Privacy Policy

This Privacy Policy explains how Joice Health, Inc. (“Joice,” “we,” “us”) collects, uses, and shares personal information when you use our website, app, and membership programs.

This Policy covers our platform — not your clinical care. Information you share as part of a medical evaluation or ongoing treatment is collected and used by Beluga Health, P.A., your telehealth provider, under Beluga’s own Notice of Privacy Practices and Privacy Policy, which you’ll review and acknowledge separately before your intake. Where this Policy and Beluga’s Notice both address your health information, Beluga’s Notice controls.

• Account information you provide directly: name, contact details, and payment information for non-prescription purchases (we do not store full payment card numbers).
• Intake and consent information:as part of connecting you to care, we collect your required telehealth consent and intake responses and transmit them securely to Beluga on Beluga’s behalf.
• Onboarding-chat information:responses you share with our AI onboarding assistant before formal intake, which help us route you appropriately. We’re built to avoid retaining unverified health details from this conversation beyond what’s needed to get you started.
• Information from Beluga and CarePortals: limited information confirming your program status (for example, that an evaluation or prescription has occurred), used to keep your account and billing accurate.
• Automatic information: device and browser data, and cookies (see our Cookie Policy for detail).

• To create and manage your account and process billing;
• To collect and securely transmit your required consents and intake information to Beluga;
• To fulfill orders for non-prescription products;
• To operate and improve our onboarding chat and other Services;
• To send you account, order, and — where you’ve opted in — marketing communications;
• To comply with applicable law and maintain the security of our Services.

• With Beluga and CarePortals, to connect you to care and keep your program status accurate;
• With our pharmacy partner, to fulfill a prescription issued by your Beluga provider;
• With service providers who support our operations — payments, shipping, hosting, analytics, customer support, and the technology behind our onboarding chat — under confidentiality obligations;
• With regulators or others as required by law, or to protect the safety of you or others.

We do not sell your personal information.

We and our service providers use cookies and similar technologies to operate the Services, understand how they’re used, and, where applicable, to support advertising. You can manage cookie preferences through your browser and, where required by law, through tools we provide, including honoring Global Privacy Control signals. See our Cookie Policy for more detail.

Beluga Health, P.A. is the HIPAA Covered Entity for your clinical information, and its Notice of Privacy Practices governs your rights regarding that information under HIPAA, including the Security Rule (45 C.F.R. Parts 160 and 164) and HITECH. Joice acts as Beluga’s Business Associate for the limited purposes of the Services we provide, meaning we’ve agreed to appropriate safeguards, breach-notification procedures, and limits on how we use or disclose any protected health information we handle in that role.

If you’re a resident of California, Colorado, Connecticut, Virginia, or a similar state with a comprehensive privacy law, you may have rights to know what personal information we’ve collected, request its deletion or correction, opt out of certain sharing or targeted advertising, limit use of sensitive personal information, and not be discriminated against for exercising these rights. We don’t sell personal information for money. To exercise these rights, contact us using the information in Section 11.

Some states, including Washington and Nevada, separately regulate “consumer health data” more broadly than HIPAA. We’re committed to giving you clear, meaningful consent choices around any health-adjacent information collected at the Joice platform level, including through our onboarding chat, separate from the clinical consent you provide to Beluga.

We retain platform-level information for as long as needed to provide the Services and as required by law; your clinical record is retained under Beluga’s own retention policies. We use administrative, technical, and physical safeguards designed to protect your information, though no method of transmission or storage can be guaranteed 100% secure.

The Services are intended for adults 18 and older. We do not knowingly collect personal information from children.

• Access, update, or request deletion of your Joice account information by contacting us.
• Opt out of marketing emails via the unsubscribe link, or marketing texts by replying STOP.
• For requests about your clinical or health record specifically, contact Beluga directly — Joice cannot access or modify that record.

Questions about this Privacy Policy or your personal information: care@joicehealth.com. Questions about your clinical record: contact Beluga Health, P.A. directly.

We may update this Privacy Policy from time to time. We’ll post the updated version here and, where required by law, notify you directly of material changes.