1. Who We Are and What This Policy Covers

Drs on Calls LLC ("Drs on Calls," "we," "us") is a technology company. We operate the Drs on Calls website, mobile applications, and related services (the "Platform") that connect patients with independent, licensed healthcare providers ("Providers"). Drs on Calls is not a healthcare provider.

This Privacy Policy explains how Drs on Calls collects, uses, shares, and protects personal information when you visit our website, create an account, use the Platform, or communicate with us.

Medical information created or received in the course of your care (such as intake answers, visit notes, diagnoses, prescriptions, and test results) is protected health information under HIPAA. It is handled as described in the Notice of Privacy Practices issued by the Providers who deliver care through the Platform. Drs on Calls handles that information only as the Providers' business associate. If this Policy and the Notice of Privacy Practices conflict regarding protected health information, the Notice of Privacy Practices controls.

2. Information We Collect

Information you give us

• Account information: Name, email, phone number, mailing address, date of birth, and password.
• Identity verification: A photo of your government-issued ID and other information used to confirm your identity.
• Location: The state where you are located when you receive care, which you confirm before each visit.
• Payment information: Your billing details. Card information is collected and stored by our third-party payment processor; we receive only a token and limited details such as the card type and last four digits.
• Health information: Symptoms, medical history, medications, allergies, photos, and documents you submit for your care. This is handled as described in the Notice of Privacy Practices.
• Communications with us: Messages and requests you send to our support team, and your responses to optional surveys.

Information collected automatically

• Device information: IP address, device type, operating system, browser type, app version, and device identifiers.
• Usage information: Pages viewed, features used, dates and times of access, and error and security logs.
• Device location: If you allow it in your device settings, your device's location, which we use to confirm the state you are in for licensing purposes. You can turn this off at any time in your device settings.
• Cookies and similar technologies: Small data files that keep you signed in, remember your settings, keep the Platform secure, and help us understand how the Platform is used. See Section 4.

Information from others

Providers, pharmacies, and laboratories involved in your care; our payment processor; and, if you enroll through an employer, association, or other group, limited eligibility information such as your name, email, and membership ID.

3. How We Use Information

• To create and manage your account and provide the Platform.
• To connect you with a Provider licensed in the state where you are located, schedule visits, and support messaging with your Provider.
• To verify your identity and location, as required by state telehealth laws.
• To process payments and send receipts.
• To send appointment reminders, account notices, and service updates.
• To respond to support requests.
• To protect the Platform, prevent fraud, and meet our legal obligations.
• To improve the Platform, using information that has been de-identified or aggregated whenever possible.
• To tell you about Drs on Calls services, if you have not opted out. We never use your health information for marketing without your written authorization.

4. Cookies and Tracking Technologies

We use cookies and similar technologies that are necessary to operate the Platform, and limited analytics to understand how the Platform is used.

We do not place advertising pixels or third-party tracking technologies on any page where you enter health information, on the booking or intake flow, or inside your signed-in account. We do not allow third parties to use the Platform to track your activity across other websites for targeted advertising.

5. How We Share Information

We share personal information only as described below:

• Providers: With the Provider you choose, so they can deliver your care.
• Pharmacies and laboratories: With your pharmacy, laboratory, or other provider when you or your Provider direct us to.
• Service providers: With companies that perform services for us, such as secure hosting, video visits, e-prescribing, payment processing, identity verification, email and text messaging, and customer support. They may use your information only to provide services to us and must protect it under written contracts, including business associate agreements where health information is involved.
• Group sponsors: If you enroll through an employer, association, or other group, we may share limited information such as whether you enrolled and your membership status. We never share your health information with your group without your written authorization.
• Legal and safety reasons: When required by law, subpoena, or court order; to protect the rights, safety, or property of our users, the public, or Drs on Calls; or to investigate fraud or security issues.
• Business transfers: If Drs on Calls is involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction, subject to this Policy and applicable law, including HIPAA. We will notify you before your information becomes subject to a different privacy policy.
• With your consent: For any other purpose with your consent.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising. We do not share health information with advertisers, sponsors, pharmaceutical companies, or data brokers.

6. Consumer Health Data

Some states, including Washington, Nevada, and Connecticut, give additional protections to "consumer health data," meaning health information that may fall outside HIPAA, such as information showing you searched for or booked a certain type of care. We collect and use consumer health data only to provide the services you request, with your consent where required, and we do not sell it. You may request access to or deletion of your consumer health data, and withdraw your consent, as described in Section 10.

7. Text Messages and Emails

If you provide your mobile number, you agree to receive text messages from Drs on Calls about your account, appointments, and care. Message frequency varies. Message and data rates may apply. Reply STOP to opt out or HELP for help. Consent to marketing texts is not a condition of any purchase. We do not share your mobile number with third parties for their marketing.

You may unsubscribe from marketing emails using the link in any marketing email. You will continue to receive account, security, and appointment messages while your account is active.

8. Data Retention

We keep personal information only as long as needed for the purposes described in this Policy, including to maintain your account, meet legal and tax requirements, resolve disputes, and enforce our agreements. Medical records are retained by Providers for the periods required by state law, which are often seven to ten years or longer for minors. Backup copies are deleted on a regular schedule. When information is no longer needed, we delete it or de-identify it.

9. Security

We use administrative, physical, and technical safeguards designed to protect personal information, including encryption, access controls, and audit logging. No system is completely secure, and we cannot guarantee the security of information sent over the internet. If a security incident affects your personal information, we will notify you as required by law.

10. Your Privacy Rights

Depending on the state where you live, you may have the right to:

• Know what personal information we collect about you and how we use and share it.
• Access and receive a copy of your personal information.
• Correct inaccurate personal information.
• Delete your personal information, subject to legal retention requirements.
• Opt out of marketing, and of any sale, sharing for targeted advertising, or profiling (we do not engage in these).
• Withdraw consent you have given us.
• Appeal our decision about your request.

To make a request, email support@drsoncalls.com or use the privacy settings in your account. We will verify your identity before responding and will respond within the time required by law, generally within 45 days. You may use an authorized agent where permitted by law. We will not discriminate against you for exercising your rights.

Requests to access or correct your medical records should be made under the Notice of Privacy Practices. Some information, such as medical records, cannot be deleted while the law requires it to be kept.

11. Children

You must be 18 or older to create an account. Care for minors is available only through the account of a parent or legal guardian, who provides the minor's information and consents to their care. We do not knowingly collect personal information directly from children under 13. If you believe a child has provided us information directly, contact us and we will delete it.

12. Where Information Is Stored

Personal information is stored on AWS servers located in the United States.

13. Third-Party Links and Services

The Platform may link to websites or services operated by others, such as pharmacies or payment processors. Their privacy practices are governed by their own policies, not this one. We encourage you to review them.

14. Changes to This Policy

We may update this Policy from time to time. We will post the updated Policy with a new effective date. If we make a material change, we will notify you by email or in the Platform before the change takes effect, and where the change affects how we use health information, we will ask for your consent.

15. Contact Us

Email: support@drsoncalls.com

Website: www.DrsOnCalls.com