Notice of Privacy Practices

Effective June 2, 2026 — Core Values Recovery LLC

THIS NOTICE DESCRIBES HOW HEALTH INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Who We Are

Core Values Recovery LLC (“we,” “us,” “our”) operates On the Beam, a technology platform that supports recovery coaching. We provide this Notice of Privacy Practices (“Notice”) to describe how we collect, use, and disclose your protected health information (“PHI”) in compliance with the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and applicable state laws.

Our Duties

Information We Collect

Through your use of On the Beam, we may collect the following categories of PHI:

How We May Use and Disclose Your PHI

For Coaching & Treatment Support

Your assigned recovery coach reviews your conversations, check-ins, testing results, and progress to provide personalized coaching support. The AI coaching companion uses your conversation history to generate contextually relevant responses.

With Your Authorization

We will obtain your written authorization before using or disclosing your PHI for purposes other than those described in this Notice. You may revoke your authorization at any time in writing.

As Required by Law

We may disclose your PHI when required by federal, state, or local law.

To Avert a Serious Threat

We may use and disclose your PHI when necessary to prevent a serious and imminent threat to your health or safety or the health or safety of another person or the public.

Business Associates

We share PHI with service providers (“Business Associates”) who perform functions on our behalf and who are contractually required to protect your PHI. These include:

42 CFR Part 2 — Substance Use Disorder Records

Federal law (42 CFR Part 2) provides additional confidentiality protections for substance use disorder treatment records. Your records are protected by these regulations and cannot be disclosed without your written consent except as permitted by the regulation.

Uses and Disclosures We Will Not Make

Your Rights

Right to Access

You have the right to inspect and obtain a copy of your PHI. We will provide your records in an electronic format upon request. We may charge a reasonable fee for copies.

Right to Amend

You have the right to request an amendment to your PHI if you believe it is inaccurate or incomplete. We may deny your request in certain circumstances, but we will provide a written explanation.

Right to an Accounting of Disclosures

You have the right to request a list of disclosures we have made of your PHI for purposes other than coaching, payment, or operations.

Right to Request Restrictions

You have the right to request restrictions on how we use or disclose your PHI. We are not required to agree to your request, but if we do, we will comply with it.

Right to Confidential Communications

You have the right to request that we communicate with you about your PHI in a particular way or at a particular location (for example, by email only).

Right to a Paper Copy of This Notice

You have the right to obtain a paper copy of this Notice upon request.

Right to File a Complaint

If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health & Human Services Office for Civil Rights. We will not retaliate against you for filing a complaint.

AI Disclosure (California SB 243)

On the Beam uses artificial intelligence to provide coaching support. The AI coaching companion is not a human. Your human recovery coach supervises all AI interactions and can intervene at any time.

Security Measures

Data Retention

We retain your PHI for as long as your coaching relationship is active and for six (6) years after the relationship ends, as required by HIPAA. Audit logs are retained for a minimum of six (6) years. You may request deletion of your records, subject to our legal retention obligations.

Changes to This Notice

We reserve the right to change this Notice at any time. Changes will apply to PHI we already hold as well as PHI we receive in the future. We will post the revised Notice on our website and within the On the Beam app, and the effective date will be updated accordingly.

Contact Information

To exercise any of your rights, request additional information, or file a complaint:

To file a complaint with the federal government: