HIPAA Privacy Notice

This notice describes how your medical information may be used and disclosed and how you can access this information. Please review it carefully.

About This Policy

IrisVitality LLC and its subsidiaries (“IrisVitality”, “we”, or “us”) operate websites and mobile applications (the “Platform”). Your use of the Platform and any related services (the “Service”) is governed by this Privacy Policy unless otherwise noted.

Protected Health Information

When using our services, you may provide health information protected under HIPAA or state law (“Protected Information” or “PHI”). While IrisVitality is not a HIPAA-covered entity, some of our affiliated healthcare providers may be. Other non-medical information (such as name and email) is governed by this Privacy Policy.

Information We Collect

• Directly from you: account details, health history, payment information
• Automatically: usage data, cookies
• From third parties: healthcare providers, payment processors

How We Use Your Information

• Provide and improve our services
• Process payments and transactions
• Communicate with you
• Comply with legal and regulatory requirements
• Conduct research using de-identified data

Information Sharing

• Healthcare providers for treatment purposes
• Payment processors and service providers
• Marketing partners (non-PHI only)
• Government authorities when legally required
• Successor entities in a business transfer or merger

Your Rights & Choices

• Opt out of promotional communications
• Adjust browser cookie settings
• Submit privacy-related complaints or requests

Policy Updates

We may update this notice from time to time. When significant changes are made, we will notify you. Continued use of our services constitutes acceptance of the updated policy.

Contact Us

If you have questions or concerns about your privacy rights:

Email: contact@irisvitality.com
Phone: +1 (661) 429-5819

You may also contact the U.S. Department of Health & Human Services for questions related to HIPAA. We do not retaliate against individuals who file privacy complaints.