Privacy Policy

TRIM FITT ("we," "us," or "our") operates the TRIM FITT patient portal at patient.trimfitt.com and the TrimScripts mobile application for iOS and Android (together, the "Services"). This Privacy Policy explains how we collect, use, share, and protect information when you use our Services.

TRIM FITT provides telehealth and wellness care, including clinical consultations, personalized treatment protocols, prescription fulfillment, lab coordination, and related patient support. TrimScripts serves two audiences within one app: authenticated TRIM FITT patients who manage their care, and a separate peptide reference and self-tracking experience for users who are not TRIM FITT patients.

By using our Services, you agree to the practices described in this policy. If you do not agree, please do not use the Services.

The information we collect depends on how you use the Services and whether you are a TRIM FITT patient, a clinic partner patient, or a TrimScripts tracker-only user.

Account and identity

• Name, email address, phone number, and mailing address
• Date of birth, gender at birth, and government-issued ID when required for clinical or regulatory purposes
• Login credentials and authentication data managed through our identity provider
• Clinic or referral affiliation, membership status, and account preferences

Health and clinical information

• Intake questionnaires, medical history, symptoms, allergies, medications, and treatment interests
• Consultation notes, care plans, provider recommendations, and lab requests or results
• Consent forms, HIPAA acknowledgments, and other legal documents you sign electronically
• Prescription, dosing, refill, and protocol information related to your treatment
• Messages exchanged with our care team, including messaging channel preferences

Orders, billing, and fulfillment

• Product orders, shipping details, tracking information, and fulfillment status
• Payment method details processed by our payment provider (we do not store full card numbers)
• Invoices, receipts, subscription or membership billing history, and refund records

TrimScripts tracker and wellness tools

• Injection logs, dose amounts, injection sites, reminders, and adherence data you choose to record
• Weight, mood, energy, side-effect, and other self-reported wellness metrics
• Peptide library browsing activity and saved reference content

Information entered in the TrimScripts tracker mode is for your personal reference and self-tracking. It is not a substitute for medical advice, diagnosis, or treatment from a licensed provider.

Technical and usage information

• Device type, operating system, app version, browser type, and IP address
• Log data, crash reports, performance diagnostics, and security event records
• Pages or screens viewed, features used, and interaction timestamps
• Cookies and similar technologies on the web portal where applicable

We use the information we collect to:

• Create and manage your account and authenticate access to the Services
• Provide telehealth consultations, clinical intake, care coordination, and patient support
• Process orders, payments, refills, memberships, and prescription fulfillment
• Share relevant clinical and order information with your assigned providers, clinic partners, pharmacies, and fulfillment partners
• Deliver documents, lab requests, consent forms, appointment scheduling, and care-plan guidance
• Send transactional messages about your account, orders, appointments, and care status
• Operate TrimScripts tracker features such as dosing logs, reminders, and wellness charts
• Improve security, troubleshoot issues, analyze usage, and develop new features
• Comply with legal, regulatory, and clinical documentation obligations

When you are a TRIM FITT patient, much of the information described above may constitute protected health information ("PHI") under the Health Insurance Portability and Accountability Act (HIPAA) and related regulations. We maintain administrative, technical, and physical safeguards designed to protect PHI, including encryption in transit and at rest, access controls, and audit logging.

Our Notice of Privacy Practices, provided during intake and consent flows, describes your HIPAA rights in greater detail, including rights to access, amend, and request an accounting of certain disclosures of your PHI.

We do not sell your personal information. We share information only as needed to operate the Services, provide care, or comply with law:

• Licensed clinicians, medical directors, and care staff involved in your treatment
• Clinic partners when your care is delivered under a partner brand or location
• Pharmacies, compounding partners, laboratories, and shipping carriers fulfilling your orders or tests
• Payment processors such as Stripe to complete transactions securely
• Scheduling providers such as Cal.com for consultation booking
• Messaging infrastructure used to deliver care-team communications you have opted into
• Cloud hosting, authentication, analytics, and security vendors that process data on our behalf under contractual safeguards
• Regulators, courts, or law enforcement when required by law or to protect rights, safety, and security

Service providers are permitted to use your information only to perform services for us and must protect it consistent with this policy and applicable law.

Our Services integrate with third-party platforms that have their own privacy practices, including:

• Clerk for account authentication
• Stripe for payment processing
• Cal.com for appointment scheduling
• Messaging providers used for patient communications
• Apple App Store and Google Play for mobile app distribution

When you leave our Services or interact with a third-party link, that provider's privacy policy governs its handling of your information.

Depending on your relationship with TRIM FITT, you may be able to:

• Access and update profile, contact, and notification preferences in the patient portal or TrimScripts app
• Review and download documents, orders, and clinical records available in your account
• Manage messaging opt-in preferences where offered
• Request correction of inaccurate account information by contacting support
• Request deletion or restriction of certain non-clinical data, subject to legal and medical record retention requirements
• Exercise HIPAA rights described in our Notice of Privacy Practices

To make a privacy request, contact us at support@trimfitt.com. We may need to verify your identity before fulfilling a request.

We retain information for as long as needed to provide the Services, maintain your medical and billing records, resolve disputes, enforce agreements, and meet legal, regulatory, and clinical documentation obligations. Clinical, prescription, and billing records may be retained longer than general account data where required by healthcare laws and professional standards.

When information is no longer needed, we delete or de-identify it in accordance with our retention policies and applicable law.

We use industry-standard measures to protect information, including encrypted connections, role-based access controls, secure cloud infrastructure, and monitoring for unauthorized activity. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

You are responsible for safeguarding your login credentials and notifying us promptly if you suspect unauthorized access to your account.

Our Services are intended for adults. We do not knowingly collect personal information from children under 18 without appropriate parental or guardian involvement and applicable consent. If you believe a child has provided us information without authorization, contact us and we will take appropriate steps.

TRIM FITT is based in the United States and our Services are primarily intended for users in the U.S. If you access the Services from outside the United States, your information may be transferred to, stored in, and processed in the United States, where privacy laws may differ from those in your jurisdiction.

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy on this page and revise the "Last updated" date. Continued use of the Services after changes become effective constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy or our privacy practices, contact us:

• Email: support@trimfitt.com
• Clinical inquiries: trim@trimfitt.com
• Web: patient.trimfitt.com