Privacy Policy

Effective Date: April 6, 2026

1. Introduction

LeanPathMD ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our telehealth platform at leanpathmd.com and our mobile applications.

We comply with the Health Insurance Portability and Accountability Act (HIPAA) for protected health information (PHI) and applicable state privacy laws.

2. Information We Collect

  • Personal identifiers: Name, email address, phone number, date of birth, mailing address
  • Health information: Medical history, current medications, height, weight, symptoms, and other information you provide in your intake form
  • Payment information: Processed securely by Stripe — we do not store full card numbers
  • Communications: Messages between you and your Provider through our platform
  • Usage data: IP address, browser type, pages visited, and device information
  • Injection and weight logs: Health tracking data you enter in our mobile app

3. How We Use Your Information

  • To facilitate your telehealth consultation with licensed Providers
  • To process payments for services
  • To send prescription information to partner pharmacies
  • To send you appointment reminders, prescription updates, and care-related notifications via email and SMS
  • To improve our platform and services
  • To comply with legal obligations

4. How We Share Your Information

We do not sell your personal information. We share your information only as follows:

  • Healthcare Providers: Licensed NPs and physicians who review your intake and provide care
  • Pharmacies: To fulfill prescriptions written by your Provider
  • Payment processors: Stripe processes payments on our behalf
  • Infrastructure providers: Supabase (database), Google Cloud (hosting), Twilio (SMS) — all under data processing agreements
  • Legal requirements: When required by law, court order, or government authority

5. HIPAA and Protected Health Information

Your health information is Protected Health Information (PHI) under HIPAA. We use and disclose your PHI only as permitted by HIPAA and as described in our Notice of Privacy Practices. You have the right to:

  • Access and obtain a copy of your PHI
  • Request corrections to your PHI
  • Request restrictions on how we use your PHI
  • Receive an accounting of disclosures of your PHI

To exercise these rights, contact us at support@leanpathmd.com.

6. Data Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, row-level security on our database, and access controls. However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your health records for a minimum of 7 years from your last interaction, or longer as required by applicable state law. You may request deletion of non-health account data by contacting us.

8. SMS Communications

By providing your phone number, you consent to receive SMS notifications related to your care, including consultation status updates, prescription notifications, and appointment reminders. Message and data rates may apply. Reply STOP to opt out at any time.

9. Children's Privacy

Our Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us immediately.

10. Your Rights (California Residents)

California residents have additional rights under the CCPA, including the right to know what personal information is collected, the right to delete personal information, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at support@leanpathmd.com.

11. Cookies

We use essential cookies to maintain your session and preferences. We do not use third-party advertising cookies. You may disable cookies in your browser settings, but some features may not function properly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email. Continued use of the Platform after changes constitutes acceptance.

13. Contact Us

For privacy questions or to exercise your rights:

LeanPathMD LLC
5900 Balcones Drive, Suite 100
Austin, TX 78731
Email: support@leanpathmd.com