, THEIR TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATING TO THE APP OR THESE TERMS WILL NOT EXCEED THE GREATER OF (A) THE AMOUNT THE APPLICABLE ORGANIZATION PAID MEDEFFECTS SPECIFICALLY FOR ACCESS TO THE APP DURING THE 12 MONTHS BEFORE THE EVENT GIVING RISE TO LIABILITY OR (B) $100.

These limitations apply regardless of the theory of liability and even if a remedy fails of its essential purpose. They do not exclude liability that cannot lawfully be excluded, and they do not alter an express allocation of liability in an applicable BAA or signed Organization agreement. For clarity, nothing in these Terms releases MedEffects from a statutory obligation that cannot be waived.

18 Indemnification

To the maximum extent permitted by law, you and, if applicable, your Organization will defend, indemnify, and hold harmless MedEffects, its affiliates, licensors, service providers, and their owners, directors, officers, employees, and agents from third-party claims, investigations, losses, liabilities, penalties, judgments, settlements, and reasonable attorneys' fees arising from or related to:

• information submitted, accessed, used, disclosed, or directed by you or your Organization;
• lack of authority, patient misidentification, inaccurate information, excessive or unauthorized PHI, or failure to obtain a required permission or provide a required notice;
• an order, payment instruction, product-use decision, coding, claim, billing, or reimbursement activity of you or your Organization;
• your breach of these Terms, law, or another person's rights;
• use of an unapproved device, channel, integration, or artificial-intelligence service; or
• fraud, willful misconduct, or negligent acts or omissions by you or your Organization.

MedEffects will provide reasonable notice and may control the defense with counsel of its choice. You may not settle a claim in a way that admits fault by, imposes obligations on, or fails to fully release an indemnified party without MedEffects' written consent. This section does not require indemnification to the extent a final judgment determines the claim was caused by the indemnified party's gross negligence, willful misconduct, or violation of law, and it is subject to any different allocation in a signed agreement.

19 Governing law dispute resolution and class waiver

These Terms and disputes arising from them or the App are governed by Michigan law, without regard to conflict-of-laws rules and except to the extent federal law controls.

Before filing a claim, the claimant must send written notice describing the dispute and requested relief to support@medeffectsllc.com and allow 30 days for informal resolution. This requirement does not prevent urgent injunctive relief.

Except for an eligible small-claims matter or a claim seeking temporary or preliminary injunctive relief for unauthorized access, misuse of PHI or confidential information, or infringement of intellectual-property rights, any dispute will be resolved by confidential, binding arbitration before one arbitrator under the Federal Arbitration Act and the American Arbitration Association Commercial Arbitration Rules. The arbitration will take place remotely unless the arbitrator requires an in-person hearing, in which case it will occur in Oakland County, Michigan. Judgment may be entered in any court with jurisdiction.

YOU AND MEDEFFECTS AGREE TO BRING CLAIMS ONLY IN AN INDIVIDUAL CAPACITY. NO PARTY MAY BRING OR PARTICIPATE IN A CLASS, COLLECTIVE, CONSOLIDATED, OR REPRESENTATIVE ACTION OR ARBITRATION. If this class waiver is unenforceable for a particular claim, that claim must proceed in court and not in arbitration. For disputes not subject to arbitration, the parties consent to exclusive jurisdiction in the state courts located in Oakland County, Michigan, or the United States District Court for the Eastern District of Michigan.

You may opt out of arbitration, but not the remainder of these Terms, by emailing support@medeffectsllc.com within 30 days after first accepting these Terms. The notice must identify you, your Organization, and the email address used for the App and clearly state that you opt out of arbitration. An opt-out does not affect previously agreed dispute provisions in another contract.

20 Changes to these Terms

MedEffects may update these Terms. For a material change, MedEffects will provide notice through the App, email, or another reasonable method and may require renewed acceptance before further use. The updated Terms apply prospectively from their stated effective date. Continued use after the effective date constitutes acceptance where permitted by law. A change will not retroactively reduce rights concerning an event that occurred before the change if prohibited by law.

21 Electronic communications

You consent to receive agreements, policies, records, disclosures, notices, and transaction communications electronically at the email address associated with your account or through the App. You may keep a copy by printing or saving it. You are responsible for maintaining a current email address and hardware and software capable of accessing common web pages and PDF files. Marketing communications, if any, are governed by separate choices and applicable law.

22 Mobile app store terms

If you obtain the App from Apple App Store or Google Play, the applicable store provider is not a party to these Terms and is not responsible for the App, support, warranties, claims, or intellectual property matters, except as required by its platform rules. The store provider and its subsidiaries are intended third-party beneficiaries of this section and may enforce it. You represent that you are not located in a country subject to a United States government embargo and are not on a United States government prohibited or restricted-party list. You must comply with applicable third-party terms when using the App.

For an iOS version, Apple has no obligation to provide maintenance or support. If the iOS App fails to conform to an applicable warranty, you may notify Apple, and Apple's responsibility is limited to refunding the purchase price, if any, to the maximum extent permitted by law.

23 General terms

These Terms, the Privacy Policy, and agreements expressly given priority above form the applicable agreement concerning App use. If a provision is unenforceable, it will be modified to the minimum extent necessary and the remainder will continue. A waiver must be in writing and is not a continuing waiver. You may not assign these Terms without MedEffects' written consent. MedEffects may assign them in connection with a merger, reorganization, financing, sale of assets, or by operation of law. Headings are for convenience. Including means including without limitation. No person other than the express third-party beneficiaries has a right to enforce these Terms.

24 Contact

MedEffects LLC

Email: support@medeffectsllc.com

Privacy and legal correspondence: MedEffects LLC, c/o Rockbound Solutions, LLC,