Terms of Use — Cove Teams Inc.

1. Acceptance of Terms

By accessing or using the Cove Teams website, mobile application, or related services (the “Platform”), you agree to be bound by these Terms of Use (“Terms”) and our Privacy Policy. If you do not agree to these Terms, do not access or use the Platform.

2. About Cove

Cove Teams Inc. (“Cove,” “we,” “our,” or “us”) is a C-Corporation based in Illinois providing digital tools for therapists, parents, and caregivers to support therapy coordination for children with developmental needs. Cove does not provide therapy or medical services.

All new clinic and therapist accounts begin with a 30-day evaluation period at no cost (“Evaluation Period”). During the Evaluation Period, you will have full access to the Platform features available to your account tier. Cove may use anonymized, aggregated usage data collected during the Evaluation Period to understand how the Platform is being used and to improve the product experience. Cove will never use individually identifiable patient or family data for product development purposes. Your clinical content, home programs, and therapy goals remain your intellectual property throughout and after the Evaluation Period.

3. Eligibility

You must be at least 18 years old to create an account. You may only use the Platform on behalf of a minor if you are the child’s parent, legal guardian, or a therapist or provider authorized to deliver services to that child.

Therapist-Initiated Enrollment. A licensed therapist or authorized clinic administrator may enroll a child in the Platform on behalf of the treating clinic. When doing so, the therapist or clinic is responsible for ensuring they have obtained appropriate authorization from the child’s parent or legal guardian before creating a child record or sharing it with the guardian via the Platform. By enrolling a child, the clinic warrants it has obtained the necessary consents under applicable law, including HIPAA.

Parent/Guardian Access. Once a therapist enrolls a child, the Platform will invite the child’s parent or legal guardian to access the child’s account. The legal guardian who accepts the invitation becomes the Primary Account Holder for that child and assumes the rights and responsibilities described in these Terms.

4. Account Registration

To use certain features, users must register an account and provide accurate information. You are responsible for maintaining the confidentiality of your login credentials and for all activity that occurs under your account.

5. Subscription and Billing

• New clinic and therapist accounts include a 30-day Evaluation Period at no cost (see Section 2).
• Premium access requires an active paid subscription.
• Subscriptions renew automatically unless cancelled prior to the renewal date.
• You may cancel at any time through your account settings.
• Fees are non-refundable unless required by applicable law.
• Cove reserves the right to modify pricing with prior notice.

6. User-Generated Content

Users may upload photos, videos, notes, or other content (“User Content”) for the purposes of therapy coordination. By submitting content, you retain ownership of your User Content and grant Cove a limited, non-exclusive, royalty-free license to use, display, and share that content only within the Platform and for the intended care collaboration.

Types of data users may submit or that Cove generates through Platform use include:

• Child identity information: full legal name, date of birth, profile details
• Diagnoses and therapy types (e.g., occupational therapy, speech-language pathology, physical therapy)
• Treatment plan content: therapy goals, home program activity assignments, therapist instructions
• Activity engagement data: caregiver completion logs, timestamps, performance notes
• Media: photos, videos, and audio submitted to document home program activities
• Caregiver-submitted feed posts and free-text notes
• Scheduling and documentation records

You agree not to upload content that is false, misleading, abusive, or infringes on any rights. Cove may remove or restrict access to User Content that violates these Terms.

Access to User Content. Content submitted about a child may be visible to:

• The child’s treating therapist(s) and authorized clinic staff
• The legal guardian (Primary Account Holder)
• Any Authorized Caregivers explicitly invited by the legal guardian (see Section 10)

Therapists access content for all clients assigned to them. They may view activity logs, media, and engagement data submitted by any caregiver connected to that child’s account.

7. HIPAA Compliance & Business Associate Agreement (BAA)

Cove maintains administrative, technical, and physical safeguards consistent with HIPAA where applicable.

For Therapists and Covered Entities. If you are a Covered Entity or acting on behalf of one, you are responsible for ensuring your use of the Platform complies with HIPAA. Because the Platform coordinates care for minor children whose health information is Protected Health Information (PHI), Cove executes a Business Associate Agreement (BAA) with every Covered Entity clinic account during registration (see Section 7A), and acceptance is required to complete signup. A BAA must be in effect before a clinic account can enable RTM billing features.

Clinic as Data Originator. When a therapist creates a home program, assigns therapy goals, or generates activity assignments within the Platform, that clinical content constitutes PHI created on behalf of the treating clinic. Cove processes this content as a Business Associate of the clinic. The clinic retains responsibility for the clinical accuracy and appropriateness of the content it creates.

PHI Protection. Cove implements reasonable safeguards to protect the confidentiality, integrity, and availability of PHI.

User Responsibilities. You may not upload or transmit PHI unless authorized and legally permitted to do so.

7A. Electronic Execution of Business Associate Agreement

During account registration, clinics, group practices, and licensed providers who are HIPAA Covered Entities will be presented with the BAA (defined in Section 7) between their organization and Cove Teams Inc. Acceptance of the BAA is required to complete registration of a Covered Entity account. By checking the designated acceptance box and completing account registration, the authorized representative of the Covered Entity agrees to be bound by the BAA on behalf of their organization.

Electronic acceptance of the BAA constitutes a legally binding agreement with the same force and effect as a handwritten signature, consistent with the Electronic Signatures in Global and National Commerce Act (E-SIGN Act) and applicable state electronic signature laws. The date, time, and account details associated with acceptance are logged by Cove and constitute the record of execution.

A copy of the BAA in effect at the time of acceptance will be made available to you at any time by emailing [email protected], including a countersigned PDF version for clinics that require one for institutional or compliance purposes. Cove will provide at least 30 days’ notice before making any material changes to the BAA, and continued use of the Platform following notice of changes constitutes acceptance of the updated BAA.

8. Security Measures

Cove employs industry-standard security protocols including: encrypted data transmission (HTTPS/TLS); AES-256 encryption of stored data including PHI, media files, and treatment plan content; secure authentication and role-based access controls; regular application monitoring and vulnerability assessments; logging and audit controls for PHI access; and data redundancy and secure backups. No method of electronic transmission is 100% secure.

9. Data Retention and Storage

Cove retains user data, including PHI, only for as long as necessary to provide the Platform services or as required by law. Covered Entities are responsible for their own retention obligations. Users may request deletion of their data subject to legal or contractual restrictions.

RTM data. RTM evidence packets and associated monitoring data are retained for a minimum of six (6) years as required by applicable law and payer record-retention requirements.

10. Children’s Privacy (COPPA Compliance)

Cove complies with the Children’s Online Privacy Protection Act (COPPA). The Platform is not intended for direct use by children under 13.

Product Improvement. Cove may collect anonymized, aggregated usage data from family accounts, such as feature engagement patterns and activity completion data, to understand how families use the Platform and to improve the product experience over time. Cove will never use individually identifiable child or family data for product development purposes. Clinical content, home program records, and personal health information remain protected in accordance with Section 7 and our Privacy Policy.

Legal guardian as Primary Account Holder. Only parents, guardians, or licensed therapists may create accounts and submit information about a child. The legal guardian who accepts a clinic’s invitation (or who enrolls directly) controls that child’s health record within Cove.

Authorized Caregivers. The legal guardian may explicitly invite additional caregivers (such as a co-parent, grandparent, or other family member) to access the child’s account. Each Authorized Caregiver must accept Cove’s Terms of Use before accessing the child’s account.

What Authorized Caregivers can access: An Authorized Caregiver may view the child’s full home program content (therapy goals, activity assignments, therapist instructions), submit activity logs and feed posts on the child’s behalf, and view the child’s activity history within the Platform. Authorized Caregivers cannot modify clinical content, change account settings, or invite additional users.

By accepting an invitation, an Authorized Caregiver acknowledges that:

• Their contributions become part of the child’s health record and may be used for clinical and billing purposes
• The child’s PHI (including treatment plan content they can view) is protected health information
• The legal guardian may revoke their access at any time through account settings

Data contributed by Authorized Caregivers. Activity logs and notes submitted by Authorized Caregivers are treated as the child’s PHI. Authorized Caregivers do not hold independent data rights over the child’s health record; those rights remain with the legal guardian.

No direct collection from children. Cove does not knowingly collect personal information directly from children. If we learn that information was collected from a child without proper consent, it will be deleted promptly.

Contact. If you believe we have collected information from a child without proper permissions, contact [email protected].

10A. Remote Therapeutic Monitoring (RTM)

RTM is an optional, clinic-enabled feature. RTM allows participating clinics to monitor therapy activity between visits using caregiver-generated data logged in the Cove app. A clinic must separately opt in to enable RTM for its accounts. Not all clinics use RTM.

Separate consent required. Before RTM can be activated for a child’s account, the legal guardian must provide active RTM Billing Consent through a dedicated consent flow in the Cove app. This consent is separate from and in addition to acceptance of these Terms.

What the guardian is authorizing. By providing RTM Billing Consent, the legal guardian authorizes Cove and the treating clinic to: collect caregiver activity logs and monitoring data; generate monthly RTM evidence packets; use that data to prepare and submit insurance claims; and disclose relevant PHI to the child’s insurance plan as required to process those claims.

Accuracy responsibility. The legal guardian is responsible for ensuring that account information used in RTM billing records — including the child’s name, date of birth, and insurance information — is accurate and up to date.

Revocation. The legal guardian may revoke RTM Billing Consent at any time in writing by emailing [email protected] or contacting the clinic directly. Revocation stops future data collection and billing but does not affect claims already submitted.

BAA required for RTM clinics. Clinics enabling RTM must have an executed Business Associate Agreement with Cove in place before activating RTM features. See Section 7.

Coverage not guaranteed. RTM billing coverage varies by insurance plan and state Medicaid program. The clinic is responsible for verifying coverage before submitting RTM claims.

11. Messaging and Communication

Cove offers secure communication features. You agree not to: use messaging for emergency or crisis situations; send threats, harassment, inappropriate material, or unpermitted PHI; misrepresent your identity; or share PHI without consent. Cove may monitor usage patterns for security and compliance purposes but does not monitor the content of every message.

12. Acceptable Use

You may not: use the Platform for illegal, fraudulent, or harmful purposes; attempt to gain unauthorized access or disrupt the Platform; upload viruses, malware, or malicious code; reverse engineer or copy aspects of the software; use automated systems without permission; or interfere with the privacy rights of others. Violations may result in suspension or termination of access.

13. Intellectual Property

All copyrights, trademarks, software, code, design elements, and other intellectual property are owned by Cove Teams Inc. User Content remains the property of the submitting user. Clinical content created by therapists (home programs, goals, activity assignments) remains the intellectual property of the creating therapist or clinic, subject to any data license granted to Cove under Section 6. You agree not to reproduce or exploit any part of the Platform without written permission.

14. Medical, Legal, and Professional Disclaimer

The Platform is intended solely for care coordination and communication. Cove does not provide medical, therapy, or professional advice, and Platform content should not be used as a substitute for professional judgment. Responsibility for clinical decisions and outcomes is addressed in Section 22.

15. Disclaimer of Warranties

The Platform is provided “as is”, without warranties of any kind, express or implied, including: functionality, performance, or availability; accuracy or completeness of information; compatibility or fitness for a particular purpose. Cove does not guarantee uninterrupted service.

16. Limitation of Liability

To the fullest extent permitted by law: Cove is not liable for indirect, incidental, special, or consequential damages. Cove’s total liability for any claim will not exceed the amount paid to Cove in the 12 months preceding the claim.

17. Indemnification

You agree to indemnify and hold Cove harmless from any claims, losses, damages, or expenses (including legal fees) arising from: your use of the Platform; your violation of these Terms; your violation of any applicable laws or rights of third parties.

18. Modifications to the Terms

Cove may update these Terms periodically. Material changes will be communicated via email or Platform notifications. Continued use of the Platform constitutes acceptance of the updated Terms.

19. Governing Law

These Terms are governed by the laws of the State of Illinois. All legal actions must be brought in the state or federal courts located in DuPage County, Illinois.

20. Contact Information

For questions about these Terms, email us at [email protected].

21. Feedback, Evaluation Period, and Intellectual Property

Feedback and suggestions. If you provide feedback, ideas, suggestions, or clinical observations to Cove regarding the Platform (“Feedback”), that Feedback is a voluntary contribution to Cove’s product development. By submitting Feedback, you grant Cove a non-exclusive, royalty-free, perpetual, irrevocable license to use the Feedback for any purpose, including improving the Platform. Providing Feedback does not create any IP ownership interest, revenue share entitlement, or equity claim on behalf of you, your organization, or any individual on your team.

Clinical content ownership. Feedback and product suggestions are distinct from clinical content, which remains your intellectual property as provided in Section 13.

No endorsement. Cove will not use your name, your organization’s name or logo, or any individual staff member’s name in any public communication, case study, testimonial, or marketing material without your prior written approval. Participation in the Platform, including during the Evaluation Period, does not constitute an endorsement of Cove by you, your organization, or any individual therapist.

Evaluation Period data. On termination or expiration of the Evaluation Period without conversion to a paid subscription, you may export all family PHI associated with your account within 30 days of closure. Cove will then delete that PHI from its systems within 60 days of account closure, except for RTM evidence packets and associated monitoring data, which are retained for a minimum of six (6) years under Section 9, and any other data Cove is required to retain by law.

22. Clinical Independence

Cove is a care coordination platform, not a clinical service. Nothing in these Terms, the BAA, or your use of the Platform creates a clinical relationship between Cove and any patient or family. All clinical decisions remain the sole responsibility of the licensed therapist or provider, and Cove is not responsible for clinical decisions made by therapists, providers, or caregivers. Cove does not supervise, direct, or take responsibility for the clinical content you create or the clinical outcomes of therapy coordination conducted through the Platform.