Consumer Health Data Privacy Policy

Health data we collect

• Your sex, date of birth, height and weight, and the BMI calculated from them.
• Your goal weight, goals and motivation, and how much you sleep.
• Current or recent GLP-1 medication, the dose and when you last took it, and any diabetes medications.
• Whether you are pregnant, nursing or trying to conceive, and any history of medullary thyroid cancer, MEN-2, pancreatitis, type 1 diabetes or an eating disorder.
• Allergies and anything you write for your provider.
• The medication you order, which can itself reveal health information, and the details of your provider appointment.

Where it comes from

Directly from you, when you complete the eligibility quiz, place an order or book a provider call. We do not buy health data or collect it from other sources.

Why we collect and use it

• So a licensed provider can decide whether treatment is safe and appropriate for you, and provide your care.
• To fill, ship and support your order, including refunds.
• To schedule and prepare for your provider call.
• To keep required records and meet our legal obligations.

We collect and share health data only as necessary to provide the service you ask for, or with your consent. We do not sell it and do not use it for advertising.

Who we share it with

• Our affiliated medical practice and its licensed providers, who evaluate and treat you.
• Licensed pharmacies that fill and ship your prescription.
• Processors that handle data on our behalf: our website host (US servers), Cloudflare, Inc. (network and security), Authorize.net, a Visa solution (payments), Amazon Web Services, Inc. (email delivery), Microsoft Corporation (email inbox) and Google LLC (appointment calendar).
• Government authorities, only when the law requires it.

Your rights

• Confirm whether we collect, share or sell your consumer health data, and access it.
• Get a list of all third parties and affiliates we have shared it with, and how to contact them.
• Withdraw your consent to our collecting or sharing it.
• Have it deleted. We will also tell our processors, and anyone we shared it with, to delete it.

How to use your rights

Email [email protected] from the address you used with us, and tell us which right you want to use. We will confirm your identity, then respond within 45 days. If we need more time, we will tell you within those 45 days and may take up to 45 more. There is no charge.

If we deny your request, you can appeal by replying to our decision. We will answer your appeal in writing within 45 days and explain the reasons. If your appeal is denied, you can complain to your state attorney general. In Washington, that is at atg.wa.gov/file-complaint.