Privacy Policy
Last updated: February 2026
1. Information We Collect
MedRx collects personal and health information necessary to provide telehealth services, including name, contact information, date of birth, medical history, and health conditions relevant to your treatment.
When you use the MyHealthAlly app (included with all MedRx programs), we may also collect device information (device type, operating system version), app usage data (feature interactions, session duration), photos you upload for clinical review (e.g., skin track), and push notification tokens for appointment reminders.
2. How We Use Your Information
We use your information to provide medical consultations, process prescriptions, communicate about your care, send appointment reminders, and comply with legal requirements. We do not sell your personal information.
3. Information Sharing
We may share your information with pharmacies to fulfill prescriptions, laboratories for required testing, and as required by law. All partners are bound by confidentiality agreements. We also use the following service providers:
- Stripe — payment processing (billing address, payment method)
- Resend — transactional email delivery (email address, name)
- Supabase — secure data hosting and authentication
- MyHealthAlly — clinical communication and monitoring platform
These providers process data only as necessary to perform their services and are bound by their own privacy policies and our data processing agreements.
4. Data Security
We implement industry-standard security measures including encryption in transit (TLS) and at rest, secure servers, role-based access controls, and audit logging to protect your personal and health information.
5. Data Retention
We retain your health records for a minimum of seven (7) years from the date of your last visit, or as required by applicable state and federal law. Account data is retained as long as your account is active. You may request deletion of non-medical personal data at any time; medical records may be retained as required by law.
6. Your Rights
You have the right to access, correct, and request deletion of your personal information. You may also opt out of non-essential communications at any time. Contact us to exercise these rights.
California residents (CCPA/CPRA): You have additional rights including the right to know what personal information is collected and how it is used, the right to request deletion, and the right to opt out of the sale of personal information. MedRx does not sell personal information. To submit a request, contact us using the information below.
7. Children's Privacy
MedRx services are available only to individuals aged 18 and older. We do not knowingly collect information from children under 18. If you believe we have inadvertently collected such information, please contact us immediately.
8. Changes to This Policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. Continued use of our services after changes constitutes acceptance.
9. Contact Us
For questions about this Privacy Policy, contact us at:
Email: privacy@medrx.co
MedRx by Dr. A — Ohimaa HI, Hawaii
MyHealthAlly App — Included With Your Program
All MedRx programs include the MyHealthAlly app at no extra cost. Use it for video visits, secure messaging, photo check-ins, and treatment tracking.