Privacy Policy

AlgoMash Health, Inc. (“AlgoMash,” “we,” “us”) provides a telehealth platform that connects you with independent licensed providers for evaluation and, where appropriate, treatment with GLP-1 medications. This Privacy Policy explains what personal information we collect, how we use and share it, and the choices and rights you have. It applies to algomash.com, our intake quiz, and our dashboard (collectively, the “Services”), and is incorporated into our Terms of Service.

Some of the information you share with us — including information about your health, weight, medical history, and treatment — is sensitive personal information. We describe below how we protect it and the additional rights that apply to it.

1. Information We Collect

Information you provide directly

• Account information: name, email address, phone number, password (stored as a salted hash), and information provided if you sign up with Google.
• Health and intake information: date of birth, sex, height, current and goal weight, state of residence, activity level, treatment preferences, diagnosed medical conditions, contraindications, current medications, pregnancy status, prior weight-loss attempts, and your complete responses to our intake questionnaire.
• Telehealth exam and prescription information: records of your evaluation with a licensed provider through our exam partner Qualiphy, including consultation notes, prescribing decisions, and prescription details.
• Payment information: billing name, billing address, and payment details, collected and processed directly by our payment processor, Stripe. We retain only limited identifiers (such as a Stripe customer or subscription ID) — we do not store your full card number.
• Communications: messages you send to support, and records of our correspondence with you.

Information collected automatically

• Device and usage data: IP address, browser type, device identifiers, pages viewed, and timestamps, collected through cookies and similar technologies as described in Section 7.

Information from third parties

• Verification, exam, and clinical decision data from Qualiphy; payment and fraud-signal data from Stripe; and delivery/tracking status from our fulfillment pharmacy.

2. How We Use Your Information

We use the information we collect to:

• create and manage your account, and operate the intake quiz, checkout, and dashboard;
• transmit your intake and health information to licensed providers through Qualiphy so they can evaluate you and make independent clinical and prescribing decisions;
• coordinate prescription fulfillment and shipping with our compounding pharmacy partners;
• process payments and manage your subscription, through Stripe;
• send transactional communications, including account verification, appointment/exam status, prescription and shipping updates, billing receipts, and password-reset emails;
• provide customer support and respond to your requests;
• detect, investigate, and prevent fraud, abuse, and security incidents;
• comply with legal, regulatory, tax, and recordkeeping obligations; and
• with your consent or where legally permitted, send you marketing communications, which you may opt out of at any time.

We do not use your health information for advertising, and we do not sell it.

3. How We Share Your Information

We share personal information only as necessary to provide the Services, and with the following categories of recipients:

• Licensed healthcare providers, through our telehealth exam partner Qualiphy, to evaluate and treat you;
• Compounding pharmacies, to fill and ship valid prescriptions;
• Payment processors (Stripe), to process payments and prevent fraud;
• Service providers who host our infrastructure, store our database, and deliver transactional email on our behalf, under contracts that restrict their use of your information to providing services to us;
• Professional advisors and successors, such as auditors, attorneys, insurers, or an acquirer in the event of a merger, financing, or sale of some or all of our assets, subject to appropriate confidentiality protections; and
• Legal and safety recipients, where we believe disclosure is required by law, regulation, legal process, or government request, or necessary to protect the rights, property, or safety of AlgoMash, our users, or the public.

We do not sell your personal information, and we do not share it with third parties for their own cross-context behavioral advertising.

4. Data Retention

We retain personal and health information for as long as your account is active and as needed to provide the Services. After you close your account, we retain information for as long as necessary to comply with legal, medical-recordkeeping, tax, and audit obligations, to resolve disputes, and to enforce our agreements, after which it is deleted or de-identified.

5. How We Protect Your Information

We maintain administrative, technical, and physical safeguards designed to protect your personal information, consistent with industry standards for handling sensitive health information. These include encryption of data in transit and at rest, access controls that limit access to personal and health information to personnel and providers who need it to perform their role, authentication safeguards on accounts, and monitoring for unauthorized access. No system is completely secure, and we cannot guarantee the absolute security of information transmitted to or stored by us. If we become aware of a breach affecting your personal information, we will notify you and applicable regulators as required by law.

6. Your Privacy Rights

Depending on where you live, you may have some or all of the following rights regarding your personal information:

• Access & portability — request a copy of the personal information we hold about you;
• Correction — request that we correct inaccurate or incomplete information;
• Deletion — request that we delete your personal information, subject to legal and recordkeeping exceptions (for example, we may need to retain prescription and billing records);
• Restriction / limit use of sensitive information — request that we limit certain uses of sensitive personal information, such as your health data;
• Opt out of marketing — unsubscribe from marketing emails using the link in any such email, without affecting transactional communications about your account or treatment; and
• Non-discrimination — we will not deny you the Services, charge you a different price, or provide a different level of service because you exercised a privacy right.

To exercise any of these rights, email support@algomash.com from your account email address. We will verify your request and respond within the time required by applicable law. You may designate an authorized agent to submit a request on your behalf where permitted by law; we may still require you to verify your identity directly. If we decline a deletion or access request, you may appeal by replying to our response.

California residents

California residents have the rights described above under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”), including the right to know the categories of personal information we collect and disclose (described in Sections 1 and 3), the right to delete, the right to correct, and the right to limit use of sensitive personal information. We do not sell or share personal information as those terms are defined under the CCPA.

Residents of other U.S. states

If you live in a state with a comprehensive privacy law (such as Virginia, Colorado, Connecticut, Utah, or others as they take effect), you have similar rights to those described above, and may appeal a decision on your request by contacting us at the email above.

Users outside the United States

The Services are directed to users in the United States. If you access the Services from outside the United States, you understand that your information will be transferred to and processed in the United States, which may have data protection laws different from those of your country.

7. Cookies & Similar Technologies

We use cookies and similar technologies to keep you signed in, remember your preferences, understand how the Services are used, and protect against fraud. You can control cookies through your browser settings; disabling cookies may affect the functionality of the Services.

8. Children’s Privacy

The Services are not directed to, and are not intended for use by, anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at support@algomash.com and we will take steps to delete it.

9. Third-Party Links

The Services may link to third-party websites or services we do not control. This Privacy Policy does not apply to those third parties, and we encourage you to review their privacy policies before providing information to them.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Services before the changes take effect. The “Effective date” above indicates when this Policy was last revised.

11. Contact Us

If you have questions about this Privacy Policy or want to exercise a privacy right, contact us at support@algomash.com.