Privacy Policy

• Account information — name, email, phone, date of birth, and role (patient, clinician, organization staff).
• Health information (PHI) — symptoms, visit notes, diagnoses, prescriptions, lab orders and results, and messages exchanged with your care team.
• Payment information — billing address and tokenized payment details processed by our PCI-compliant payment processor; we do not store full card numbers.
• Device and usage data — IP address, browser type, device identifiers, and interaction logs, collected for security and reliability purposes.
• Audio/video data — telehealth sessions are transmitted end-to-end for the visit and are not recorded unless explicitly disclosed and consented to.

• To provide, maintain, and improve the Platform, including scheduling, telehealth, and billing.
• To facilitate treatment, care coordination, and communication between you and your care team.
• To process payments and insurance claims.
• To detect, investigate, and prevent fraud, abuse, and security incidents.
• To comply with legal, regulatory, and accreditation obligations.

We do not sell your personal information or PHI.

We disclose information only as necessary, and only to:

• Your treating clinicians and, where applicable, their affiliated organization.
• Business associates who perform functions on our behalf (e.g., payment processing, cloud hosting, e-prescribing networks) under a signed Business Associate Agreement.
• Insurance payers, for claims and eligibility verification you authorize.
• Regulators or law enforcement, where required by law.
• A successor entity in the event of a merger, acquisition, or sale of assets.

Subject to applicable law, you have the right to:

• Access and receive a copy of your medical record.
• Request an amendment to information you believe is inaccurate or incomplete.
• Request an accounting of certain disclosures of your PHI.
• Request restrictions on certain uses or disclosures of your PHI.
• Request confidential communications by an alternative means or location.
• Receive notice in the event of a breach of unsecured PHI.
• Where applicable state law provides it, request deletion of your personal information.

To exercise any of these rights, contact us through Contact Support.

We use administrative, technical, and physical safeguards appropriate to the sensitivity of health information, including encryption in transit and at rest, role-based access controls, audit logging of PHI access, and periodic risk assessments. No system can guarantee absolute security, and we encourage you to safeguard your own login credentials.

We retain medical records for the period required by applicable state law (typically 7–10 years for adults, longer for minors) and other account data for as long as needed to provide the Platform and meet legal obligations, after which it is securely deleted or de-identified.

We use cookies and similar technologies to keep you signed in, remember preferences, and understand aggregate usage of the Platform. Analytics data is de-identified or aggregated wherever possible and is never combined with PHI for advertising purposes.

The Platform is not directed to children under 13. Care for minors is managed exclusively through a parent or legal guardian's account, consistent with applicable minor-consent laws.

We may update this Privacy Policy from time to time. Material changes will be communicated in-app or by email before taking effect.

For privacy questions or to exercise your rights, reach us via Contact Support, or in writing to our Privacy Officer at the address on file with your state licensing authority.