Privacy Policy

What we collect

Account information: your name, email address, and profile photo when you sign up with email or Google. Sign-in is provided by Google Firebase.

Health assessment: the answers you give in onboarding (goals, lifestyle, basic medical history, state, date of birth). You can review, edit, or redo them at any time in Profile → Health assessment.

Medical intake for prescription orders: when you order a treatment we ask the questions a licensed provider needs to decide whether it is safe for you — date of birth, phone number, current medications, allergies, diagnosed conditions, pregnancy status, and a short safety section specific to what you ordered. These answers are attached to that order only.

Order details: the items you ordered, the shipping address and phone number you gave, any note to the provider, the order status, and a timeline of what happened to the order.

Payment: card details are entered directly into a form provided by Stripe, our payment processor, and never touch our servers. We store only a Stripe customer reference and the amount and status of each charge or refund.

Support messages: what you send us through Contact support in the app or the form on our website.

Insurance details, when you choose to connect a plan (this feature is not live yet): plan and payer, member identifiers, deductible and out-of-pocket progress, and claim summaries, read only with your authorization.

Technical information: device type, browser, IP address, and which screens are used. On the website we use Vercel Analytics, which does not use cookies or track you across sites. In the app, analytics never record product, order, checkout, or insurance pages.

How we use it

To run the service you asked for: routing your intake to a licensed provider for review, sending an approved prescription to the pharmacy, charging your saved card only after approval, shipping the order, and telling you about its status.

To keep you safe: flagging answers that may be contraindications for the provider, confirming you are 18 or older, and confirming we can ship to your state.

To personalize the product: showing what is relevant to your goals and, when those features are live, prices for your location and plan.

To answer you when you contact support, and to meet our legal obligations, including pharmacy record-keeping rules.

We do not sell your personal or health information, and we do not share it with advertisers. Ever.

Who sees your information

Licensed providers: independent, state-licensed clinicians review your medical intake, decide whether to prescribe, and may contact you by phone if they need more information. They see your intake answers, order items, name, date of birth, and contact details.

The pharmacy: approved orders are filled and shipped by our partner compounding pharmacy, St Luke Compounding Pharmacy (Florida). It receives what a pharmacy needs to fill and ship a prescription — your name, date of birth, allergies, shipping address, phone number, and the prescribed items.

Stripe processes your payment and holds your card. Shipping carriers receive your name, address, and phone number for delivery.

Service providers that host and run bttr: Google Firebase (sign-in, database, and file storage), Render and Vercel (application hosting). When bttr AI is live, your question and the profile context it needs are processed by an AI provider under terms that prohibit training on your data; when insurance connection is live, our connectivity partner retrieves your coverage with your authorization.

bttr staff: a small number of authorized team members can see orders and intake to operate the pharmacy service and to help you. Access is limited to what the job requires and is logged.

Law: we disclose information when the law requires it, for example a valid subpoena, or to protect someone’s safety.

Health information

The information you give us for a prescription order is health information. Your providers and the pharmacy are healthcare providers bound by HIPAA and state medical-privacy law, and bttr handles that information on their behalf under written agreements and the safeguards described here.

We use it only to deliver and support your care, and we never use health information for marketing.

How we protect it

Everything is encrypted in transit and at rest. Your data lives in Google Firebase with access rules that limit each account to its own records.

Orders can only be created and changed by our server, never directly by an app, and every status change is recorded with who made it and when.

Staff access to patient records is limited to named administrators, and administrative actions are logged.

No system is perfectly secure. If a breach affects your information we will notify you and the authorities as the law requires.

How long we keep it

Account and assessment data: for as long as your account exists.

Prescription orders and their medical intake: pharmacy and medical record laws require these to be kept for several years, so they are retained for that period even if you delete your account. When you delete your account they are separated from it and kept only as a clinical record.

Support messages: one year after they are resolved. Technical logs: 90 days.

Your choices and rights

Edit or redo your health assessment at any time in Profile. Cancel a pending order from Orders while it has not been approved.

Delete your account from Profile → Delete account. This removes your sign-in, your profile and assessment, your saved card at Stripe, and your support messages, and cancels any order that has not yet been approved. Prescription records are kept as described above. You can also ask us by email and we will confirm when it is done.

Depending on where you live you may have the right to access, correct, or delete your personal information, to receive a copy of it, and to not be discriminated against for exercising those rights. Email support@bttr.health and we will respond within 45 days.

We do not sell or share personal information for targeted advertising, so there is nothing to opt out of.

Children

bttr is for adults. You must be 18 or older to create an account, and we do not knowingly collect information from anyone younger.

Changes

We will update this policy as the product evolves — for example when bttr AI, price search, or insurance connection go live — and change the date at the top. If a change affects how we handle health information we will tell you in the app before it takes effect.