Privacy Policy

ARVYN LABS LLC ("ARVYN," "we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our website, services, and member portal.

Because ARVYN coordinates physician-guided wellness protocols and handles health-related member data, we maintain privacy practices informed by the Health Insurance Portability and Accountability Act (HIPAA) and applicable state privacy laws, even where we may not be a HIPAA-covered entity. We hold ourselves to this higher standard voluntarily to protect our members.

We may collect the following categories of information:

Personal Identifiers

• Full name, email address, phone number, mailing address
• Date of birth and state of residence
• Account credentials

Health & Wellness Information

• Health intake assessment responses
• Weekly check-in responses (symptoms, energy, metabolic markers)
• Protocol history and compound usage data
• Lab results and clinical notes shared with your care team
• Clinical flags, escalation records, and physician communications

Transactional Data

• Order history, shipping details, and payment records
• Membership tier and billing information

Technical Data

• IP address, browser type, device information
• Usage analytics and session data

• To create and manage your membership account
• To design, assign, and adjust your personalized protocol
• To conduct AI-powered weekly check-ins and generate clinical summaries
• To flag health concerns and route them to your clinical team
• To process and fulfill compound orders through our pharmacy network
• To communicate with you about your protocol, orders, and membership
• To improve our platform, services, and clinical processes
• To comply with applicable legal and regulatory obligations

Although ARVYN may not qualify as a HIPAA-covered entity in all contexts, we voluntarily implement safeguards aligned with HIPAA standards to protect your health information:

• Encryption of health data at rest and in transit (AES-256 / TLS 1.2+)
• Role-based access controls — only authorized clinical and administrative personnel access member health records
• Audit logging of all access to health-related data
• Minimum necessary standard — we limit internal access to only the information required for a specific function
• Business Associate Agreements (BAAs) with pharmacy partners, clinical providers, and technology vendors who access protected health information
• Incident response procedures for potential data breaches, including member notification
• Regular security reviews and staff training on data handling procedures

We do not sell your personal or health information. We may share information only with:

• Licensed clinicians coordinating your protocol and care
• Our vetted 503A pharmacy partners for order fulfillment
• Payment processors for billing and transactions
• Technology service providers operating under data protection agreements
• Law enforcement or regulatory bodies when required by law

All third parties with access to health data are bound by confidentiality and data protection agreements.

We retain your personal and health information for as long as your membership is active and for 90 days following cancellation, after which data is securely archived or deleted in accordance with applicable retention requirements. Certain records may be retained longer where required by law or for legitimate clinical or legal purposes.

Depending on your jurisdiction, you may have the right to:

• Access the personal and health information we hold about you
• Request correction of inaccurate information
• Request deletion of your data, subject to legal retention obligations
• Opt out of non-essential communications
• Receive a copy of your data in a portable format

To exercise any of these rights, contact us at privacy@arvyn.com.

We use essential cookies for site functionality and session management. We may use analytics tools to understand usage patterns. We do not use cookies to track health-related browsing behavior for advertising purposes.

ARVYN is not intended for individuals under the age of 18. We do not knowingly collect information from minors. If we become aware that we have collected data from an individual under 18, we will promptly delete it.

We may update this Privacy Policy from time to time. Material changes will be communicated to active members via email or portal notification. Continued use of our services following any changes constitutes acceptance of the updated policy.

For privacy-related inquiries or to exercise your data rights:

ARVYN LABS LLC
Email: privacy@arvyn.com