Privacy Policy

1. Who we are

Lucid Health Inc. ("Lucid," "we," "our") operates this website and provides telehealth services in partnership with independently licensed physicians and affiliated medical practices. This policy applies to information collected through our website, mobile applications, and any other services that reference it.

2. Information we collect

We collect information you provide directly, information collected automatically, and information from third parties.

• Information you provide: name, email, phone number, date of birth, address, medical history, symptoms, treatment goals, payment information, and any communications you send us.
• Protected health information (PHI): when you become a patient, your care is documented in records governed by the Health Insurance Portability and Accountability Act ("HIPAA"). See our HIPAA Notice for details.
• Automatically collected: IP address, device and browser information, pages viewed, referring URLs, and other analytics data.
• From third parties: identity verification services, pharmacy partners, laboratories, and payment processors may share limited information necessary to provide your care.

3. How we use your information

• To evaluate your clinical eligibility and provide care.
• To process payments and coordinate with pharmacies and laboratories.
• To communicate appointment reminders, refill approvals, and safety information.
• To improve our services, detect fraud, and comply with legal obligations.
• For research or analytics, only using de-identified data unless you have provided explicit authorization.

4. How we share your information

We do not sell your personal information. We share information only in the following circumstances:

• With your care team — physicians, pharmacies, and labs involved in your treatment.
• With service providers bound by written agreements (HIPAA business associate agreements where applicable).
• As required by law — in response to subpoenas, court orders, or to prevent imminent harm.
• In the event of a corporate transaction (merger, acquisition, or asset sale), subject to the same protections described here.

5. Cookies and tracking

We use cookies and similar technologies for authentication, security, preferences, and analytics. You can control cookies through your browser settings. Disabling them may limit some functionality. We honor Global Privacy Control (GPC) signals where applicable law requires it.

6. Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your information, subject to legal and medical record-retention requirements.
• Object to or restrict certain processing.
• Obtain a portable copy of your information.
• Opt out of sales or targeted advertising (we do not engage in either).

To ask about these rights, email info@lucidrx.health. Please do not include medical details or other sensitive health information in a general email.

7. Security

We use administrative, technical, and physical safeguards designed to protect your information, including encryption in transit and at rest, access controls, and routine security reviews. No system is perfectly secure, and we cannot guarantee absolute protection of your data.

8. Retention

Medical records are retained for the period required by applicable state and federal law (typically seven to ten years after your last date of service). Non-clinical information is retained only as long as needed to provide services and comply with legal obligations.

9. Children

Lucid does not knowingly collect information from children under 18. Our services are intended for adults only.

10. Changes to this policy

We may update this policy periodically. Material changes will be posted here with an updated effective date, and — for patients — by email where appropriate.

11. Contact

Questions about this policy may be sent to info@lucidrx.health. Please do not include medical details or other sensitive health information in a general email. For a formal privacy request or complaint involving health information, ask us for the approved confidential contact method.