Privacy Policy
Effective Date: September 23, 2026
1. Introduction
This Privacy Policy explains how Peppi Health ("Peppi," "we," "us," or "our") collects, uses, and shares information about you when you visit the peppihealth.com website or use services made available through the Peppi platform (the "Site"). By using the Site, you consent to the practices described in this Privacy Policy.
2. Definitions
As used in this Privacy Policy:
"Personal Information" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.
"Processing" means any operation or set of operations performed on Personal Information, whether or not through automated means.
"Service Providers" means third-party entities that process Personal Information on our behalf.
"Professional Entity" means an independent professional medical entity through which licensed healthcare providers may provide clinical services made available through the Peppi platform.
"Site" means the website operated by Peppi, including all features, functionality, and content available through peppihealth.com and its related subdomains.
3. Information We Collect
3.1 Personal Information
We may collect Personal Information that you voluntarily provide to us, including:
Contact information, such as your name, email address, phone number, and postal address
Account information, such as your username and password
Profile information, such as your preferences and interests
Transaction and billing-related information associated with services made available through the platform
Communications, including emails, chat messages, customer support communications, and feedback
Health-related or other information you choose to submit through the platform
Any other information you choose to provide
Payment card information may be collected and processed by designated third-party payment service providers or other applicable service providers. Peppi may receive transaction-related information associated with those payments without necessarily receiving or storing complete payment card credentials.
3.2 Automatically Collected Information
When you visit the Site, certain information about your device and use of the Site may be collected automatically, including:
Device information, such as browser type, operating system, and device type
Usage data, such as pages visited, time spent on pages, and referring websites
Location information, such as IP address and general geographic location
Log information, such as error reports and activity patterns
3.3 Cookies and Similar Technologies
What Are Cookies
Cookies are small data files placed on your computer or mobile device when you visit a website. Website operators commonly use cookies to make their websites function properly or more efficiently and to collect reporting and analytics information.
Types of Cookies We Use
Essential Cookies: These cookies are necessary for the Site to operate properly. They may enable access to secure areas of the Site or support essential functionality. Essential cookies generally cannot be disabled without affecting the operation of the Site.
Preference Cookies: These cookies allow the Site to remember information that affects how the Site behaves or appears, such as language preferences or geographic region. Disabling these cookies may affect certain aspects of your user experience.
Analytics Cookies: These cookies help us understand how visitors interact with the Site by collecting information regarding Site usage and performance. We may use analytics providers, including Google Analytics, to help us understand how users interact with the Site.
Marketing Cookies: These cookies may be used to understand activity across websites and help deliver advertising that may be more relevant to users. Peppi may use advertising technologies provided by third-party advertising platforms, including Google and Meta.
Specific Cookie Technologies
Depending on the technologies enabled on the Site, cookies may include:
Cookie Name | Provider | Purpose | Typical Expiration |
|---|---|---|---|
_ga | Google Analytics | Used to distinguish users | 2 years |
_gid | Google Analytics | Used to distinguish users | 24 hours |
_gat | Google Analytics | Used to manage request rates | 1 minute |
_fbp | Meta Pixel | Used by Meta in connection with advertising | 180 days |
_gcl_au | Google Ads | Used in connection with advertising functionality | 3 months |
Your Cookie Choices
Most web browsers accept cookies by default. You can usually configure your browser to remove or reject cookies. Please note that removing or rejecting cookies may affect the availability or functionality of certain portions of the Site.
You may manage cookie preferences by:
Adjusting your browser settings to reject or remove cookies.
Using any cookie preference controls made available on the Site.
Using opt-out mechanisms made available by applicable analytics or advertising providers.
Google Analytics provides a browser opt-out tool through Google.
4. Use of Artificial Intelligence
Peppi may use artificial intelligence ("AI") technologies to support its non-clinical administrative and technology services, enhance user experience, improve operations, and process information.
AI technologies may be used to:
Analyze user interactions with the Site
Process and respond to user inquiries
Assist with content creation and management
Enhance security and fraud detection
Support the delivery of non-clinical platform services
Improve services and develop new functionality
By using the Site or Services, you acknowledge that AI technologies may be used as part of the platform's operations.
We may implement safeguards in connection with the use of AI, including human review where appropriate. However, AI-generated content or responses may not always be complete, accurate, or error-free.
Peppi does not use AI to independently practice medicine, diagnose medical conditions, prescribe medication, or substitute for the independent professional judgment of licensed healthcare providers.
We do not use AI to make automated decisions that significantly affect you without appropriate human oversight.
5. How We Use Your Information
We may use the information we collect to:
Provide, maintain, operate, and improve the Site
Facilitate services made available through the platform
Facilitate transactions and provide related information
Respond to comments, questions, inquiries, and requests
Send confirmations, technical notices, updates, security alerts, and administrative or support communications
Communicate regarding products, services, offers, promotions, and events
Monitor and analyze trends, Site usage, and activity
Detect, investigate, and prevent fraudulent transactions and other unlawful activity
Protect the rights, property, and security of Peppi, users, service providers, and others
Comply with applicable legal and regulatory obligations
Improve our services and develop new features
Where clinical services are involved, Personal Information may also be used by the applicable Professional Entity and licensed healthcare providers in accordance with their own privacy practices and applicable law.
6. Information Sharing
We may share information with:
Service Providers that perform services on our behalf, including hosting, technology, analytics, communications, customer support, security, and administrative providers
Professional Entities and licensed healthcare providers in connection with clinical services made available through the platform
Independent pharmacies in connection with the fulfillment of prescriptions or medication orders
Laboratories or other healthcare-related service providers, where applicable
Designated payment service providers and other parties involved in facilitating transactions
Professional advisors, including attorneys, accountants, bankers, auditors, and insurers
Government agencies or authorities where required by law or where reasonably necessary to protect legal rights
Business partners with your consent
Other parties where you direct or consent to the disclosure
Parties involved in a corporate transaction, such as a merger, acquisition, financing, restructuring, or sale of assets
6.1 Categories of Service Providers
We may share information with categories of Service Providers including:
Cloud hosting and storage providers
Technology infrastructure providers
Payment service providers
Analytics providers
Customer support providers
Email, communications, and messaging providers
Marketing and advertising partners
Security and fraud prevention services
Professional Entities and healthcare-related service providers
Pharmacies and fulfillment partners
Laboratories, where applicable
6.2 Information Sharing for Business Purposes
We may share Personal Information for business purposes including:
Auditing relating to interactions with users
Detecting security incidents and protecting against malicious, deceptive, fraudulent, or illegal activity
Debugging and identifying or repairing technical errors
Short-term or transient uses
Performing services on our behalf
Internal research and technological development
Maintaining or verifying the quality, safety, and functionality of our services
Facilitating services provided by Professional Entities and healthcare providers
Facilitating prescription and product fulfillment through independent pharmacies
Supporting laboratory, shipping, communications, administrative, and other services associated with the platform
6.3 Professional Entities, Healthcare Providers, and Pharmacy Partners
When you use the platform to obtain clinical services, relevant information may be shared with the Professional Entity and licensed healthcare providers responsible for evaluating you and providing medical care.
This information may include:
Your name and contact information
Medical history and health information you submit
Information regarding medications, allergies, symptoms, or treatment
Communications relating to clinical care
Other information reasonably necessary for the applicable healthcare provider to provide services
When a licensed healthcare provider issues a prescription, information necessary to fulfill that prescription may be shared with an independent pharmacy.
This information may include:
Your name and contact information
Prescription information
Relevant patient information
Shipping address
Other information reasonably necessary for pharmacy processing and fulfillment
Healthcare providers, Professional Entities, pharmacies, laboratories, and other healthcare service providers may be subject to their own privacy policies, Notices of Privacy Practices, professional obligations, and applicable privacy laws, including HIPAA where applicable.
We encourage you to review privacy notices provided by the applicable healthcare providers and pharmacies.
Peppi does not sell your Personal Information to third parties in the traditional sense of exchanging Personal Information for money.
We share information with third parties where appropriate to provide, operate, administer, secure, improve, and support services made available through the platform.
Certain state privacy laws may define "sale," "sharing," or similar terms more broadly to include certain advertising or marketing activities. To the extent such laws apply, you may have rights to opt out as described in the Your Privacy Rights section below.
Text messaging originator opt-in data and consent will not be shared with third parties for third-party marketing purposes.
Text messaging opt-in data and consent may be provided to vendors, aggregators, telecommunications providers, and other parties involved in providing text messaging services.
7. Data Security
We implement measures designed to protect Personal Information against accidental loss and unauthorized access, use, alteration, or disclosure.
These measures may include:
Encryption of sensitive information in transit and, where appropriate, at rest
Secure servers, networks, and security technologies
Security assessments and testing
Training regarding privacy and security practices
Access controls designed to limit access to Personal Information
Physical security protections where applicable
Backup and disaster recovery procedures
However, transmission of information through the internet is not completely secure.
Although we take measures designed to protect Personal Information, no security system can guarantee absolute security. Accordingly, we cannot guarantee the security of information transmitted through the Site.
8. Data Breach Notification
If a data security incident compromises Personal Information, we will take actions required by applicable law, which may include:
Providing required notifications to affected individuals
Providing information regarding the nature of the incident and information involved
Describing steps being taken to investigate, contain, and mitigate the incident
Providing information regarding steps affected individuals may take to protect themselves
Notifying governmental or regulatory authorities when required by applicable law
Providing additional remediation measures where appropriate based on the nature of the incident
9. Data Retention
We retain Personal Information for as long as reasonably necessary to fulfill the purposes for which it was collected, including to satisfy legal, regulatory, tax, accounting, reporting, security, and operational requirements.
We may retain Personal Information for a longer period where reasonably necessary in connection with a complaint, dispute, investigation, legal claim, or anticipated litigation.
Text messaging originator opt-in data and consent will not be shared with third parties except aggregators, telecommunications providers, and vendors involved in providing text messaging services.
Retention periods may differ depending on the type of information involved. Examples may include:
Account information: for the duration of the account and an appropriate period thereafter based on applicable legal and operational requirements
Transaction information: for the period required for accounting, regulatory, tax, and recordkeeping purposes
Communications with us: for a period reasonably necessary for customer support, operational, legal, and recordkeeping purposes
Marketing preferences: until you opt out or otherwise request deletion, subject to applicable law
Device and usage information: for a period reasonably necessary for analytics, security, and operational purposes
Healthcare records maintained by a Professional Entity, healthcare provider, pharmacy, laboratory, or other healthcare organization may be subject to separate legally required retention periods.
When Personal Information is no longer required, we may securely delete or anonymize it.
Where immediate deletion is not technically possible, such as where information remains in backup systems, we may securely retain and isolate the information until deletion is reasonably possible.
10. Your Privacy Rights
10.1 General Rights
Depending on applicable law, you may contact us to:
Request access to Personal Information about you
Request correction of inaccurate Personal Information
Request deletion of Personal Information
Object to certain Processing of Personal Information
Request restrictions on certain Processing
Request data portability
Opt out of marketing communications
Exercise other privacy rights provided by applicable law
To exercise a privacy right relating to Personal Information controlled by Peppi, contact us at care@peppihealth.com.
Requests relating to medical records or Personal Information controlled by a Professional Entity, healthcare provider, pharmacy, laboratory, or other independent healthcare organization may need to be directed to that entity.
10.2 State-Specific Rights
Depending on Peppi's operations and the applicability of state privacy laws, residents of certain states may have additional rights regarding Personal Information.
Where applicable, Peppi will comply with state-specific privacy requirements and may update this Privacy Policy as legal requirements or Peppi's operations change.
State privacy rights may include, depending on applicable law:
The right to know or access certain Personal Information
The right to request deletion
The right to request correction
The right to obtain a portable copy of certain information
The right to opt out of certain sales, sharing, targeted advertising, or profiling activities
The right to appeal certain privacy request decisions
The right not to receive discriminatory treatment for exercising applicable privacy rights
10.3 Opt-Out Procedures
Marketing Communications
You may opt out of marketing communications from Peppi by:
Clicking the "unsubscribe" link included in marketing emails
Emailing care@peppihealth.com with the subject line "Opt Out of Marketing"
Updating communication preferences through your account, where that functionality is available
You may continue to receive non-marketing communications relating to your account, security, transactions, services, or other administrative matters.
Information Sharing
To request an opt-out of applicable information-sharing practices:
Email care@peppihealth.com with the subject line "Opt Out of Information Sharing."
Identify the category of sharing you are requesting to opt out of.
Include sufficient information for us to reasonably identify and authenticate your request.
Certain disclosures necessary to provide requested services, comply with law, maintain security, or complete transactions may not be subject to opt-out rights.
Targeted Advertising
You may be able to limit targeted advertising by:
Using applicable cookie preference controls on the Site.
Using industry advertising opt-out tools made available by organizations such as the Digital Advertising Alliance and Network Advertising Initiative.
Adjusting applicable privacy or advertising settings on your device.
Browser, device, and advertising-platform controls may change over time and are maintained by the applicable third parties rather than Peppi.
11. International Data Transfers
Your information may be transferred to and maintained on computers located outside your state, province, country, or other governmental jurisdiction, where privacy laws may differ from those in your jurisdiction.
Peppi's services are intended for users located in the United States.
If you are outside the United States and nevertheless provide information to us, that information may be transferred to and processed in the United States.
Where required by applicable law, appropriate safeguards may be implemented in connection with international transfers of Personal Information. Such safeguards may include:
Contractual protections approved or recognized by applicable authorities
Appropriate agreements with service providers
Transfers based on explicit consent where legally permitted
Other lawful transfer mechanisms available under applicable law
12. Automated Decision Making
Peppi may use automated processes for purposes including:
Fraud detection and security monitoring
Identifying suspicious activity
Customizing content and communications based on Site activity or preferences
Supporting administrative and operational functions
Automated processes may analyze Personal Information to identify patterns or preferences.
Peppi does not use automated systems to independently diagnose medical conditions, determine whether a prescription is medically appropriate, or replace the independent clinical judgment of a licensed healthcare provider.
Where applicable law provides rights regarding decisions made solely through automated Processing that produce legal or similarly significant effects, you may exercise those rights by contacting care@peppihealth.com.
13. Children's Privacy
The Site is not intended for children under 13 years of age.
We do not knowingly collect Personal Information directly from children under 13 through the Site without appropriate authorization.
If you are under 13, do not use or provide Personal Information through the Site.
If we learn that we collected Personal Information from a child under 13 in circumstances prohibited by applicable law, we will take appropriate steps to delete that information.
If you believe we may have information from or about a child under 13, contact us at care@peppihealth.com.
14. Third-Party Links
The Site may contain links to websites, applications, or services operated by third parties, including healthcare providers, Professional Entities, pharmacies, laboratories, technology vendors, or other service providers.
Peppi is not responsible for the content, security, or privacy practices of third-party websites or services.
We encourage you to review the privacy notices and terms applicable to any third-party service you use.
15. Changes to Our Privacy Policy
We may update this Privacy Policy from time to time.
If we make changes, we will post the revised Privacy Policy on this page and update the "Effective Date" shown at the top.
For material changes, we may provide additional notice where appropriate or required by law, such as through email, account notification, or a prominent notice on the Site.
You should periodically review this Privacy Policy for updates.
16. Contact Information
If you have questions regarding this Privacy Policy or Peppi's privacy practices, please contact us at:
Peppi Health
251 Little Falls Dr
Wilmington, DE 19808
USA
Email: care@peppihealth.com
Call: +1 302-499-3831