Privacy Policy — TrimDoc

1. Introduction

TrimDoc Health, Inc. (“TrimDoc,” “we,” “us,” or “our”) operates a telehealth platform at trimdoc.io. TrimDoc takes the privacy and security of personal and health information seriously. We use administrative, technical, and organizational safeguards designed to protect information handled through our services. Our privacy obligations and practices depend on the services involved and applicable law. This Privacy Policy describes how we collect, use, disclose, and protect your personal information and protected health information (PHI) when you use our website and services.

By using TrimDoc's website or services, you agree to the practices described in this policy. If you do not agree, please discontinue use of our services.

2. Information We Collect

a. Account Information

When you create an account, we collect your name, email address, and password (managed by our authentication provider, Clerk, Inc.).

b. Health Information (PHI)

To provide medical care, we collect information about your health history, medications, allergies, weight, height, symptoms, and other medical details you provide through intake forms, appointments, and secure messaging. This information is protected health information (PHI) under HIPAA.

c. Payment Information

Consultation fees ($32) and membership fees ($74/month) are processed securely by Stripe, our third-party payment processor; Zelle is available as an alternative. TrimDoc does not store your full payment card information — card details are handled by Stripe under its own privacy policy and security standards. Medication payments are collected directly by your pharmacy — TrimDoc does not receive or store medication payment information.

d. Usage Data

We collect standard web analytics data (pages visited, session duration, browser type, approximate location) to improve our platform. This data does not include PHI.

3. How We Use Your Information

To provide telehealth medical services and clinical care
To communicate with you about your care, appointments, and prescriptions
To process payments for consultations and membership
To send prescription information to your pharmacy (with your consent)
To comply with applicable laws, including HIPAA
To improve our platform and services

We do not sell your personal information or PHI to any third party.

4. Privacy and Security Practices

TrimDoc takes privacy and security seriously and uses safeguards designed to protect personal and health information, including protected health information (PHI). We are also reviewing and documenting the privacy and security requirements applicable to each technology provider supporting the service. Depending on the services involved and applicable law, you may have rights regarding your PHI, including rights to access, amend, and obtain an accounting of certain disclosures. See our HIPAA Notice of Privacy Practices for full details.

5. Information Sharing

We share your information only as follows:

With treating clinicians: Licensed physicians providing your care access your PHI as Treatment providers under HIPAA.
With pharmacies: When a prescription is issued, your name, date of birth, and prescription information are transmitted to the pharmacy of record.
With service providers: We work with third-party vendors for authentication, database hosting, and infrastructure. We are reviewing and documenting the privacy and security requirements applicable to each provider, including whether a Business Associate Agreement is required and in place.
As required by law: We may disclose information when required by court order, subpoena, or other legal process.

6. Data Security

All data is encrypted in transit (TLS 1.2+) and at rest using AES-256 encryption. Our infrastructure is hosted on U.S.-based servers. We conduct regular security reviews and maintain a breach notification policy consistent with HIPAA requirements.

7. Data Retention

Medical records are retained for a minimum of seven (7) years following the last date of service, or longer as required by applicable state law. Account data is retained until you request deletion, subject to legal retention requirements.

8. Your Rights

Access: You may request a copy of your personal information.
Correction: You may request correction of inaccurate information.
Deletion: You may request deletion of non-PHI data subject to legal retention requirements.
Opt-out: You may opt out of non-clinical communications at any time.

To exercise any right, contact us at privacy@trimdoc.io.

9. Children's Privacy

TrimDoc's services are intended for adults 18 years of age or older. We do not knowingly collect information from minors. If you believe a minor has provided us with personal information, contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by posting a notice on our website at least 30 days before the change takes effect. Continued use of our services after that date constitutes acceptance.

11. Contact Us

TrimDoc Health, Inc.
Privacy Officer
privacy@trimdoc.io