Jiffy Health Rx

1. Introduction

Jiffy Health Rx, operated by Allsource Management Incorporated ("Company," "we," "us," or "our"), is a technology platform that connects patients with independently licensed healthcare providers ("Providers"). We do not provide medical advice, diagnose conditions, prescribe medications, or deliver healthcare services. All clinical care is provided solely by Providers who use our Platform.

This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our technology platform ("Platform"). We are committed to protecting the privacy and security of your personal and health information.

2. HIPAA Compliance

As a technology platform that stores and transmits protected health information (PHI) on behalf of Providers, we operate as a Business Associate under the Health Insurance Portability and Accountability Act (HIPAA). We maintain appropriate administrative, physical, and technical safeguards to protect the confidentiality, integrity, and availability of PHI stored on our Platform.

We enter into Business Associate Agreements (BAAs) with Providers who use our Platform and with all third-party service providers that access, store, or transmit PHI on our behalf. Providers are independently responsible for their own HIPAA compliance as Covered Entities.

3. Information We Collect

Our Platform stores the following categories of information, which may be entered by you or by your Provider in the course of your care:

Account Information: Name, email address, phone number, and date of birth provided during registration.
Health Information: Medical history, diagnoses, medications, lab results, questionnaire responses, and other clinical information entered into the Platform by you or by your Provider. This information is used by Providers to deliver clinical care; we store it on their behalf but do not use it to make clinical decisions.
Payment Information: Billing details processed through our secure third-party payment processor. We do not store full credit card numbers on our servers.
Usage Data: IP address, browser type, device information, and access logs collected automatically for security and compliance purposes.
Communications: Messages sent through the Platform's secure messaging system between you and your Provider.

4. How We Use Your Information

We use your information to operate and maintain the Platform, including to:

Provide the technology tools that enable Providers to deliver care
Facilitate secure communication between you and your Provider
Process payments and maintain billing records
Store lab results, documents, and other records on behalf of Providers
Send appointment reminders and Platform notifications (no PHI included in notifications)
Authenticate your identity and maintain account security
Comply with legal and regulatory obligations
Improve the Platform's functionality and reliability

We do not use your health information to make clinical decisions, recommend treatments, or for marketing purposes. Clinical use of your information is solely at the direction of your Provider.

5. Information Sharing

We do not sell your personal or health information. We share information only in the following circumstances:

Your Provider: Your health information is accessible to the independently licensed Provider assigned to your care through the Platform. Providers are third parties who use our Platform to deliver clinical care under their own medical licenses — they are not our employees or agents.
Third-Party Service Providers: We use third-party technology services to operate the Platform, including cloud hosting, payment processing, SMS notifications, and video conferencing. All third-party service providers that handle PHI have signed BAAs with us. No PHI is included in SMS or email notifications.
Legal Requirements: We may disclose information when required by law, court order, or governmental regulation.

6. Data Security

We implement industry-standard security measures to protect your information:

All data is encrypted at rest and in transit (TLS/SSL)
Database hosted on a HIPAA-compliant dedicated infrastructure with a signed BAA
Multi-factor authentication required for all user accounts
Automatic session timeout after 30 minutes of inactivity
Audit logging of all access to patient records
No protected health information included in email or SMS notifications

7. Data Retention

We retain health records in accordance with applicable state and federal law. Account and billing information is retained for the duration of your account and as required for tax and legal compliance. You may request deletion of your account by contacting us, subject to our legal retention obligations.

8. Your Rights

You have the right to:

Access health records stored on the Platform through your patient portal
Download documents, lab results, and visit records from the Platform
Request corrections to your account information
Request deletion of your account (subject to legal retention requirements)
Receive a copy of this Privacy Policy

Because your Provider is the Covered Entity responsible for your clinical care, HIPAA rights related to your health records — including requests for an accounting of disclosures or restrictions on the use of your PHI — should be directed to your Provider. We will cooperate with your Provider to fulfill such requests.

For questions about your account or the data we store, please contact us at info@jiffyhealthrx.com.

9. Cookies and Tracking

We use essential cookies to maintain your session and authenticate your access to the Platform. We do not use third-party advertising or tracking cookies. No PHI is stored in cookies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Platform or by email. Your continued use of the Platform after changes are posted constitutes acceptance of the revised policy.

11. Contact

If you have questions about this Privacy Policy or our privacy practices, please contact us at info@jiffyhealthrx.com.