1. Who We Are

ZENKAI Health LLC ("ZENKAI," "we," "us," or "our") operates the website zenkai.health and related telehealth services. Our registered address is 330 North Wabash Avenue, 23rd Floor, Chicago, IL 60611. Questions about this policy: privacy@zenkai.health.

2. Information We Collect

Information you provide directly

• Account information: Name, email address, phone number, date of birth, state of residence
• Health information: Medical history, current medications, symptoms, height, weight, and other health data you provide in your intake assessment
• Payment information: Credit/debit card details, billing address (processed by Stripe — we do not store full card numbers)
• Communications: Messages you send to our care team or AI coaching system

Information collected automatically

• IP address, browser type, device identifiers
• Pages visited, time spent, referral source (for analytics)
• Cookies and similar tracking technologies (see Section 7)

3. How We Use Your Information

• To facilitate provider review and prescription services
• To coordinate pharmacy fulfillment and medication delivery
• To provide AI coaching, progress tracking, and ongoing care support
• To process payments and manage your subscription
• To communicate with you about your care, orders, and account
• To comply with applicable laws, regulations, and legal obligations
• To improve our services through de-identified, aggregated analytics

4. HIPAA Notice

Your health information constitutes Protected Health Information (PHI) under the Health Insurance Portability and Accountability Act (HIPAA). ZENKAI and its affiliated medical providers comply fully with HIPAA requirements. Your PHI will not be sold, rented, or shared with third parties except as required to provide your care or as required by law.

Permitted disclosures of your PHI include: your treating provider and care team, the pharmacy filling your prescription, our technology vendors under Business Associate Agreements (BAAs), and as required by law (e.g., court orders, public health reporting).

You have the right to: access your health records, request corrections, receive an accounting of disclosures, and file a complaint with the U.S. Department of Health and Human Services. To exercise these rights, contact privacy@zenkai.health.

5. Information Sharing

We do not sell your personal information. We share information only as follows:

• Medical providers: licensed providers who review your intake and issue prescriptions
• Pharmacies: State-licensed compound pharmacies that fill and ship your prescription
• Payment processors: Stripe, Inc. for payment processing (their privacy policy governs their use)
• Technology vendors: Hosting, analytics, and communication tools under strict data processing agreements
• Legal requirements: When required by applicable law, regulation, or valid legal process

6. Data Retention

We retain your account and health information for as long as your account is active and for a minimum of 7 years after closure as required by applicable healthcare regulations. Payment records are retained for 7 years for tax and accounting purposes. You may request deletion of non-health data by contacting us, subject to our legal retention obligations.

7. Cookies and Tracking

We use cookies and similar technologies for: session management (required for the site to function), analytics (understanding how users interact with our site), and advertising (to show you relevant ads on third-party platforms). You may disable non-essential cookies through your browser settings. Note that disabling cookies may affect site functionality.

8. Your Rights

Depending on your state of residence, you may have rights including: access to your personal data, correction of inaccurate data, deletion of certain data, portability of your data, and opting out of certain uses. California residents have additional rights under CCPA — see our California Privacy Notice. To exercise any of these rights, contact privacy@zenkai.health.

9. Security

We implement administrative, technical, and physical safeguards appropriate to the sensitivity of health information, including encryption in transit (TLS 1.2+), encryption at rest, access controls, and regular security assessments. No system is completely secure. In the event of a breach affecting your PHI, we will notify you as required by HIPAA and applicable law.

10. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email to your registered address. Continued use of ZENKAI services after notice of changes constitutes acceptance of the updated policy.