Privacy Policy

1. Information We Collect

1.1 Information you give us

• Contact information: name, email, phone number, mailing address.
• Account and intake information: date of birth, self-reported health history, goals, and preferences you submit through intake forms after you enroll as a client.
• Payment information, processed by our third-party payment processor. Y.U. does not store full payment card numbers on its own systems.
• Communications you send us, including messages, appointment requests, and support inquiries.

1.2 Information collected automatically

• Device and usage data: IP address, browser type, pages visited, time on page, referring URL, and general location inferred from IP address.
• Cookies and similar technologies, used for site functionality, analytics, and, where you consent, marketing. See Section 6.

1.3 Information from third parties

• Wearable device and health application data that you choose to connect, limited to the data categories you authorize, and only after you enroll as a client.
• Laboratory and diagnostic results transmitted by a laboratory partner in connection with Clinical Services, which are handled under HIPAA rather than this Policy once received by a Clinical Provider.

2. Before You Enroll: The Health Foundation Quiz and Pre-Registration Screening

Before becoming a client, you may complete a Health Foundation Quiz and a brief pre-registration screening, and you may speak with a member of our team. This section explains exactly what we do and do not collect at that stage.

2.1 We do not create clinical records before you enroll

Completing the Health Foundation Quiz, submitting a pre-registration screening, or speaking with our team does not make you a patient, does not establish a provider relationship, and does not create a medical record. No licensed provider evaluates, diagnoses, or treats you before you enroll. Nothing you share at this stage is used to provide medical care.

2.2 What we collect before you enroll

• Contact information you provide to us.
• Your stated goals, what prompted you to reach out, and what you hope to accomplish.
• What you have previously tried and what has gotten in your way, to the extent you choose to tell us.
• Your readiness to begin and whether our membership structure fits what you are looking for.

2.3 Safety questions, and what we deliberately do not retain

Our pre-registration screening includes a small number of safety questions. They exist for one reason: to ensure we never route a person who may need urgent care into a routine membership conversation.

Responses to these safety questions are used only in the moment, to display appropriate emergency or crisis resources and to direct you to a person rather than an automated booking. We do not store your answers to these questions, we do not add them to any record or profile, and we do not use them for marketing, advertising, profiling, analytics, or any purpose other than your immediate safety.

2.4 If you do not enroll

If you complete the quiz or screening and do not become a client, we retain your contact information and stated goals for up to twelve (12) months so that we can follow up with you if you asked us to, and we then delete it. You may ask us to delete this information sooner at any time by contacting us at the address in Section 12, and we will do so.

2.5 Emergencies

Y.U. does not provide emergency medical services. If you are experiencing a medical emergency, call 911. If you are having thoughts of harming yourself, call or text 988 to reach the Suicide and Crisis Lifeline.

3. How We Use Information

• To provide, maintain, and improve Coaching Services and to schedule and coordinate access to Clinical Services.
• To respond to your inquiry and determine whether our services are a fit for you.
• To process payments and manage your membership.
• To communicate with you about your account, appointments, and service updates.
• With your consent, to send marketing communications, which you may opt out of at any time.
• To analyze aggregated, de-identified usage trends to improve our website and programs.
• To comply with legal obligations and to protect the rights, safety, and property of Y.U., our clients, and the public.

4. How We Disclose Information

• Service providers who perform functions on our behalf, including our electronic medical record platform, supplement dispensary, payment processor, and marketing and analytics tools, under contracts that limit their use of your information to the services they provide us.
• Clinical Providers, for the purpose of coordinating any Clinical Services you elect to receive.
• Legal and safety disclosures, where required by law, subpoena, or court order, or where necessary to prevent harm to you or others.
• Business transfers, in the event of a merger, acquisition, or sale of assets, subject to standard confidentiality protections.

We do not sell your personal information to third parties for their own marketing purposes, and we do not share your personal information for cross-context behavioral advertising.

5. Your Choices and Rights

Subject to applicable law, you may:

• Access the personal information we hold about you.
• Correct or update information that is inaccurate or incomplete.
• Request deletion of your personal information.
• Request a portable copy of the information you provided to us.
• Withdraw consent you previously gave, including consent to marketing or to connecting a wearable device or health application.
• Opt out of marketing communications at any time using the unsubscribe link in any message or by contacting us directly.

To exercise any of these rights, contact us using the information in Section 12. We will respond within forty-five (45) days and will tell you if we reasonably require additional time. Before acting on a request we may need to verify your identity, and we will request only the information reasonably necessary to do so.

We will not discriminate against you, deny you services, or charge you a different rate for exercising any of these rights.

For information governed by HIPAA, your rights, including access, amendment, restriction, and an accounting of disclosures, are set out in the separate HIPAA Notice of Privacy Practices, which controls.

6. Cookies and Tracking Technologies

We use cookies and similar technologies for the following purposes:

• Strictly necessary cookies, which keep the site functioning and cannot be disabled.
• Analytics cookies, which help us understand how the site is used so we can improve it.
• Marketing cookies, where enabled, which support advertising and measurement.

You can manage non-essential cookies through our cookie preference tool where available, and through your browser settings. Disabling certain cookies may limit site functionality.

We honor Global Privacy Control (GPC) signals where required by applicable law. We do not currently respond to browser Do Not Track signals, because no common industry standard for them exists.

We do not use cookies or tracking technologies to target advertising to you based on any health condition, symptom, or concern you disclose to us.

7. Data Security

We use administrative, technical, and physical safeguards designed to protect your information. These include encryption of account and payment data both in transit and at rest, access controls limiting internal access to client information on a need-to-know basis, and contractual security obligations on the vendors that process information on our behalf. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Data Retention

• Account and general usage information: retained for as long as your account is active and for a reasonable period afterward to comply with legal, accounting, and dispute-resolution obligations.
• Pre-registration inquiry information for individuals who do not enroll: retained as described in Section 2.4.
• Safety screening responses: not retained, as described in Section 2.3.
• Protected health information generated through Clinical Services: retained consistent with Florida medical record retention requirements, as set out in the HIPAA Notice of Privacy Practices.

9. Notification of Security Incidents

If we become aware of a security incident affecting your personal information, we will notify you and, where applicable, the relevant regulatory authorities, in the manner and within the timeframes required by applicable law, including the Florida Information Protection Act.

10. Children's Privacy

Y.U. services are intended for adults. We do not knowingly collect personal information from individuals under 18. If we learn that we have collected such information, we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version with a new "Last updated" date and, for material changes, provide additional notice as required by law.

12. Contact Us

Questions, requests, or complaints about this Privacy Policy or about your information may be directed to: