Consumer health data privacy

ReviveRxCare operates this platform and is responsible for the data described here. Once a provider has seen you, the medical group providing your care is responsible for the resulting medical record — see the Notice of Privacy Practices.

• Your state and your age — the two answers that decide whether we can see you and which clinician can.
• One or two screening answers that change which treatment we suggest — for example whether you take nitrates, or whether you are pregnant or breastfeeding. The quiz is a recommender, not a medical assessment; your medical history is taken by the licensed provider in your visit, not by the quiz.
• Your name and email address, and a phone number and shipping address where a visit or shipment needs them.
• The treatments in your cart, which travel with your visit as context for the provider.
• The status and outcome of each visit — whether a prescription was written, and for what — which our clinical partner returns to us so payment and refunds can be handled.
• What you write to your care team in the patient portal.

We collect this directly from you, or receive it from the clinician who saw you. We do not buy health data, and we do not infer health conditions from your browsing.

So a licensed provider can see you and decide whether treatment is appropriate; so we can take payment and issue the refunds our refund policy promises; and so we can tell you what happened with your visit. Nothing else. We do not use health data for marketing, and we do not use it to train advertising or machine-learning systems.

• The licensed provider who sees you, and the medical group they belong to, through our clinical partner
• The pharmacy that would fill a prescription, if one is written
• The companies below, each for the stated purpose and nothing else

  Company	Role	Health information
  Supabase	Database	Yes
  Stripe	Payments	No
  Resend	Transactional email	No
  Vercel	Hosting	No
  Qualiphy	Clinical partner	Yes
  ImprovMX	Support mail forwarding	Only what you write
  Partner pharmacies	Dispensing	Yes

  Show what each receives

  • Supabase · Database

    Yes

    Stores the platform's data — accounts, cart and order records, visit status, portal messages and audit logs.

    Data:

    Everything the platform holds, at rest.

    Health information:

    Yes — visit status, cart selections and your messages with your care team are stored here.

  • Stripe · Payments

    No

    Takes your payment and issues the refunds our refund policy promises. We never see or store your full card number.

    Data:

    Name, email, billing details, the amount and a reference to your order.

    Health information:

    No. Stripe sees a line-item reference and an amount, never a condition or medication name.

  • Resend · Transactional email

    No

    Sends receipts, one-time sign-in codes, visit links and status updates.

    Data:

    Your email address and the text of each message.

    Health information:

    No. Message subjects and bodies carry no condition or medication names, by design.

  • Vercel · Hosting

    No

    Serves the website and runs its server code. Its cookieless, aggregated analytics run on marketing pages only — never on the quiz, the cart, the checkout or the patient portal.

    Data:

    Standard request logs: IP address, browser type, the page requested, timing.

    Health information:

    No. Its request logs record the page requested, with an IP address — including a public catalogue page whose address names a medication — but no health detail about you appears in the web address of your quiz, cart, visit, order or portal pages.

  • Qualiphy · Clinical partner

    Yes

    Opens your visit with a licensed clinician from one of its medical groups, who takes your medical history and decides whether to prescribe. Returns the visit's status and outcome to us.

    Data:

    Your identity, contact details, state, the treatments in your cart, and everything you tell the clinician in the visit.

    Health information:

    Yes — this is where your medical history is taken and your medical record is held.

  • ImprovMX · Support mail forwarding

    Only what you write

    Forwards email sent to our support and privacy addresses to the mailbox our team reads.

    Data:

    Whatever you write to us, and your email address.

    Health information:

    Only what you choose to put in an email to us.

  • Partner pharmacies · Dispensing

    Yes

    Fill and ship a prescription a clinician has written. The pharmacies are listed, with what we have verified about each, on the Partner pharmacies page.

    Data:

    Your name, contact details, shipping address and the prescription, if one is written.

    Health information:

    Yes — the prescription itself, if prescribed.

Whether any of these companies must sign a business associate agreement with us is a question with counsel; we do not claim here that one has been signed. See the Notice of Privacy Practices for where that stands.

We do not sell consumer health data, and we do not share it for cross-context behavioral advertising.

• No advertising or analytics trackers run inside the quiz, the cart, the checkout or the patient portal. The cookieless analytics on our marketing pages stop at that door, by design.
• No health detail about you appears in the web address of your quiz, cart, visit, order or portal pages, so nothing about your care leaks into browser history, referrer headers or server logs.
• No condition or medication names appear in the subject or body of an email we send.
• If a quiz is declined, your answers are cleared from the device rather than left behind.

Where these laws apply to you, you have the right to know what consumer health data we hold, to obtain a copy of it, to withdraw consent to its collection and sharing, and to have it deleted — including by any third party we shared it with. Exercising these rights will not lead to worse service.

Deletion is subject to medical record-retention law: once a provider has seen you, the record of that visit belongs to a medical record set the provider's medical group is legally required to keep for a period set by state law. We will tell you plainly which parts of a request we can and cannot honour, and why.

To make a request, or to appeal a refused one, write to privacy@reviverxcare.com. We will verify that a request is really coming from you before acting on it, and we respond within the time the applicable law allows.