Privacy Policy

Introduction

PrescrYbe ("PrescrYbe," "we," "our," or "us") operates a technology platform that connects patients with independent licensed clinical partners and licensed pharmacy partners. This Privacy Policy describes how we collect, use, disclose, and protect your information when you visit our website or use our platform.

This Policy applies to information collected through our website and platform. It does not govern the separate privacy practices of our independent clinical or pharmacy partners, who maintain their own HIPAA-compliant notices.

Information We Collect

Information you provide directly includes:

• Name, email address, phone number, and mailing address

• Date of birth and identity verification information

• Health intake responses submitted through the platform

• Payment and billing information (processed securely by third-party processors)

• Communications you send to us, including support inquiries

Information collected automatically includes:

• Device type, browser, IP address, and operating system

• Pages visited, time on site, and referring URLs

• Cookies and similar tracking technologies

How We Use Your Information

We use your information to:

• Facilitate your connection with independent licensed clinical partners for provider review

• Process payments and manage billing

• Communicate with you about your account, intake status, and support requests

• Improve our platform, services, and user experience

• Comply with legal obligations and enforce our Terms and Conditions

• Detect fraud and protect the security of our platform

We do not use your health intake information for advertising or marketing purposes.

Health Information and HIPAA

Health information you submit through PrescrYbe's intake forms is transmitted to independent licensed clinical partners who are subject to HIPAA. These partners maintain their own HIPAA Notice of Privacy Practices governing how your Protected Health Information (PHI) is handled — see the OpenLoop Notice of Privacy Practices.

PrescrYbe operates as a technology platform and coordinates data transmission to clinical partners in accordance with applicable law. We do not make clinical decisions and do not retain PHI beyond what is necessary to facilitate platform operations. For questions about how your health records are handled by clinical partners, contact the relevant clinical partner directly.

Information Sharing and Disclosure

We share your information with:

• Independent licensed clinical partners (including OpenLoop Health and affiliated professional corporations) to facilitate provider review of your intake

• Licensed pharmacy partners (including RedRock Pharmacy, Health Warehouse, Precision Medicine, and Triad Rx) to fulfill prescriptions when issued by a provider

• Identity verification providers (CareValidate) to verify patient eligibility

• Payment processors to handle billing transactions securely

• Technology service providers who support platform operations under data processing agreements

• Legal or regulatory authorities when required by law or court order

We do not sell your personal information to third parties.

Text Messaging (SMS)

If you opt in to receive text messages from us, we use your mobile number and opt-in status to send the messages you have consented to receive, such as account, intake status, and support notifications. Mobile phone numbers and SMS opt-in consent are not shared with third parties or affiliates for their own marketing or promotional purposes. Message and data rates may apply. You may opt out of text messages at any time by replying STOP.

Cookies and Tracking

We use cookies and similar technologies to remember your preferences, analyze website traffic, and support platform functionality. You may manage cookie preferences through your browser settings or our cookie consent tool, and we honor Global Privacy Control (GPC) signals where required by law. We do not place third-party advertising or analytics tags on pages where health information is collected, such as intake questionnaires or patient portals. Disabling certain cookies may affect platform functionality.

Data Security

We implement industry-standard security measures to protect your information from unauthorized access, disclosure, or loss. All data transmissions are encrypted in transit. However, no method of electronic storage or transmission is entirely secure, and we cannot guarantee absolute security. You are responsible for keeping any account credentials confidential.

Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Health intake data is retained in accordance with applicable law and our agreements with clinical partners.

Your Privacy Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you

• Request correction of inaccurate information

• Request deletion of your information, subject to legal and contractual limitations

• Opt out of marketing communications at any time

• Request a portable copy of your data

To exercise any of these rights, contact us at care@prescrybe.health. We will respond within 30 days.

California Residents

California residents have additional rights under the California Consumer Privacy Act (CCPA/CPRA), including the right to know what personal information is collected, the right to request deletion and correction, and the right to opt out of the sale or sharing of personal information. We do not sell personal information. For full details, see our California Privacy Rights page or contact us at care@prescrybe.health.

Other U.S. State Privacy Rights

Residents of certain other states — including Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Montana, Oregon, Tennessee, Texas, Utah, and Virginia, and other states with comprehensive consumer privacy laws — may have similar rights under their state's law, including the right to confirm whether we process your personal information, to access, correct, delete, or obtain a portable copy of it, and to opt out of targeted advertising, the sale of personal information, or profiling in furtherance of decisions that produce legal or similarly significant effects.

To exercise any of these rights, contact us at care@prescrybe.health. If we decline to take action on your request, you may appeal our decision by replying to our response with the word "Appeal" in the subject line; we will inform you of the outcome of your appeal as required by your state's law.

Children's Privacy

Our platform is intended for adults 18 years of age and older. We do not knowingly collect personal information from minors. If we learn that we have collected information from a person under 18, we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes become effective upon posting to this page. We encourage you to review this Policy periodically.

Contact Us

For privacy-related questions or requests, contact PrescrYbe at care@prescrybe.health.