For California residents

California Privacy Notice

Effective May 27, 2026

---

This notice supplements our main Privacy Policy with the disclosures required by the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).

Information we collect

• Identifiers — name, email, postal address, account ID, IP address.
• Personal-records information — date of birth, payment information (tokenized).
• Protected-class information — age, gender (where provided in your assessment).
• Commercial information — services purchased, transaction history.
• Internet activity — browsing on our site, device data, approximate geolocation.
• Health information — assessment responses, prescribed protocol, weight, lab values (treated as sensitive personal information).

Sources

Directly from you, from your devices when you use the Service, from your reviewing clinician, and from the pharmacy that fulfills your prescription.

Business purposes

Routing your assessment to a clinician, fulfilling shipments, billing, security, customer support, analytics, legal and regulatory compliance.

Sharing

We share with independent clinicians, 503B compounding pharmacies, and vetted service providers under contract. We do not sell personal information and we do not “share” personal information for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA.

Your rights

• Right to know the categories and specific pieces of personal information we have collected, used, disclosed, or shared.
• Right to delete personal information we hold, subject to legal-retention exceptions.
• Right to correct inaccurate personal information.
• Right to limit use of sensitive personal information to that necessary to provide the Service.
• Right to opt out of sale or sharing (we do neither).
• Right to non-discrimination for exercising your rights.

How to submit a request

Email [email protected] with the request type and your account email. We will verify your identity and respond within 45 days as required.

Authorized agents

You may use an authorized agent to submit a request. The agent must provide written authorization and we will verify your identity directly.