Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Identity information: name, date of birth, sex, address, phone number, email.
• Health information: self-reported medications, allergies, medical conditions, intake assessment answers, lab results, photos submitted for clinical review.
• Payment information: processed by our third-party payment processor. YupMD does not store full payment card numbers.
• Communications: messages sent through our support chat or to our clinical/support teams.

1.2 Information Collected Automatically

• Device and usage data: IP address, browser type, pages visited, referring URLs, approximate location.
• Cookies and similar tracking technologies, including analytics and advertising pixels (see Section 6).

2. How We Use Information

We use information to:

• Operate and provide the Services, including processing your assessment and connecting you with independent prescribers through our affiliated provider network.
• Facilitate prescription issuance and fulfillment through pharmacy partners.
• Process payments.
• Provide customer support.
• Improve our website and Services.
• Communicate with you about your account, orders, and treatment.
• Comply with legal and regulatory obligations.

3. How We Disclose Information

We disclose information to:

• Provider network: Independent licensed prescribers who review your assessment and make all clinical and prescribing decisions. YupMD does not practice medicine and does not direct clinical judgment.
• Pharmacy partners: Compounding and fulfillment pharmacies that prepare and ship your prescribed medication.
• Payment processor: For payment processing.
• Customer support platform: For handling support inquiries.
• Cloud infrastructure providers: For secure hosting and storage of records.
• Service providers and vendors: Who perform functions on our behalf under contractual confidentiality and data protection obligations.
• Legal and safety purposes: When required by law, subpoena, or court order, or to protect the rights, property, or safety of YupMD, our users, or others.
• Business transfers: In connection with a merger, acquisition, or sale of assets, subject to continued protection of your information.

We do not sell your health information.

4. HIPAA and Protected Health Information

Information you submit in connection with clinical assessments, prescriptions, and treatment may constitute Protected Health Information (PHI) under the Health Insurance Portability and Accountability Act (HIPAA). Our affiliated provider network and pharmacy partners may act as covered entities or business associates with respect to the functions they perform. PHI is used and disclosed only as permitted by HIPAA and applicable law, including for treatment, payment, and healthcare operations.

5. State Privacy Rights

5.1 Florida Residents

We honor applicable consent requirements for tracking technologies as described in Section 6, including requirements under Florida law governing electronic communications.

5.2 California Residents

California residents may have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know, delete, correct, and limit use of sensitive personal information, and to opt out of the sale or sharing of personal information. To exercise these rights, contact us at compliance@yupmd.com.

5.3 Other States

Residents of other states may have additional rights under applicable state privacy laws. To exercise applicable rights, contact us at compliance@yupmd.com.

6. Cookies and Tracking Technologies

We and our third-party partners use cookies, pixels, and similar technologies for analytics and advertising purposes, including technologies provided by Google, Meta, and TikTok.

We do not load advertising or analytics tracking technologies until you have provided consent through our cookie consent banner. You may accept or reject non-essential cookies at any time. Rejecting non-essential cookies will not affect your ability to use core Services. You may change your preferences at any time through the cookie settings link in the website footer.

7. Data Retention

We retain personal and health information for as long as necessary to provide the Services and to comply with applicable legal, regulatory, and medical recordkeeping requirements, after which it is securely deleted or de-identified.

8. Data Security

We maintain administrative, technical, and physical safeguards designed to protect information against unauthorized access, disclosure, alteration, or destruction.

9. Children's Privacy

The Services are not directed to individuals under 18. We do not knowingly collect personal information from anyone under 18.

10. Your Choices

You may:

• Update or correct your account information.
• Request deletion of your information, subject to legal and recordkeeping requirements.
• Opt out of marketing communications.
• Manage cookie preferences as described in Section 6.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated as required by applicable law. Continued use of the Services after changes take effect constitutes acceptance of the revised policy.

12. Contact Us

YupMD, Inc.

8 The Green, Suite A

Dover, Delaware 19901

Email: compliance@yupmd.com