Privacy Policy

Last Updated: 04/29/2026 

Introduction and Scope

Piper Wellness LLC d/b/a JoinPolly (“Polly,” “we,” “us,” or “our”) owns and operates the website located at www.joinpolly.com, including all subdomains and related websites that link to the Terms and Conditions of Use (collectively, the “Website”). The Website and the services, features, content, and functionality made available through it are referred to collectively as the “Services.” This Privacy Policy explains how we collect, use, disclose, and otherwise process personal information in connection with the Services.

Personal information collected through your use of our general informational webpages is subject to this Privacy Policy. In other instances, such as when you enroll for services from a Provider or we assist a Provider in providing services to you (e.g., processing prescriptions), we are acting on behalf of the Provider in the role of a HIPAA “Business Associate.” The information we collect and process in those instances is subject to our HIPAA Notice, not this Privacy Policy.

This Privacy Policy is incorporated into and forms part of the Terms and Conditions of Use (the “Terms”) and is subject to all provisions, limitations, disclaimers, and conditions set forth in the Terms. In the event of a conflict between this Privacy Policy and the Terms, the Terms shall control unless expressly stated otherwise.

‍

Information We Collect

We collect personal information in connection with your use of the Services when Polly is not acting on behalf of a Provider in the role of a HIPAA “Business Associate.” The type of information we collect depends on how you interact with the Services.

‍

1. Information You Provide Directly to Us

We may collect personal information that you voluntarily provide to us, including when you:

• Create or manage an account
• Make a purchase or subscribe to products or services
• Contact us via email, chat, SMS, or other communications channels
• Submit forms or respond to surveys

Depending on your interaction with the Services, this information may include:

• Name
• Email address
• Telephone number
• Billing address
• Shipping address
• Date of birth
• Account login credentials
• Payment information (processed by our third-party payment processors on our behalf)
• Records of your communications with us
• Information about purchases or transactions with us
• Any other information you choose to provide

We do not collect government-issued identification numbers, precise geolocation data, or health or medical information under this Privacy Policy.

‍

2. Information Collected Automatically

When you access or use the Services, we and our service providers may automatically collect certain information about your device and usage, including:

• IP address
• Browser type and version
• Device type
• Operating system
• Referring and exit pages
• Pages viewed and links clicked
• Date and time of visits
• Time spent on pages
• General geographic region (e.g., city/state derived from IP address)

We collect this information using cookies, pixels, web server logs, and similar tracking technologies. These technologies help us:

• Operate and secure the Services
• Analyze usage and improve functionality
• Provide customer support
• Measure the effectiveness of marketing and advertising

We do not collect precise GPS location data through the Services

‍

3. Information from Social Media and Third-Party Platforms

If you interact with us through social media platforms (such as liking, following, or messaging us), we may receive information such as your name, username, and any content you choose to share with us.

If you access the Services through a third-party authentication service, we may receive certain information from that service depending on your privacy settings. We encourage you to review the privacy policies of those third parties.

‍

4. Information Received from Service Providers and Partners

We may receive information about you from third-party service providers who assist us in operating the Services, such as:

• Payment processors
• Analytics providers
• Advertising and marketing partners

We may combine this information with other information we collect about you.

‍

5. Information Subject to HIPAA

When you enroll for services from a Provider or when we assist a Provider in providing healthcare services to you (such as facilitating telehealth services or processing prescriptions), we act on behalf of the Provider in the role of a HIPAA “Business Associate.” In those instances, any health or medical information we collect, receive, maintain, or transmit is governed by our HIPAA Notice and the applicable Provider’s Notice of Privacy Practices, not this Privacy Policy.

How We Use Your Information

We use personal information governed by this Privacy Policy for legitimate business and operational purposes, including to:

Operate and Maintain the Services

• Provide, operate, and improve the Services
• Manage user accounts
• Fulfill purchases and subscriptions
• Coordinate payment processing through our third-party payment processors
• Maintain the security and integrity of the Services

Communicate with You

• Send welcome emails and account-related communications
• Respond to your inquiries and customer support requests
• Provide service-related notifications
• Send promotional communications where permitted by law (you may opt out of marketing communications at any time).

Polly does not send medical communications on behalf of Providers outside of the HIPAA-governed patient portal.

Customer Support and Technical Administration

• Provide technical support
• Troubleshoot errors
• Monitor performance and usage trends
• Detect and prevent fraud, abuse, or security incidents

• Analytics and Service Improvement

• Analyze how users interact with the Services
• Improve functionality, content, and user experience
• Conduct internal research and reporting

Advertising and Marketing

• Deliver advertising and promotional content
• Measure the effectiveness of marketing campaigns
• Develop insights regarding user engagement

We do not use health or medical information governed by our HIPAA Notice for advertising or marketing purposes.

Legal and Compliance Purposes

• Comply with applicable laws and regulations
• Respond to lawful requests and legal process
• Enforce our Terms and Conditions of Use
• Establish, exercise, or defend legal claims

Other Disclosed Purposes

• For any other purpose disclosed to you at the time information is collected or pursuant to your consent

Information Subject to HIPAA: When we act on behalf of a Provider in the role of a HIPAA “Business Associate,” our collection, use, and disclosure of protected health information are governed by our HIPAA Notice and the applicable Provider’s Notice of Privacy Practices, not this Privacy Policy.

Combining Information: We may combine personal information collected through the Services with information obtained from other sources and use the combined information in accordance with this Privacy Policy.

Aggregate and De-Identified Information: We may aggregate and/or de-identify information so that it can no longer reasonably be linked to you. We may use and disclose such aggregated or de-identified information for any lawful purpose, including analytics, research, and marketing.

How we Disclose Your Information

We may share personal information governed by this Privacy Policy for legitimate business purposes as described below.

1. Service Providers

We share personal information with third-party service providers that perform services on our behalf and help us operate the Services. These may include providers of:

• Payment processing
• Billing support
• Shipping and fulfillment
• Customer service
• IT infrastructure and cloud hosting
• Security and fraud prevention
• Analytics
• Marketing support
• Legal, accounting, and consulting services

These service providers are authorized to use personal information only as necessary to provide services to Polly. Payment information for healthcare services is processed by third-party payment processors. Polly does not store or process full credit or debit card numbers.

2. Advertising and Analytics Partners

We may share certain identifiers and online activity information with advertising and analytics partners to:

• Measure the effectiveness of advertising
• Understand how users interact with the Services
• Deliver promotional content

These partners may collect information directly through cookies, pixels, or similar technologies when you use the Services. We do not disclose protected health information governed by our HIPAA Notice for advertising or marketing purposes.

3. Communications with Providers

Users communicate with healthcare Providers exclusively through the HIPAA-governed patient portal. When we act on behalf of a Provider in the role of a HIPAA “Business Associate,” our disclosure of protected health information is governed by our HIPAA Notice and the applicable Provider’s Notice of Privacy Practices, not this Privacy Policy.

4. Legal and Safety Disclosures

We may access, retain, and disclose personal information if we believe in good faith that doing so is necessary to:

• Comply with applicable law, regulation, legal process, or governmental request
• Enforce our Terms and Conditions of Use
• Investigate or prevent fraud, security incidents, or other unlawful activity
• Protect the rights, property, or safety of Polly, our users, or others

This may include exchanging information with other companies and organizations for fraud prevention and security purposes.

5. Business Transfers

If Polly is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, personal information may be transferred as part of that transaction, subject to applicable legal requirements.

6. With Your Direction or Consent

We may share personal information where you direct us to do so or where we have your consent.

Your Choices and Controls

You have certain choices regarding how we use and communicate with you about your personal information governed by this Privacy Policy.

Access and Correction Requests

You may request that we review, update, or correct certain personal information we maintain about you by contacting us at legal@joinpolly.com. We will consider and respond to requests in accordance with applicable law. Please note that we may retain certain information as required by law, for legitimate business purposes, or to comply with our legal obligations.

Requests relating to health or medical information maintained in connection with healthcare services must be directed to the applicable Provider in accordance with the Provider’s Notice of Privacy Practices and our HIPAA Notice.

Marketing Communications

You may opt out of receiving promotional emails from us by clicking the “Unsubscribe” link included in such emails. You may opt out of promotional text messages by following the instructions included in the message (such as replying “STOP,” where applicable).

Even if you opt out of promotional communications, you may continue to receive non-marketing communications related to:

• Your account
• Your transactions
• Service updates
• Security notifications

Cookies and Online Tracking

We and our service providers use cookies and similar technologies to operate and improve the Services, analyze usage, and support advertising and marketing activities. Most web browsers allow you to control cookies through browser settings. You may be able to:

• Remove existing cookies
• Block future cookies
• Set preferences for certain websites

Please note that disabling cookies may affect the functionality of certain features of the Services. You may also adjust settings on your mobile device to limit the use of advertising identifiers for interest-based advertising. Because cookie and device settings are browser- and device-specific, you must adjust your preferences on each device and browser you use.

Do Not Track Signals

Some browsers transmit “Do Not Track” signals. At this time, we do not respond to such signals.

California Privacy Rights

If you are a California resident, your rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), are described in our separate California Privacy Notice, which is incorporated into this Privacy Policy by reference.

Children

The Services are intended only for individuals who are 18 years of age or older.  We do not knowingly collect personal information from children under 18 through the portions of the Services governed by this Privacy Policy. If we become aware that we have collected personal information from a child under 18 in violation of applicable law, we will take appropriate steps to delete such information. Health or medical information collected in connection with healthcare services is governed by our HIPAA Notice and the applicable Provider’s Notice of Privacy Practices.

Data Retention

We retain personal information governed by this Privacy Policy for as long as reasonably necessary to:

• Provide and operate the Services;
• Maintain business and financial records;
• Comply with applicable legal, tax, accounting, and regulatory obligations;
• Enforce our agreements and resolve disputes; and
• Protect against fraud or security incidents.

Retention periods vary depending on the nature of the information and the purpose for which it was collected. When personal information is no longer required for these purposes, we will delete or de-identify it in accordance with our internal data management practices.

Information collected and maintained in connection with healthcare services is subject to applicable legal and regulatory retention requirements and is governed by our HIPAA Notice and the applicable Provider’s record retention obligations.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Services, or applicable law.

When we make material changes, we will post the updated Privacy Policy on the Services and revise the “Last updated” date at the top of this document. In some cases, we may provide additional notice as required by law.

Your continued use of the Services after the updated Privacy Policy becomes effective constitutes your acknowledgment of the revised Privacy Policy.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, you may contact us at: legal@joinpolly.com. You may also send written correspondence to the address listed in our Terms and Conditions of Use.

‍