Privacy Policy

RoadieForge Health, Inc. ("RoadieForge", "we", "us") respects your privacy. This Privacy Policy describes the personal and health information we collect, how we use and share it, and the choices you have about that data when you use roadieforge.com and our patient portal.

1. Information we collect

• Account & identity: name, email, date of birth, phone, billing address.
• Health information: intake questionnaire responses, weight, height, vitals, lab results, prescribed and active medications, and provider visit notes.
• Wearable & sensor data: when you connect Oura, WHOOP, Fitbit, or similar devices, we receive sleep, recovery, HRV, resting heart rate, steps, and activity summaries via the vendor's API.
• Usage data: device type, browser, IP address, pages viewed, actions taken inside the portal.
• Payment data: payments are processed by our payment processor (e.g., Stripe). We never store your card number; we receive a token and the last 4 digits.

2. How we use your information

• To provide telehealth care, including provider review of your intake, prescription review, and refill management.
• To coordinate with our pharmacy and shipping partners (e.g., LegUp Recovery / VialsRX) to fulfill your prescription.
• To send appointment, refill, and clinical reminders by email or SMS.
• To improve our service: aggregated, de-identified analytics only.

3. How we share your information

We share information only with:

• Your assigned clinical provider(s) on the RoadieForge platform.
• Our HIPAA-covered partners who fulfill orders, ship medications, or process payments — under signed Business Associate Agreements where required.
• Law enforcement or regulators when required by law (e.g., subpoena, court order).

We never sell your health information.

4. Your choices

• Access & correction: log in to your portal at roadieforge.com/portal to view and update your profile, or email privacy@roadieforge.com.
• Disconnect wearables: any wearable connection can be removed from portal → tracker; historical data is retained so your provider keeps full context unless you request deletion.
• Marketing: opt out of marketing emails via the unsubscribe link in any message.
• Account deletion: email privacy@roadieforge.com to request deletion. Note: medical records may be retained for the period required by applicable state law.

5. Security

We use TLS for all data in transit, encryption at rest for sensitive data (including wearable refresh tokens), role-based access control inside our application, and audit logging on clinical data access.

6. Children

Our service is intended for adults 18 and over. We do not knowingly collect data from minors.

7. Changes to this policy

We will post the updated policy here and update the “Effective Date” above. For material changes, we will notify you by email at least 30 days before they take effect.

8. Contact

Privacy Officer · RoadieForge Health, Inc. · privacy@roadieforge.com