Privacy Policy

Truthe Health, LLC ("Truthe," "we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you visit our website at truthehealth.com(the "Site"), use our mobile applications, or interact with our telehealth and wellness services (collectively, the "Services").

By using our Services, you consent to the data practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Services.

1. Information We Collect

1.1 Personal Identifiable Information (PII)

We may collect the following personal information when you create an account, complete an intake form, or place an order:

• Full legal name, date of birth, and sex
• Email address, phone number, and mailing address
• Government-issued identification (when required for identity verification)
• Photographs (e.g., selfie verification for telehealth consultations)

1.2 Protected Health Information (PHI)

When you use our telehealth services, we collect health-related information that is protected under the Health Insurance Portability and Accountability Act ("HIPAA"), including:

• Medical history, current medications, and known allergies
• Symptoms, diagnoses, and treatment plans
• Lab results and prescription records
• Provider-patient communications

1.3 Payment Information

We collect billing information necessary to process your transactions, including credit or debit card numbers, billing addresses, and transaction history. Payment card data is processed by our PCI-DSS compliant payment processor and is not stored on our servers.

1.4 Device and Usage Information

We automatically collect certain information when you access the Services, including:

• IP address, browser type, operating system, and device identifiers
• Pages visited, time spent on pages, and referring URLs
• Clickstream data and interaction patterns

1.5 Cookies and Tracking Technologies

We use cookies, web beacons, and similar technologies to enhance your experience, analyze usage, and deliver relevant communications. For details, please see our Cookie Policy.

2. How We Use Your Information

2.1 Treatment

We use your health information to facilitate telehealth consultations, enable licensed providers to evaluate your eligibility for treatment, and coordinate prescription fulfillment through licensed pharmacies.

2.2 Payment

We use your financial information to process payments for products and services, manage subscriptions, issue refunds, and prevent fraud.

2.3 Healthcare Operations

We use information to improve our Services, conduct quality assurance, manage business operations, and comply with legal and regulatory requirements.

2.4 Communications

We may use your contact information to send transactional emails (e.g., order confirmations, shipping updates, appointment reminders), respond to inquiries, and, with your consent, send marketing communications. You may opt out of marketing emails at any time.

3. HIPAA Compliance

Truthe is committed to complying with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and its implementing regulations. We maintain administrative, physical, and technical safeguards to protect the confidentiality, integrity, and availability of PHI.

We have executed Business Associate Agreements (BAAs) with all third-party service providers that access, transmit, or store PHI on our behalf. Our BAA chain includes, but is not limited to:

• Amazon Web Services (AWS) — cloud infrastructure and data hosting
• Resend — transactional email delivery
• Zoho — business operations and customer relationship management
• Our clinical platform partner — patient intake, provider coordination, and prescription management

We will never use or disclose your PHI for marketing purposes without your explicit written authorization.

4. Data Sharing and Disclosure

We do not sell your personal information. We may share information in the following circumstances:

• Licensed Healthcare Providers: We share relevant health information with independent licensed providers who deliver telehealth consultations and prescribe treatments through our platform.
• Licensed Pharmacies: When a prescription is issued, we share necessary information with licensed pharmacies to fulfill your order.
• Service Providers: We share information with third-party vendors who perform services on our behalf (e.g., payment processing, email delivery, analytics), subject to contractual obligations of confidentiality.
• Legal Compliance: We may disclose information when required by law, regulation, legal process, or governmental request.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as a business asset, subject to this Privacy Policy.
• With Your Consent: We may share information for other purposes when we have obtained your explicit consent.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our Services. Specific retention periods include:

• Active accounts: Personal information and PHI are retained indefinitely while your account remains active.
• Deleted accounts: Upon account deletion, we retain PHI for a minimum of six (6) years from the date of last treatment, as required by HIPAA regulations and applicable state laws. Non-health personal information is deleted within ninety (90) days of account closure, unless retention is required by law.
• Payment records: Transaction records are retained for seven (7) years for tax and accounting compliance.

6. Your Rights

Depending on your jurisdiction and the nature of the information, you may have the following rights:

• Right to Access: You may request a copy of the personal information and PHI we hold about you.
• Right to Amend: You may request correction of inaccurate or incomplete personal information or PHI.
• Right to Delete: You may request deletion of your personal information, subject to legal and regulatory retention requirements.
• Right to Restrict: You may request that we limit our use or disclosure of your PHI for treatment, payment, or operations purposes.
• Right to Data Portability: You may request a copy of your information in a structured, commonly used, machine-readable format.
• Right to an Accounting of Disclosures: You may request a record of certain disclosures of your PHI that we have made.
• Right to Opt Out: You may opt out of marketing communications at any time by clicking "unsubscribe" in any email or contacting us directly.

To exercise any of these rights, please contact us at privacy@truthehealth.com. We will respond within thirty (30) days, or forty-five (45) days if an extension is necessary.

7. Cookies

We use cookies and similar tracking technologies to operate and improve the Services. Categories of cookies we use include:

• Strictly Necessary Cookies: Required for the Site to function (e.g., session management, security).
• Performance Cookies: Help us understand how visitors interact with the Site (e.g., analytics).
• Functional Cookies: Enable personalized features (e.g., language preferences).
• Marketing Cookies: Used to deliver relevant advertisements and measure campaign effectiveness.

You can manage cookie preferences through your browser settings. Disabling certain cookies may limit your ability to use some features of the Services. For full details, see our Cookie Policy.

8. California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding your personal information:

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purpose for collection, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request deletion of personal information we have collected from you, subject to certain exceptions.
• Right to Opt Out of Sale: We do not sell personal information. However, you have the right to direct us not to sell your personal information if our practices change.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To submit a CCPA request, please email privacy@truthehealth.com with the subject line "CCPA Request." We will verify your identity before processing your request. For additional details, see our California Privacy Notice.

9. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
• Role-based access controls and multi-factor authentication for administrative systems
• Regular security assessments and vulnerability testing
• Employee training on data privacy and security best practices

While we strive to protect your personal information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

10. Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected information from a person under 18, we will take steps to delete that information promptly.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a prominent notice on our Site. Your continued use of the Services after the effective date of any changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Truthe Health, LLC
Email: privacy@truthehealth.com