HeyMOE Privacy Policy

Version 2.0 · Effective October 15, 2026

Hey Moe, LLC, doing business as HeyMOE, uses information to provide its Medicare Part D research and comparison service. This policy explains our practices for the HeyMOE website and software, including information from subscribers and participating affiliates.

We do not sell your personal information. We do not provide your email address to third parties for their marketing. A referral link or code lets the referring affiliate receive limited signup and subscription information; it does not give access to your medications or results. Optional agent access requires your separate permission.

1. How this policy works with our agreements

The Terms of Service govern your subscription and use of HeyMOE. The Affiliate Agreement governs participation in the referral program, including payments and affiliate responsibilities. This policy describes information handling across those relationships. Affiliates include individuals and organizations that refer customers; an “Umbrella” is an approved organization associated with participating affiliates.

Our separate Consumer Health Data Privacy Policy explains health-data practices and Washington privacy rights. Where its health-data provisions are more protective, they control over general privacy language. Accepting either agreement or this policy is not consent to optional agent access. Your specific Agent Access consent limits who may see health information and why. No general term, business transfer, or later policy update overrides that limit or reduces the existing referred-client protections described in Section 7.

2. Information we collect

Account and subscription information includes your name, email address, state, ZIP code, billing information, subscription and renewal records, and communications with us. For affiliate accounts, we also collect information needed to identify the account owner and payee, administer referrals, and satisfy payment and tax requirements, such as tax and banking details supplied through our payment process.

Health and comparison information includes the current plan you identify, prescription names, dosages and quantities, pharmacy preferences, and information used or generated in your Part D comparison, such as rankings, cost estimates, formulary coverage, related analysis, notes, and flags. Medication and pharmacy information can reveal health conditions even when you do not name a condition.

Referral and permission information includes the link or code attributed at account creation, associated affiliate and umbrella relationships, and the permissions you give or withdraw through our access process. Referral attribution is separate from permission to view health information.

Technical information includes page views, clicks, and records needed for sign-in, security, and operation. Cookies and similar technologies may support these functions. Our product analytics service is configured not to receive medication lists, pharmacies, plan names, ZIP codes, comparison results, or contact details. Application logs exclude subscriber names and other sensitive or personally identifiable information. Technical records should not be assumed to be anonymous.

Information comes from you, a person authorized to provide it for you, your use of the Services, our payment and operational providers, and the government and other plan-data sources used in comparisons. HeyMOE also generates comparison results and related records from those inputs. Using outside plan data does not itself give an insurance company access to your account.

3. How we use information

We use information to create and maintain accounts, produce comparisons, provide subscription services and reminders, process payments and refunds, administer referral payments, manage permission choices, respond to support requests, and protect against misuse or fraud.

We also use information to maintain and improve HeyMOE, conduct internal analysis, keep required business records, and comply with law. Health-data uses remain limited by the Consumer Health Data Privacy Policy and any required consent. We send account messages, verification codes, and notifications when comparisons are ready. A notification may name the current plan you provided and indicate whether a plan change may be worth considering. We do not email detailed comparison results. We may also send permitted HeyMOE communications. You may unsubscribe from promotional emails without cancelling necessary account, billing, security, or service notices.

Internal analysis does not authorize sale of your information or use of referred-client information to target insurance marketing. We do not treat deidentification or aggregation as permission to evade the protections in Section 7.

4. Referral information

If your account is created using an affiliate's link or code, that affiliate may receive your name, email address, account-creation date, subscription-start date, and most recent renewal date. We send a signup notification when someone completes signup using a referral link or code. These records help the affiliate check attribution and referral payments. We obtain separate consent before disclosure where required by applicable health-data law; general acceptance of our Terms is not that consent. The affiliate may receive a payment for an eligible subscription or renewal, and an associated Umbrella may receive an additional payment.

We may change the dashboard or the way we deliver these records. Neither referral records nor signup notifications sent to affiliates include medications, pharmacy preferences, comparison results, or other information requiring separate access consent under Section 5. Changes to the dashboard or delivery method do not expand those permissions. Umbrella payment administration does not itself grant access to subscriber health information or child-affiliate accounts.

Our Affiliate Agreement restricts use of referral information to referral and payment reconciliation and prohibits selling, sharing, profiling, or marketing from it. An independently established client relationship does not give an affiliate permission to misuse HeyMOE records. Information given independently to an affiliate is also subject to that affiliate's own duties and applicable policies.

5. Optional agent access

Anyone helping you create or set up your account must have your permission. That assistance does not give them ongoing access to your medications or results. Optional access requires your separate, explicit consent through HeyMOE’s access process. Through available features, an identified licensed insurance agent or broker, or another type of professional HeyMOE has approved for client access, connected with your referring affiliate may request view-only access. Before you approve, the separate Agent Access consent identifies the professional and company, information to be shared, and permitted purpose. Neither the affiliate account nor the use of its link or code is permission to view health information.

The consent may cover prescription names, dosages and quantities, pharmacy preferences, Part D comparison results, rankings, cost estimates, formulary information, and related analysis, notes, or flags. The authorized professional may use authorized information only to help you understand your HeyMOE results. The consent does not permit editing, marketing, profiling, lead generation, or onward sharing with agency staff, an Umbrella, a carrier, or anyone else.

You may refuse without affecting your HeyMOE service. You may revoke permission at any time in Agent Access settings by selecting Remove Agent Access; access ends immediately. Access also ends if the authorized professional is no longer eligible for access through the referring affiliate’s account or that affiliate’s participation in the program ends. Contact support@heymoe.com if you need assistance. Revocation cannot undo information already viewed, but continuing confidentiality, use, and deletion obligations still apply.

A change of insurance agent or transfer of an affiliate's business does not transfer your consent. Refusal or revocation does not change the original referral attribution or otherwise eligible referral payments. This policy does not promise a family-sharing or other future access feature.

6. Other permitted disclosures

Authorized HeyMOE administrators may access subscriber information when needed to operate, support, or protect the service. At your request, authorized HeyMOE personnel may update your medication list or other account information using information you provide. Hosting and database providers store and process account and comparison information. Our email provider processes the recipients and contents of the messages described in Section 3, including any current plan name and change indication. Our analytics provider receives the limited activity information described in Section 2. Our payment provider processes names, email addresses, and billing details; card details are entered on its hosted pages and are not stored on or passed through HeyMOE systems. HeyMOE retains payment reference IDs and subscription status. We do not use a separate third-party error-reporting service. Providers must act for authorized purposes under applicable confidentiality, security, and processing restrictions. These activities do not give an insurance agent access.

We may disclose information when required by law, legal process, or a government or regulatory request we are obligated to answer. We may also disclose it as permitted by law when necessary to address fraud, a security incident, or a legal claim, subject to our existing contractual protections. This paragraph does not authorize disclosures prohibited by Section 7 or create permission for marketing or enrollment.

If HeyMOE is sold, merged, or reorganized, relevant information may transfer with the business. The recipient must assume applicable privacy commitments and existing referred-client protections. A business transfer is not permission to sell your information as a marketing list. The same restrictions apply to later transfers.

7. Lasting protections for referred clients

A person whose genuine account is attributed to an affiliate's link or code is a Protected Client under Section 1 of the Affiliate Agreement, Version 4.2, effective October 15, 2026. Protection starts at account creation, or on that agreement's effective date for an already attributed client. It is automatic and does not depend on a referral payment, continued referrals, or continued subscription.

HeyMOE will not use the referral relationship or subscriber information to market or sell the insurance products or enrollment services covered by that section, generate insurance leads, or divert a Protected Client to an insurance business or competing advisor. We will not sell, rent, or license their information for another person's marketing, including deidentified or aggregated information used to target or profile them. Limited referral records and separately authorized agent access do not permit broader sharing or marketing.

Those protections last for the client's life despite cancellation, return to HeyMOE, affiliate departure, or a sale of the business. A buyer must honor existing protections and pass them on to later successors. It may change terms for future referrals, but neither it nor HeyMOE may weaken protections already attached to an existing client through a policy update, another agreement, or a transfer. Death does not erase other obligations concerning retained information or responsibility for earlier violations.

Ordinary service operations, restricted service providers, legally required disclosures, and transfers to a bound successor remain permitted. A buyer's independently established client relationships and general advertising that does not use HeyMOE information to target Protected Clients are not prohibited. Routing HeyMOE information through another entity does not make it independent.

The identified Affiliate Agreement supplies the full protections and permitted uses. The Terms of Service explain how a Protected Client may enforce those rights and how the agreements fit together. This policy creates no additional waiver of remedies. Our general no-sale and no-third-party-email-marketing commitments also apply to subscribers who were not referred.

8. Retention and deletion

We retain information for the service and the purposes described here, taking account of the account's status, the information's sensitivity, and applicable legal requirements. Cancelling a paid subscription does not itself request deletion of the account. Account information may remain so you can return, subject to your deletion rights and our retention obligations.

To request deletion of your account and personal information, contact support@heymoe.com. Cancelling your subscription in the app does not delete your account. Account deletion removes your profile, medication lists, pharmacy selections, and comparison results and cancels any active subscription. Unlike cancellation of future renewals alone, deletion ends account access. Refund eligibility follows the Terms of Service. Deleted data ages out of our database backups within seven days. We retain billing records, including payment history and contact details on invoices, for financial record-keeping only as permitted or required by law. We explain any legally justified retention and apply the health-data deletion requirements described in the Consumer Health Data Privacy Policy.

Information retained for a limited purpose remains protected and may not be repurposed for marketing. We do not need to keep your medication history forever to honor client protections or account for referral payments. Deletion may prevent continued use of features that require the deleted information. Where required, we pass deletion requests to relevant recipients and service providers.

9. Your choices and privacy requests

You may contact support@heymoe.com to ask what information we hold, correct inaccurate information, request a copy or deletion, or ask about disclosures and recipients. Applicable law may give you rights to a portable copy, confirmation of health-data processing, a list of recipients, withdrawal of consent, or an appeal of a denied request. We will honor applicable rights and response deadlines, including any required explanation, extension notice, or appeal procedure. We will not penalize you for exercising a legal privacy right.

We may verify your identity and a representative's authority before acting. Someone helping you must have authority to do so; knowing your email or having referred you is not sufficient. We request only information reasonably needed for verification. If we cannot grant a request, we will explain why and describe any available appeal. You may reply to request review or contact the relevant regulator as allowed by law.

You can withdraw optional agent access through the controls in Section 5. Withdrawing consent for other processing may limit the service where that information is necessary, but will not be treated as permission to use it for another purpose. Promotional email opt-outs do not stop necessary service notices.

10. Cookies and technical information

Cookies and similar technologies can support sign-in, preferences, security, and analysis of service use. Technical information may identify or relate to a device or account; we do not promise that every cookie or usage record is anonymous. Operational providers may process technical information to perform authorized services.

You may use browser settings to manage or block cookies, although some features may stop working. We honor browser privacy signals where applicable law requires. These technologies do not authorize sale of personal information, third-party email marketing, or use inconsistent with existing client protections.

11. Security and other websites

We use reasonable administrative, technical, and physical safeguards, including encryption of stored subscriber data and database backups and encryption of data in transit. Passwords are salted and hashed, not stored in readable form. Accounts require a password and verification on new devices. Access controls restrict subscriber records to authorized access, and we maintain encrypted daily database backups. No system can guarantee perfect security. Protect your credentials, limit access to shared devices, sign out when appropriate, and contact us if you suspect misuse. We provide security-incident notices as required by applicable law and our contractual duties.

When you follow a link to another website, that operator's privacy practices apply. Its practices are not permission for HeyMOE to disregard this policy. Our service is intended for adults; contact us if you believe a child has supplied information so we can address it appropriately.

12. Policy changes and contact

We may update this policy and its effective date. We will provide advance notice of material changes and obtain consent when required by law. Posting an update or continued use alone does not authorize a new optional health-data disclosure or reduce existing Protected Client rights. A sale of HeyMOE does not change that rule.

For privacy questions or requests, contact support@heymoe.com. Mail: Hey Moe, LLC dba HeyMOE, 1009 West Glen Oaks Lane, Suite 105, Mequon, WI 53092.