Privacy policy

Modest Habitat LLC, doing business as ReviveRxCare ("ReviveRxCare", "we", "us"), 19533 NW 57th Ave, Miami Gardens, FL 33055, operates this website, the cart and checkout, and the patient portal, and is responsible for the personal information described in this policy. Privacy questions and requests go to privacy@reviverxcare.com.

Three documents cover your information, and each has a job. This Privacy policy covers everything the platform collects. The Notice of Privacy Practices is the HIPAA notice about your medical record, which belongs to the medical group whose clinician treats you. The Consumer health data notice sets out rights under Washington's My Health My Data Act, Nevada's consumer health data law and similar state laws, which require a separate notice. Where they overlap, the more protective statement applies.

Identity and contact

your name, email address, date of birth, phone number, and a shipping address where medication ships to you.

Location

the state you tell us you are in. It decides whether we can see you at all and which clinician can see you, so it is the first thing we ask.

Quiz answers

your age, your state, and one or two screening questions that change which treatment we suggest — for example whether you take nitrates, or whether you are pregnant or breastfeeding. The quiz is a recommender, not a medical assessment; it is not a medical record and nobody treats it as one. Your medical history is taken by the clinician in your visit, through our clinical partner, and we receive the outcome of the visit so we can handle payment and your order.

Cart and orders

the treatments you select, the plan and dose step, the price, and the status of each visit and order.

Payment

handled by Stripe. We receive a confirmation, the card brand and its last four digits; we never see or store your full card number.

Visit information

from our clinical partner, the status and outcome of each visit — opened, completed, whether a prescription was written, and the medication and dose if one was — and the messages you exchange with your care team in the portal.

Account and technical

the one-time sign-in codes we send, the times you sign in, and the standard server logs our hosting provider keeps (IP address, browser type, the page requested). No analytics tool records the pages you visit inside the quiz, the cart or the portal.

We do not collect anything from your device beyond what the website needs to work, we do not buy data about you from anyone, and we do not infer health conditions from your browsing.

• To decide whether and where we can see you.
• To open a visit with a clinician licensed in your state and pass them what they need to see you.
• To take payment and to issue the refunds our Refund policy promises.
• To show you the status of your visit and order, and to let you message your care team.
• To send you transactional messages about a visit you have paid for.
• To keep the platform secure, detect fraud and abuse, and meet our legal obligations.
• And to improve the marketing pages using aggregated, cookieless analytics that never touch the quiz, the cart or the portal.

We use your information for these purposes because you asked us to provide the service, because the law requires some of it, and because we have a legitimate interest in running a secure and honest platform. We do not use health information for marketing, and we do not use it to train advertising or machine-learning systems.

We share information only with the companies below, each for the stated purpose, and with nobody else except as the law requires. We do not sell personal or health information, and we do not share it for cross-context behavioral advertising.

• Supabase · Database

  Yes

  Stores the platform's data — accounts, cart and order records, visit status, portal messages and audit logs.

  Data:

  Everything the platform holds, at rest.

  Health information:

  Yes — visit status, cart selections and your messages with your care team are stored here.

• Stripe · Payments

  No

  Takes your payment and issues the refunds our refund policy promises. We never see or store your full card number.

  Data:

  Name, email, billing details, the amount and a reference to your order.

  Health information:

  No. Stripe sees a line-item reference and an amount, never a condition or medication name.

• Resend · Transactional email

  No

  Sends receipts, one-time sign-in codes, visit links and status updates.

  Data:

  Your email address and the text of each message.

  Health information:

  No. Message subjects and bodies carry no condition or medication names, by design.

• Vercel · Hosting

  No

  Serves the website and runs its server code. Its cookieless, aggregated analytics run on marketing pages only — never on the quiz, the cart, the checkout or the patient portal.

  Data:

  Standard request logs: IP address, browser type, the page requested, timing.

  Health information:

  No. Its request logs record the page requested, with an IP address — including a public catalogue page whose address names a medication — but no health detail about you appears in the web address of your quiz, cart, visit, order or portal pages.

• Qualiphy · Clinical partner

  Yes

  Opens your visit with a licensed clinician from one of its medical groups, who takes your medical history and decides whether to prescribe. Returns the visit's status and outcome to us.

  Data:

  Your identity, contact details, state, the treatments in your cart, and everything you tell the clinician in the visit.

  Health information:

  Yes — this is where your medical history is taken and your medical record is held.

• ImprovMX · Support mail forwarding

  Only what you write

  Forwards email sent to our support and privacy addresses to the mailbox our team reads.

  Data:

  Whatever you write to us, and your email address.

  Health information:

  Only what you choose to put in an email to us.

• Partner pharmacies · Dispensing

  Yes

  Fill and ship a prescription a clinician has written. The pharmacies are listed, with what we have verified about each, on the Partner pharmacies page.

  Data:

  Your name, contact details, shipping address and the prescription, if one is written.

  Health information:

  Yes — the prescription itself, if prescribed.

The clinician who sees you belongs to a medical group working with our clinical partner. We publish the names of the medical groups on our Providers page as soon as we hold them in writing. Until then, you can ask us which medical group is responsible for your care, and we will ask our clinical partner for you.

We may also disclose information when the law requires it — a subpoena, a court order, a lawful request from a regulator, or a report we are obliged to make — and to professional advisers under a duty of confidentiality. If Modest Habitat LLC is sold or merges, your information moves with the business, under this policy, and you will be told.

• No advertising pixels, social-media tags or third-party analytics run on the quiz, the cart, the checkout or the patient portal.
• The analytics on our marketing pages are cookieless and aggregated.
• No health detail about you appears in the web address of your quiz, cart, visit, order or portal pages, so nothing about your care leaks into browser history, referrer headers or server logs.
• We do not sell data.
• We do not put condition or medication names in email subjects or bodies.
• And we never send your browsing to our clinical partner from the marketing site.

We use strictly necessary cookies and browser storage only: to keep you signed in to the patient portal once you have entered your one-time code, and to keep your cart and checkout together through a payment. Neither is used to track you across other sites, and neither is shared with advertisers. Our hosting provider's analytics on marketing pages work without cookies, by counting page views in aggregate. Because we set no optional cookies there is no cookie banner to click through; if that ever changes, this policy and the site change first.

Whoever you are, you can ask what we hold about you and get a copy of it, correct what is wrong, ask us to delete it, ask us to stop using it for a particular purpose, and take your data with you in a portable format. Write to privacy@reviverxcare.com. We verify that a request is really from you — usually by sending a code to the email address on your account — and we respond within 45 days, or tell you why the law allows us longer.

Deletion has a limit we will always explain. Once a clinician has reviewed a visit, the record of that visit is a medical record that the clinician's medical group must keep for the period its state's law requires, and payment records must be kept for tax and accounting law. We delete everything else, and we tell you which is which.

State rights: California residents have the right to know, delete and correct, to opt out of sale or sharing (we do neither), and not to be discriminated against for exercising those rights.

Colorado, Connecticut, Virginia, Texas, Oregon and other states give similar rights, including the right to appeal a refused request by writing to the same address.

Washington and Nevada residents — and anyone whose consumer health data we hold — have the rights in the Consumer health data notice. The platform serves patients in the United States only.

You will not get worse service for exercising a right.

Account data

while your account is open, and for a limited period afterwards so we can honour refunds and answer disputes.

Visit and order records

for as long as the medical record they relate to must be kept, because a refund, a dispute or a clinical question can arise for as long as that record exists.

Payment records

seven years, for tax and accounting law.

Server and security logs

a short period, for security and troubleshooting, then deleted or aggregated.

Quiz answers

they travel to a visit only when you pay for it; a quiz that is declined clears them from your device rather than leaving them behind.

Information is encrypted in transit, and our database provider encrypts it at rest. Access inside ReviveRxCare is role-based and logged: staff see what their role needs and nothing more, and every use of the admin tools is recorded. Sign-in to the portal uses one-time codes rather than passwords, so there is no password of yours for us to lose. No system is perfectly secure; if a breach affects you, we will tell you without undue delay, and as the law requires.

The platform is for adults. You must be 18 to use it; we do not knowingly collect information from anyone under 18; and if we learn that we have, we delete it and close the account. A parent or guardian who believes a child has used the platform should write to privacy@reviverxcare.com.

Email and text messages are not encrypted end to end, and other people with access to your inbox or phone may be able to read what we send. That is why our messages carry no condition or medication names, and why anything clinical is said in the patient portal or in your visit. You may opt out of non-essential messages at any time; we need to remain able to message you about a visit you have paid for.

This policy is version 1.4. When you agree to it at checkout we record the version you were shown. A material change is announced by email to account holders, and by a new version number and date on this page, before it takes effect.

Modest Habitat LLC, doing business as ReviveRxCare. 19533 NW 57th Ave, Miami Gardens, FL 33055. Privacy matters: privacy@reviverxcare.com. Everything else: support@reviverxcare.com. A human reads every message.