Legal
Privacy Policy
Effective date: July 29, 2026
This Privacy Policy describes how Quenva collects, uses, and shares your information when you use our platform. We take the privacy of health information seriously and design our systems to protect it.
1. Information We Collect
We collect information you provide directly: contact details (name, email, phone, state), health information submitted during intake (height, weight, medical history, medications), and account information. We also collect technical information automatically, including device type, pages visited, and — where permitted — marketing attribution data such as the campaign or advertisement that referred you to us (e.g., UTM parameters and advertising click identifiers).
2. How We Use Information
We use your information to connect you with independent licensed providers, facilitate prescriptions and fulfillment through licensed pharmacies, operate and improve the platform, communicate with you about your care and account, comply with legal obligations, and — with appropriate safeguards — measure the effectiveness of our marketing.
3. Health Information (HIPAA)
Health information you share with providers through the platform is protected health information (PHI) governed by the Health Insurance Portability and Accountability Act (HIPAA) and applicable state law. PHI is used and disclosed only as permitted for treatment, payment, and healthcare operations, or as otherwise permitted or required by law. We do not sell PHI, and we do not use PHI for advertising.
4. Sharing
We share information with independent providers and pharmacies involved in your care, service providers that support our operations under confidentiality obligations (e.g., hosting, payment processing, customer communications), and as required by law. We do not sell your personal information.
5. Your Rights (Including California Residents)
Depending on your state, you may have rights to access, correct, delete, or obtain a copy of your personal information, and to opt out of certain processing. California residents have rights under the CCPA/CPRA, including the right to know, delete, correct, and opt out of the sale or sharing of personal information — we do not sell or share personal information as defined by the CCPA. To exercise any right, contact privacy@quenva.co. We will not discriminate against you for exercising your rights.
6. Cookies and Tracking
We use essential cookies to operate the platform (authentication, security) and analytics to understand usage. Marketing attribution parameters are captured only from the URL you arrive on. You can control cookies in your browser settings; essential cookies are required for the platform to function.
7. Security and Retention
All data is transmitted over encrypted connections (TLS/SSL) and stored with access controls. We retain information as long as needed to provide services and meet legal, medical-record, and tax obligations. Contact privacy@quenva.co with questions.
