Privacy Policy

1. Introduction

Yuvia is a management services organization ("MSO") that provides non-clinical administrative, management, operational, technology, communications, scheduling, payment support, customer support, and related business services to independent Medical Practices.

"Medical Practice" means the independent professional entity that provides healthcare services through the Platform. Depending upon the applicable jurisdiction, the Medical Practice may be organized as a Professional Association (P.A.), Professional Corporation (P.C.), or another professional entity authorized under applicable law.

Healthcare services available through the Platform are provided exclusively by independent Medical Practices and their licensed healthcare professionals. Yuvia does not provide healthcare services, practice medicine, establish provider-patient relationships, make clinical decisions, prescribe medications, or determine whether an individual is an appropriate candidate for healthcare services.

This Privacy Policy explains Yuvia's privacy practices relating to the Platform and the information that Yuvia collects or processes in connection with its role as a management services organization.

This Privacy Policy is separate from the applicable Medical Practice's Notice of Privacy Practices. The applicable Medical Practice's Notice of Privacy Practices explains how the Medical Practice collects, uses, discloses, maintains, and protects Protected Health Information ("PHI") in accordance with the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"), its implementing regulations, and other applicable federal and state laws. Please read both documents carefully.

By accessing or using the Platform, creating an account, communicating with Yuvia, or otherwise providing information to Yuvia, you acknowledge that you have read and understand this Privacy Policy.

2. Scope

This Privacy Policy applies to personal information collected, received, maintained, used, disclosed, or otherwise processed by Yuvia through: the Yuvia website; mobile applications; patient portals; user accounts; appointment scheduling tools; customer support; communications with Yuvia; marketing communications; online forms; payment support; social media pages operated by Yuvia; surveys; promotional activities; and any other Platform or service that links to this Privacy Policy.

This Privacy Policy applies only to information handled by Yuvia in its capacity as a management services organization. It does not replace, modify, or limit: the applicable Medical Practice's Notice of Privacy Practices; applicable HIPAA requirements; any applicable Business Associate Agreement; applicable state healthcare privacy laws; any state-specific privacy notice; or any other legal notice that expressly supplements this Privacy Policy.

Healthcare services available through the Platform are governed by the applicable Medical Practice's Notice of Privacy Practices and applicable healthcare laws.

3. Information we collect

Depending upon how you interact with the Platform, Yuvia may collect the following categories of personal information.

A. Account information

Name; email address; telephone number; mailing address; username; password; account preferences; communication preferences; account settings; and other information necessary to establish and maintain your account.

B. Administrative information

Appointment requests; scheduling information; customer support requests; communications with Yuvia; Platform preferences; feedback; surveys; promotional participation; account activity; and other administrative information you voluntarily provide.

C. Payment information

Payments relating to services available through the Platform may be processed through independent payment processors. Yuvia generally does not receive or store complete payment card numbers. Yuvia may receive limited payment-related information, including payment confirmation, transaction identifiers, payment status, billing address, payment history, subscription status, refund status, and other limited payment metadata reasonably necessary to administer the Platform.

D. Device and technical information

When you use the Platform, Yuvia may automatically collect technical information, including IP address; browser type, version, and language; operating system and version; device identifiers and type; mobile device information; session identifiers; referring websites; pages viewed; links selected; dates and times of access; Platform interactions; diagnostic information; authentication logs; security events; crash reports; and performance information reasonably necessary to operate and secure the Platform.

E. Location information

Yuvia may collect approximate geographic location information derived from your IP address, information you voluntarily provide, or other lawful sources. Location information may be used to facilitate routing to the appropriate Medical Practice, determine Platform availability, comply with applicable laws, protect Platform security, and administer Platform operations.

F. Communications

Information contained in emails; secure messages; customer support requests; telephone communications; text messages where authorized; surveys; feedback; contact forms; and other communications you voluntarily submit.

G. Information received on behalf of the applicable Medical Practice

As part of the administrative, technology, operational, scheduling, communications, payment support, and related business services that Yuvia provides to independent Medical Practices, Yuvia may receive, create, maintain, transmit, or otherwise process certain information on behalf of the applicable Medical Practice, including PHI. When Yuvia does so, it acts solely as permitted by applicable federal and state law, any applicable Business Associate Agreement, and other applicable agreements with the Medical Practice. Nothing in this Privacy Policy transfers responsibility for patient care, medical records, HIPAA compliance, or clinical decision-making from the applicable Medical Practice to Yuvia.

H. Cookies and similar technologies

Yuvia may use cookies, web beacons, pixels, local storage, session identifiers, software development kits (SDKs), and similar technologies to operate the Platform, authenticate users, maintain secure sessions, improve functionality, analyze Platform performance, protect against fraud, improve user experience, and maintain Platform security. Yuvia also uses Cloudflare Turnstile to protect its forms from automated abuse; this processing is governed by the Cloudflare Turnstile Privacy Addendum.

I. Information from other sources

Yuvia may receive information from the applicable Medical Practice; service providers; identity verification providers; payment processors; communications providers; publicly available sources; business partners; and other lawful sources. Yuvia combines information only as permitted by applicable law and only to the extent reasonably necessary to provide, maintain, administer, secure, or improve the Platform and the administrative services it provides.

4. How we use information

Yuvia uses personal information for legitimate business, operational, legal, security, and administrative purposes consistent with this Privacy Policy and applicable law, including to:

• Operate, maintain, administer, and improve the Platform.
• Create, maintain, and manage user accounts, and authenticate users and protect account security.
• Facilitate appointment scheduling, communications, and administrative coordination with the applicable Medical Practice.
• Process payments and maintain payment records.
• Respond to customer service requests, provide technical support, and deliver transactional and administrative communications.
• Verify identity.
• Detect, investigate, prevent, and respond to fraud, abuse, unauthorized access, security incidents, or unlawful activity.
• Conduct internal business analytics, quality improvement, audits, reporting, compliance reviews, and risk management.
• Comply with applicable legal, regulatory, contractual, and accreditation obligations, and enforce the Terms of Service and other agreements.
• Protect the rights, safety, property, and security of Yuvia, the applicable Medical Practice, users, and others, and respond to lawful requests from governmental authorities.

Where permitted by applicable law, Yuvia may also use personal information to send newsletters, educational materials, product updates, service announcements, surveys, promotional communications, and other marketing materials. You may opt out of marketing communications at any time by following the unsubscribe instructions or by contacting Yuvia directly. Opting out does not affect transactional or legally required communications.

Yuvia does not use personal information to make clinical decisions. All determinations regarding whether an individual is an appropriate candidate for the services offered by the applicable Medical Practice are made exclusively by licensed healthcare professionals exercising their independent professional judgment.

5. How we share information

Yuvia does not sell your personal information. Yuvia may disclose personal information only as described in this Privacy Policy, as authorized by you, or as otherwise permitted or required by applicable law, to the following categories of recipients:

A. Applicable Medical Practices

Yuvia may share information with the applicable Medical Practice and its licensed healthcare professionals as reasonably necessary to facilitate scheduling, communications, administrative functions, payment support, and the healthcare services requested through the Platform. The applicable Medical Practice independently determines how PHI is collected, used, disclosed, maintained, and protected in accordance with its Notice of Privacy Practices and applicable law.

B. Service providers

Yuvia may disclose personal information to independent service providers performing services on Yuvia's behalf, including providers of cloud infrastructure and hosting; electronic health record support services; payment processing; communications; customer support; appointment scheduling; identity verification; cybersecurity; fraud prevention; analytics and website performance; software and technology services; document management; information technology support; professional consulting services; audit services; and other services reasonably necessary to operate the Platform. These service providers are contractually obligated to safeguard personal information and may use it only for authorized business purposes.

C. Business associate activities

When Yuvia receives, creates, maintains, transmits, or otherwise processes PHI on behalf of an applicable Medical Practice, Yuvia does so solely as permitted by HIPAA, applicable state law, any applicable Business Associate Agreement, and other applicable agreements with the Medical Practice.

D. Payment processing

Payments are processed by independent payment processors. Yuvia may receive transaction confirmations and limited payment-related information reasonably necessary to administer the Platform and support payment processing but generally does not receive or store complete payment card information.

E. Independent pharmacies and other authorized vendors

Where authorized by the applicable Medical Practice, Yuvia may facilitate administrative communications with independent pharmacies, shipping providers, laboratories, or other vendors involved in providing services requested through the Platform. Nothing in this Privacy Policy authorizes Yuvia to make clinical decisions regarding prescriptions, dispensing, laboratory testing, or healthcare services.

F. Legal compliance

Yuvia may disclose information when reasonably necessary to comply with applicable law; respond to subpoenas, court orders, warrants, or other legal process; cooperate with governmental authorities; investigate suspected fraud or unlawful activity; protect the rights, safety, or property of Yuvia, the applicable Medical Practice, users, or others; or enforce the Terms of Service or other agreements.

G. Business transactions

If Yuvia undergoes a merger, acquisition, financing, restructuring, bankruptcy proceeding, sale of assets, or other corporate transaction, personal information may be transferred as part of that transaction, subject to applicable confidentiality obligations and applicable law.

H. With your authorization

Yuvia may disclose personal information to other persons or entities when you request or authorize such disclosure.

6. Protected health information and business associate services

Healthcare services available through the Platform are provided exclusively by independent Medical Practices. The applicable Medical Practice is solely responsible for maintaining patient medical records and PHI in accordance with HIPAA, applicable state law, and its Notice of Privacy Practices. Yuvia is not the healthcare provider responsible for your medical care.

As part of the non-clinical administrative, operational, technology, communications, scheduling, payment support, customer support, and related business services Yuvia provides, Yuvia may receive, create, maintain, transmit, or otherwise process PHI on behalf of the applicable Medical Practice. When handling PHI, Yuvia acts solely as permitted by applicable federal and state law, pursuant to any applicable Business Associate Agreement, pursuant to applicable service agreements with the Medical Practice, and for the purpose of providing authorized non-clinical administrative and technology services.

Nothing in this Privacy Policy transfers responsibility for healthcare services, clinical decision-making, medical records, or HIPAA compliance from the applicable Medical Practice to Yuvia. Questions regarding your medical records, healthcare services, PHI, or HIPAA rights should be directed to the applicable Medical Practice. Additional information is contained in the applicable Medical Practice's Notice of Privacy Practices.

7. Children's privacy

The Platform is intended solely for individuals who are at least eighteen (18) years of age or otherwise legally authorized to request the services available through the Platform. Yuvia does not knowingly collect personal information directly from children under thirteen (13) years of age and does not knowingly permit children under eighteen (18) years of age to create accounts or request services through the Platform.

If Yuvia becomes aware that personal information has been collected from a child in violation of applicable law, Yuvia will take reasonable steps to delete such information as required by applicable law. Parents or legal guardians who believe that a child has submitted personal information to Yuvia may contact Yuvia using the contact information below.

8. Third-party websites and services

The Platform may contain links to third-party websites, applications, educational resources, pharmacies, laboratories, payment processors, social media platforms, or other third-party services that are not owned or controlled by Yuvia. This Privacy Policy applies only to information collected or processed by Yuvia. Yuvia does not control and is not responsible for the privacy practices, security practices, content, products, services, or policies of any third-party website or service. The inclusion of a link does not constitute an endorsement. Review each third-party privacy policy before providing personal information.

9. International users

The Platform is intended solely for individuals located within the United States and its territories where services are available. Yuvia does not intentionally market or provide Platform services to individuals located outside the United States. If you choose to access the Platform from outside the United States, you acknowledge that your personal information may be transferred to, processed in, and stored within the United States, where privacy laws may differ from those of your jurisdiction. You are responsible for ensuring that your access to and use of the Platform complies with the laws applicable in your jurisdiction.

10. Changes to this Privacy Policy

Yuvia may revise this Privacy Policy from time to time to reflect changes in applicable law, technology, business operations, the Platform, or Yuvia's privacy practices. Updated versions become effective upon posting to the Platform unless a different effective date is required by applicable law. The "Last updated" date at the top identifies the most recent revision. If changes materially affect how Yuvia collects, uses, or discloses personal information, Yuvia may provide additional notice through the Platform, by email, or by other means as required by applicable law. Your continued access to or use of the Platform after an updated Privacy Policy becomes effective constitutes your acknowledgment of the revised Privacy Policy.

11. Contact information

Questions regarding this Privacy Policy, Yuvia's privacy practices, or requests relating to personal information maintained by Yuvia may be directed to:

Yuvia Holdings LLC
5155 Corporate Way, Suite C, Jupiter, FL 33458
Email: hello@yuvia.health

Questions regarding healthcare services, medical records, PHI, HIPAA rights, or the applicable Medical Practice's Notice of Privacy Practices should be directed to the applicable Medical Practice that provided your wellness screening services. Questions regarding California or other applicable state privacy rights may also be submitted using the methods identified in the applicable California Privacy Notice or State-Specific Notices, where applicable.

This Privacy Policy is effective as of the "Last updated" date identified above and supersedes all prior versions relating to the same subject matter.