Privacy Policy

Biovana operates the consumer-facing website and coordinates access to independent service partners. Medical services are provided by AyaRx. Uniloop provides the technology platform, and e-RxHub provides pharmacy services. These organizations may process information under their own legal obligations and privacy notices.

Protected health information handled by a healthcare provider or pharmacy is subject to applicable health-privacy law and the relevant Notice of Privacy Practices. This website Policy does not replace those notices.

Depending on how you use the services, information may include:

• identity and contact details, such as name, date of birth, email, telephone number, and account credentials;
• residential address, state, and ZIP code used to verify provider and pharmacy availability;
• health history, current medications, allergies, questionnaire responses, photographs, and communications submitted for clinical review;
• transaction, prescription coordination, order, delivery, and customer-support records;
• consent records and preferences; and
• device, browser, IP address, approximate location, page activity, authentication, security, and audit-log information.

We collect information directly from you, automatically from your device, and from service partners involved in providing requested services.

Information may be used to:

• create and secure your account and authenticate your identity;
• verify jurisdictional availability and route you to an appropriately licensed provider and authorized pharmacy;
• support telehealth evaluation, care coordination, prescribing, fulfillment, and delivery;
• process payments and provide service, safety, legal, and account notices;
• respond to questions and operate, troubleshoot, protect, and improve the services;
• prevent fraud, misuse, and security incidents; and
• comply with legal, licensing, recordkeeping, and regulatory obligations.

Information is disclosed only as reasonably necessary for the purposes described above, subject to applicable law. Recipients may include:

• AyaRx and its independent licensed healthcare providers for eligibility and clinical care;
• Uniloop as the technology and coordination platform and HIPAA business associate where applicable;
• e-RxHub for prescription processing, pharmacy services, and fulfillment;
• payment processors, identity-verification services, hosting and security providers, communications vendors, and delivery carriers;
• professional advisers, regulators, courts, law enforcement, or other parties when required or permitted by law; and
• a successor in a merger, financing, reorganization, or sale, subject to applicable confidentiality and legal requirements.

Biovana does not sell medical information. We do not disclose medical information for third-party targeted advertising. We may use or disclose de-identified or aggregated data where permitted by law and where it cannot reasonably identify an individual.

The site may use cookies and local storage that are necessary for authentication, session continuity, preferences, security, and service operation. Health questionnaire responses should not be used for targeted advertising. Browser settings can limit cookies, although doing so may prevent parts of the service from working.

Information is retained for as long as reasonably necessary to provide services and meet clinical, pharmacy, tax, fraud-prevention, legal, and recordkeeping obligations. Retention periods differ by record type and jurisdiction.

Administrative, technical, and physical safeguards are used to protect information. Uniloop states that platform health information is encrypted in transit and at rest and subject to role-based access and audit logging. No system can guarantee absolute security, so use the secure patient portal for health information and contact us if you suspect unauthorized access.

You may update account information, change communication preferences, or request access, correction, deletion, or a copy of certain personal information by contacting us. A request may be limited where information must be retained by law or by a healthcare provider or pharmacy. We may need to verify your identity before responding.

Residents of certain states may have additional rights, including rights to know, correct, delete, or obtain a portable copy of personal information and to opt out of certain sale, sharing, targeted-advertising, or profiling activities. We will not discriminate against you for exercising a legally protected privacy right.

Requests involving medical records or protected health information should be directed to the provider or pharmacy identified in the applicable Notice of Privacy Practices.

The services are intended for adults aged 18 or older in the United States. We do not knowingly collect personal information from children through these services. Contact us if you believe a child has submitted information.

We may update this Policy to reflect changes in services, partners, or law. The revised version and effective date will be posted here. Material changes will be communicated when required by law.

For website privacy questions, email hello@biovana.com. For protected health information, medical records, or HIPAA rights, use the contact listed in the applicable Notice of Privacy Practices or the secure patient portal.