Legal

Notice of Privacy Practices

Version 1.4 · Effective 29 September 2026 · 7 sections · about 4 min

Not yet issued by the covered entity

A Notice of Privacy Practices is issued by the health care provider that holds your medical record — under HIPAA, the covered entity. Care on this platform is provided by independent licensed clinicians through the medical groups of our clinical partner; the group whose clinician treats you holds your medical record and is the covered entity for it. That group's notice, signed and dated, will be published or linked here before any patient is seen. ReviveRxCare does not issue it, and nothing on this page is that notice.

This notice describes how medical information about you may be used and disclosed, and how you can get access to it. Please review it carefully.

Contents

1.Who holds your medical record

Your medical history is taken by the licensed clinician in your visit — the quiz you answer before checkout is a recommender, not a medical assessment, and is not part of the record. The record of your visit belongs to the clinician's medical group.

We publish group names on our Providers page as soon as we hold them in writing, and never before. Until then, you can ask us which medical group is responsible for your care, and we will ask our clinical partner for you.

2.Where the platform stands

ReviveRxCare operates the platform and holds visit status, cart, order, payment and portal-message records on its own systems. Whether that makes us a business associate of the medical group, a covered entity in our own right for some of that data, or neither is a question we have put to counsel and not yet had answered, and we do not claim a status here that has not been determined.

We are working with vendors that can sign business associate agreements where one is required — our database provider offers one on its HIPAA-eligible plan — and we do not claim here that any such agreement has been signed.

When counsel has determined which agreements are required, they are put in place before the first patient is seen, and this page will say so.

What we can say plainly is what we do with your information. The Privacy policy describes it in full, and the list below names every company that touches it, with what each one sees.

3.Who touches health information on the platform side

The same list the Privacy policy prints, so the two documents can never disagree. Stripe, Resend, Vercel and ImprovMX are sent no health information by design; Supabase, our clinical partner and the dispensing pharmacy are.

Company	Role	Health information
Supabase	Database	Yes
Stripe	Payments	No
Resend	Transactional email	No
Vercel	Hosting	No
Qualiphy	Clinical partner	Yes
ImprovMX	Support mail forwarding	Only what you write
Partner pharmacies	Dispensing	Yes

Show what each receives

Supabase · Database
Yes
Stores the platform's data — accounts, cart and order records, visit status, portal messages and audit logs.
Data:
Everything the platform holds, at rest.
Health information:
Yes — visit status, cart selections and your messages with your care team are stored here.
Stripe · Payments
No
Takes your payment and issues the refunds our refund policy promises. We never see or store your full card number.
Data:
Name, email, billing details, the amount and a reference to your order.
Health information:
No. Stripe sees a line-item reference and an amount, never a condition or medication name.
Resend · Transactional email
No
Sends receipts, one-time sign-in codes, visit links and status updates.
Data:
Your email address and the text of each message.
Health information:
No. Message subjects and bodies carry no condition or medication names, by design.
Vercel · Hosting
No
Serves the website and runs its server code. Its cookieless, aggregated analytics run on marketing pages only — never on the quiz, the cart, the checkout or the patient portal.
Data:
Standard request logs: IP address, browser type, the page requested, timing.
Health information:
No. Its request logs record the page requested, with an IP address — including a public catalogue page whose address names a medication — but no health detail about you appears in the web address of your quiz, cart, visit, order or portal pages.
Qualiphy · Clinical partner
Yes
Opens your visit with a licensed clinician from one of its medical groups, who takes your medical history and decides whether to prescribe. Returns the visit's status and outcome to us.
Data:
Your identity, contact details, state, the treatments in your cart, and everything you tell the clinician in the visit.
Health information:
Yes — this is where your medical history is taken and your medical record is held.
ImprovMX · Support mail forwarding
Only what you write
Forwards email sent to our support and privacy addresses to the mailbox our team reads.
Data:
Whatever you write to us, and your email address.
Health information:
Only what you choose to put in an email to us.
Partner pharmacies · Dispensing
Yes
Fill and ship a prescription a clinician has written. The pharmacies are listed, with what we have verified about each, on the Partner pharmacies page.
Data:
Your name, contact details, shipping address and the prescription, if one is written.
Health information:
Yes — the prescription itself, if prescribed.

4.What the notice will cover

How protected health information is used for treatment, payment and health care operations
When information may be disclosed without your authorization, and when your authorization is required
That what you tell the clinician in your visit is shared with the pharmacy filling a prescription, if one is written, and that the visit's status and outcome are returned to the platform so that payment and refunds can be handled
The group's duties, and how it will notify you of a breach

5.The rights it will describe

To inspect and obtain a copy of your medical record
To request an amendment to it
To request restrictions on how it is used or disclosed
To request that you be contacted by a particular method or at a particular address
To an accounting of certain disclosures
To a paper copy of the notice, on request
To complain — to the group's Privacy Officer, or to the US Department of Health and Human Services, Office for Civil Rights — without retaliation

6.In the meantime

The Privacy policy explains how this platform handles your information today, and the Consumer health data notice covers rights under state health-data laws. Questions can go to privacy@reviverxcare.com. A named Privacy Officer for the medical group will be published alongside the full notice.

7.Contact

Modest Habitat LLC, doing business as ReviveRxCare.

19533 NW 57th Ave, Miami Gardens, FL 33055.

privacy@reviverxcare.com