Privacy Policy

1. What information we collect

We collect what we need to provide you with safe, personalized care — and nothing more. This includes:

• Account information: name, email, phone, date of birth, billing address.
• Health information: symptoms, medical history, medications, lab results, and clinical notes from your provider.
• Payment information: processed securely by our payment processor — we do not store your full card number.
• Technical information: IP address, browser, and device data needed to keep the site secure and working.

2. How we use your information

• To deliver your medical care: provider review, prescriptions, refills, and clinical follow-up.
• To ship medication from our partner pharmacy.
• To process payments and send order confirmations.
• To keep the platform secure, prevent fraud, and comply with the law.
• To send you product and care updates — you can unsubscribe at any time.

3. How we share your information

We never sell your personal or health information. We share it only with parties that need it to provide your care:

• Your treating Kindr provider and our clinical support team.
• Our partner compounding pharmacy to fill and ship your prescription.
• Our payment processor and shipping carriers.
• Service providers (hosting, analytics, security) under HIPAA Business Associate Agreements where applicable.
• When required by law (court order, subpoena) or to protect health and safety.

4. HIPAA and protected health information

kindr Health is a HIPAA-covered telehealth service. Your protected health information (PHI) is handled under our HIPAA Notice of Privacy Practices, which describes your specific rights and the limits on how PHI can be used and disclosed.

5. Cookies, analytics, and tracking

We use a small number of cookies and analytics tools to keep the site working and understand which pages help patients most. We do not use third-party advertising trackers on pages where you submit health information.

Categories we use:

• Strictly necessary — required for the site to function (session, security, load balancing). Always on.
• Analytics — Google Analytics 4 (loaded via Google Tag Manager) measures page views, traffic sources, and aggregate user behavior. IP addresses are anonymized. Only enabled when you accept analytics in our cookie banner.
• Marketing — measurement of advertising effectiveness on partner platforms (e.g., Meta, Google Ads). Only enabled when you accept marketing in our cookie banner.

Consent and Google Consent Mode v2: Our cookie banner uses Google Consent Mode v2. Until you make a choice, ad and analytics storage default to denied. Your selections are stored in your browser under kindr_cookie_consent_v1 and are sent to Google's tagging system to control how Google products may use cookies. You can change your choices anytime by clearing the cookie or contacting us.

Third parties that may set cookies when enabled: Google LLC (Analytics, Tag Manager, Ads). Each operates under its own privacy policy.

You can also disable cookies in your browser settings. Disabling strictly necessary cookies will break parts of the site.

6. Data retention

We retain medical records for the period required by state and federal law — typically a minimum of 7 years from the date of last service, longer in some states. Account and billing data are retained as long as your account is active and as needed for tax, legal, and audit purposes.

7. Your rights

• Access a copy of your medical record.
• Request a correction to your information.
• Request restrictions on how we use your information for non-treatment purposes.
• Request a record of disclosures.
• Where applicable under your state's privacy law (CCPA/CPRA, VCDPA, etc.), request deletion or data portability.

8. SMS Communications

Opt-In: By providing your phone number and checking the SMS consent checkbox during registration at kindr.health, you expressly consent to receive text messages from kindr Health. You may also opt in by texting START to our designated SMS number. Consent is never assumed or pre-checked.

Message Types: You may receive SMS messages including appointment and provider review reminders, prescription shipment notifications, account and subscription updates, intake follow-up messages, wellness education content related to menopause and hormone health, two-factor authentication codes, and responses to your inbound inquiries.

Message Frequency: Message frequency varies based on your account activity and preferences. You may receive up to 4 informational or wellness messages per month. Transactional messages — including shipping notifications, appointment reminders, and verification codes — are sent as triggered by your account activity.

Rates: Message and data rates may apply. Check with your mobile carrier for details.

Non-Sharing Policy: kindr Health does not share, sell, rent, or disclose mobile phone numbers to third parties for marketing purposes. Your phone number is used solely for direct communication between kindr Health and you as described in this policy.

Opt-Out: You may opt out of SMS messages at any time by replying STOP to any message from kindr Health. You will receive one confirmation message and no further messages will be sent. To re-subscribe, text START to our SMS number.

Help: Reply HELP to any kindr Health SMS message to receive our support contact information. You may also reach us at support@kindr.health.

HIPAA and SMS: kindr Health is committed to protecting your health information. SMS messages sent by kindr Health do not contain protected health information (PHI). All clinical communications — including your treatment plan, lab results, and provider messages — are delivered exclusively through our secure HIPAA-compliant patient portal.

9. Contact us about privacy

Email our Privacy Officer at privacy@kindr.health. We respond to verified requests within 30 days.