Privacy Policy

Probably Fine LLC ("PRBLY," "we," "us," or "our") operates prblyfine.com and the associated telehealth platform that connects patients with licensed healthcare providers and pharmacy partners for treatments including weight-management medications, peptides, regenerative therapies, sexual-health treatments, and daily-wellness products.

We understand that your health information is among the most sensitive data you share. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our website, mobile experience, and services (collectively, the "Services"). This policy is designed to comply with the Health Insurance Portability and Accountability Act (HIPAA), the Health Information Technology for Economic and Clinical Health (HITECH) Act, the California Consumer Privacy Act (CCPA), and other applicable U.S. privacy laws.

Protected Health Information (PHI)

When you complete a medical intake, questionnaire, or consultation, you may provide health information that is protected under HIPAA, including:

• Medical history, current conditions, and symptoms
• Medications, supplements, and allergies
• At-home blood test results and biomarker data
• Height, weight, BMI, and biometric measurements
• Photographs you upload (e.g., for dermatologic review)
• Information you share with a provider during a telehealth consultation

Personal Identifiable Information (PII)

• Name, date of birth, and contact details
• Shipping and billing address
• Government-issued ID, when required for verification
• Payment information (processed by our PCI-compliant payment partners; we do not store full card numbers)

Technical & Usage Data

• IP address, browser type, and device information
• Pages visited, click patterns, and session duration
• Cookies and similar tracking technologies (see Section 7)

We use your information to:

• Provide, personalize, and operate the Services
• Facilitate telehealth consultations and the provider-patient relationship
• Process and fulfill prescriptions through our licensed pharmacy partners
• Communicate with you about your treatment, orders, refills, and account
• Send appointment reminders, lab results, and clinical follow-ups
• Comply with legal, regulatory, and licensing obligations
• Improve our content, services, and platform security
• Send marketing communications (only with your consent, which you may withdraw at any time)

We never sell your Protected Health Information to any third party for marketing or advertising purposes.

PRBLY acts as a business associate and, where applicable, a covered entity alongside our licensed provider network and pharmacy partners. We may disclose your PHI only as permitted or required by HIPAA, including:

• To your treating provider and their clinical team for treatment, payment, and healthcare operations
• To licensed pharmacy partners for the purpose of dispensing and shipping prescribed medications
• To laboratory partners for processing at-home blood tests and reporting results
• As required by law, such as reporting certain communicable diseases or responding to lawful subpoenas
• With your written authorization for any other purpose not described here

Our providers and pharmacy partners maintain their own Notice of Privacy Practices. You may request a copy from your provider at any time.

We engage trusted third parties to help deliver our Services. These providers are bound by contractual obligations to protect your information and include:

• Telehealth & EHR platforms for secure clinical documentation
• Payment processors (PCI-DSS compliant) for billing
• Shipping carriers for order delivery
• Analytics providers that help us understand site usage (configured to avoid storing PHI)
• Cloud hosting providers that store data in encrypted, access-controlled environments

We do not share your PHI with third parties for their own marketing purposes.

We implement industry-standard technical, administrative, and physical safeguards designed to protect your information, including:

• Encryption of PHI in transit (TLS 1.2+) and at rest (AES-256)
• Role-based access controls limiting PHI access to authorized clinical and operational staff on a minimum-necessary basis
• Regular security assessments, vulnerability scanning, and penetration testing
• Workforce training on HIPAA, privacy, and security for all employees with data access
• Business Associate Agreements (BAAs) with all vendors that handle PHI

No method of transmission or storage is 100% secure. In the event of a breach affecting your PHI, we will notify you and the appropriate authorities as required by HIPAA and applicable state law.

We use cookies and similar technologies to operate and improve our site, remember your preferences, and understand how you use our Services. Categories include:

• Essential cookies required for the site to function
• Analytics cookies that help us measure traffic and performance
• Functional cookies that remember your settings (e.g., accessibility preferences)

You can manage or disable non-essential cookies through your browser settings. Note that disabling essential cookies may affect site functionality.

Depending on your state of residence, you may have the right to:

• Access the personal and health information we hold about you
• Request a copy of your records in an electronic format
• Request corrections to inaccurate or incomplete information
• Request deletion of personal information (subject to HIPAA record-retention requirements, which may require us to retain certain health records)
• Opt out of the sale or sharing of personal information for targeted advertising
• Withdraw consent for marketing communications at any time

To exercise any of these rights, contact us at privacy@prblyfine.com. We will respond within the timeframe required by applicable law.

We retain your personal information only as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Health records are retained in accordance with HIPAA and state medical-record retention laws, which may require retention for a specified number of years following your last encounter.

Our Services are not directed to individuals under the age of 18, and we do not knowingly collect personal or health information from minors. Telehealth services and prescriptions are available only to adults who can legally consent to treatment. If you believe we have collected information from a minor, please contact us so we can delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Material changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

If you have questions about this Privacy Policy or our data practices, please contact:

Probably Fine LLC
Email: privacy@prblyfine.com
General inquiries: info@prblyfine.com