Privacy Policy

1. Information We Collect

We collect information you provide directly to us when you create an account, complete a medical questionnaire, or communicate with us. This includes:

• Personal identifiers: name, email address, phone number, date of birth
• Health and medical information provided during consultation
• Payment information (processed securely via PCI-compliant third parties)
• Shipping address for prescription delivery
• Device and usage data collected automatically when you use our Platform

2. How We Use Your Information

We use the information we collect to:

• Connect you with a licensed physician for telehealth consultation
• Process and fulfill your prescriptions through partner pharmacies
• Process payments and manage your subscription
• Send important account and health communications
• Improve our Platform and develop new services
• Comply with legal and regulatory obligations

3. Protected Health Information (PHI)

BlueVitalis operates as a HIPAA-covered entity and business associate. All Protected Health Information (PHI) you provide is handled in strict accordance with the Health Insurance Portability and Accountability Act (HIPAA). Your PHI is:

• Encrypted in transit using TLS 1.3 and at rest using AES-256
• Accessible only to your treating physician, pharmacy, and authorized BlueVitalis staff
• Never sold, rented, or shared with advertisers under any circumstances
• Retained in accordance with applicable state and federal medical record laws

4. Information Sharing

We do not sell your personal information. We share your information only in the following limited circumstances:

• Healthcare Providers: With the physician assigned to your care, solely for treatment purposes
• Partner Pharmacies: To fulfill your prescription, as authorized by your Provider
• Payment Processors: Secure, PCI-DSS compliant third-party payment providers
• Legal Requirements: When required by law, court order, or government regulation
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with prior notice

5. Cookies & Tracking

We use cookies and similar tracking technologies to improve your experience on our Platform. These include essential cookies required for the Platform to function, and analytics cookies that help us understand how you use our services. You may disable cookies in your browser settings, but some features may not function correctly.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. Medical records are retained for a minimum of 7 years from the date of service, or longer as required by state law. You may request deletion of non-medical personal data by contacting us.

7. Your Rights

Depending on your state of residence, you may have the right to:

• Access and receive a copy of your personal data
• Correct inaccurate personal data
• Request deletion of your personal data (subject to medical record retention requirements)
• Opt-out of marketing communications at any time
• File a complaint with your state's data protection authority

8. Children's Privacy

Our services are intended for adults 18 years of age and older. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected information from a minor, we will delete it immediately.

9. Contact Our Privacy Team

For any privacy-related questions, data requests, or concerns, please contact our Privacy Officer: privacy@bluevitalis.com or at BlueVitalis, Inc., 888 Health Innovation Dr, Suite 400, Austin, TX 78701.