Privacy Policy

This Privacy Policy explains how Joice Health, Inc. (“Joice,” “we,” “us”) collects, uses, and shares personal information when you use our website, app, and membership programs.

This Policy covers our platform — not your clinical care. Information you share as part of a medical evaluation or ongoing treatment is collected and used by Beluga Health, P.A., your telehealth provider, under Beluga’s own Notice of Privacy Practices and Privacy Policy, which you’ll review and acknowledge separately before your intake. Where this Policy and Beluga’s Notice both address your health information, Beluga’s Notice controls.

Account information you provide directly: name, email address, mobile phone number, date of birth, shipping address, and payment information for non-prescription purchases (we do not store full payment card numbers). If you opt in, we use your mobile phone number to send you the text messages described in Section 6.

Intake and consent information: as part of connecting you to care, we collect your required telehealth consent and intake responses and transmit them securely to Beluga on Beluga’s behalf.

Onboarding-chat information: responses you share with our AI onboarding assistant before formal intake, which help us route you appropriately. We’re built to avoid retaining unverified health details from this conversation beyond what’s needed to get you started.

Information from Beluga and CarePortals: limited information confirming your program status (for example, that an evaluation or prescription has occurred), used to keep your account and billing accurate.

Automatic information: device and browser data, and cookies (see our Cookie Policy for detail).

• To create and manage your account and process billing;
• To collect and securely transmit your required consents and intake information to Beluga;
• To fulfill orders for non-prescription products;
• To operate and improve our onboarding chat and other Services;
• To send you account and order communications, including by text message where you’ve opted in, and — where you’ve separately opted in — marketing emails;
• To comply with applicable law and maintain the security of our Services.

• With Beluga and CarePortals, to connect you to care and keep your program status accurate;
• With our pharmacy partner, to fulfill a prescription issued by your Beluga provider;
• With service providers who support our operations — payments, shipping, hosting, analytics, customer support, and the technology behind our onboarding chat — under confidentiality obligations;
• With regulators or others as required by law, or to protect the safety of you or others.

We do not sell your personal information.

None of the sharing described in this section includes your mobile phone number or your SMS opt-in data and consent. That information is never shared with third parties or affiliates for marketing or promotional purposes. See Section 6.

We and our service providers use cookies and similar technologies to operate the Services, understand how they’re used, and, where applicable, to support advertising. You can manage cookie preferences through your browser and, where required by law, through tools we provide, including honoring Global Privacy Control signals. See our Cookie Policy for more detail.

If you provide your mobile phone number and opt in, Joice Health Inc. will send you text messages about your account and your care — for example appointment and check-in reminders, order and shipment updates, refill and renewal notices, billing and account notifications, one-time verification codes, and replies from our support team to questions you send us. This is a transactional program. Participation is always optional and is never a condition of purchase or of receiving any service from Joice.

We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes.

In addition:

• No mobile information will be shared with third parties or affiliates for marketing or promotional purposes.
• We do not sell, rent, lease, or otherwise transfer your mobile phone number or your SMS consent to any third party, affiliate, lead generator, or data broker.
• Your consent to receive text messages from Joice Health Inc. applies only to Joice Health Inc. and is not transferable to any other business, including Beluga Health, P.A. or our pharmacy partners.
• Every other category of sharing described in this Privacy Policy, including Section 4 and Section 5, excludes text messaging originator opt-in data and consent; this information will not be shared with any third parties.

We use service providers to deliver our text messages on our behalf, including our messaging platform provider and mobile carriers. These providers may process your mobile number solely to transmit messages for us, under contract, and are not permitted to use it for their own purposes.

Text messages are not encrypted and may be read by anyone with access to your phone. We keep the content of our messages limited for that reason, and text messages are never a substitute for your clinical record with Beluga Health, P.A.

You can stop receiving text messages at any time by replying STOP to any message from (406) 686-8685. We will send one confirmation message and nothing after that. For help, reply HELP or contact us at care@joicehealth.com. Message frequency varies and message and data rates may apply. Opting out of text messages does not cancel your membership. Full terms are in our Terms of Service at joicehealth.com/terms.

Beluga Health, P.A. is the HIPAA Covered Entity for your clinical information, and its Notice of Privacy Practices governs your rights regarding that information under HIPAA, including the Security Rule (45 C.F.R. Parts 160 and 164) and HITECH. Joice acts as Beluga’s Business Associate for the limited purposes of the Services we provide, meaning we’ve agreed to appropriate safeguards, breach-notification procedures, and limits on how we use or disclose any protected health information we handle in that role.

If you’re a resident of California, Colorado, Connecticut, Virginia, or a similar state with a comprehensive privacy law, you may have rights to know what personal information we’ve collected, request its deletion or correction, opt out of certain sharing or targeted advertising, limit use of sensitive personal information, and not be discriminated against for exercising these rights. We do not sell or share personal information, and we do not sell or share mobile phone numbers or SMS opt-in data under any circumstances. To exercise these rights, contact us using the information in Section 12.

Some states, including Washington and Nevada, separately regulate “consumer health data” more broadly than HIPAA. We’re committed to giving you clear, meaningful consent choices around any health-adjacent information collected at the Joice platform level, including through our onboarding chat, separate from the clinical consent you provide to Beluga.

We retain platform-level information for as long as needed to provide the Services and as required by law; your clinical record is retained under Beluga’s own retention policies. Records of your SMS consent and any opt-out are retained so we can honor your choices and demonstrate compliance. We use administrative, technical, and physical safeguards designed to protect your information, though no method of transmission or storage can be guaranteed 100% secure.

The Services are intended for adults 18 and older. We do not knowingly collect personal information from children.

• Access, update, or request deletion of your Joice account information by contacting us.
• Opt out of marketing emails via the unsubscribe link. Opt out of all text messages from Joice by replying STOP to any message from (406) 686-8685.
• For requests about your clinical or health record specifically, contact Beluga directly — Joice cannot access or modify that record.

Questions about this Privacy Policy or your personal information: care@joicehealth.com

We may update this Privacy Policy from time to time. We’ll post the updated version here and, where required by law, notify you directly of material changes.