Privacy Policy

1. Information we collect

You provide:

• Account details (name, email, password).
• Health intake answers, lab uploads, and messages to your care team.
• Payment details (handled by our payment processor; we do not store full card numbers).

Automatically:

• Device and browser information, IP address, and usage events needed to run and secure the site.
• Cookies and similar technologies for sign-in and analytics (see Cookies, below).

2. How we use information

• To create your account and deliver clinical care through Arizona-licensed providers.
• To process payments and memberships.
• To operate, secure, and improve the site.
• To send service messages (visit confirmations, password resets, important policy updates).
• To comply with law and respond to lawful requests.

We do not sell your personal information, and we do not use your PHI for advertising.

3. Service providers (subprocessors)

We share information only with vendors who help us run the service, under contracts that limit how they may use it. When a vendor handles PHI on our behalf, we put a Business Associate Agreement (BAA) in place. Vendors we use today include:

• Healthie — electronic health records, scheduling, and clinician messaging.
• Lovable Cloud (Supabase) — hosting, database, and authentication for non-clinical account data.
• Stripe — payment processing.
• Lovable AI Gateway — the educational Lab Scan tool. See Section 6.

This list is current as of the date above and may change as we add or replace providers.

4. Where your data lives

Clinical records are stored in your Healthie chart. Account and program metadata (email, plan status, visit events) are stored in our cloud database hosted in the United States.

5. Security

We use industry-standard safeguards: encryption in transit, encrypted storage at our cloud providers, role-based access, activity logging, and least-privilege practices. No system is perfectly secure; you can help by using a strong, unique password. Report suspected issues to security@neuvemd.com.

6. Lab Scan and AI

The Lab Scan tool sends the lab values you upload to an AI provider so it can generate a plain-English educational summary. Results are not stored as part of your medical record unless you share them with your clinician. Lab Scan is educational only and is not a diagnosis.

7. Cookies and analytics

We use cookies that are necessary for sign-in and a small number of first-party analytics events to understand how the site is used. You can clear cookies in your browser; doing so will sign you out.

8. Your choices and rights

• Access, correct, or delete your account information by writing to privacy@neuvemd.com.
• Opt out of non-essential email at any time.
• If you live in a state with additional privacy rights (such as California), you may exercise those rights by contacting us at the address above; we will not discriminate against you for doing so.

Note: clinical records held by your treating clinician are governed by HIPAA and Arizona law, not deleted on request.

9. Retention

We keep account data for as long as your account is active and for a reasonable period afterward to meet legal and operational needs. Clinical records are retained per Arizona medical-record requirements.

10. Children

NEUVÉ is for adults 18 and older. We do not knowingly collect information from children.

11. Changes to this Policy

We will post material changes here with a new “Last updated” date.

12. Contact

Neuve Health, LLC · Gilbert, Arizona, United States
Privacy: privacy@neuvemd.com
Security: security@neuvemd.com