ForHumanity Health, Inc. — Privacy Policy

Introduction

Welcome to ForHumanity Health, Inc. ("ForHumanity Health," "we," "us," or "our"). This Privacy Policy explains how we collect, use, share, and protect your information when you access or use our website, mobile applications, software, or related platforms, and any services, products, or content we provide (collectively, the "Platform" or "Service"). By accessing the Platform, creating an account, accepting our Terms & Conditions and this Privacy Policy, or using any part of the Service, you accept the practices described in this Privacy Policy.

Our Role (BrandCo / Platform)

ForHumanity Health operates a consumer health platform (sometimes called a "BrandCo" model, similar in structure to other U.S. telehealth platforms). We provide education, membership and account tooling, intake experiences, care coordination UX, billing support, and related non-clinical services.

Independent medical groups and licensed clinicians make care and prescribing decisions. Independent pharmacies compound, dispense, and ship medications. Those partners may be HIPAA-covered entities and publish their own Notices of Privacy Practices. ForHumanity Health is not your medical group or pharmacy and is not a HIPAA-covered entity for Platform and advertising data described in this Policy. See our HIPAA & Partner Privacy landing page and Terms & Conditions.

Who Can Use Our Service

Our Service is intended for individuals 18 years or older, or the legal minimum age in your jurisdiction. We do not knowingly collect personal information from children under 18. If we learn that we collected information from a minor, we will delete it unless otherwise required by law.

Protected Health Information (PHI) and HIPAA

When you create an account with ForHumanity Health, you provide information such as your name, email, address, and payment details. This information is not considered "Protected Health Information" (PHI) under HIPAA.

If you use our healthcare-related services (such as telehealth or pharmacy services), you may submit health or medical data that may qualify as PHI. ForHumanity Health is not a HIPAA-covered entity. Partner Pharmacies and Medical Groups may be HIPAA-covered entities.

Summary: general account and commercial Platform information is managed under this Privacy Policy. Clinical PHI held by partner medical groups and pharmacies is governed by those partners' Notices of Privacy Practices and applicable law. We do not send diagnosis, medication, lab results, email, phone number, name, or other PHI (or hashes derived from PHI) to advertising networks for conversion measurement.

Information We Collect

We collect information in four ways:

• Information You Provide: name, email, phone number, shipping/billing address, account credentials, payment details, government IDs, health or medical information, uploaded files, and customer-service communications.
• Information We Collect Automatically: IP address, device ID, browser type, pages visited, time spent on Platform, and location information.
• Information We Create or Infer: general location, likely preferences, and interests.
• Information from Third Parties: linked social-media accounts, public sources, and service partners.

Cookies and Tracking Technologies

We use cookies, mobile IDs, and web beacons to remember your preferences, authenticate and secure sessions, analyze Platform performance, and deliver targeted advertising. You can manage cookie settings via your browser or device.

How We Use Your Information

We use personal information to provide, operate, and maintain the Service; process payments and fulfill orders; improve and personalize your experience; communicate updates, promotions, and support; conduct research and performance analysis; measure advertising performance; and comply with legal obligations. We do not use clinical PHI for marketing or advertising network conversion measurement.

Advertising & Conversion Measurement

When you accept our Terms & Conditions and this Privacy Policy, you authorize ForHumanity Health to use and disclose limited non-PHI commercial signals to advertising and measurement partners (for example Google, Meta, and similar networks) so we can measure and improve ads that brought you to the Platform. This is the same BrandCo-style approach used by comparable U.S. telehealth platforms. We do not show a separate advertising checkbox; acceptance of Terms + Privacy is the consent gate.

Signals we may send server-side for conversion measurement (subject to technical fail-closed controls) include:

• Advertising click identifiers already present in your session (for example gclid / fbclid-style click IDs)
• A random, opaque order or payment-attempt hash that is not derived from your identity or health information
• Transaction amount and currency
• Generic event type such as add-to-cart, checkout started, purchase, or subscription rebill

We do not send to advertising networks for these purposes: email, phone number, name, shipping address used as an identity key, diagnosis, medications, lab or clinical questionnaire answers, product or content IDs that encode a clinical offering, or any hash derived from those fields.

You may opt out of sale/sharing for advertising purposes under applicable state law (including California CCPA/CPRA) and via Global Privacy Control (GPC) signals we honor. Opt-out and privacy-center requests block future advertising conversion sends; they do not require us to rewrite historical measurement records unless law or counsel requires otherwise. Certain state consumer-health laws (for example Washington MHMDA) may impose additional rules; where those rules are stricter, the stricter rule controls for residents of that state.

How We Share Your Information

We may share information with:

• Service providers (e.g., payment processors, shipping companies)
• Healthcare providers and pharmacies (for care coordination)
• Marketing and analytics partners, using the non-PHI commercial signals described under Advertising & Conversion Measurement
• Law-enforcement or regulatory agencies (when required)
• Business partners (for operational support)

Your Choices and Rights

You have options to control your personal information:

• Email/SMS communications (unsubscribe anytime)
• Cookie management (adjust settings through your browser)
• Global Privacy Control (GPC) signals (honored)
• Access, correct, or delete information through a verified request

Data Security

We take reasonable steps to protect your personal information using physical, technical, and administrative safeguards. However, no online system can guarantee absolute security. You are responsible for maintaining the confidentiality of your login credentials.

Data Retention

We retain personal information as long as necessary to provide services, comply with legal obligations, resolve disputes, or enforce agreements. Healthcare Providers and Pharmacies may have their own data-retention policies.

Payments and Transactions

Payments made through our Platform are processed via Stripe. Your payment information is governed by Stripe's Privacy Policy. ForHumanity Health is not responsible for Stripe's data practices.

California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights:

• Right to Know — request what personal information we collect, use, or share
• Right to Delete — request deletion of personal information, subject to exceptions
• Right to Correct — request correction of inaccurate personal information
• Right to Opt-Out of Sale or Sharing — opt out of personal information being sold or shared for advertising purposes
• Right to Limit Use of Sensitive Personal Information — restrict use to necessary business purposes
• Right to Non-Discrimination — we will not retaliate against you for exercising your rights

We do not sell or share clinical PHI with advertising networks. Limited non-PHI commercial signals for conversion measurement are described above and are subject to your right to opt out of sale or sharing. You can exercise your California rights by emailing privacy@forhumanity.co, using available Privacy-Request forms, or enabling the GPC setting in your browser.

Jurisdictional Limits

Our services are intended for users located in the United States and are governed by U.S. law.

Contact Us

If you have any questions about this Privacy Policy, your privacy rights, or how we handle your information, please contact us: