1.Overview
This Privacy Policy explains how Apsu, ("Apsu," "we," "us," or "our") collects, uses, shares, and protects information about you when you visit our website, use our applications, or otherwise use our services (the "Services"). It also describes the privacy choices and rights available to you.
By using the Services, you agree to this Privacy Policy. If you do not agree, please do not use the Services. This policy is part of, and should be read together with, our Terms of Use.
2.What this policy covers
Apsu is a technology platform that connects you with independent, licensed healthcare providers and licensed pharmacies. This policy covers the information Apsu handles as the operator of the platform.
It does not govern how the independent providers and pharmacies handle your protected health information (PHI) in the course of treating you or filling your prescriptions. Those independent professionals maintain their own privacy practices and notices, which apply to the medical care and pharmacy services they provide. Where this policy and a provider's or pharmacy's notice both apply to the same information, the provider's or pharmacy's notice governs the PHI they hold.
3.Information we collect
Information you provide:
Account and contact details — such as your name, email address, phone number, shipping address, and date of birth.
Health information — the responses you submit during intake and consultation, such as your medical history, conditions, medications, and goals. You provide this so that a licensed provider can evaluate whether treatment is appropriate; once shared with a provider, it also becomes part of the medical record they maintain.
Payment information — your payment card or similar details, which are collected and processed by our third-party payment processor; Apsu does not store full card numbers.
Communications — messages you send us or your provider through the platform, and support requests.
Information we collect automatically:
Device and usage data — such as IP address, browser and device type, pages viewed, links clicked, and the dates and times of your visits.
Approximate location — derived from your IP address, used in part to confirm you are in a state where the Services are offered.
Cookies and similar technologies — see "Cookies & tracking" below.
Information from other sources:
Providers and pharmacies — status updates about your consultation, prescription, and order fulfillment.
Service providers — such as our payment processor, analytics providers, and shipping carriers.
Referrals and marketing partners — for example, if you reach us through a referral link or promotion.
4.How we use information
We use the information we collect to:
provide, operate, and maintain the Services, and connect you with licensed providers and pharmacies;
facilitate consultations, prescriptions (where a provider determines they are appropriate), and order fulfillment and shipping;
process payments and issue any refunds;
communicate with you about your account, orders, and care, and respond to your requests;
provide the AI translation feature during the asynchronous portion of your consultation (see "AI translation");
improve, personalize, and develop the Services, including through analytics;
protect the security and integrity of the Services and prevent fraud or misuse;
comply with legal obligations and enforce our Terms of Use; and
with your consent where required, send you marketing communications.
7.Analytics & advertising
We use analytics providers to understand how visitors use the Services so we can improve them. These providers process usage data on our behalf. We do not share your personal information with third parties for their own cross-context behavioral advertising, and we do not use your health information to target advertising. If this changes, we will update this policy and provide the choices required by law before doing so.
8.AI translation
Apsu offers AI-assisted translation during the asynchronous (messaging-based) portion of your consultation, so you can communicate with your provider in your preferred language. To provide this feature, the relevant messages are processed by our translation service provider under contract, solely to deliver the translation. Automated translation may not be perfectly accurate; the English-language version is the official version, and you can ask your provider for clarification if anything is unclear. The Apsu website and intake form are currently provided in English only.
9.Your privacy rights
Depending on where you live, you may have some or all of the following rights regarding the personal information Apsu holds about you:
Access — to know what personal information we have collected and how we use and share it.
Correction — to correct inaccurate personal information.
Deletion — to request deletion of your personal information, subject to legal exceptions (for example, records we must keep by law).
Portability — to receive a copy of certain information in a portable format.
Opt out — of any "sale" or "sharing" of personal information and of targeted advertising, to the extent these apply.
Limit use of sensitive information — where provided by law.
Non-discrimination — we will not discriminate against you for exercising your rights.
Note that requests affecting your medical records held by the independent providers or pharmacies may need to be directed to them, and some health information is subject to separate laws and retention requirements.
10.How to exercise your rights
To make a request, contact us at support@apsuhealth.com. We will verify your request, which may require confirming information we already have about you. You may use an authorized agent to submit a request where the law allows, and we may ask the agent to provide proof of authorization.
We will respond within the time required by applicable law. If we decline your request, you may have the right to appeal; instructions will be provided in our response. There is no charge for a reasonable request.
11.Data retention
We keep personal information for as long as needed to provide the Services, comply with our legal, tax, and recordkeeping obligations, resolve disputes, and enforce our agreements. Medical records maintained by the independent providers are retained according to the periods that apply to those records under law. When information is no longer needed, we delete it or de-identify it.
12.Data security
We use reasonable administrative, technical, and physical safeguards designed to protect your information, such as encryption in transit, access controls, and vendor security requirements. No system is perfectly secure, however, and we cannot guarantee absolute security. You also play a role — keep your account credentials confidential and notify us promptly if you believe your account has been compromised.
13.Children's privacy
The Services are intended for adults 18 and older and are not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will take appropriate steps to delete it.
14.State privacy disclosures
Residents of California and certain other states (such as Virginia, Colorado, Connecticut, and others with comprehensive privacy laws) have the rights described in "Your privacy rights" and may exercise them as described in "How to exercise your rights."
California
Under California Civil Code § 1789.3, California residents may report complaints to the Complaint Assistance Unit of the Division of Consumer Services of the California Department of Consumer Affairs in writing at 1625 North Market Blvd., Suite N-112, Sacramento, CA 95834, or by phone at (800) 952-5210.
15.U.S. only
The Services are intended for people located in the United States, and information we collect is processed in the United States. If you access the Services from outside the United States, you do so on your own initiative.
16.Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and provide notice as required by law. Your continued use of the Services after an update takes effect means you accept the updated policy.
17.Contact
If you have questions about this Privacy Policy or your information, contact us at: support@apsuhealth.com.
