Your medical information, protected.
We hold protected health information under HIPAA, encrypt it end to end, and never sell it.
Last updated September 2026
01What we collect
Clinical information you enter in the intake: state of residence, date of birth, sex assigned at birth, measurements, medical and medication history, and the answers to protocol-specific screening questions.
Contact and fulfillment details: your name, email, phone number and shipping address. Payment is processed by a PCI-compliant processor; we never store full card numbers.
Limited technical data such as device type and pages visited, used to keep the site secure and working.
02HIPAA compliance
The physicians and pharmacies who treat you are covered entities under HIPAA, and we act as their business associate under signed business associate agreements. Your protected health information is used only to evaluate, prescribe, dispense and follow up on your care.
You have the right to access your records, request corrections, request an accounting of disclosures and file a complaint. Email the privacy team and we respond within 30 days.
03Encryption and access control
All traffic runs over TLS with 256-bit encryption, and clinical records are encrypted at rest. Access is role-based and logged: only the clinicians and pharmacists involved in your care can open your chart.
Marketing and advertising systems receive no clinical data. We do not send medical answers, diagnoses or prescription details to advertising platforms or analytics vendors.
04We do not sell your data
Your information is never sold, rented or shared for third-party marketing. It is disclosed only to the clinicians and pharmacies treating you, to the payment and shipping providers needed to fulfill your order, or where the law requires it.
You can opt out of marketing email at any time without affecting your clinical care.
05Discretion in delivery
Shipments arrive in plain unmarked outer packaging with no medication name, clinical branding or category reference on the label. Card statements show a neutral descriptor.
06Retention and your choices
Medical records are retained for the period your state requires, typically seven years. Non-clinical marketing data is deleted on request.
To access, correct or delete information, or to ask a question about this policy, contact the privacy team through the address in your order confirmation email.
Ready to begin? The clinical assessment takes about five minutes, and you are only charged if a licensed physician approves your protocol.
Start clinical intake