Privacy Policy

1. Introduction

Thryvwell Health LLC ("Thryvwell," "we," "us," or "our") is committed to protecting the privacy of our patients, their families, and visitors to our website. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with our platform.

By accessing or using our services, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our services.

2. Information We Collect

Personal Information:

• Name, date of birth, and contact information (email, phone, address)
• Parent/guardian information for minor patients
• Insurance information (for prior authorization purposes only)
• Payment and billing information

Protected Health Information (PHI):

• Medical history, diagnoses, and treatment records
• Laboratory results and clinical measurements
• Medication information and prescriptions
• Telehealth visit recordings (if applicable, with consent)
• Health-related data submitted through our platform

Automatically Collected Information:

• Device type, browser type, and operating system
• IP address and approximate geographic location
• Pages visited, time spent, and navigation patterns
• Cookies and similar tracking technologies

3. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve our clinical services
• Process payments and manage your account
• Communicate with you about appointments, treatment, and care updates
• Submit prior authorizations to insurance carriers on your behalf
• Coordinate care with your child's primary care physician (with consent)
• Send administrative communications (appointment reminders, form requests)
• Comply with legal obligations and regulatory requirements
• Improve our website, services, and patient experience

4. HIPAA Compliance

As a healthcare provider, Thryvwell Health LLC complies with the Health Insurance Portability and Accountability Act (HIPAA) and its implementing regulations. Your Protected Health Information (PHI) is handled in accordance with our Notice of Privacy Practices, which is provided separately during the intake process.

We maintain administrative, technical, and physical safeguards to protect PHI against unauthorized access, use, or disclosure. Our electronic health records and communication systems are HIPAA-compliant and encrypted.

5. Information Sharing and Disclosure

We do not sell your personal information. We may share information with:

• Healthcare providers: For treatment coordination, referrals, and care continuity
• Insurance carriers: For prior authorization of prescribed medications
• Service providers: HIPAA-compliant vendors who assist in delivering our services (e.g., electronic health records, payment processing, laboratory services)
• Legal requirements: When required by law, regulation, or legal process
• With your consent: For any purpose you specifically authorize

All third-party service providers with access to PHI are bound by Business Associate Agreements (BAAs) as required by HIPAA.

6. Data Security

We implement industry-standard security measures to protect your information, including encryption in transit and at rest, access controls, audit logging, and regular security assessments. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain medical records in accordance with applicable state and federal laws. For patients who are minors, records are retained for the period required by Georgia law (generally until the patient reaches the age of majority plus the applicable statute of limitations). Non-medical personal information is retained only as long as necessary to fulfill the purposes described in this policy.

8. Your Rights

You have the right to:

• Access your (or your child's) medical records
• Request corrections to inaccurate information
• Request restrictions on certain uses and disclosures of PHI
• Receive an accounting of disclosures of PHI
• Opt out of marketing communications at any time
• Request deletion of non-medical personal information

To exercise any of these rights, contact us at hello@thryvwellhealth.com.

9. Children's Privacy

Our services are designed for adolescents and young adults ages 12–26 residing in all 50 United States. For patients under 18, a parent or legal guardian must supervise and consent to treatment. We do not knowingly collect personal information directly from minors without verified parental consent.

Eligibility Checker: Our eligibility screening tool is a general educational resource that operates entirely within your browser. It does not collect, store, or transmit any personal health information (PHI) to our servers. No account is created, no data is saved, and no identifiable information is retained during or after use. For users under 18, the tool provides general educational results and prompts the user to share those results with a parent or guardian via their own device’s native sharing capabilities (text message, email, or link). We do not collect the parent’s contact information through this process.

Enrollment: All intake forms, consents, and account creation for patients under 18 are completed exclusively by the parent or legal guardian. Parental consent is verified before any personal or health information is collected from a minor patient. We comply with the Children’s Online Privacy Protection Act (COPPA) and applicable FTC guidelines.

If you believe we have inadvertently collected information from a minor without proper consent, please contact us immediately at hello@thryvwellhealth.com.

10. Cookies and Tracking

Our website uses cookies and similar technologies to improve functionality and analyze usage patterns. These do not collect PHI. You can control cookie preferences through your browser settings. Disabling cookies may affect certain website features.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of our services after changes constitutes acceptance of the revised policy. Material changes will be communicated via email to active patients.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: