Privacy Policy

Last updated: October 26, 2026

Your health is personal, and so is your information. This Privacy Policy explains what information Vita Health, LLC ("Vita," "we," "us") collects through joinvitahealth.com and our Services, how we use it, how we comply with federal and state privacy laws, and the choices and rights you have.

1. Information we collect

• Contact and account details: name, email, phone number, shipping and billing address, date of birth, and login details.
• Health information: your answers to the medical assessment, health history, medications, lab results, photos you choose to upload, and messages with your care team.
• Order and payment details: your plan, orders, shipments and payment history. Card numbers are handled by our payment processor. Vita doesn't store your full card number.
• Messages with us: emails, support requests and feedback.
• Website usage: device and browser type, IP address, pages visited and similar information collected through cookies and similar tools.
• Referral information: if you arrive through a Vita creator's link, we record that referral so we can pay the creator. Creators never see who you are.

2. How your health information is protected

Your medical assessment, records and prescriptions are collected and stored on a secure telehealth platform used by your independent physicians and their medical group. Medical care is provided by Vita Health, LLC's medical partner, MDI Medical Group PC (MD Integrations, mdintegrations.com), an independent licensed medical group, and its affiliated professional practices. Every treating provider is licensed in the state where you are located, and you can request your provider's name, credentials and license information at any time by emailing hello@joinvitahealth.com. Your health records are handled under the medical group's Notice of Privacy Practices, which you'll see during your intake. You can also review the Telehealth Informed Consent before you start. Vita accesses health information only as needed to support your care, fulfillment, billing and customer service, and only as permitted by law and by agreements that require everyone involved to protect it.

3. How we use information

• To provide the Services: connect you with physicians, coordinate prescriptions and shipments, and manage your plan and billing.
• To support you: answer questions, send order and care updates, and handle requests.
• To keep things safe: verify identity, prevent fraud and protect our Services.
• To improve our website and Services, using information that doesn't include your health information.
• To send marketing, only if you opt in. You can unsubscribe anytime.
• To follow the law and enforce our Terms.

4. Who we share information with

• Your care team: independent, licensed physicians and their medical group, MDI Medical Group PC (MD Integrations).
• Pharmacies that fill and ship your prescriptions.
• Service providers that help us run Vita, such as website hosting (Shopify), payment processing, shipping carriers, customer support and email tools. They may use information only to provide services to us.
• Legal and safety reasons: when required by law, court order or government request, or to protect the rights and safety of our patients, our team or others.
• Business changes: if Vita is merged, acquired or sells assets, information may be transferred, with the same protections.

We do not sell personal information, and we do not share health information for advertising.

5. Cookies and analytics

We use cookies and similar tools to run the website, remember your preferences and understand how our site is used. We keep advertising and analytics tools off the pages where you enter health information. You can control cookies in your browser settings. Where required, you can opt out of targeted advertising on our Your Privacy Choices page. We honor Global Privacy Control signals where the law requires it.

6. Your choices and rights

• Marketing: unsubscribe from emails with the link in any message, and reply STOP to texts.
• Access, correction and deletion: ask to see, correct or delete your personal information.
• Consumer health data rights: some states, such as Washington, Nevada and Connecticut, give you extra rights over health-related information, including the right to withdraw consent. See our Consumer Health Data Privacy Policy.

To make a request, email hello@joinvitahealth.com with the subject "Privacy Request." We'll verify your identity before acting on a request. Some records, like medical and pharmacy records, must be kept for a set time by law, even if you ask us to delete your account. Requests about your medical records (for example, a copy of your chart) are handled by our medical partner under its Notice of Privacy Practices; we'll help route them.

7. How we keep information safe

We use reasonable administrative, technical and physical safeguards to protect your information, including encryption in transit, access limited to staff who need it, and vendors that are contractually required to protect it. No system is perfectly secure, so please keep your login private and contact us right away if you think your account has been accessed without permission.

8. How long we keep information

We keep information as long as we need it to provide the Services, meet legal and medical record-keeping requirements, resolve disputes and enforce our agreements.

9. Children

Vita is only for adults 18 and older. We don't knowingly collect information from anyone under 18.

10. Changes to this policy

We may update this Privacy Policy from time to time. We'll post the new version here, update the date at the top, and notify you of significant changes.

11. How we comply with privacy and health information laws

Vita serves patients in all 50 U.S. states and Washington, D.C. (see Where Vita Is Available). We design our practices to comply with the federal and state privacy laws that apply to our Services, including:

• HIPAA. Your medical information is protected health information (PHI) under the Health Insurance Portability and Accountability Act of 1996 and the HITECH Act. Our medical partner, MDI Medical Group PC, and our partner pharmacies are covered entities under HIPAA. When Vita creates, receives or maintains PHI on their behalf, Vita acts as a business associate and protects that PHI as HIPAA requires, under written agreements (including business associate agreements where HIPAA requires them) that limit how PHI may be used and disclosed and require administrative, physical and technical safeguards consistent with the HIPAA Security Rule. Your rights over your medical records are described in our medical partner's Notice of Privacy Practices.
• Minimum necessary and no PHI in marketing. Vita uses and discloses PHI only as needed to support your care, payment and operations, never sells PHI, and never uses or discloses PHI for marketing or advertising without your written authorization. We keep PHI out of our e-commerce platform, payment processor metadata and advertising tools.
• State medical privacy laws. We follow state laws that protect medical information, including the California Confidentiality of Medical Information Act (CMIA), and state laws that give additional protection to sensitive health information.
• State consumer health data laws. We follow the Washington My Health My Data Act, Nevada's consumer health data law (SB 370) and Connecticut's consumer health data provisions, as described in our Consumer Health Data Privacy Policy.
• State comprehensive privacy laws. Where they apply, we honor the rights provided by state consumer privacy laws, including those of California (CCPA/CPRA), Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia (see Section 12).
• Communications laws. We send marketing emails and texts only with consent, and follow the CAN-SPAM Act and the Telephone Consumer Protection Act (TCPA).
• Breach notification. If a breach of unsecured PHI or personal information occurs, we will notify affected individuals, our medical partner, regulators and others as required by HIPAA, the FTC Health Breach Notification Rule where applicable, and state breach notification laws.
• Accountability. Vita has designated a privacy contact responsible for these policies, limits access to health information to staff who need it for their job, trains those staff on privacy and security, and requires our vendors to protect information under written agreements.

12. Your state privacy rights

Depending on where you live, you may have some or all of these rights over your personal information:

• To know what personal information we collect, use and share, and to get a copy of it
• To correct inaccurate information
• To delete your information, subject to legal record-keeping requirements
• To opt out of the sale of personal information, targeted advertising and profiling (Vita does not sell personal information)
• To limit the use of sensitive personal information, including health information, or to withdraw consent to its processing
• To appeal our decision on your request
• Not to be discriminated against for exercising your rights

California residents

Under the CCPA/CPRA, California residents have the rights listed above, including the right to know the categories of personal information we collect (Section 1), the sources (you, our medical partner and pharmacies, and our service providers), the purposes (Section 3) and the categories of recipients (Section 4). We do not sell or share personal information for cross-context behavioral advertising, and we use sensitive personal information only to provide the Services. Medical information covered by HIPAA or the CMIA is governed by those laws. You may use an authorized agent to make a request on your behalf.

How to exercise your rights

Email hello@joinvitahealth.com with the subject "Privacy Request," or use our Your Privacy Choices page. We'll verify your identity and respond within the time required by your state's law (generally 45 days, which may be extended where the law allows). To appeal a decision, reply with the subject "Privacy Appeal." If we deny your appeal, you may contact your state attorney general.

Contact

Vita Health, LLC
Attn: Privacy
PO Box 1020, Westfield, IN 46074
Email: hello@joinvitahealth.com