Privacy Policy

This Privacy Policy explains how XCeed Health LLC (“XCeed,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you visit our website, complete an intake form, or otherwise interact with our services.

Please read this policy carefully. If you do not agree with it, please do not use our site or services.

1. Who this policy covers, and a note on how XCeed works

XCeed Health LLC is a Delaware limited liability company. It operates a website and marketing platform that connects you with an independent network of licensed physicians and licensed pharmacies. It is important to understand who does what with your information, because different privacy and security rules apply to different parts of that chain:

• XCeed operates the website, marketing, and the accompanying training app and coaching experience. XCeed is not a healthcare provider, does not practice medicine or pharmacy, and does not make medical decisions.
• The physician network is an independent network of licensed physicians. Once you submit a medical intake, your health information is reviewed and held by the physician network, which is subject to HIPAA (the Health Insurance Portability and Accountability Act) as a covered healthcare provider.
• Our pharmacy partners are licensed pharmacies that compound and dispense prescriptions and are separately subject to HIPAA and state pharmacy law.

In plain terms: the intake and medical information you provide is collected through XCeed's website but is reviewed and held by the physician network and pharmacy, who are the parties directly subject to HIPAA for that information. XCeed's role is to operate the website and marketing experience and to facilitate secure handoff of your information to those licensed parties.

To exercise rights over the medical record held by the physician network, including requesting a copy or an amendment, contact the network directly.

2. Information we collect

Information you provide directly

• Contact information: name, email address, phone number, mailing address.
• Account information: username, password, and account preferences.
• Intake and health information: information you provide in a medical intake or questionnaire, including health history, current medications, goals, and other information relevant to a physician's review.
• Payment information: processed by our payment processor. XCeed does not store full payment card numbers.
• Communications: messages you send us, including through customer support, and messages exchanged with your care team through the patient portal or app.

Information collected automatically

• Device and usage information: IP address, browser type, operating system, pages visited, referring URLs, and general location derived from IP address.
• Cookies and similar technologies: see Section 5 below.

Information from other sources

• If you access XCeed through a creator or influencer link, we may receive information about which creator referred you, for attribution purposes. This does not include your health information.

3. How we use information

We use the information we collect to:

• Operate and improve the website, app, and coaching experience.
• Facilitate your intake and connect you with the physician network and pharmacy.
• Process payments.
• Communicate with you about your account, orders, and support requests.
• Measure the performance of our website and our advertising, as described in Sections 4 and 5.
• Send you marketing communications, where permitted, and in accordance with your preferences. You can unsubscribe from marketing emails at any time using the link in any marketing email.
• Maintain the security of our systems and prevent fraud.
• Comply with legal obligations.

We do not use your health information to make advertising or targeting decisions, and we do not sell health information. By health information, we mean your intake and questionnaire answers, health conditions, medications, orders, and prescription status. See Sections 4 and 5 for the limited event information, including that someone clicked to begin our intake questionnaire, that is shared with advertising platforms on our public marketing site.

4. How we share information

We share information only as described here, and never sell your health information.

With the physician network and pharmacy. Your intake and health information is shared with the licensed physician network and, once a prescription is issued, with the dispensing pharmacy, solely to provide you care and fulfill your prescription.

With service providers. We use third-party vendors to operate our technology, including:

• Cloud hosting, email, and text messaging providers.
• Payment processing providers.
• Website analytics providers, including Google Analytics, which runs on our public marketing site only after you consent (see Section 5).

These providers are permitted to use your information only to provide services to us and are contractually restricted from using it for their own purposes.

With advertising platforms, on our public marketing site only. We use the Meta Pixel on our public marketing website (xceedlife.com) to measure and improve the performance of our advertising. The Pixel sends Meta a limited set of information: an event name (that a page loaded, or that someone clicked to begin our intake questionnaire, before any question is shown or answered), a timestamp, the address of the page where the event happened, the browser and click identifiers Meta uses to match the event to an ad, and the IP address and browser information Meta receives automatically when the Pixel loads. We have turned off Meta’s automatic advanced matching, so the Pixel does not read or send contact information you type into forms on our site. We do not send Meta your health goals, medical conditions, questionnaire or quiz answers, orders, or any other intake content, and we do not send Meta the address of any page that names a treatment. We have also enabled Meta’s Limited Data Use setting, which restricts how Meta processes this information for visitors in states where that setting applies.

The Meta Pixel does not run on our product pages, medication landing pages, intake questionnaire, checkout, or patient portal (app.xceedlife.com). If you are located in Washington or Nevada, it does not load unless you give affirmative opt-in consent. Everywhere else, it loads by default, and you can turn it off at any time as described in Section 6.

With our affiliates and their personnel. XCeed does not have its own employees. Management, marketing, and technology services are performed for XCeed by personnel of its affiliates under a written intercompany services agreement. Those personnel may access your information only to perform those services for XCeed, and are subject to the same restrictions described in this policy.

For legal and safety reasons. We may disclose information if required by law, to respond to legal process, or to protect the rights, property, or safety of XCeed, our users, or others.

In a business transfer. If XCeed is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this policy or a successor policy that provides comparable protection.

We do not sell your personal information for money, and we do not share your intake or health information for cross-context behavioral advertising. Some state laws define “selling” or “sharing” broadly enough to include allowing an advertising platform’s pixel to collect information on a website. To the extent our use of the Meta Pixel is treated that way, you can opt out at any time as described in Section 6.

5. Cookies and tracking technologies

We and our service providers use cookies and similar technologies to operate the site, remember your preferences, measure site performance, and, where permitted, support marketing. You can control cookies through your browser settings.

On our public marketing website we use the following:

• Strictly necessary technologies that make the site work, keep it secure, and remember your privacy choices. These always run.
• Our own first-party visitor identifier. We set a cookie that stores a random identifier for up to 30 days, so we can understand how visitors move through our own site and which creator link brought them to us. We do not send this identifier to advertising platforms.
• Google Analytics, which measures site traffic. It loads only after you click to accept analytics in our cookie banner. If you decline, it does not load.
• The Meta Pixel, which measures advertising performance as described in Section 4. It sends Meta only limited event and identifier information, and never health, medical, questionnaire, or intake information.

We do not use any third-party analytics or advertising technology on our product pages, medication landing pages, intake questionnaire, checkout, or patient portal.

Washington and Nevada. If you are located in Washington or Nevada, which we determine from your approximate location based on your IP address, neither Google Analytics nor the Meta Pixel loads until you give affirmative opt-in consent in our cookie banner, consistent with those states’ consumer health data laws.

Everywhere else. Google Analytics loads only if you accept analytics. The Meta Pixel loads by default, and you can turn it off at any time as described in Section 6.

Declining or opting out does not affect your ability to use the site or complete your intake.

6. Your privacy choices and rights

Depending on where you live, you may have rights under state privacy law, including the right to:

• Know what personal information we have collected about you.
• Request deletion of your personal information.
• Correct inaccurate personal information.
• Opt out of the sale or sharing of personal information, and opt out of targeted advertising.
• Not be discriminated against for exercising these rights.

How to opt out of sharing with advertising platforms. Click “Do not sell or share my information” in the footer or cookie banner of our site, or turn on Global Privacy Control (GPC) in your browser. We treat a GPC signal as a request to opt out for that browser. Your choice is saved in that browser, so if you clear your cookies or use a different browser or device, you will need to make the choice again.

A note on health-specific state laws. Some states, including Washington, Nevada, and Connecticut, have laws that specifically regulate “consumer health data,” a category that can be broader than HIPAA and can apply to companies that are not otherwise HIPAA covered entities.

Our Consumer Health Data Privacy Policy explains how we handle consumer health data and the additional rights available under those laws.

To exercise any of these rights, contact us at support@xceedlife.com. We will verify your request before acting on it.

7. Data security

We use administrative, technical, and physical safeguards designed to protect your information. No system is completely secure, and we cannot guarantee the absolute security of your information.

8. Data retention

We retain personal information for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements.

9. Children's privacy

XCeed's services are intended for adults only. We do not knowingly collect information from anyone under 18. If we learn we have collected information from someone under 18, we will delete it.

10. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you as required by law, for example by posting a notice on our site or, where required, by direct communication. The “last updated” date at the top of this page reflects the most recent revision.

11. Contact us

If you have questions about this policy or your information, contact us at:

XCeed Health LLC
2261 Market Street #4048
San Francisco, CA 94114
United States
support@xceedlife.com