Consumer Health Data Privacy Policy
Kora Health, LLC
CONSUMER HEALTH DATA PRIVACY POLICY
Last Updated: March 30, 2026
Kora Health, LLC (d/b/a Kora MD) (collectively, “Kora MD,” “our,” “we,” or “us”) values and respects the privacy of its customers and visitors. While operating our business and interacting with you, we may collect, use, and share “Consumer Health Data” as defined by U.S. state consumer health data privacy laws, such as the Washington My Health, My Data Act and Nevada SB370 (collectively, “Consumer Health Data Privacy Laws”). Consumer Health Data Privacy Laws apply to consumers residing in certain states whose consumer health data is collected by Kora MD (“Consumers,” “you,” or “your”) and provides Consumers with specific rights regarding their Consumer Health Data. This Consumer Health Data Privacy Policy (“Consumer Health Data Privacy Policy”) supplements the Kora MD Privacy Policy (“Privacy Policy”) and applies solely to Consumers. Where this Consumer Health Data Privacy Policy conflicts with our general Privacy Policy with respect to consumer health data, this Consumer Health Data Privacy Policy controls.
This Consumer Health Data Privacy Policy provides you with detailed information about how Kora MD and its subsidiaries, divisions, affiliates, brands and other companies that link to this Consumer Health Data Privacy Policy collect, use, and share your Consumer Health Data, and describes your choices and rights. We encourage you to read this Consumer Health Data Privacy Policy carefully and if you have any questions to contact us using the methods listed below.
We reserve the right to make changes to this Consumer Health Data Privacy Policy at any time and for any reason. Any changes will be reflected in a revised Consumer Health Data Privacy Policy posted on our website at koramd.com and we will alert you that there has been a change by updating the “Last Updated” date displayed on the Consumer Health Data Privacy Policy. If we determine that such changes materially affect your privacy rights, we will provide additional notice to you to the email address specified in your account. You are responsible for ensuring we have an up-to-date, active, and deliverable email address for you, and for periodically visiting our website and this Consumer Health Data Privacy Policy to check for any changes. No material reduction in consumer rights will apply to consumer health data previously collected without obtaining new consent.
Definitions
“Consumer Health Data” is defined for purposes of this Consumer Health Data Privacy Policy and the Consumer Health Data Privacy Laws as personal information that is linked or reasonably linkable to a Consumer and that identifies the Consumer’s past, present, or future physical or mental health status.
Consumer Health Data does not include: (a) publicly available information, such as information from government records, information we reasonably believe you made available to the general public, or unrestricted information you have disclosed or made available; (b) deidentified or aggregated consumer information we maintain in deidentified form and do not attempt to reidentify except as required or permitted by law; (c) health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”); and (d) personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (“FCRA”) and the Gramm-Leach-Bliley Act (“GLBA”).
Categories of Consumer Health Data Collected, Purposes for Collection, Use, and Sharing
We may collect your Consumer Health Data in a variety of ways, including when you provide information directly to us through our website, when it is provided to us by our business partners and service providers that perform services for us or for you, and when we derive or calculate it from other information you provide. Sources of Consumer Health Data may include you directly, healthcare providers that provide clinical services through the Platform, pharmacy partners in connection with prescription fulfillment, and data derived from your use of the Platform.
Categories of Consumer Health Data we may collect, use, and share include health conditions, treatments, diseases, diagnoses, medical conditions, health history, history of diagnosis, symptoms, medical recommendations, data that identifies a consumer seeking healthcare services, referrals, consultations, information relating to consulting with a healthcare provider, height and weight information, body measurements, wellness data, vital signs, use or purchase of prescribed medications including compounded medications, medication history, health assessment questionnaire responses, records of your communications and requests with us or one of our partner companies, and other health or medical information.
We collect, use, and share the above-described Consumer Health Data to offer our products and services to you, as directed by you. We may share Consumer Health Data with our trusted service providers, such as website hosting vendors and technology support providers, to provide our services to you. You may direct us to collect, use, and share your Consumer Health Data to facilitate telehealth consultations, coordinate prescription fulfillment through licensed pharmacy partners, administer membership subscriptions, and communicate with you regarding your account and services. We do not sell Consumer Health Data without first obtaining your valid consent.
Your Rights
Subject to certain legal limitations and exceptions, Consumer Health Data Privacy Laws provide you with certain rights you may exercise:
The Right to Confirm. You may request that we confirm whether we collect, share, or sell your Consumer Health Data.
The Right to Access and Request Copies. You may request to access or request a copy of your Consumer Health Data, including a list of all third parties and affiliates with whom we shared or sold the Consumer Health Data.
The Right to Correct. You may request that we correct your Consumer Health Data.
The Right to Withdraw Consent. You may request to withdraw your consent from our collection and sharing of your Consumer Health Data.
The Right to Delete. You may request that we delete your Consumer Health Data.
In order to exercise any of the rights detailed in this Consumer Health Data Privacy Policy, please contact us at privacy@koramd.com. Exercising your rights under this Consumer Health Data Privacy Policy will not result in any discrimination by us. We will treat you the same as any other user.
We may require additional information from you to help us verify your identity and state or country of residence, and to process your request. The verification steps may vary depending on the sensitivity of the information and whether you have an account with us. If we are unable to verify your identity, we may deny your requests. You can designate an authorized agent to submit requests on your behalf. However, we will require written proof of the agent’s permission to do so and must verify your identity directly.
If you make a request to exercise any of the applicable rights and we are unable to comply with your request, or if you disagree with or dispute our decision, you may request to appeal our decision. To appeal any data rights decision, please contact us by email at privacy@koramd.com with the subject line “Data Rights Request Appeal.” If you are still not satisfied with our response after you complete the appeal process with us, you may file a complaint with the Washington State Attorney General through their complaint filing system, available at https://www.atg.wa.gov/file-complaint.
Contact Us
If you have questions or comments about this Consumer Health Data Privacy Policy, please send us an email at privacy@koramd.com. If you prefer, you can also contact us via physical mail at:
Kora Health, LLC
Attn: Privacy
10503 Foundation Road, Austin, TX 78726
Telephone: (855) 597-1248
