Termos de Uso e Privacidade

WeCura PRIVACY POLICY, AND TERMS OF USE

Publication date: 05/19/2025.

This term of use and privacy policy applies to WeCura services offered on the applications, website, systems for mobile devices and computers.

PRIVACY POLICE

INFORMATION IN THIS DOCUMENT

In this Privacy Policy, you will find information about how the requested service works, provided through applications on the website, systems and applications for mobile devices and the rules applicable to it; the legal basis related to the provision of the service; your responsibilities when using the service; WeCura's responsibilities when offering the services; contact information, in case there is any doubt or need to update information; and the forum responsible for any complaints, in case issues in this document have been violated. In addition, you will find information about the processing of personal data carried out, whether automated or not, and its purpose; what personal data is necessary to provide the service; how it is collected; whether your data is shared with third parties; and what security measures are implemented to protect your data.

The Privacy Policy at the Federal Revenue Service was prepared in accordance with Federal Law No. 12,965, of April 23, 2014 (Marco Civil da Internet), and with Federal Law No. 13,709, of August 14, 2018 (General Law for the Protection of Personal Data). WeCura undertakes to comply with the rules set forth in the General Law for the Protection of Personal Data (LGPD), and to respect the principles set forth in art. 6: I - Purpose: carrying out data processing for legitimate, specific, explicit purposes informed to the holder, without the possibility of further processing in a manner incompatible with these purposes; II - Adequacy: compatibility of the processing with the purposes informed to the holder, in accordance with the context of the processing; III - Necessity: limiting the processing to the minimum necessary to achieve its purposes, with coverage of pertinent, proportional and non-excessive data in relation to the purposes of the data processing; IV - Free access: guarantee to the holders of easy and free consultation on the form and duration of the processing, as well as on the integrity of their personal data; V - Data quality: guarantee to the holders of accuracy, clarity, relevance and updating of the data, according to the need and for the fulfillment of the purpose of its processing; VI - Transparency: guarantee to the data subjects of clear, precise and easily accessible information about the processing and the respective processing agents, observing commercial and industrial secrets; VII - Security: use of technical and administrative measures capable of protecting personal data from unauthorized access and accidental or unlawful destruction, loss, alteration, communication or dissemination; VIII - Prevention: adoption of measures to prevent the occurrence of damage due to the processing of personal data; IX - Non-discrimination: impossibility of processing for unlawful or abusive discriminatory purposes; X - Accountability and accountability: demonstration, by the agent, of the adoption of effective measures capable of proving compliance with and compliance with the rules for the protection of personal data and, including, the effectiveness of these measures.

At WeCura, privacy and security are priorities and we are committed to the transparency of the processing of our users/customers' personal data. Therefore, this Privacy Policy establishes how the collection, use and transfer of information from customers or other people who access or use our website is carried out. By using our services, you understand that we collect and use your personal information in the ways described in this Policy, under the rules of the Federal Constitution of 1988 (art. 5, LXXIX; and art. 22, XXX - included by EC 115/2022), the Data Protection rules (LGPD, Federal Law 13.709/2018), the consumer provisions of Federal Law 8078/1990 and other applicable rules of the Brazilian legal system. Therefore, WECURA TECH & SERVIÇOS LTDA, hereinafter referred to simply as WeCura, registered with the CNPJ/MF under no. 60.387.182/0001-27, in the role of Data Controller, is obliged to comply with the provisions of this Privacy Policy.

1. WHAT DATA DO WE COLLECT ABOUT YOU AND FOR WHAT PURPOSE?

Our website collects and uses some of your personal data in order to enable the provision of services and improve the user experience.

1.1. Personal data provided by the owner and collaborating partners A) Personal data: includes your name, CPF (when applicable), email, service address, telephone number and contact preferences. To create your registration on the WeCura Platform, you include your data. The information we will obtain is the same as that required to use the Platform; B) Payment data: When you make your service request, if the payment method is private, it is made directly by the platform itself, via PIX or credit card. At this time, data may be provided, such as credit card data or other partner methods. However, everything is protected: online payment information is stored in a masked manner by WeCura, meaning that the data is not stored and transactions can be made securely. In addition, it is possible to charge for the service through an agreement, in which case the professional must be accredited with the agreement so that the amount can be charged directly to the operator. However, the user will still be charged the intermediation fee and, in the same way, the necessary data present in the payment will be collected; C) Location data: In order for the partners to perform the requested services, we also need you to inform us of your location or the address of the place where you would like the service to be performed. This location can be provided by the address that you manually enter in the application. For the purposes of Law No. 12,965 of 2014 (Marco Civil da Internet), or any law that may replace it, the location provided will be considered as registration data.

1.2. Data generated during the use of the services A) Data from your devices: We may automatically collect information about the devices from which you access WeCura, such as: IP addresses, browser type and language, Internet Service Provider (ISP), referring and exit pages, operating system, date and time information, clickstream data, device manufacturer, carrier, model, device version, application version, operating system version, device advertising identifier (IDFA), device accessibility information and Wi-Fi networks. B) Transactional data and data about your use: We collect data about your interactions on our Platform, including date and time of accesses, searches and views. We may also collect transactional data related to the use of our services such as request details, date and time of order, amount charged, and payment method.

2. HOW DO WE COLLECT YOUR DATA?

In this sense, your personal data is collected as follows: ● The client includes their identification data and health exams; ● The partner, health professional and/or caregiver enters data related to the service and health on the platform; ● The partner, exam clinic includes the results on the platform. 2.1. Consent When you provide the above data, freely, informed and unequivocally, we understand that you are consenting to WeCura processing your data. In accordance with the General Data Protection Law, your data will only be collected, processed and stored with prior and express consent. By using our services and providing your personal data, you declare that you are aware of the provisions of this Privacy Policy, as well as your rights and how to exercise them. You may revoke your consent at any time and free of charge. In this case, it is important to note that revocation may alter certain functions of the website as it depends on the use of this data. However, all consequences will be informed in advance if this occurs.

3. WHAT ARE YOUR RIGHTS?

WeCura guarantees its users/clients their rights as data subjects as provided for in article 18 of the General Data Protection Law. Thus, you may, free of charge and at any time: ● Confirm the existence of data processing, in a simplified manner or in a clear and complete format; ● Access your data, being able to request it in a legible copy in printed form or by electronic means, secure and suitable; ● Correct your data, by requesting its editing, correction or update; ● Limit your data when unnecessary, excessive or processed in non-compliance with the legislation through anonymization, blocking or deletion; ● Request the portability of your data, through a report of registration data that WeCura processes about you; ● Delete your data processed based on your consent, except in cases provided for by law; ● Revoke your consent, disallowing the processing of your data; ● Find out about the possibility of not providing your consent and the consequences of refusal.

4. HOW CAN YOU EXERCISE YOUR DATA SUBJECT RIGHTS?

To exercise your data subject rights, you must contact WeCura through the following available means of contact: ● WhatsApp: (16) 99617-3046 ● E-mail: contato@wecura.app In order to ensure your correct identification as the data subject of the request, we may request documents or other evidence that can prove your identity. In this case, you will be informed in advance.

5. HOW AND FOR HOW LONG WILL YOUR DATA BE STORED?

Your personal data collected by WeCura will be used and stored for the time necessary to provide the service or to achieve the purposes listed in this Privacy Policy, considering the rights of data subjects and controllers. Note: The storage of sensitive data related to health, according to law 13.787/2018, is mandatory for 20 years. In general, your data will be kept for as long as the contractual relationship between you and WeCura continues. Once the personal data storage period has ended, it will be deleted from our databases or anonymized, except for the cases legally provided for in article 16 of the General Data Protection Law, namely: I – Compliance with a legal or regulatory obligation by the controller; II – Study by a research body, ensuring, whenever possible, the anonymization of personal data; III – Transfer to third parties, provided that the data processing requirements set forth in this Law are respected; IV – Exclusive use by the controller, with access by third parties prohibited, and provided that the data is anonymized. That is, personal information about you that is essential for complying with legal, judicial and administrative determinations and/or for exercising the right of defense in judicial and administrative proceedings will be maintained, despite the exclusion of other data. The storage of data collected by WeCura reflects our commitment to the security and privacy of your data. We employ technical protection measures and solutions capable of guaranteeing the confidentiality, integrity and inviolability of your data. In addition, we also have security measures appropriate to the risks and access control to the stored information.

6. WHAT DO WE DO TO KEEP YOUR DATA SAFE?

To keep your personal information safe, we use physical, electronic and managerial tools aimed at protecting your privacy. We apply these tools taking into account the nature of the personal data collected, the context and purpose of the processing and the risks that any violations would generate for the rights and freedoms of the data subject of the collected and processed data. Among the measures we have adopted, we highlight the following: ● Only authorized persons have access to your personal data; ● Access to your personal data is only granted after a confidentiality agreement has been made; ● Your personal data is stored in a safe and suitable environment. WeCura is committed to adopting the best measures to avoid security incidents. However, it is important to note that no virtual page is entirely safe and risk-free. It is possible that, despite all our security protocols, problems may occur that are the sole fault of third parties, such as cyberattacks by hackers, or also as a result of the negligence or recklessness of the user/client. In the event of security incidents that may generate significant risk or damage to you or any of our users/clients, we will notify those affected and the National Data Protection Authority of the incident, in accordance with the provisions of the General Data Protection Law.

7. WITH WHOM CAN MY DATA BE SHARED?

In order to preserve your privacy, WeCura will not share your personal data with any unauthorized third party. Your data may be shared with our business partners: healthcare professionals, clinics and medical associations, healthcare professionals or caregivers that you voluntarily seek to hire through the application. They receive your data only to the extent necessary to provide the contracted services and our contracts are guided by the data protection standards of the Brazilian legal system. However, our partners have their own Privacy Policies, which may differ from this one. We recommend reading these documents on the partners' own websites. In addition, there are also other situations in which your data may be shared, which are: I – Legal determination, request, requisition or court order, with competent judicial, administrative or governmental authorities; II – In the event of corporate movements, such as mergers, acquisitions and incorporations, automatically; III – Protection of WeCura's rights in any type of conflict, including those of a judicial nature.

7.1. International data transfer Some of the third parties with whom we share your data may be located or have facilities located in foreign countries. Under these conditions, in any case, your personal data will be subject to the General Data Protection Law and other Brazilian data protection laws. In this sense, WeCura is committed to always adopting efficient cybersecurity and data protection standards, in the best efforts to guarantee and comply with the legislative requirements. By agreeing to this Privacy Policy, you consent to this sharing, which will occur in accordance with the purposes described in this instrument.

8. COOKIES OR NAVIGATION DATA

WeCura uses Cookies, which are text files sent by the platform to your computer and stored there, containing information related to your browsing experience on the website. In short, Cookies are used to improve your user experience. By accessing our website and consenting to the use of Cookies, you acknowledge and accept the use of a browsing data collection system using Cookies on your device. WeCura uses the following Cookies on its website: ● XSRF-TOKEN: Cookie for detecting call fraud. Duration: session. Cookie type: Essential; ● hs: Security cookie for Hive (legacy). Duration: session. Cookie type: Essential; ● svSession: Session cookie for identification. Duration: 6 months. Cookie type: Essential; ● SSR-caching: Performance cookie for rendering. Duration: 24 hours. Cookie type: Essential; ● TS*: Cookies for attack detection. Duration: session. Cookie type: Essential; ● bSession: Used to measure system efficiency. Duration: 24 hours. Cookie type: Essential; ● fedops.logger.sessionId: Track session errors and issues (resilience). Duration: 12 months. Cookie type: Essential; ● _wixAB3|*: Cookie for site experiments. Duration: 6 months. Cookie type: Essential; ● server-session-bind: Cookie for API protection. Duration: session. Cookie type: Essential; ● client-session-bind: Cookie for API protection. Duration: session. Cookie type: Essential. You can, at any time and free of charge, change permissions, block or refuse Cookies. However, revoking consent for certain Cookies may prevent some features of the platform from functioning correctly. To manage your browser's cookies, simply do so directly in your browser settings, in the Cookie management area. You can access tutorials on the subject directly from the links below: ● If you use Internet Explorer (https://support.microsoft.com/pt-br/help/17442/windows-internet-explorer-delete-manage-cookies). ● If you use Firefox (https://support.mozilla.org/pt-BR/kb/gerencie-configuracoes-de-armazenamento-local-de-s). ● If you use Safari (https://support.apple.com/pt-br/guide/safari/sfri11471/mac). ● If you use Google Chrome (https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&oco=1&hl=pt-BR). ● If you use Microsoft Edge (https://support.microsoft.com/pt-br/help/4027947/microsoft-edge-delete-cookies). ● If you use Opera (https://help.opera.com/en/latest/web-preferences/#cookies). You can find more information about the Cookies we use and how they work in our Cookie Policy, available at this link: https://privacysandbox.google.com/cookies/basics/what-are-cookies?hl=pt-br).

9. CHANGES TO THIS PRIVACY POLICY

The current version of the Privacy Policy was formulated and last updated on: 04/15/2025. We reserve the right to modify this Privacy Policy at any time, mainly to adapt to any changes made to our website or in the legislative sphere. We recommend that you review it frequently. Any changes will come into effect as soon as they are published on our website and we will always notify you of any changes that have occurred. By using our services and providing your personal data after such changes, you will be consenting to them.

10. LIABILITY

WeCura assumes the responsibility of the agents who act in the data processing processes, in accordance with articles 42 to 45 of the General Data Protection Law. We undertake to keep this Privacy Policy up to date, observing its provisions and ensuring its compliance. In addition, we undertake to adopt appropriate technical and organizational measures to protect the entire data processing process. If the National Data Protection Authority requires the adoption of measures in relation to the data processing carried out by WeCura, we undertake to follow them.

10.1 Disclaimer: As mentioned in Topic 6, although we adopt high security standards in order to avoid incidents, there is no virtual page that is entirely risk-free. In this sense, WeCura is not responsible for: I – Any consequences arising from the negligence, imprudence or lack of skill of users in relation to their personal data. We guarantee and are only responsible for the security of the data processing processes and the fulfillment of the purposes described in this instrument. We emphasize that the responsibility for the confidentiality of access data lies with the user. II – Malicious actions by third parties, such as hacker attacks, unless proven to be negligent or deliberate conduct by WeCura. We emphasize that in the event of security incidents that may generate significant risk or damage to you or any of our users/customers, we will notify those affected and the National Data Protection Authority about the incident and will take the necessary measures. III – Inaccuracy of information entered by the user/client in the records required for the use of WeCura services; any consequences arising from false information or information entered in bad faith are the sole responsibility of the user/client.

11. DATA PROTECTION OFFICER

WeCura provides the following means for you to contact us to exercise your rights as a data subject: ● WhatsApp: (16) 3190-0683 ● Email: contato@wecura.app If you have any questions about this Privacy Policy or about the personal data we process, you can contact our Personal Data Protection Officer through the following channels: ● Name of the person in charge: Sanjay Satpal Dhiman, document number 7839 5774 7807 ● Email: contato@wecura.app

----------------------------

INFORMATION IN THIS DOCUMENT

In these Terms of Use, you will find information about how the requested service works, provided through applications on the website, systems and applications for mobile devices and the rules applicable to it; the legal basis related to the provision of the service; your responsibilities when using the service; WeCura's responsibilities when offering the services; contact information, in case there is any doubt or it is necessary to update information; and the forum responsible for any complaints, in case issues in this document have been violated.

In addition, you will find information about the processing of personal data carried out, whether automated or not, and its purpose; what personal data is necessary to provide the service; how it is collected; whether your data is shared with third parties; and what security measures are implemented to protect your data.

The Terms of Use at the Federal Revenue Service were prepared in accordance with Federal Law No. 12,965 of April 23, 2014 (Marco Civil da Internet), and Federal Law No. 13,709 of August 14, 2018 (General Law on the Protection of Personal Data).

WeCura undertakes to comply with the rules set forth in the General Law on the Protection of Personal Data (LGPD), and to respect the principles set forth in art. 6:

I - Purpose: carrying out data processing for legitimate, specific, explicit purposes informed to the holder, without the possibility of subsequent processing in a manner incompatible with these purposes;

II - Adequacy: compatibility of the processing with the purposes informed to the holder, in accordance with the context of the processing; III - Necessity: limitation of processing to the minimum necessary to achieve its purposes, covering pertinent, proportional and non-excessive data in relation to the purposes of data processing;

IV - Free access: guarantee to data subjects of easy and free consultation on the form and duration of processing, as well as on the completeness of their personal data;

V - Data quality: guarantee to data subjects of accuracy, clarity, relevance and updating of data, according to the need and for fulfilling the purpose of its processing;

VI - Transparency: guarantee to the data subjects of clear, precise and easily accessible information about the processing and the respective processing agents, observing commercial and industrial secrets;

VII - Security: use of technical and administrative measures capable of protecting personal data from unauthorized access and accidental or unlawful destruction, loss, alteration, communication or dissemination;

VIII - Prevention: adoption of measures to prevent the occurrence of damages due to the processing of personal data;

IX - Non-discrimination: impossibility of processing for unlawful or abusive discriminatory purposes;

X - Accountability and accountability: demonstration, by the agent, of the adoption of effective measures capable of proving the observance and compliance with the rules of personal data protection and, including, the effectiveness of these measures.

1) These Terms of Use refer to a membership contract signed between the user and the provider of this service, WeCura, located at Rua Arnaldo Victaliano, nº 150 - Apartamento 123 - Jardim Palma Travassos, Ribeirão Preto-SP, CEP 14091-220.

The use of this service is subject to the user's knowledge of the terms and associated policies. The user must read these terms and policies, ensure that they have understood them, be aware of all the conditions established in the Terms of Use and undertake to comply with them.

When accessing the Platform, the user must read the content of these Terms, and if they agree with the conditions presented, express their free, express, informed and unequivocal consent by selecting the checkbox corresponding to the option “I have read and agree to the Terms of Use and Privacy Policies”.

2) For the purposes of these Terms of Use, the following definitions apply:

• Public agent: anyone who exercises, even temporarily or without remuneration, by election, appointment, designation, hiring or any other form of investiture or bond, mandate, position, employment or function in the bodies and entities of the direct and indirect Public Administration;

• State agents: includes bodies and entities of the Public Administration in addition to its public agents;

• Malicious codes: any computer program, or part of a program, created with the intention of causing damage, obtaining unauthorized information or interrupting the operation of computer systems and/or networks;

• Internet: the system consisting of a set of logical protocols, structured on a global scale for public and unrestricted use, with the purpose of enabling data communication between terminals through different networks;

• Websites and applications: websites and applications through which the user accesses the services and content made available; • Third party: a person or entity that does not directly participate in a contract, legal act or business, or that, in addition to the parties involved, may have an interest in a legal process.

• Users (or "User", when considered individually): all natural persons who use the service (name the service).

3) The legal framework applicable to the Intermediation service comprises the following legislative and regulatory acts:

Law No. 12,965 of April 23, 2014 - Internet Civil Rights Framework Establishes principles, guarantees, rights and duties for the use of the Internet in Brazil.

Law No. 12,527 of November 18, 2011 - Access to Information Law Regulates access to information provided for in the Federal Constitution.

Law No. 13,709 of August 14, 2018 Provides for the processing of personal data, including in digital media, by a natural person or by a legal entity under public or private law, with the aim of protecting the fundamental rights of freedom and privacy and the free development of the natural person's personality.

Law No. 13,444 of May 11, 2017 Provides for the National Civil Identification (ICN).

Decree No. 8,777 of May 11, 2016 Establishes the Open Data Policy of the Federal Executive Branch.

Decree No. 7,724 of May 16, 2012 Regulates Law No. 12,527 of November 18, 2011 (Access to Information Law), which provides for access to information as provided for in the Constitution.

Decree No. 7,845 of November 14, 2012 Regulates procedures for security accreditation and treatment of information classified at any level of secrecy, and provides for the Security and Accreditation Center.

Decree No. 10,046 of October 9, 2019 Establishes governance in data sharing within the federal public administration and establishes the Citizen Base Registry and the Central Data Governance Committee.

Decree No. 9,637 of December 26, 2018 Establishes the National Information Security Policy, establishes governance of information security, and amends Decree No. 2,295 of August 4, 1997, which regulates the provisions of art. 24, caput, item IX, of Law No. 8,666 of June 21, 1993, and provides for the waiver of bidding in cases that may compromise national security.

4) SERVICE DESCRIPTION

4.1 What is WeCura?

WeCura is a digital healthcare platform that connects patients, professionals and companies in a unique, safe and intuitive environment. But above all, it is a project about how people's relationship with healthcare should be: accessible, reliable and focused on the user's well-being.

With the WeCura and WeCura Pro apps, the care journey begins in a practical and integrated way. Patients benefit from easy online scheduling, the flexibility to choose between in-person care at the clinic, in the comfort of their home (Home Care) or via telehealth, in addition to having access to complete electronic medical records for continuous health monitoring. For healthcare professionals, WeCura Pro optimizes the management of care and patient monitoring, granting autonomy in the provision of services and opening doors to opportunities for additional income. For companies, the WeCura platform presents itself as a comprehensive solution for the integrated management of their patients' care, connecting them efficiently with partner healthcare professionals.

4.2 What is the WeCura app?

It is a health application that brings together, in one place, appointment scheduling, telehealth, electronic medical records and personalized monitoring, based on data provided by the user.

4.3 Who must comply with WeCura's rules?

All users — patients, healthcare professionals, and companies — must agree to the platform's Terms of Use and Privacy Policy, in addition to complying with the established standards of conduct and security.

4.4 Where do the main interactions occur on WeCura?

Interactions occur through the platform's mobile applications and web environment. The main types of content involve clinical data, care records, medical prescriptions, and health information that is shared securely.

4.5 Will WeCura save companies money?

Yes. By centralizing scheduling, medical records, and financial control of productivity in a single solution, companies optimize operational resources, reduce overall operating costs, and gain more control over the care provided to the patients they assist.

4.6 What is the benefit for the patient?

With WeCura, patients save time, avoid unnecessary travel, have easier access to qualified professionals, and have access to a secure and accessible digital history.

4.7 Does WeCura incorporate new technologies?

Yes. WeCura is constantly evolving, adopting artificial intelligence, cybersecurity and usability solutions to make the healthcare experience increasingly modern and efficient.

4.8 Which channels are part of WeCura?

The following digital channels are part of WeCura: WeCura: application for patients; WeCura Pro: application for healthcare professionals; WeCura Web Platform: interface for healthcare companies.

5) USER RIGHTS

5.1 What are the rights of WeCura users?

WeCura users have their rights guaranteed by the General Personal Data Protection Law (Law No. 13,709/2018 – LGPD), which ensures control over the use of their personal data on the platform. These rights include:

5.1.1 Right of confirmation and access (Art. 18, I and II): the user has the right to know whether their data is being processed and, if so, to access this information at any time.

5.1.2 Right to rectification (Art. 18, III): the user may request the correction of incomplete, inaccurate or outdated data stored by WeCura.

5.1.3 Right to restriction of processing (Art. 18, IV): the user may request the deletion of unnecessary, excessive data or data processed in non-compliance with the LGPD.

5.1.4 Right to object (Art. 18, § 2): the user is guaranteed the right to object to the processing of their data, especially when this is based on a waiver of consent or contravenes the principles of the LGPD.

5.1.5 Right to data portability (Art. 18, V): the user may request the transfer of their data to another service provider, in accordance with ANPD regulations.

5.1.6 Right to review automated decisions (Art. 20): the user may request that decisions made exclusively by algorithms, which impact their personal or professional life, be reviewed by people.

6) USER RESPONSIBILITY

6.1 The user of WeCura's digital applications and services must:

6.1.1 Use the platform in an ethical, safe manner and in accordance with its intended purposes, acting with courtesy, good faith and responsibility;

6.1.2 Provide true, complete and up-to-date information, assuming the consequences of errors, omissions or falsehoods;

6.1.3 Collaborate with the adequate provision of services, respecting health professionals and the platform's rules;

6.1.4 Faithfully observe the Terms of Use, Privacy Policies and other internal regulations of WeCura;

6.1.5 Maintain the confidentiality of your access credentials, which are personal, non-transferable and for the exclusive use of the holder;

6.1.6 Ensure the security of the device used to access the applications, as well as the permissions granted to third-party applications that may interact with personal data;

6.1.7 Repair direct or indirect damages caused to WeCura, its partners, professionals or third parties, as a result of the inappropriate use of the services, illicit or negligent conduct.

7) RESPONSIBILITY OF WECURA (WECURA TECH & SERVIÇOS LTDA)

7.1 WeCura, as a provider of digital health services and operator of users' personal data, undertakes to:

a) Provide services with quality, security, respect for current legislation and observance of the ethical principles that govern health and technology;

b) Ensure that users' personal and sensitive data are processed in accordance with the General Personal Data Protection Law (LGPD – Law No. 13,709/2018);

c) Provide clear and up-to-date information on services, conditions of use, features and users' rights;

d) Implement technical and administrative information security measures, with the aim of protecting stored data against unauthorized access, loss or leaks;

e) Provide an appropriate service channel, with support for questions, complaints, suggestions and for the exercise of rights of the holder of personal data;

f) Report, in accordance with the LGPD, any security incidents that may entail risk or relevant damage to the data processed;

g) Act with transparency and diligence in all interactions with users, healthcare professionals and contracting companies.

h) In the event of errors, omissions or conduct by healthcare professionals, whose performance is autonomous and independent, the responsibility lies exclusively with the healthcare professionals; I - Damages resulting from instability in the internet connection, failures in the user's device or third-party applications;

II - False information provided by users;

III - Clinical decisions made exclusively by healthcare professionals.

8) INTELLECTUAL PROPERTY

8.1. The Patient or Healthcare Professional does not acquire, by using the Platform, any intellectual property rights or other exclusive rights, including patents, designs, trademarks, copyrights or any rights to confidential information or trade secrets, as well as all content made available on the Platform, including, but not limited to, texts, graphics, images, logos, icons, photographs, editorial content and any other material related to the Platform.

8.2. Use of intellectual property. The commercial use of the brand, business name, domain name, logo, structure, content of the Platform screens, software, website, databases, networks, files and the like of WeCura are the exclusive property of WeCura. All rights are protected, in Brazil and internationally, by international laws and treaties on copyright, trademarks, patents, models and industrial designs. WeCura reserves all rights relating to copyrights, trademarks, patents, models and industrial designs, whether owned by it or licensed in its favor, to you.

8.2.1. It is not permitted to reproduce, duplicate, copy, sell, resell, visit, or in any other way exploit for commercial purposes the content of the Platform without the prior written consent of its owners. In particular, the use of data mining, robots, or other data collection and extraction tools to extract, in isolation or repeatedly, any substantial part of the Platform for its reuse is expressly prohibited.

8.2.2. Unless there is a license agreement entered into with WeCura, it is not permitted to download, distribute, display or copy any content from the Platform.

8.2.3. Violation of WeCura's intellectual property rights will result in the exclusion of the violator from the Platform, without prejudice to other legal and contractual liabilities.

9) PAYMENT AND WALLET

9.1. The USER expressly authorizes the automatic charging of the amounts due for the contracted services, as described on the platform, through the previously registered payment method.

9.1.1. The USER may request the cancellation of appointments, in accordance with WeCura's Billing and Invoicing Policy.

9.1.2. Cancellations made after the start of the contracted service will result in the full amount of the scheduled service being charged, regardless of its partial execution.

9.2. WALLET

9.2.1. Professionals must have at least R$30.00 in their wallet to be eligible to accept an appointment. This amount can be added via Pix or credit card.

If funds are added via credit card, a fee of 10% will be charged on the amount being added to the wallet. Amounts in the wallet can be withdrawn at any time, preferably via Pix.

9.2.2. The wallet can be configured to automatically charge the credit card or via Pix whenever the balance falls below R$30, debiting only the amount necessary to reestablish the minimum balance.

9.2.3. In case of default, the CONTRACTOR may suspend the provision of services until the debts are settled, without prejudice to the application of legal charges and applicable judicial measures, in two ways:

Automatic collection (by card or Pix) until the negative balance is paid off and there is at least R$30.00 in the balance;

If it is not possible to collect automatically, the entire balance of the wallet is discounted, the negative amount is displayed and the professional's availability button is blocked until the negative balance is paid off and the wallet balance reaches at least the minimum amount required.

10) BILLING AND INVOICING POLICY FOR PRIVATE SERVICES

10.1.1. If the patient is unable to attend, he/she must request cancellation up to two hours before the scheduled time.

10.1.2. When cancellation is requested as mentioned above, the balance previously allocated to the service will be returned in full to the patient's wallet for rescheduling.

10.1.3. After the patient cancels, it is possible to schedule an appointment with the same professional (if available) or contract other services offered by WeCura within 1 year, with the balance expiring after this period, if not used.

10.1.4. For completed services, the professional will receive 70% of the amount paid for the procedure in his/her wallet. WeCura will issue an invoice to the professional for the amount corresponding to the platform usage fee. The professional will be responsible for issuing an invoice for the total amount paid by the patient.

10.1.4.1. As a promotional measure, starting on June 8th 2025, professionals who register on the platform will receive 80% of the amount paid for the procedure for a period of one year, with 70% of the amount paid for the procedure being transferred after this period, as per item 10.1.4. This promotion may be terminated at any time by WeCura.

10.1.5. In the event of a no-show by the patient (the patient did not show up for the contracted service and there is no applicable cancellation), the professional will receive 50% of the amount paid for the procedure in his/her wallet within 14 days. WeCura will issue an invoice to the professional for 50% of the amount paid for the procedure. The professional will be responsible for issuing an invoice for the total amount paid by the patient.

10.1.6. In the event that the professional cancels the appointment up to two hours before the scheduled time, the professional will not be charged any fees. The balance previously allocated for the service will be returned in full to the patient's wallet for rescheduling, and it will be possible to schedule an appointment with the same professional (if available) or contract other services offered by WeCura within 1 year, with the balance expiring after this period, if not used.

10.1.7. If the professional cancels the appointment after the two-hour limit before the appointment time or does not show up (no-show), the professional will be charged a fee of 30% of the amount paid by the patient for the appointment. The balance previously allocated for the service will be returned in full to the patient's wallet for rescheduling, and it will be possible to schedule an appointment with the same professional (if available) or contract other services offered by WeCura within 1 year, with the balance expiring after the period, if not used.

10.1.8. In the event of a no-show by both the patient and the professional, the professional will not receive any amount.

11) BILLING AND INVOICING POLICY FOR SERVICES PERFORMED BY PROFESSIONALS - HEALTH PLANS

11.1. The patient will be charged the amount of R$6.49 (or R$8.90 if paid by credit card) for each service, corresponding to the fee charged by WeCura.

11.1.1. If the patient and the professional attend and the service proceeds normally, the amount of R$6.49 will be returned to the patient's wallet, and the same amount will be charged to the professional at the end of the consultation.

11.1.2. If the patient cancels or does not show up (no-show), the scheduling fee (R$6.49) will still be charged, and an invoice will be issued to the patient.

11.1.3. If the professional cancels or does not show up (no-show), the scheduling fee (R$6.49) will be returned to the patient's wallet, and the amount of R$6.49 will be charged to the professional.

11.1.4. If neither the patient nor the professional shows up, the patient will still be charged the scheduling fee (R$6.49).

11.2. When a professional offers a service to health plans, the professional must be accredited with the plan operator. It is the professional's sole responsibility to check the patient's information to ensure that they are fit to provide the service. WeCura has no involvement in negotiations between professionals and health plans, and by accepting these terms of use, professionals acknowledge that WeCura has no involvement in the proper collection of payments for services provided to health plans. Likewise, if a professional is unable to perform a service when making themselves available to patients of plans with which they are not accredited, the professional's no-show rule will apply (item 11.1.3). It is worth remembering that all stages in which payments are made will be issued invoices, which will contain the personal data of those involved.

12) RULES OF USE FOR SCHEDULING, START, COMPLETION, CANCELLATION AND DISPUTES

12.1. Scheduling

It is the sole responsibility of users — whether patients, healthcare professionals or contracting companies — to check and confirm the information regarding the date and time of scheduled appointments. The Application may send push notifications as a reminder, but such messages may occasionally contain errors or discrepancies, due to different time zones, for example. Therefore, check the scheduling data in the application.

12.2. Patient Start of Appointment

The patient must access the Application and click on the "Enter" option within a maximum period of 30 (thirty) minutes after the scheduled time. The appointment will be available in the "Scheduling" menu.

After clicking on "Enter", an authentication code will be generated and displayed in the upper right corner of the appointment, which must be provided to the healthcare professional so that he/she can start the appointment.

12.3. Starting the Service by the Professional

The healthcare professional must also access the Application and click on the "Enter" option within 30 (thirty) minutes after the scheduled time. The service will be available in the "Schedule" menu.

After receiving the authentication code provided by the patient, the professional must click on "Start" and enter the code to start the service.

12.4. Ending the Service

The end of the service is a mandatory step for purposes of registration, billing, financial transfer and release of the system for new services. The end can be done:

By the healthcare professional, by clicking on the patient's information or photo (located at the bottom of the screen) and selecting the "Finish" option; or

By the patient, by accessing the "Scheduling" menu, "In progress" tab, and clicking on "Mark as completed".

Failure to follow this procedure may result in delays in financial transfers, failures in the release of new schedules and other operational consequences, and are the responsibility of the respective user.

12.5. Cancellations

Cancellations, when applicable in accordance with clauses 10 and 11 of this contract, must be requested through the application in the Schedule (Waiting) tab.

12.6. Disputes

12.6.1. If both users, patient and professional/company, click on the "Enter" button within the Application, but the service does not start within 30 (thirty) minutes after the scheduled time, the system will provide the option to open a dispute.

12.6.2. During the dispute, both parties may present justifications, providing information, documents and/or photographs that help prove the facts. These elements will be analyzed individually by the responsible team.

12.6.3. The consequences of the dispute vary according to the type of service and situation, as described in clauses 10 (items 10.1.5, 10.1.7 and 10.1.8) and 11 (11.1.2, 11.1.3 and 11.1.4).

13) COMPATIBILITY WITH OPERATING SYSTEMS

Our applications are optimized to work with the latest versions of mobile operating systems. Specifically, we guarantee support and adequate performance on devices using Android 12 or higher and iOS 18 or higher.

Using the application on earlier versions of these operating systems may result in instability, partial functioning of features or technical failures. We recommend that users keep their devices updated to ensure the best possible experience.

The developer is not responsible for any performance or incompatibility issues arising from the use of the application on operating systems that do not meet the minimum requirements indicated above.

14) RECEIPT OF MONEY AND WITHDRAWALS

After the services provided through the application are completed, the respective amounts due will be simultaneously credited to the service provider's "Wallet". These amounts will be immediately available for withdrawal requests.

Withdrawals can be made via PIX or by transfer to a registered bank account, and will be processed instantly, except in cases of technical instability in the application system or in the banking systems involved, which may cause delays in processing.

We reinforce our commitment to ensuring that transactions are completed quickly and securely, always seeking to minimize any eventuality that may impact the time frame for releasing the amounts.

15) COST OF CONSULTATIONS AND EXAMS

The amounts displayed in the application for consultations and exams correspond only to those described on the platform. If, during the consultation, the professional or clinic identifies the need for additional exams, complementary procedures or any other service not included in the initially presented value, the client/patient has the option of negotiating directly with the service provider,

Payment for these additional services must be agreed upon and made directly between the patient and the professional or clinic responsible. If the client/patient chooses to negotiate any service outside the WeCura platform, WeCura is not responsible for the amounts or conditions agreed upon.

16) FINAL PROVISIONS

The Terms of Use constitute the full agreement and understanding of the parties with respect to their subject matter and replace and override all previous and current agreements and commitments regarding this subject matter and have the force of a contract, under the terms of articles 421 and 425 of the Civil Code.

17) ELECTION OF JURISDICTION

The central court of the city of Ribeirão Preto-SP is hereby defined as competent to settle any disputes arising from these Terms of Use, to the detriment of any other court, no matter how privileged it may be or may become.