Privacy Policy

1. Introduction

PrescrYbe Health ("PrescrYbe," "we," "our," or "us") operates a technology platform that connects patients with independent licensed clinical partners and licensed pharmacy partners. This Privacy Policy describes how we collect, use, disclose, and protect your information when you visit our website or use our platform.

This Policy applies to information collected through our website and platform. It does not govern the separate privacy practices of our independent clinical or pharmacy partners, who maintain their own HIPAA-compliant notices.

2. Information We Collect

Information you provide directly includes:

• Name, email address, phone number, and mailing address

• Date of birth and identity verification information

• Health intake responses submitted through the platform

• Payment and billing information (processed securely by third-party processors)

• Communications you send to us, including support inquiries

Information collected automatically includes:

• Device type, browser, IP address, and operating system

• Pages visited, time on site, and referring URLs

• Cookies and similar tracking technologies

3. How We Use Your Information

We use your information to:

• Facilitate your connection with independent licensed clinical partners for provider review

• Process payments and manage billing

• Communicate with you about your account, intake status, and support requests

• Improve our platform, services, and user experience

• Comply with legal obligations and enforce our Terms and Conditions

• Detect fraud and protect the security of our platform

We do not use your health intake information for advertising or marketing purposes.

4. Health Information and HIPAA

Health information you submit through PrescrYbe's intake forms is transmitted to independent licensed clinical partners who are subject to HIPAA. These partners maintain their own HIPAA Notice of Privacy Practices governing how your Protected Health Information (PHI) is handled.

PrescrYbe operates as a technology platform and coordinates data transmission to clinical partners in accordance with applicable law. We do not make clinical decisions and do not retain PHI beyond what is necessary to facilitate platform operations. For questions about how your health records are handled by clinical partners, contact the relevant clinical partner directly.

5. Information Sharing and Disclosure

We share your information with:

• Independent licensed clinical partners (including OpenLoop Health and affiliated professional corporations) to facilitate provider review of your intake

• Licensed pharmacy partners (including Triad Rx, RedRock Pharmacy, and Beaker Pharmacy) to fulfill prescriptions when issued by a provider

• Identity verification providers (CareValidate) to verify patient eligibility

• Payment processors to handle billing transactions securely

• Technology service providers who support platform operations under data processing agreements

• Legal or regulatory authorities when required by law or court order

We do not sell your personal information to third parties.

6. Cookies and Tracking

We use cookies and similar technologies to remember your preferences, analyze website traffic, and support platform functionality. You may manage cookie preferences through your browser settings. Disabling certain cookies may affect platform functionality.

7. Data Security

We implement industry-standard security measures to protect your information from unauthorized access, disclosure, or loss. All data transmissions are encrypted in transit. However, no method of electronic storage or transmission is entirely secure, and we cannot guarantee absolute security.

8. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Health intake data is retained in accordance with applicable law and our agreements with clinical partners.

9. Your Privacy Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you

• Request correction of inaccurate information

• Request deletion of your information, subject to legal and contractual limitations

• Opt out of marketing communications at any time

• Request a portable copy of your data

To exercise any of these rights, contact us at support@prescrybe.health. We will respond within 30 days.

10. California Residents

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your CCPA rights, contact us at support@prescrybe.health.

11. Children's Privacy

Our platform is intended for adults 18 years of age and older. We do not knowingly collect personal information from minors. If we learn that we have collected information from a person under 18, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes become effective upon posting to this page. We encourage you to review this Policy periodically.

13. Contact Us

For privacy-related questions or requests, contact PrescrYbe Health at support@prescrybe.health.