Privacy Policy

Cyrcadias, LLC, doing business as My Circadian Health ("My Circadian Health", "we", "us") operates mycircadianhealth.com and my.mycircadianhealth.com (the "Site"). This policy explains what information we collect, how we use it, who we share it with, and the choices you have. By using the Site you agree to this policy.

Who provides your care

My Circadian Health is not a medical provider. Medical care is provided by independent licensed clinicians through our telehealth platform partner. Health information you share in your assessment and in messages with your clinician is handled by that platform and your clinician under the Health Insurance Portability and Accountability Act (HIPAA) and their own notice of privacy practices, which you receive when you begin your assessment. This policy covers the information My Circadian Health itself collects through the Site.

Information we collect

Account and order information. When you purchase a consultation we collect your name, email address, and date of birth, and we create an account for you on my.mycircadianhealth.com.

Payment information. Payments are processed by Stripe. Your card number goes directly to Stripe and is never stored on our servers. We keep a record of the transaction, its amount, and its status.

Newsletter. If you subscribe, we store your email address.

Error reports. If you report an error in an article, we store the article you identified and the text of your report.

Usage information. We use Google Analytics on our marketing pages and blog only. It collects standard usage data such as pages viewed, approximate location, browser, and device. We do not load analytics or any advertising code on the assessment, checkout, or any page of your account.

Cookies. We set a session cookie needed to keep you signed in and to protect forms from abuse. Google Analytics sets its own cookies on the pages where it runs.

How we use information

• To create and maintain your account and deliver the service you purchased.
• To process payments and send receipts.
• To connect you with a licensed clinician through our telehealth platform partner.
• To send the newsletter you subscribed to. Every email includes an unsubscribe link.
• To respond to your questions and correct errors you report.
• To understand how our marketing pages are used and improve them.
• To comply with law and protect against fraud and abuse.

Who we share information with

• Clinicians and our telehealth platform partner, so that a licensed clinician can review your assessment and treat you.
• Pharmacies, when a clinician sends a prescription to the pharmacy you choose.
• Service providers that run our infrastructure, process payments (Stripe), deliver email, and provide analytics (Google), each limited to what they need to perform their service.
• Legal and safety, when required by law, subpoena, or to protect the rights and safety of you, us, or others.
• Business transfers, if My Circadian Health is involved in a merger, acquisition, or sale of assets, in which case this policy continues to apply.

We do not sell your personal information, and we do not share it with third parties for their own marketing.

How long we keep it

We keep account and order records for as long as your account exists and as long as needed to meet legal, tax, and medical record-keeping obligations. Newsletter addresses are kept until you unsubscribe. Analytics data is retained according to Google's default retention period.

Your choices and rights

You can unsubscribe from the newsletter at any time using the link in any email. You can request a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it, by emailing [email protected]. We will verify your identity before acting on a request and will respond within the time required by law. Depending on where you live, you may have additional rights under state privacy laws such as the California Consumer Privacy Act, including the right not to be discriminated against for exercising them. Requests about your medical records should be directed to your clinician through your account.

Security

The Site is served over HTTPS. Passwords are hashed. Access to account data is limited to the people and systems that need it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children

The Site is for adults 18 and older. We do not knowingly collect information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

Changes to this policy

We may update this policy. When we do, we will change the effective date above and, for material changes, notify account holders by email.

Contact

Cyrcadias, LLC
[email protected]