Privacy Policy

Effective Date: January 15, 2026 · Last Updated: January 15, 2026

1. Information We Collect

1.1 Personal Information

When you use our services, we may collect: name, email address, phone number, date of birth, mailing address, and payment information necessary to provide our services.

1.2 Health Information

To provide medical services, we collect: health history, current medications, height, weight, BMI, medical conditions, allergies, lab results, and treatment progress data. This information is classified as Protected Health Information (PHI) under HIPAA and receives the highest level of protection.

1.3 Usage Information

We automatically collect: device information, browser type, pages visited, time spent on pages, and referring URLs. This data is used to improve our services and is never linked to your health information.

2. How We Use Your Information

We use your information to:

• Provide and manage your medical treatment
• Communicate with you about your care
• Process payments and manage your account
• Improve our services and patient experience
• Comply with legal and regulatory requirements
• Prevent fraud and ensure platform security

We do not sell your personal information or health data to third parties. We do not use your health information for advertising purposes.

3. How We Protect Your Information

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). We maintain HIPAA-compliant infrastructure with regular security audits. Access to patient health information is restricted to authorized medical personnel directly involved in your care.

4. Information Sharing

We may share your information only in the following circumstances:

• Healthcare providers: Your prescribing physician and pharmacy partners as necessary for treatment
• Payment processors: Encrypted payment data to process your subscription
• Legal requirements: When required by law, court order, or regulatory obligation
• With your consent: Any other sharing requires your explicit written authorization

5. Your Rights

You have the right to:

• Access your personal and health information
• Request correction of inaccurate information
• Request deletion of your account and data (subject to legal retention requirements)
• Receive a copy of your medical records
• Opt out of marketing communications
• File a complaint with HHS if you believe your privacy rights have been violated

6. Data Retention

We retain your health records for a minimum of 7 years as required by medical record-keeping regulations. Account and payment information is retained for 3 years after account closure. You may request deletion of non-medical data at any time.

7. Contact

For privacy questions or to exercise your rights, contact our Privacy Officer at our contact page.