Privacy Policy

Personal Information

When you create an account, request a consultation, or purchase a guide, we collect information such as your name, email address, phone number, and billing information.

Health Information

During consultations or when using our condition-specific services, you may provide health-related information such as your autoimmune condition(s), symptoms, medications, and health history. This information is treated as Protected Health Information (PHI) under HIPAA.

Usage Data

We automatically collect information about how you interact with our platform, including pages visited, time spent, browser type, device information, and IP address. This data is collected through cookies and similar technologies.

Service Delivery

To facilitate specialist consultations, deliver purchased educational guides, process payments, and provide customer support.

Platform Improvement

To analyze usage patterns, improve our services, develop new features, and ensure the platform operates smoothly and securely.

Communications

To send you service-related notifications, respond to your inquiries, and, with your consent, provide health education newsletters and updates.

Legal Compliance

To comply with applicable laws, regulations, and legal processes, including HIPAA requirements for health information.

Doctors

We share relevant health information with the specialists you choose to consult with, solely for the purpose of providing their services to you.

Service Providers

We work with third-party providers for payment processing, hosting, and analytics. These providers are bound by data processing agreements and, where applicable, Business Associate Agreements (BAAs).

Legal Requirements

We may disclose your information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

What We Never Do

We never sell your personal information or health data to third parties. We never share your data for third-party advertising purposes.

We implement industry-standard security measures to protect your information, including AES-256 encryption at rest, TLS 1.3 encryption in transit, multi-factor authentication, regular security audits, and intrusion detection systems. Our infrastructure is hosted on SOC 2 Type II certified data centers. For more details, see our HIPAA Compliance page.

We retain your personal information for as long as your account is active or as needed to provide services. Health information is retained in accordance with applicable medical record retention laws (typically 7-10 years). You may request deletion of your account and associated data at any time, subject to our legal retention obligations.

Access & Portability

You can access, download, or request a copy of your personal data at any time through your account settings or by contacting us.

Correction

You can update or correct your personal information through your account or by contacting our support team.

Deletion

You can request deletion of your account and personal data. We will comply unless we have a legal obligation to retain certain information.

Opt-Out

You can opt out of marketing communications at any time by clicking the unsubscribe link in our emails or adjusting your notification preferences.

HIPAA Rights

For health information rights under HIPAA, including access, amendment, restriction, and accounting of disclosures, please see our HIPAA Compliance page.

We use essential cookies for platform functionality, analytics cookies to understand usage (Google Analytics with IP anonymization enabled), and preference cookies to remember your settings. You can manage cookie preferences through your browser settings. We do not use advertising or tracking cookies.

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If a parent or guardian becomes aware that their child has provided us with personal information, please contact us and we will promptly delete such data.

Our services are primarily operated from the United States. If you access our platform from outside the U.S., your information may be transferred to and processed in the United States. By using our services, you consent to this transfer. We take steps to ensure your data is treated securely and in accordance with this privacy policy regardless of where it is processed.

We may update this Privacy Policy periodically. We will notify you of material changes by posting a notice on our platform and, where required, by email. Your continued use of our services after changes take effect constitutes acceptance of the updated policy.