RepeatMD Privacy Policy

Last Updated: July 23, 2026

RepeatMD, Inc. ("RepeatMD," "we," "our," or "us") respects your privacy and is committed to protecting it through our compliance with this Privacy Policy. This Privacy Policy describes the types of information we may collect from you or that you may provide when you use our websites (including repeatmd.com), our Patient Rewards web and mobile application (available at repeatmd.app and in the Apple App Store and Google Play), and our platform (collectively, the "Services"), and our practices for collecting, using, maintaining, protecting, and disclosing that information.

RepeatMD provides the Services on behalf of the medical practices, aesthetic and wellness businesses, and other organizations that contract with us to use the Services to offer their own rewards, membership, financing, and ecommerce programs to their patients and customers (each, a "Provider"). RepeatMD is a business-to-business-to-consumer service provider: we act on behalf of Providers to deliver the Services, and in many cases we process your Personal Information as a service provider or processor acting on a Provider's instructions. This Privacy Policy applies only to information collected through the Services. It does not apply to the separate and independent privacy practices of any Provider or other third party, which are governed by their own privacy policies and notices.RepeatMD is responsible for the Personal Information under its control, including information processed by service providers on our behalf. We require our service providers to protect Personal Information through contractual and appropriate security measures.

A note about your Provider. Your Provider may be a licensed health care provider. Medical records and other health information your Provider maintains about you in its own systems are governed by your Provider's own privacy practices and, where applicable, laws such as HIPAA or provincial health information laws — not by this Privacy Policy. Where we receive information from your Provider, we use it only to deliver the Services on that Provider's behalf.

By accessing or using the Services, you acknowledge this Privacy Policy. If you do not agree with our policies and practices, please do not use the Services.

1. Information We Collect

We collect several types of information from and about users of the Services. As used in this Privacy Policy, "Personal Information" means information that identifies, relates to, describes, or is reasonably capable of being associated with a particular individual. Personal Information does not include publicly available information or information that has been de-identified or aggregated so that it can no longer reasonably be associated with an individual.Purpose of Collection

We collect Personal Information only for purposes that are reasonable and appropriate in the circumstances and only the amount of Personal Information necessary to provide the Services, support our relationship with Providers, fulfill our legal and contractual obligations, and perform the activities described in this Privacy Policy. Where required by applicable law, we identify the purposes for collecting Personal Information at or before the time of collection.

Depending on how you use the Services, the Personal Information we collect may include the following categories:

• Identifiers, such as your name, email address, phone number, date of birth, account identifiers, device identifiers, and IP address;

• Protected classification characteristics, such as gender, age, or date of birth;

• Commercial information, such as memberships, packages, and treatments you purchase, rewards you earn or redeem, RepeatCash and gift card balances and transactions, and purchase and transaction history — including transaction records your Provider shares with us from its practice-management, electronic medical record ("EMR"), or point-of-sale systems (see "Information We Receive from Providers" below);

• Health and wellness information, such as the aesthetic or wellness treatments, memberships, and services you purchase or express interest in; your responses to assessments, surveys, or questionnaires; and AI-generated assessment results such as skin analyses and treatment recommendations (see "Consumer Health Data" in Section 8);

• Biometric information, such as facial photographs and face-derived data you choose to submit for AI-powered aesthetic assessments — collected only with your consent (see "Biometric Information" in Section 9);

• Audio and electronic information, such as recordings or transcripts of calls with us or with AI-powered assistants acting on a Provider's behalf, and your chat interactions with our support team or AI advisor features;

• Internet or other electronic network activity, such as your interactions with the Services, app usage events, session data, and device and connection information;

• Inferences drawn from the above to personalize your experience, such as treatment or product recommendations; and

• Sensitive Personal Information, limited to the health-related and biometric information described above. We collect Sensitive Personal Information only with your consent where required, and use it only for the purposes described in this Privacy Policy and as permitted by law.

We do not collect Social Security numbers, driver's license numbers, financial account passwords, precise geolocation from your device, or information about your religious beliefs, citizenship, or union membership through the Services.

Information You Provide to Us

You provide information directly to us when you create an account, complete your profile, make a purchase, take an assessment, respond to a survey, participate in a referral program, or contact us for support. This information may include:

• Account and profile information. Registration is based on your mobile phone number, which we verify by text message. During onboarding we also collect your first and last name, email address, date of birth, gender (optional, with a "prefer not to say" option), how you heard about your Provider, and your Provider location.

• Purchase and checkout information. When you purchase memberships, packages, treatments, or gift cards, we collect order details and any address information you provide. Payments are processed by our payment processors (see Section 3); we do not collect or store your full payment card number.

• Assessment and consultation information. If you choose to take an aesthetic or wellness assessment, we collect your responses and, with your consent, facial photographs used to generate your results.

• Communications. The contents of your messages with us, including support chats and conversations with AI advisor features.

• Referral information. If you participate in a Provider's refer-a-friend program, we collect the information needed to run it. If you refer a friend, your name may be shown to the person you referred, and you will be able to see the status of your referrals. Please only refer people who would want to hear from your Provider.

We do not offer sign-in through third-party or social media accounts; you sign in with your phone number and a one-time verification code.

Information We Receive from Providers and Their Systems

Where your Provider has connected its practice-management, EMR, booking, or point-of-sale system to the Services (for example, AestheticRecord or another supported system), we may receive information from that system so that your purchases, memberships, and visits are reflected in your rewards account. This may include your name, email address, phone number, date of birth, membership and package status, and transaction records such as invoices, line items, amounts, taxes, and payment status. We use this information to operate the Services on your Provider's behalf — for example, to award the rewards you have earned. We may also sync information back to your Provider's system (for example, purchases you make through the Services) so your Provider has an accurate record.

We may also receive information about you from Providers directly (for example, when a Provider enrolls its existing clients in its rewards program), and from service providers that help us verify and enrich contact information. We may combine information we receive from these sources with information we already have about you.

Information We Collect Automatically

As you navigate through and interact with the Services, we automatically collect certain information about your device, browsing actions, and usage patterns, including traffic data, logs, pages and screens you view, features you use, and information about your device and internet connection (including your IP address, operating system, device model, and browser type).

The technologies and services we use for this collection include:

• Product analytics. We use Twilio Segment and Customer.io to collect analytics about how you use the Patient Rewards application and to power in-app, email, and text communications. These tools receive profile information (such as your name, email address, and phone number) along with usage events.

• Performance monitoring and session replay. We use Datadog to monitor the performance and reliability of the application. This includes session replay technology that records a sample of user sessions (screens viewed, interactions, and errors) so we can diagnose problems and improve the Services.

• Support tooling. If you use in-app support chat, our support platform (Intercom) processes your communications and related account information.

• Mobile attribution. In our native mobile apps, we use AppsFlyer to understand which marketing channel or link led you to install the app and to route deep links.

• Cookies and similar technologies. Our websites and applications use cookies, local storage, and similar technologies to keep you signed in, remember your preferences, and perform the analytics described above. Our marketing website (repeatmd.com) may additionally use website analytics tools such as Google Analytics.

• Push notifications. If you enable push notifications in our mobile app, we collect a device push token so we can send them. You can turn push notifications off at any time in your device settings.

We do not use third-party advertising cookies or pixels in the Patient Rewards application, and we do not use the information we collect to serve you ads on other companies' websites or apps.

Tracking Choices; Opt-Out Preference Signals

You can set your browser or device to refuse some or all cookies, or to alert you when cookies are being sent; if you disable cookies, some parts of the Services may not function properly. You can control mobile-app tracking through your device's operating system settings (including iOS App Tracking Transparency and the Android advertising ID controls), and you can disable push notifications in your device settings.

We do not sell Personal Information and we do not share it for cross-context behavioral (targeted) advertising, so there is generally no "sale" or "sharing" to opt out of. Where applicable law treats an opt-out preference signal such as the Global Privacy Control ("GPC") as a valid request to opt out of the sale or sharing of Personal Information or of targeted advertising, we will honor it as required for that browser or device. There is currently no industry consensus on how to respond to browser "Do Not Track" signals, and our systems do not respond to them.

2. How We Use Information

We use the information we collect to:

• Supply, operate, and improve the Services, process transactions and rewards on our platform, and personalize your experience;

• Administer your Provider's rewards, membership, referral, and financing programs, including calculating, validating, and redeeming rewards and syncing your activity with your Provider's systems;

• Generate assessment results and recommendations you request, including AI-assisted analyses performed with your consent;

• Communicate with you, including account and transaction notices, rewards notifications, appointment- and membership-related messages, and — with your consent where required — marketing communications sent on our own behalf or on behalf of your Provider;

• Provide customer support and respond to your requests;

• Perform statistical analysis and improve the functionality, security, and performance of the Services;

• Detect, prevent, and investigate fraud, misuse, and security incidents;

• Comply with our legal obligations, enforce our agreements, and protect our rights and the rights of others.

We collect and use Personal Information only as reasonably necessary to provide the Services you and your Provider request and for the purposes disclosed in this Privacy Policy. We do not use your Personal Information for automated decisions that produce legal or similarly significant effects about you without human involvement.

3. How We Disclose Information

RepeatMD does not sell your Personal Information, and we do not share it for cross-context behavioral advertising. We never sell health-related or biometric information. We disclose Personal Information only in the following circumstances:

• Your Provider. We share your Personal Information with the Provider whose program you participate in so the Provider can operate its rewards, membership, and ecommerce programs; validate and redeem rewards; send you offers and communications; provide services to you; troubleshoot; and prevent fraud. Your relationship with your Provider is direct, and your Provider's use of your information is governed by its own privacy practices.

• Service providers. We share Personal Information with vendors that process it on our behalf and under contract, including: cloud hosting and storage (Amazon Web Services); payment processing (Stripe) and patient financing (Beautifi, if you choose to apply); text messaging and voice (Twilio); email delivery (Amazon SES); customer engagement and messaging (Customer.io, Twilio Segment); analytics and performance monitoring (Datadog, AppsFlyer); customer support (Intercom); search (Algolia); tax calculation (Avalara); CRM and business operations (Salesforce, NetSuite); practice-management/EMR integration partners connected by your Provider (such as Zenoti); and AI service providers that process data to deliver features you use, such as assessment analysis and image generation (Google Cloud / Vertex AI), conversational assistants (Anthropic, OpenAI), and AI voice calling (ElevenLabs). These providers may use Personal Information only as necessary to perform services for us and are contractually prohibited from using it for their own purposes.

• Referral participants. If you are referred by a friend, we may show you the first name of the person who referred you; if you refer friends, you can see the status of the referrals you made.

• Related companies. We may share Personal Information with our affiliates and related companies, who will use it consistent with this Privacy Policy.

• Business transfers. In connection with a merger, acquisition, financing, reorganization, or sale of assets, Personal Information may be transferred as part of that transaction, subject to this Privacy Policy's commitments.

• Legal requirements. We may disclose information where required by law or where we reasonably believe disclosure is necessary to comply with legal process or government requests, to protect the rights, property, or safety of RepeatMD, Providers, patients, or others, or to prevent fraud, abuse, or security incidents.

• Aggregated or de-identified data. We may create and use aggregated or de-identified information that cannot reasonably be used to identify you, and we commit to maintaining it in de-identified form and not attempting to re-identify it.

4. Rewards Programs — Notice of Financial Incentive

The Services power rewards and loyalty programs offered by your Provider. Because these programs provide benefits (such as points, RepeatCash, discounts, or perks) in connection with the collection of Personal Information, they may be considered a "financial incentive" or "bona fide loyalty program" under certain state privacy laws.

• Material terms. Program benefits, earning rules, and redemption rules are set by your Provider and presented in the app when you enroll. The categories of Personal Information involved are identifiers, commercial information (purchases and reward activity), and program participation data.

• Opt-in and withdrawal. Participation is voluntary. You opt in by creating an account and participating in your Provider's program, and you may withdraw at any time by deleting your account (see Section 6) or contacting us at privacy@repeatmd.com. Withdrawal may mean forfeiting unredeemed rewards, subject to your Provider's program terms.

• Value of your data. We estimate in good faith that the value of the Personal Information collected in connection with the program is reasonably related to the value of the benefits provided to you, based on the expenses we and your Provider incur in providing those benefits.

• Effect of privacy requests. If you exercise a deletion or opt-out right, you may lose access to program benefits that depend on the deleted information, but you will not otherwise be discriminated against for exercising your privacy rights.

5. Your Choices and Opt-Outs

• Text messages. You may opt out of marketing text messages at any time by replying STOP (or any other reasonable words expressing that you wish to opt out, such as UNSUBSCRIBE, CANCEL, or QUIT) to any message. We honor opt-out requests promptly and in any event within ten (10) business days. Opting out of marketing texts does not stop transactional messages such as verification codes and purchase confirmations, which are necessary to provide the Services.

• Email. You may opt out of marketing emails by clicking the "unsubscribe" link in any marketing email or by emailing us at privacy@repeatmd.com.

• Push notifications. You can disable push notifications at any time in your device settings.

• Cookies and analytics. See "Tracking Choices; Opt-Out Preference Signals" in Section 1.

• Consent withdrawal. Where we process information based on your consent — including consumer health data and biometric information — you may withdraw that consent at any time in the app or by contacting us (see Sections 8 and 9).

Opting out of marketing communications does not affect transactional or service-related messages, such as account notices, security alerts, receipts, and updates to this Privacy Policy. Message and data rates may apply.

6. Your Privacy Rights

Controlling Your Personal Information

• Account. You can review and update your profile information in the app's account settings. You may request deletion of your account at any time directly within the app (Account → Account Details → Delete Account) or by emailing us at privacy@repeatmd.com. When you delete your account, we delete or de-identify the Personal Information associated with it: your profile details (name, email, phone number, date of birth, and gender) are removed, active memberships are cancelled, and remaining records (such as transaction history retained for legal, accounting, and audit purposes) are retained in de-identified form or as required by law or our contracts with Providers. Deleting your RepeatMD account does not delete records your Provider independently maintains in its own systems.

• Email preferences. You can adjust your email preferences at any time using the unsubscribe link in our emails or by contacting us.

State Privacy Rights (United States)

Depending on your state of residence, you may have some or all of the following rights, subject to legal exceptions:

• To confirm whether we process your Personal Information and to access it;

• To obtain a portable copy of Personal Information you provided to us;

• To correct inaccurate Personal Information;

• To delete Personal Information;

• To opt out of targeted advertising, the "sale" of Personal Information, and profiling in furtherance of decisions that produce legal or similarly significant effects (as described above, we do not sell Personal Information, use it for targeted advertising, or engage in such profiling);

• To withdraw consent where processing is based on consent;

• Not to receive discriminatory treatment for exercising your rights; and

• To appeal a refusal to act on your request. If we decline your request, we will explain how to appeal, and if your appeal is denied, you may contact your state Attorney General.

Residents of states with additional rights — including Minnesota's rights to question the result of profiling, obtain a list of the specific third parties to which Personal Information was disclosed, and have data reviewed by a human — may exercise those rights using the same contact methods.

To exercise any of these rights, email us at privacy@repeatmd.com or use the in-app tools described above. We will verify your request using information associated with your account (we will not require you to create a new account or provide government identification to exercise opt-out rights), and where you use an authorized agent, we may require reasonable proof of the agent's authority. We will respond within the time required by applicable law (generally 45 days, extendable where permitted).

7. Your California Privacy Rights

This section applies to California residents and supplements the sections above. It does not apply to information exempted by the California Consumer Privacy Act, as amended (the "CCPA").

In the 12 months prior to the Last Updated date of this Privacy Policy, we collected the categories of Personal Information described in Section 1 — identifiers; characteristics of protected classifications (gender, date of birth); commercial information; health-related and biometric information (Sensitive Personal Information); audio and electronic information; internet or other electronic network activity information; and inferences — from the sources and for the business purposes described in Sections 1 and 2, and disclosed them for business purposes to the categories of recipients described in Section 3. Retention criteria are described in Section 12.

California residents have the following rights:

• Right to Know / Access. You may request the categories and specific pieces of Personal Information we have collected about you, the sources, the business purposes, and the categories of third parties to whom we disclosed it, including a portable copy.

• Right to Correct. You may request that we correct inaccurate Personal Information.

• Right to Delete. You may request deletion of Personal Information we collected from you, subject to statutory exceptions. You can also delete your account directly in the app (see Section 6).

• No Sale or Sharing. We do not sell Personal Information and do not share it for cross-context behavioral advertising, and we have no actual knowledge of selling or sharing the Personal Information of consumers under 16 years of age. If our practices change, we will update this Policy and provide the required opt-out mechanisms first. Where an opt-out preference signal such as the GPC applies, we honor it as described in Section 1.

• Limit Use of Sensitive Personal Information. We collect the Sensitive Personal Information described in Section 1 (health-related and biometric information) only with your consent and use it only for the purposes you requested and as permitted by the CCPA; we do not use or disclose it to infer characteristics about you. Accordingly, we do not offer a separate "Limit the Use of My Sensitive Personal Information" link.

• Right to Nondiscrimination. We will not discriminate against you for exercising your CCPA rights. Participation in rewards programs is governed by the Notice of Financial Incentive in Section 4.

• Shine the Light. California's Shine the Light law (Cal. Civ. Code § 1798.83) permits California residents to request information about disclosure of Personal Information to third parties for their own direct marketing purposes. We do not disclose Personal Information to third parties for their own direct marketing purposes.

To exercise these rights, email privacy@repeatmd.com. We will verify your identity as described in Section 6, and you may use an authorized agent. If we decline to act on your request, you may appeal by replying to our response or contacting us at the same address.

8. Consumer Health Data (Washington, Nevada, and Similar Laws)

Because the Services support health- and wellness-related Providers, some information we collect is "consumer health data" under laws such as the Washington My Health My Data Act and Nevada's consumer health data law — for example, the treatments and services you purchase or seek, your assessment responses and results, and inferences drawn from them.

• Consent. We collect and share consumer health data only with your consent or as necessary to provide services you request. The app asks for your consent before health-related assessment features are used.

• No sale. We do not sell consumer health data, and we will never sell it without the separate, signed authorization those laws require.

• No geofencing. We do not use geofencing around health care facilities to identify, track, or send notifications or advertisements to consumers seeking health care services.

• Your rights. You have the right to confirm whether we collect, share, or sell consumer health data about you; to access it, including a list of the third parties and affiliates with whom we have shared it; to withdraw consent; and to have it deleted. To exercise these rights, email privacy@repeatmd.com. If we deny your request, you may appeal by replying to our response; if your appeal is unsuccessful, you may contact your state Attorney General.

9. Biometric Information

If you choose to use AI-powered aesthetic or wellness assessment features, we collect facial photographs you submit and process them — including through our AI service providers (such as Google Cloud / Vertex AI) — to generate your assessment results, such as skin analyses, harmony scores, and visualization images. Some of this information may be considered "biometric data" or "biometric identifiers" under laws such as the Illinois Biometric Information Privacy Act and the Texas Capture or Use of Biometric Identifier Act.

Biometric information collected through the Ageless assessment experience is governed by the Ageless Privacy Policy, available at ageless.ai/privacy. That policy provides the full disclosures regarding the collection, use, disclosure, retention, and destruction of biometric information. In summary:

• Consent first. We collect and process this information only after you provide informed consent in the app. You may decline, and declining does not affect your ability to use the rest of the Services.

• No sale; limited disclosure. We never sell, lease, or trade biometric information. We disclose it only to the service providers that process it on our behalf to deliver the feature you requested, to your Provider as part of your assessment results, or as required by law.

• Retention and deletion. We retain facial images and derived assessment data until the purpose for collection has been satisfied and in any event no longer than three (3) years after your last interaction with the Services, unless a shorter period is required by law. You may withdraw your biometric consent or request deletion at any time in the app or by emailing privacy@repeatmd.com, and we will delete the data within the time required by applicable law.

• Security. We protect biometric information using the same or greater safeguards we use for other confidential information (see Section 13).

10. Additional State Rights Notes

• Maryland residents. We collect Personal Information only as reasonably necessary to provide the Services you request, and we do not sell sensitive data (including consumer health data) or process Personal Information for targeted advertising.

• Nevada residents (NRS 603A). Nevada law also allows residents to opt out of the "sale" of certain covered information. We do not sell covered information as defined under that law; you may nonetheless submit a verified opt-out request for any future sales by emailing privacy@repeatmd.com. Nevada consumer health data rights are described in Section 8.

• Residents of other states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Indiana, Kentucky, Rhode Island, and others as their laws take effect) have the rights described in Section 6.

11. Canadian Residents

If you reside in Canada, we collect, use, and disclose your Personal Information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws, including Quebec's Act respecting the protection of personal information in the private sector (as amended by Law 25).

• Consent. We rely on your consent to collect, use, and disclose Personal Information. We obtain your express consent for sensitive information, including health-related and biometric information, and for marketing communications. You may withdraw consent at any time on reasonable notice, subject to legal or contractual restrictions, though withdrawal may affect our ability to provide the Services.

• Cross-border transfers. Your Personal Information is stored and processed on servers in the United States and may be accessed by our service providers in other jurisdictions. While outside Canada (or outside Quebec), it is subject to the laws of those jurisdictions. We use contractual and technical safeguards designed to provide comparable protection, and we assess transfers as required by Quebec law.

• Quebec residents. Our designated Person in Charge of the Protection of Personal Information can be reached at privacy@repeatmd.com. You have rights of access, rectification, de-indexing, and — for computerized Personal Information you provided — portability in a structured, commonly used technological format. This Privacy Policy is available in French upon request. We do not use technology that identifies, locates, or profiles you without first informing you and, where required, obtaining your consent.

• Commercial electronic messages (CASL). We send commercial electronic messages (email and text) only with your consent or as otherwise permitted by CASL. Each message identifies the sender and the Provider on whose behalf it is sent, includes contact information, and contains an unsubscribe mechanism that we honor within ten (10) business days.

• Health information. Where your Provider is subject to provincial health information laws (such as Ontario's PHIPA), we act as its service provider/agent and use personal health information only as necessary to provide the Services to that Provider.

• Complaints. You may contact us with any privacy concern at privacy@repeatmd.com. You also have the right to complain to the Office of the Privacy Commissioner of Canada or your provincial privacy regulator (in Quebec, the Commission d'accès à l'information).

12. Data Retention

We retain Personal Information for as long as reasonably necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by law. In general:

• Account and profile information is retained while your account is active and deleted or de-identified when you delete your account (see Section 6);

• Transaction, rewards, and payment records are retained for the period required for accounting, tax, audit, dispute-resolution, and fraud-prevention purposes, and are de-identified when no longer associated with an active account;

• Consumer health data and assessment results are retained until you withdraw consent, delete your account, or request deletion, subject to legal retention obligations;

• Biometric information is retained as described in Section 9;

• Communications and support records are retained as needed to resolve your request and for a reasonable period thereafter;

• Analytics and log data are retained for shorter operational periods and then deleted or aggregated.

13. Security

We take reasonable administrative, technical, and organizational measures designed to protect the information provided via the Services from loss, misuse, and unauthorized access, disclosure, alteration, and destruction. These measures include encryption of data in transit and at rest, managed encryption-key services, role- and platform-scoped access controls, authenticated and signature-verified integrations, audit logging, and continuous monitoring. However, no method of transmission over the internet or method of electronic storage is fully secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and one-time verification codes.We make reasonable efforts to ensure that Personal Information we hold is accurate, complete, and up to date as necessary for the purposes for which it is used.

14. Children

The Services are intended for adults and are designed for use by individuals who can lawfully purchase the services our Providers offer. RepeatMD does not direct the Services to, nor does it knowingly collect Personal Information from, children under the age of 13. If we learn that we have collected Personal Information from a child under 13, we will take reasonable steps to delete that information promptly. We do not sell the Personal Information of minors or use it for targeted advertising. If you believe we might have any information from or about a child under 13, please contact us at privacy@repeatmd.com.

15. Exclusions; Links to Other Websites

This Privacy Policy does not apply to unsolicited ideas, feedback, or suggestions about the Services that you choose to send us, which we may use without restriction, provided that any Personal Information contained in them will be handled in accordance with this Privacy Policy.

The Services may contain links to third-party websites or services that we do not operate or control, including your Provider's own website, booking, and financing pages. This Privacy Policy applies only to the Services. We are not responsible for the privacy practices of third parties, and we encourage you to review their privacy policies.

16. Changes to This Privacy Policy

We may update or modify this Privacy Policy from time to time to reflect changes in our practices or applicable law. If we make material changes, we will provide appropriate notice — such as notice in the app or by email — and, where required by law, obtain your consent. We will update the "Last Updated" date at the top of this Privacy Policy. Your continued use of the Services after such changes indicates your acknowledgment of the revised Privacy Policy.

17. Contacting Us

You may exercise the privacy rights described above, or ask questions about this Privacy Policy, by contacting us:

RepeatMD, Inc. Email: privacy@repeatmd.com