Morava Care

Effective Date: March 25, 2026 · Last Revised: June 2, 2026

1. About Morava

Morava Care LLC ("Morava," "we," "us," or "our") operates a mobile application and website (collectively, the "Service") that helps patients in Oklahoma discover healthcare providers and request appointments. Morava is a healthcare technology platform. We are not a healthcare provider, medical practice, hospital, or insurance company, and we do not practice medicine.

By using the Service, you agree to these Terms of Service ("Terms"). If you do not agree, please do not use the Service. These Terms incorporate by reference our Privacy Policy and, where applicable, our Business Associate Agreement ("BAA") with covered healthcare providers.

2. Eligibility

To use Morava, you must:

• Be at least 13 years old. Users between 13 and 17 must have documented parental or legal guardian consent before creating an account or submitting health information. Users under 13 are strictly prohibited from creating accounts or using the Service.
• Provide accurate, complete, and truthful information when creating and maintaining your account.
• Have the legal authority to agree to these Terms on your own behalf, or on behalf of a minor or dependent for whom you are the legal guardian or authorized representative.
• Not be barred from receiving the Service under applicable law.

3. Not Medical Advice

Morava facilitates appointment requests between patients and independent, licensed healthcare providers. We do not employ, supervise, control, or direct any healthcare provider listed on the platform. Providers are solely responsible for the quality and content of the healthcare services they deliver. Any clinical decisions made by providers in connection with your care are entirely the responsibility of those providers.

4. Your Account

When you create a Morava account, you agree to:

• Provide accurate, complete, and current registration information and promptly update it as needed.
• Maintain the security and confidentiality of your login credentials. Do not share your password or account access with any other person.
• Notify us immediately of any suspected unauthorized access at support@moravacare.com or (432) 803-0136.
• Accept full responsibility for all activity that occurs under your account, whether or not authorized by you.
• Not create more than one account per person, or create an account for another person without proper authorization.

We reserve the right to suspend or terminate accounts that violate these Terms, provide false or misleading information, engage in abusive conduct toward providers or staff, or present a security or legal risk to Morava or other users.

5. Appointment Requests and Bookings

Morava allows you to request appointments with healthcare providers. You acknowledge and agree:

• An appointment request submitted through Morava is a request only. It is not a confirmed appointment until explicitly accepted by the provider or their authorized staff.
• Providers may decline, reschedule, modify, or cancel appointment requests at their sole discretion without liability to Morava.
• Morava is not responsible for provider cancellations, no-shows, delays, scheduling errors, or the quality, appropriateness, or outcome of care received.
• You are responsible for arriving on time, providing accurate information, and complying with provider check-in requirements.
• Some providers on Morava may have unclaimed profiles created from public records. Morava will make reasonable efforts to notify unclaimed providers of booking requests, but booking confirmation is not guaranteed for unclaimed profiles.
• Morava does not facilitate payment for healthcare services. Billing, insurance verification, co-pays, and financial arrangements are solely between you and your provider.
• You are responsible for verifying insurance acceptance, hours of operation, and provider availability directly with the provider prior to your appointment.

6. Health Information and HIPAA Compliance

6.1 Scope of HIPAA Applicability

Morava may function as a "business associate" under the Health Insurance Portability and Accountability Act of 1996, as amended ("HIPAA"), and the Health Information Technology for Economic and Clinical Health Act ("HITECH"), when providing services to covered healthcare providers. Morava's obligations as a business associate are governed by applicable Business Associate Agreements ("BAAs") entered into with covered entity providers and by applicable federal and Oklahoma state law.

6.2 Protected Health Information

Certain health information you submit through Morava may constitute "Protected Health Information" ("PHI") under HIPAA when associated with a covered healthcare provider. Morava will:

• Use and disclose PHI only as permitted or required by applicable BAAs, these Terms, and applicable law.
• Implement and maintain appropriate administrative, physical, and technical safeguards to protect the confidentiality, integrity, and availability of electronic PHI ("ePHI") as required by the HIPAA Security Rule (45 CFR Part 164, Subpart C).
• Not use or disclose PHI in a manner that would violate HIPAA's Privacy Rule (45 CFR Part 164, Subpart E) if done by a covered entity.
• Report any breach of unsecured PHI to the applicable covered entity provider without unreasonable delay, and no later than 60 days after discovery, in accordance with HIPAA's Breach Notification Rule (45 CFR Part 164, Subpart D).
• Ensure that any subcontractors or agents who create, receive, maintain, or transmit PHI on Morava's behalf agree to the same restrictions and conditions applicable to Morava under applicable BAAs.

6.3 Your Health Profile

You may optionally submit health information through Morava's health profile feature. By submitting such information, you:

• Confirm the information is accurate to the best of your knowledge and understand that inaccurate information may affect the quality of care you receive.
• Authorize Morava to transmit that information to healthcare providers with whom you book appointments through the Service, solely for the purposes of facilitating your appointment.
• Understand that once health information is transmitted to a provider, it is subject to that provider's own privacy practices and HIPAA obligations.
• Retain the right to request deletion of your health profile data from Morava's systems by contacting support@moravacare.com, subject to applicable legal retention requirements.

6.4 User-Submitted Information vs. PHI

Not all information you submit to Morava is PHI. Information submitted in the absence of a provider relationship (e.g., general account registration data not linked to a covered provider's appointment) is governed by our Privacy Policy rather than HIPAA. Our Privacy Policy describes how we handle non-PHI personal information.

6.5 Oklahoma Health Data Privacy

In addition to HIPAA, Morava complies with applicable Oklahoma statutes governing health information privacy, including the Oklahoma Health Records Act (63 O.S. § 1-501 et seq.) and the Oklahoma Consumer Privacy Act where applicable. Users who are Oklahoma residents may have additional rights regarding their health information as described in our Privacy Policy.

7. Data Security

Morava maintains a comprehensive information security program designed to protect user data, including PHI and ePHI. Our security measures include, but are not limited to:

• Encryption of ePHI in transit (TLS 1.2 or higher) and at rest using industry-standard encryption protocols.
• Access controls limiting PHI access to authorized personnel on a minimum-necessary basis.
• Regular risk assessments and vulnerability testing in accordance with HIPAA Security Rule requirements.
• Workforce training on HIPAA privacy and security obligations.
• Incident response and breach notification procedures consistent with HIPAA's Breach Notification Rule.

Despite these measures, no electronic transmission or storage is 100% secure. You use the Service at your own risk and should take care when transmitting sensitive health information over the internet.

8. Family Members and Dependents

You may book appointments or manage health profiles for family members or dependents using your Morava account. By doing so, you represent and warrant that:

• You have legal authority to make healthcare decisions for the individual (e.g., you are a parent, legal guardian, or hold a valid healthcare power of attorney).
• You have obtained any required consent to share the individual's health information with healthcare providers through the Service.
• For minor children under 18, you are the parent or legal guardian or have been delegated such authority.
• For adult dependents who lack decision-making capacity, you hold a valid legal authorization (such as a durable power of attorney for healthcare or court-appointed guardianship).

You agree to indemnify Morava for any claims arising from your unauthorized use of another person's health information or lack of proper authorization to manage their healthcare decisions.

9. Prohibited Conduct

You agree not to use the Service to:

• Violate any applicable federal, state, or local law or regulation, including HIPAA, HITECH, and Oklahoma health privacy statutes.
• Submit false, misleading, or fraudulent information, including false health information.
• Impersonate another person, entity, or healthcare provider.
• Harass, threaten, defame, or abuse healthcare providers, Morava employees, or other users.
• Access or attempt to access another user's account, health information, or PHI without authorization.
• Transmit malware, viruses, or malicious code of any kind.
• Reverse engineer, decompile, scrape, or attempt to extract source code or data from the Service without authorization.
• Use automated tools (bots, scrapers, crawlers) to access the Service.
• Use the Service for spam, solicitation, advertising, or commercial purposes not authorized by Morava.
• Interfere with or disrupt the security, integrity, or proper functioning of the Service or its infrastructure.
• Circumvent, disable, or otherwise interfere with security-related features, including features that prevent or restrict use or copying of content.
• Aggregate, sell, or otherwise exploit other users' personal or health information.

Violations may result in immediate account suspension or termination, reporting to law enforcement, and civil or criminal liability.

10. Provider Listings and Credentials

Providers listed on Morava are independent, licensed healthcare professionals. Morava:

• Does not employ, supervise, or control any listed provider.
• Does not verify, certify, endorse, or guarantee the qualifications, credentials, licensure status, malpractice history, or quality of any provider.
• Strongly encourages users to independently verify provider credentials through the Oklahoma Medical Board (www.okmedicalboard.org), the Oklahoma Board of Nursing, or other applicable licensing authorities.
• Is not responsible for provider profile information that is incomplete, outdated, or inaccurate, particularly for unclaimed profiles.

Provider profile information such as accepted insurance plans, hours of operation, specialties, and availability is provided for informational purposes only and is subject to change. You should confirm this information directly with the provider's office before booking.

11. Intellectual Property

All content, software, designs, trademarks, logos, and other materials on or in the Service are owned by Morava Care LLC or its licensors and are protected by applicable intellectual property laws. You may not copy, reproduce, distribute, modify, create derivative works from, publicly display, or commercially exploit any part of the Service without our prior written permission.

By voluntarily submitting content to Morava (such as reviews, feedback, or general comments), you grant Morava a non-exclusive, worldwide, royalty-free, sublicensable license to use, reproduce, and display that content to operate, promote, and improve the Service. You represent that you have the right to grant this license and that your content does not infringe any third-party rights.

You retain ownership of any PHI or personal health information you submit. The license above does not apply to PHI, which is governed exclusively by Section 6 of these Terms, our Privacy Policy, and applicable HIPAA obligations.

12. Third-Party Links and Services

The Service may contain links to third-party websites, applications, or services not operated or controlled by Morava, including provider websites, telehealth platforms, and health information resources. Morava:

• Does not endorse, control, or assume responsibility for third-party content, privacy practices, or services.
• Is not responsible for the privacy or security practices of third-party sites you visit through links on the Service.
• Recommends you review the privacy policy and terms of service of any third-party site before submitting personal or health information.

13. Disclaimers

14. Limitation of Liability

15. Indemnification

You agree to indemnify, defend, and hold harmless Morava Care LLC and its officers, directors, employees, contractors, and agents from and against any and all claims, liabilities, damages, losses, costs, and expenses (including reasonable attorneys' fees) arising from or related to:

• Your violation of these Terms or any applicable law or regulation.
• Your use or misuse of the Service.
• Your submission of false, inaccurate, or unauthorized health information.
• Your unauthorized use of another person's health information or account.
• Your violation of any third-party right, including any intellectual property or privacy right.
• Any claim by a healthcare provider arising from inaccurate information you submitted.

16. Dispute Resolution

16.1 Informal Resolution

Before initiating any formal legal proceeding, you agree to contact Morava at support@moravacare.com and make a good-faith effort to resolve the dispute informally. Morava will attempt to respond within 30 days.

16.2 Binding Arbitration

If informal resolution fails, you and Morava agree that any dispute, claim, or controversy arising out of or relating to these Terms or the Service (excluding claims for injunctive or equitable relief) shall be resolved by binding individual arbitration administered by the American Arbitration Association ("AAA") under its Consumer Arbitration Rules, except as set forth below.

16.3 Exceptions

Either party may seek injunctive or other equitable relief in a court of competent jurisdiction to protect intellectual property rights or prevent unauthorized access to or disclosure of PHI. Small claims matters within the applicable jurisdictional threshold may also be brought in small claims court.

16.4 Governing Law and Venue

These Terms are governed by the laws of the State of Oklahoma, without regard to conflict of law principles. To the extent court proceedings are permitted under these Terms, you consent to exclusive jurisdiction and venue in the state and federal courts of Oklahoma County, Oklahoma.

17. HIPAA Breach Notification

In the event of a breach of unsecured PHI, Morava will comply with HIPAA's Breach Notification Rule (45 CFR §§ 164.400–164.414), including:

• Notifying the applicable covered entity provider without unreasonable delay, and no later than 60 days after discovery of the breach.
• Providing notification to affected individuals, as directed by the covered entity provider, in compliance with HIPAA requirements.
• Notifying the Secretary of the U.S. Department of Health and Human Services as required.
• Cooperating with covered entity providers in their breach investigation and remediation efforts.

If you suspect that your PHI has been compromised through the Service, please contact us immediately at support@moravacare.com or (432) 803-0136.

18. Children's Privacy (COPPA)

The Service is not directed to children under the age of 13. Morava does not knowingly collect personal information from children under 13. If we learn we have inadvertently collected personal information from a child under 13, we will delete it promptly. If you believe a child under 13 has provided us with personal information, please contact support@moravacare.com immediately.

Users between 13 and 17 may use the Service only with verifiable parental or guardian consent. Parents or guardians may contact us to review, update, or request deletion of a minor's account information.

19. Your HIPAA Rights

To the extent Morava holds PHI on behalf of a covered entity provider, you may have the following rights under HIPAA, which you may exercise through the applicable covered entity provider:

• Right of access: Request a copy of your PHI held by your provider.
• Right to amendment: Request correction of inaccurate or incomplete PHI.
• Right to an accounting of disclosures: Request a list of certain disclosures of your PHI.
• Right to restrict: Request restrictions on certain uses and disclosures of your PHI.
• Right to confidential communications: Request that your PHI be communicated by alternative means or at an alternative location.
• Right to file a complaint: File a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights (OCR) at www.hhs.gov/ocr if you believe your HIPAA rights have been violated.

To exercise any of these rights, please contact us at support@moravacare.com or contact your healthcare provider directly. Morava will cooperate with covered entity providers to facilitate your rights requests.

20. Changes to These Terms

Morava may update these Terms from time to time. We will notify you of material changes by: (a) posting the revised Terms in the app and on our website with an updated effective date, and (b) sending a notice to the email address associated with your account at least 14 days before the changes take effect, where practicable. Your continued use of the Service after the effective date of revised Terms constitutes your acceptance of those changes.

If we make changes to how we handle PHI that materially affect your rights, we will provide notice as required by HIPAA and applicable law, which may include obtaining your acknowledgment of the updated terms.

21. Termination

Morava may suspend or terminate your access to the Service at any time, with or without cause, and with or without notice, including for violations of these Terms, suspected fraud, security concerns, or legal requirements.

Upon termination, your right to use the Service immediately ceases. Sections 6, 7, 11, 13, 14, 15, 16, and 17 survive termination. Termination does not affect Morava's HIPAA and BAA obligations with respect to PHI already held by Morava, which continue in accordance with applicable law and BAA terms.

You may close your account at any time by contacting support@moravacare.com. Upon account closure, we will handle your personal data and PHI in accordance with our Privacy Policy and applicable law, including HIPAA retention requirements.

22. Accessibility

Morava is committed to making the Service accessible to individuals with disabilities in compliance with the Americans with Disabilities Act ("ADA") and Section 508 of the Rehabilitation Act, to the extent applicable. If you experience accessibility barriers while using the Service, please contact us at support@moravacare.com.

23. General Provisions

Entire Agreement: These Terms, together with our Privacy Policy and any applicable BAA, constitute the entire agreement between you and Morava regarding the Service and supersede all prior agreements relating to the same subject matter.

Severability: If any provision of these Terms is found to be invalid or unenforceable, the remaining provisions shall continue in full force and effect.

Waiver: Morava's failure to enforce any right or provision of these Terms shall not constitute a waiver of that right or provision.

Assignment: You may not assign your rights under these Terms without Morava's prior written consent. Morava may assign its rights and obligations without restriction.

Force Majeure: Morava shall not be liable for any failure or delay in performance resulting from causes beyond its reasonable control, including natural disasters, acts of government, cyberattacks, or public health emergencies. However, Morava's HIPAA obligations remain in force regardless of such events.

No Third-Party Beneficiaries: These Terms do not create rights in any third party, except that covered entity providers with whom Morava has executed a BAA are intended third-party beneficiaries of Sections 6, 7, and 17 of these Terms.

24. Contact Us

If you have questions, concerns, or complaints about these Terms, privacy, or your health data, please contact us:

For HIPAA-specific concerns or to submit a HIPAA complaint, you may also contact the U.S. Department of Health and Human Services Office for Civil Rights at www.hhs.gov/ocr or 1-800-368-1019.