Legal & Privacy

Privacy Policy

Last updated November 4, 2026

This Privacy Policy for NeoSteed LLC ("NeoSteed," "we," "us," or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our websites and related services, including when you:

• Visit neosteed.com, our company website, or coconuthealth.ai, the website for Coconut Health and Coconut Hub (each a "Site," and together the "Sites")
• Contact us, join the Coconut Health waitlist, or ask about our services, a pilot, or a partnership
• Engage with us in other related ways, including by email and at events

What this policy doesn't cover.

• Clinical applications. The Coconut Health app, Coconut Hub, and any other clinical or health-data applications we offer in the future will have their own privacy notice explaining how health information is handled, which we will provide before you use them.
• Consulting and client engagements. When we process personal information on behalf of a client as part of a paid consulting, staffing, or technical services engagement, that processing is governed by our agreement with the client and the client's own privacy practices.

Questions or concerns? Reading this policy will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use the Sites. If you still have questions or concerns, please contact us at contact@neosteed.com or hello@coconuthealth.ai.

Table of contents

1. What information do we collect?
2. How do we process your information?
3. When and with whom do we share your personal information?
4. Do we use cookies and other tracking technologies?
5. Do we offer artificial intelligence-based products?
6. How long do we keep your information?
7. How do we keep your information safe?
8. Do we collect information from minors?
9. What are your privacy rights?
10. Controls for Do-Not-Track features
11. Do we make updates to this policy?
12. How can you contact us about this policy?
13. How can you review, update, or delete the data we collect from you?

1. What information do we collect?

Personal information you disclose to us

In short: we collect personal information that you provide to us.

We collect personal information that you voluntarily provide when you contact us, ask about our services, join the Coconut Health waitlist, express interest in a pilot or partnership, or otherwise communicate with us. Depending on how you interact with us, this may include:

• Names, email addresses, and phone numbers
• Job titles and organization or program names
• How you're interested in our services or in Coconut Health (for example, patient or caregiver, healthcare professional, clinic or health system, research or technology partner, or funder) and your primary interest
• Contact preferences
• Messages you send us through our forms or by email

Sensitive information. The Sites do not ask for, and we do not intend to collect, health information or other sensitive personal information through the Sites. Please don't include medical records or details about your health in our forms or in emails to us.

All personal information you provide to us must be true, complete, and accurate, and you should let us know of any changes to it.

Information automatically collected

In short: some information, such as your IP address and browser and device characteristics, is collected automatically when you visit the Sites.

We automatically collect certain information when you visit, use, or navigate the Sites. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, country, information about how and when you use the Sites, and other technical information. We need this information mainly to keep the Sites secure and working and for our internal analytics and reporting.

• Log and usage data. Our hosting providers automatically process service-related, diagnostic, and performance information when you access the Sites, such as your IP address, browser type, the pages you request, and the date and time of your visit.
• Approximate location. When you join the Coconut Health waitlist, we record the country you're connecting from, which our hosting provider derives from your IP address. We don't store your IP address with your sign-up, and we don't collect precise location.
• Analytics data. If you accept analytics cookies, Google Analytics collects information about how you use the Sites, such as pages viewed, time spent, how you arrived, and general device and location information. neosteed.com also counts visits using its website platform's built-in statistics. See section 4.

2. How do we process your information?

In short: we process your information to provide, improve, and administer our Sites and services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.

• To respond to inquiries. We use your information to respond to your questions and to service, pilot, partnership, research, and funding inquiries.
• To manage the Coconut Health waitlist. We use your information to add you to the waitlist and contact you about early access and launch.
• To send updates. We may send you news and updates about NeoSteed, Coconut Health, and Coconut Hub that you've asked for or that relate to your inquiry. You can opt out at any time.
• To protect the Sites. We process information to keep the Sites safe and secure, including preventing spam and repeated automated submissions.
• To evaluate and improve the Sites. We use analytics to understand how the Sites are used and to improve them.
• To understand interest in our products and services. We look at inquiries and sign-ups by audience and country to plan our services, pilots, and launches.
• To comply with our legal obligations and to respond to legal requests and establish, exercise, or defend our legal rights.

If you are in the European Economic Area or the United Kingdom, we rely on these legal bases: your consent (for analytics cookies and updates where required), steps you ask us to take (such as responding to your inquiry or adding you to the waitlist), our legitimate interests in operating, securing, and improving the Sites, and compliance with legal obligations.

3. When and with whom do we share your personal information?

In short: we share information only in the situations described here. We do not sell your personal information.

• Service providers. We share information with vendors who perform services for us and may only use it to do so:
  • Hosting and infrastructure providers: website hosting and publishing platforms, security, data storage, and email delivery
  • Google Analytics: website analytics, only if you accept analytics cookies
  • Consent management and font delivery providers: recording your cookie choices and delivering the Sites' typefaces
• Business transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or part of our business.
• Affiliates. We may share your information with our affiliates, in which case we will require them to honor this Privacy Policy.
• Legal and safety reasons. We may disclose information when we believe in good faith that it is required by law or needed to protect the rights, property, or safety of NeoSteed, our users, or others.

We do not sell your personal information, and we do not share it for targeted (cross-context behavioral) advertising.

4. Do we use cookies and other tracking technologies?

In short: we use Google Analytics cookies only if you agree to them.

Cookies are small text files stored on your device. Both Sites use analytics cookies from Google Analytics to help us understand how visitors use the Sites, such as which pages are viewed and how visitors arrive. These cookies are set only after you accept them in the Site's cookie banner. If you decline, or don't make a choice, Google Analytics doesn't set cookies.

Each Site also remembers your cookie choice so we don't ask you again on every visit. In addition, neosteed.com runs on a website platform that counts page visits with its built-in statistics tool, which collects aggregated information such as the pages viewed and the referring site.

Name	Site	Purpose	Duration
_ga	Both	Google Analytics: distinguishes visitors so we can count unique visits	2 years
_ga_*	Both	Google Analytics: keeps track of the current visit (session)	2 years
cookieyes-consent	Both	Remembers your cookie choices	1 year

How we configure Google Analytics. We do not use Google Analytics advertising features, such as remarketing, demographics and interests reporting, or Google signals, and we do not send Google the contents of our forms.

Your choices. You can change your choice at any time using the cookie settings link or button on each Site. On coconuthealth.ai, if your browser sends a Global Privacy Control signal, we treat it as a decision to decline analytics cookies. You can also block or delete cookies in your browser settings, or install the Google Analytics opt-out browser add-on. To learn more about how Google uses information, see How Google uses information from sites that use its services and the Google Privacy Policy.

5. Do we offer artificial intelligence-based products?

In short: the Sites don't use AI to process your information. Our AI products and client work are covered separately.

The Sites describe AI products and services that NeoSteed offers or is developing, but the Sites themselves do not process your information with AI. When the Coconut Health app and Coconut Hub become available, their privacy notice will explain how AI features process information, which service providers are involved, and the choices available to you. AI solutions we build or operate for clients are governed by our agreements with those clients.

6. How long do we keep your information?

In short: we keep your information for as long as necessary to fulfill the purposes outlined in this policy, unless otherwise required by law.

We keep inquiry information for as long as needed to respond to you and manage our relationship, and Coconut Health waitlist information for as long as the waitlist and early-access program are active, or until you ask us to delete it, unless a longer period is required or permitted by law (such as for tax, accounting, or other legal requirements). Google Analytics data is kept for up to 14 months.

When we no longer have an ongoing legitimate business need to process your personal information, we will delete or anonymize it, or, if this is not possible (for example, because it is stored in backup archives), we will securely store it and isolate it from further processing until deletion is possible.

7. How do we keep your information safe?

In short: we aim to protect your personal information through a system of organizational and technical security measures.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the personal information we process, including encrypted connections (HTTPS) and restricted access to stored data. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise that unauthorized third parties will never be able to defeat our security and improperly collect, access, steal, or modify your information. You should only access the Sites within a secure environment.

8. Do we collect information from minors?

In short: we do not knowingly collect data from or market to children under 18 years of age.

The Sites are intended for adults. We do not knowingly collect, solicit data from, or market to children under 18 years of age, nor do we knowingly sell such personal information. If we learn that we have collected personal information from someone under 18, we will take reasonable measures to promptly delete it. If you become aware of any data we may have collected from a child under 18, please contact us.

9. What are your privacy rights?

In short: wherever you live, you can ask to access, correct, or delete your information, and opt out of analytics and updates. Depending on where you live, you may have additional rights.

We honor the following requests from anyone, wherever they live:

• Access the personal information we hold about you and receive a copy
• Correct inaccurate information
• Delete your information, including removing you from the Coconut Health waitlist
• Opt out of updates
• Withdraw consent to analytics cookies

Depending on where you live, you may have additional rights under applicable law, such as U.S. state privacy laws or the EU and UK General Data Protection Regulation, including the right to object to or restrict processing, to data portability, to appeal our decision on your request, and to complain to your data protection authority.

Withdrawing your consent. If we rely on your consent to process your personal information, you can withdraw it at any time by using a Site's cookie settings (for analytics cookies) or by contacting us. This will not affect the lawfulness of processing before you withdrew consent.

Opting out of updates. You can unsubscribe from updates at any time by using the unsubscribe link in our emails or by contacting us. We may still contact you about your requests or for other non-marketing purposes.

To make a request, email contact@neosteed.com or hello@coconuthealth.ai. We may need to verify your identity before acting on it, and we will not discriminate against you for exercising your rights. If you are an authorized agent making a request on someone else's behalf, please tell us in your email.

10. Controls for Do-Not-Track features

Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") setting. Because no uniform standard for recognizing DNT signals has been adopted, we do not currently respond to DNT signals. We honor Global Privacy Control signals as described in section 4. If a standard for online tracking is adopted that we must follow, we will describe it in a revised version of this policy.

11. Do we make updates to this policy?

In short: yes, we will update this policy as necessary to stay compliant with relevant laws.

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last updated" date at the top of this policy. If we make material changes, we may notify you by prominently posting a notice of the changes on the Sites or by sending you a notification directly. We encourage you to review this policy regularly.

12. How can you contact us about this policy?

If you have questions or comments about this policy, email us at contact@neosteed.com or hello@coconuthealth.ai, or write to us at:

NeoSteed LLC
8 The Green, Suite #13155
Dover, DE 19901
United States

13. How can you review, update, or delete the data we collect from you?

Based on the laws of your country or state, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correction of inaccuracies, or deletion of your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. To request to review, update, or delete your personal information, email contact@neosteed.com or hello@coconuthealth.ai.