Privacy policy
This privacy policy describes how MyPromise, Inc. ("MyPromise," "we," "us") collects, uses, discloses, and safeguards your information when you use our website, mobile experience, and member services (collectively, the "Services"). MyPromise is a U.S. telehealth platform; this policy is written for U.S. residents and reflects our obligations under HIPAA, state privacy laws, and the Federal Trade Commission Act.
1. Information we collect
We collect information you provide to us, information generated automatically as you use the Services, and information from clinicians and pharmacies that participate in your care.
Information you provide
- Account details (name, email, password, date of birth)
- Health intake responses, symptoms, goals, and labs you upload
- Payment and billing information processed by our payment provider
- Messages you send to your clinician or member-care team
Information collected automatically
- Device, browser, and connection information
- Usage events and timing of your visits to the Services
- Cookies and similar technologies (described in Section 6)
Information from third parties
- Clinical notes and prescriptions from clinicians who treat you on the platform
- Dispensing records from accredited compounding pharmacies that fulfill your protocol
- Identity-verification responses from authorized verification vendors
2. How we use your information
We use the information we collect to operate the Services, route you to a licensed clinician, dispense your protocol, support your account, communicate with you about your care, prevent fraud and misuse, comply with our legal obligations, and improve the Services. We do not sell your personal information, and we do not share PHI with advertisers.
3. Sharing your information
We share your information only with parties who need it to deliver the Services or who we are legally required to share it with, including:
- Clinicians and pharmacies participating in your care
- Service providers (cloud hosting, customer support, fraud prevention) under written contracts that restrict use
- Legal authorities when required by law or to protect rights, safety, or property
- Successors in connection with a merger, acquisition, or sale of assets
4. Your rights
Depending on where you live, you may have rights to access, correct, delete, or restrict the processing of your personal information, and the right to receive a portable copy. You can exercise these rights at any time by emailing privacy@mypromise.com. We will verify your identity before fulfilling a request.
5. Data security
We use administrative, technical, and physical safeguards designed to protect your information, including encryption of data in transit and at rest, access controls, and routine review of our security posture. No system is perfectly secure; if we ever experience a breach affecting your information, we will notify you in accordance with applicable law.
6. Cookies
We use a small number of strictly necessary cookies to keep you signed in and to remember preferences. We use a limited set of analytics cookies, in aggregate form, to understand how the Services are used. You can manage cookies through your browser settings.
7. Children
The Services are intended for adults 18 years of age or older. We do not knowingly collect personal information from children under 13.
8. Changes to this policy
We may update this policy from time to time. When we do, we will revise the "Last updated" date above. Material changes will be communicated via email or in-product notice.
9. Contact
Questions, requests, or complaints can be sent to privacy@mypromise.com. You also have the right to file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights.