Privacy Policy

1. Who This Applies To

This Privacy Policy explains how Rul Health LLC (“Rūl,” “we,” “us”) collects, uses and shares personal information when you visit rulhealth.com or use our services.

An important distinction. Health information you share with a treating provider or a dispensing pharmacy is protected health information held by those HIPAA-covered entities and is governed by HIPAA and by their own notices of privacy practices. Information you give us before or outside of that clinical relationship — for example, browsing the site, joining our mailing list, or using a calculator — is generally not HIPAA-protected, and is governed by this policy and by applicable state consumer-health-privacy law.

2. Information We Collect

Information you give us. Name, email address, phone number, date of birth, sex assigned at birth, shipping address, payment information (processed by our payment processor, not stored by us), height and weight, health history and assessment responses, government identification and photographs where required for prescribing, your signature, and anything you write to us.

Information collected automatically. IP address, device and browser type, pages viewed, referring URL, and similar technical data collected through cookies and similar technologies. See Section 6.

Information from others. Information from the providers, pharmacies and laboratories that deliver clinical services, and from service providers such as identity-verification and payment vendors.

3. How We Use Information

To route your assessment to a licensed provider and support your care; to process and fulfil orders; to verify identity and prevent fraud; to communicate with you about your order, account and care; to operate, secure and improve the Services; to send marketing communications where you have consented; and to comply with legal obligations.

We do not use assessment responses or health information for advertising.

4. How We Share Information

With the independent providers, pharmacies and laboratories involved in your care. With service providers acting on our behalf under contract — hosting, payments, identity verification, email delivery, customer support — who may use the information only to perform services for us. With legal or regulatory authorities where required by law or to protect rights and safety. With a successor entity in the event of a merger, acquisition or sale of assets.

We do not sell your personal information for money. We also do not use your assessment responses, health history or any information about your treatment for advertising, and we do not disclose that information to advertising networks.

Some state privacy laws define “sale” and “sharing” broadly enough to cover analytics and advertising cookies. Where you consent to those cookies, that activity may fall within those definitions. You can withdraw consent at any time using the Consent Preferences control described in Section 6, and doing so stops it going forward.

5. Consumer Health Data

Several states regulate consumer health data separately and more strictly than general personal information — most notably Washington's My Health My Data Act, Nevada's SB 370, and Connecticut's health-data amendments. These laws can apply to information that merely suggests you are seeking a health service, including data collected before any clinical relationship begins.

We treat the information you give us in an assessment, and anything that indicates you are seeking a health service, as consumer health data. We collect it only to route your assessment to a licensed provider and support your care, we do not use it for advertising, and we do not sell it. We ask for your consent before collecting it, and you can withdraw that consent by emailing support@rulhealth.com.

Our Consumer Health Data Privacy Notice sets out in full what consumer health data we collect, who we share it with, and how to access, withdraw consent to, or delete it. That notice governs consumer health data; this policy governs everything else.

6. Cookies And Similar Technologies

We use cookies and similar technologies that are strictly necessary to operate the site, and — where you consent — cookies for analytics and marketing.

You can manage non-essential cookies at any time through our Consent Preferences control, and through your browser settings. Blocking strictly necessary cookies may break parts of the site.

Analytics and marketing cookies are off until you turn them on. We do not place any advertising or third-party analytics tag on pages where you complete an assessment or manage treatment.

7. Your Choices

Marketing email. Unsubscribe from any marketing message, or email support@rulhealth.com. We will still send transactional messages about your orders and care.

Text messages. Reply STOP to opt out; reply HELP for help. Message and data rates may apply.

Cookies. Use the Consent Preferences control described above.

8. Your State Privacy Rights

Depending on where you live, you may have the right to know what personal information we hold about you, to obtain a copy of it, to correct it, to delete it, to opt out of targeted advertising or of any sale or sharing of your personal information, to limit the use of sensitive personal information, and not to be discriminated against for exercising these rights.

California residents have these rights under the CCPA as amended by the CPRA. Residents of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana and other states with comprehensive privacy laws have comparable rights under their own statutes.

To exercise a right, email support@rulhealth.com with the subject line “Privacy Request.” We will verify your identity before acting. You may use an authorized agent. We will respond within the timeframe your state's law requires.

9. Security And Retention

We use administrative, technical and physical safeguards designed to protect personal information. No system is perfectly secure, and we cannot guarantee absolute security.

We retain personal information for as long as needed for the purposes described here and as required by law. Medical records held by treating providers and pharmacies are retained according to those entities' obligations under state and federal law, which generally require retention for a period of years and which may override a deletion request.

10. Children

The Services are intended for adults 18 and over. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact support@rulhealth.com and we will delete it.

11. Changes And Contact

We may update this policy. Material changes will be reflected in the effective date above and, where required, communicated to you.

Rul Health LLC. Privacy enquiries: support@rulhealth.com.