Privacy Policy

AA Health Solutions, LLC, operating as Evolve Your Bod (“Evolve,” “we,” “us,” or “our”), provides healthcare coordination services for specific non-emergency medical conditions through telehealth, in-person, hybrid, and mobile care models. If you require urgent medical attention, please dial 911 or contact your local healthcare provider.

Your privacy is of utmost importance to us. This Privacy Policy describes the information we collect, how we use it, how it is shared, and the choices you have regarding your personal data. By using our website and services, you consent to the practices detailed below.

I. Introduction

This Privacy Policy outlines how AA Health Solutions, LLC (DBA: Evolve Your Bod) (referred to as “Evolve,” “we,” “us,” or “our”) collects, uses, stores, and discloses personal and health-related information when you interact with our website EvolveYourBod.com, our mobile applications, or receive services coordinated through any of our care models (collectively, the “Platform”).

Evolve Your Bod operates as a Management Services Organization (MSO) providing technology, scheduling, intake coordination, billing services, marketing, and care coordination to affiliated medical groups, partner clinics, and healthcare providers. Evolve does not practice medicine, does not prescribe medications, and does not directly provide medical care. All clinical services are rendered by independent, licensed healthcare providers and medical groups.

By using our Platform, you acknowledge and consent to the data collection practices detailed in this Privacy Policy, including the handling of sensitive health-related data in accordance with applicable laws, such as the Health Insurance Portability and Accountability Act (HIPAA), the Texas Medical Records Privacy Act, and the California Consumer Privacy Act (CCPA/CPRA).

Important: This Privacy Policy governs the collection and use of personal information by Evolve Your Bod as a technology and coordination platform. For information about how your Protected Health Information (PHI) is used and disclosed for treatment, payment, and healthcare operations, please also refer to our Notice of Privacy Practices at evolveyourbod.com/notice-of-privacy-practices and our PHI / Data-Sharing Authorization.

This Privacy Policy does not cover information collected by third-party services that may link to or integrate with our Platform. We encourage users to review the privacy policies of any external services they interact with.

II. Information We Collect and How We Collect It

A. Personally Identifiable Information

We collect information that allows us to identify and communicate with you, including:

– Full name, date of birth, gender, and contact information (mailing address, email address, phone number).

– Account credentials (username, password, security questions).

– Billing and payment information (credit/debit card details, billing address), processed through secure third-party payment processors.

– Insurance information, including plan details, member ID, group number, and payer information (for In-Person Visit, Hybrid, and Mobile IV services where insurance applies).

– Government-issued identification (if required for identity verification).

– Emergency contact information.

B. Health-Related Data

We collect health information to coordinate your care across our care models, including:

– Medical history, current health conditions, diagnoses, and treatment records.

– Intake questionnaire and screening responses submitted through the Platform.

– Medications, prescriptions, and pharmaceutical records (including compounded medications).

– Laboratory results, diagnostic test results, and imaging reports.

– IV therapy records, including formulations, vitals recorded during treatment, and adverse event documentation.

– Telehealth encounter records, including audio, video, and messaging communications.

– Vital signs, biometric data, and physical examination findings collected by on-site clinical staff at partner clinics, satellite locations, or during mobile IV visits.

– Allergy, medication, and medical history disclosures.

– Lifestyle, dietary, exercise, and wellness information provided during intake.

Note: Health-related data that constitutes Protected Health Information (PHI) under HIPAA is handled in accordance with our Notice of Privacy Practices and PHI / Data-Sharing Authorization, not solely under this Privacy Policy.

C. Technical and Usage Information

We automatically collect certain technical information when you visit or use our Platform, including:

– Device information (device type, operating system, browser type and version, screen resolution).

– IP address and approximate geolocation derived from IP address.

– Pages visited, links clicked, time spent on pages, and navigation patterns.

– Referring URLs and search terms that led you to our Platform.

– Cookies, pixels, web beacons, and similar tracking technologies (see Section VI for details).

D. Marketing and Preference Data

We may collect information related to your service preferences, interests, demographic insights, and responses to surveys or promotional materials.

E. How We Collect Your Information

We collect information from the following sources:

– Direct User Input: Information you voluntarily provide through our website, mobile applications, intake forms, customer support interactions, or during healthcare encounters.

– Automated Tracking: Cookies, analytics tools, and tracking technologies that record site usage patterns and device information.

– Healthcare Providers and Partner Clinics: Information shared by affiliated Medical Groups, partner clinics, satellite site staff, pharmacies, and laboratories in connection with your care.

– Insurance Carriers: Information received from your insurance company during eligibility verification, claims processing, and benefits coordination (for IPV, Hybrid, and Mobile IV services).

– Third-Party Sources: Information from marketing affiliates, analytics services, and identity verification services.

III. How We Use Your Information

Your personal information is used for the following purposes:

A. Healthcare Coordination and Service Delivery

– Processing intake data and coordinating your care across telehealth, in-person, hybrid, and mobile IV care models.

– Sharing your information with affiliated Medical Groups, partner clinics, satellite site staff, pharmacies, and laboratories to facilitate your treatment (as described in our PHI / Data-Sharing Authorization).

– Scheduling appointments, managing care workflows, and facilitating telehealth encounters.

– Coordinating prescription fulfillment with licensed pharmacies, including compounding pharmacies.

– Transmitting physician orders, including IV therapy orders, to on-site or mobile clinical staff.

B. Payment, Billing, and Insurance

– Processing cash-pay transactions for telehealth services.

– For IPV, Hybrid, and Mobile IV services: verifying insurance eligibility, submitting claims, processing pre-authorizations, and coordinating benefits with your insurance carrier. Insurance billing may be performed by the rendering provider, the partner clinic, or by Evolve Your Bod acting as a billing agent on behalf of the rendering provider under a Management Services Agreement (MSA).

– Processing copays, deductibles, coinsurance, and patient-responsibility balances.

– Managing subscription billing, recurring payments, and refund processing.

C. Account Management and Communication

– Creating and managing your user account on the Platform.

– Communicating important updates regarding your care, appointments, prescriptions, and account status.

– Sending promotional communications and healthcare recommendations (with your consent and subject to your opt-out preferences).

– Responding to customer support inquiries and resolving issues.

D. Platform Improvement and Analytics

– Enhancing the Platform’s functionality, performance, and user experience.

– Conducting internal research, analytics, and quality improvement activities.

– Analyzing usage patterns to improve service delivery and identify technical issues.

E. Legal and Regulatory Compliance

– Complying with applicable federal, state, and local laws and regulations, including HIPAA, the Texas Medical Records Privacy Act, and CCPA/CPRA.

– Responding to lawful requests from regulatory agencies, courts, and law enforcement.

– Protecting the rights, safety, and property of Evolve Your Bod, our users, and the public.

– Preventing fraud, unauthorized access, and other prohibited activities.

IV. Information Sharing and Disclosure

Evolve Your Bod does not sell your personal information for monetary compensation. We share your information only when necessary for the purposes described below.

A. Healthcare Providers, Medical Groups, and Partner Clinics

We share your information with affiliated Medical Groups, partner clinics, and licensed healthcare providers to facilitate consultations, diagnoses, treatments, prescriptions, and care coordination across all care models. The specific entities that receive your data depend on your care model:

– Telehealth (TH): Your intake data and health information are shared with the affiliated Medical Group and assigned provider for your telehealth consultation.

– In-Person Visits (IPV): Your intake data is shared with the partner clinic where your appointment is scheduled. The partner clinic receives your data for the purpose of preparing for your visit and rendering care.

– Hybrid (Consult + IV): Your intake data is shared with the satellite/facilitating site, on-site clinical staff, and the rendering Medical Group. On-site nurses receive relevant information for vitals collection, intake facilitation, and IV administration.

– Mobile IV: Your intake data is shared with the rendering Medical Group and the licensed nurse traveling to your location for IV administration.

B. Pharmacies and Laboratories

We share your information with licensed pharmacies (including compounding pharmacies) and laboratories to facilitate prescription fulfillment, medication dispensing, laboratory testing, and diagnostic services.

C. Insurance Carriers and Payers

For In-Person Visit, Hybrid, and Mobile IV services where insurance applies, we or the rendering provider may share your information with your insurance carrier for eligibility verification, pre-authorization, claims submission, and benefits coordination. Insurance billing may be handled by the rendering provider, the partner clinic, or by Evolve acting as a billing agent on behalf of the rendering provider under a Management Services Agreement.

Telehealth services coordinated through the Evolve Platform are cash-pay. No insurance claims are submitted for telehealth-only services.

D. Service Providers and Technology Vendors

We share information with third-party service providers that assist us in operating the Platform and delivering services, including hosting providers, telehealth technology vendors, CRM and patient engagement platforms, payment processors, analytics providers, and email/SMS communication services. These providers are contractually required to protect your information and use it only for the purposes for which it was disclosed. Where these providers handle PHI, Business Associate Agreements (BAAs) are in place.

E. Satellite Site Staff and Mobile IV Field Nurses

For Hybrid and Mobile IV services, we share relevant clinical information with on-site clinical staff at satellite locations and licensed nurses performing mobile IV administration. These individuals receive only the information necessary to facilitate your encounter, collect vitals, and administer treatment under physician direction.

F. Legal and Compliance Disclosures

We may disclose your information when required by law or in response to valid legal process, including court orders, subpoenas, and lawful requests from regulatory agencies or law enforcement authorities. We may also disclose information when we believe in good faith that disclosure is necessary to protect the rights, safety, or property of Evolve Your Bod, our users, or the public, or to prevent fraud or other prohibited activities.

G. Business Transactions

If Evolve Your Bod is involved in a merger, acquisition, sale of assets, corporate restructuring, or similar business transaction, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

H. With Your Consent

We may share your information for purposes not described in this Privacy Policy with your explicit consent.

V. Relationship Between This Privacy Policy, the Notice of Privacy Practices, and the PHI Authorization

Evolve Your Bod maintains three complementary privacy documents. Understanding how they relate to each other is important:

This Privacy Policy governs the collection and use of all personal information by Evolve Your Bod as a technology and coordination platform. It covers website data, account information, marketing data, technical data, and health-related information to the extent it is handled by Evolve in its platform capacity.

The Notice of Privacy Practices (NPP) governs how Protected Health Information (PHI) is used and disclosed for treatment, payment, and healthcare operations by Evolve and its affiliated healthcare providers. It describes your rights under HIPAA. Available at evolveyourbod.com/notice-of-privacy-practices.

The PHI / Data-Sharing Authorization is a standalone consent document that provides your explicit authorization for Evolve to share your health information with the specific entities involved in your care across all care models. It is signed by you as part of the intake process.

Where HIPAA applies to the handling of your health information, the Notice of Privacy Practices and PHI Authorization govern. Where HIPAA does not apply (such as website analytics, marketing data, and non-medical account information), this Privacy Policy governs. In all cases, the most protective standard applies.

VI. Cookies, Tracking Technologies, and Analytics

Our Platform uses cookies, pixels, web beacons, and similar technologies to collect technical and usage information. These technologies serve the following purposes:

A. Essential Cookies

Required for the Platform to function properly. These cookies enable core features such as account authentication, session management, and security. They cannot be disabled without affecting Platform functionality.

B. Analytics Cookies

Used to understand how visitors interact with our Platform, including which pages are visited, how long users stay, and where they navigate. We use analytics tools (such as Google Analytics or similar services) to collect this data in aggregate form.

C. Marketing and Advertising Cookies

Used to deliver relevant advertisements and measure the effectiveness of marketing campaigns. These cookies may be placed by third-party advertising partners and may track your activity across websites.

D. Your Cookie Choices

You may adjust your browser settings to disable or limit cookies. Please note that disabling essential cookies may affect your ability to use the Platform. Most browsers allow you to manage cookie preferences through their settings menus.

Health Data and Tracking Technologies: Evolve Your Bod is committed to ensuring that tracking pixels, analytics tools, and advertising technologies do not transmit Protected Health Information (PHI) to third-party analytics or advertising platforms. We conduct periodic reviews of our tracking implementations to minimize health-data risk from website analytics.

VII. Your Privacy Choices and Rights

A. Cookie Preferences

You may adjust your browser settings to disable cookies and tracking technologies as described in Section VI above.

B. Marketing Opt-Out

You may unsubscribe from promotional emails at any time by clicking the “unsubscribe” link in any marketing email or by contacting us at info@evolveyourbod.com. You may opt out of SMS messages by replying STOP to any text message.

C. Access, Correction, and Deletion

You may request access to, correction of, or deletion of your personal information by contacting us at info@evolveyourbod.com. Requests involving health records or PHI may be subject to applicable medical record retention laws and HIPAA requirements.

D. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know, delete, correct, and opt out of the sale or sharing of personal information. For full details, please refer to our California Privacy Notice at evolveyourbod.com/california-consumer-privacy-act-ccpa-privacy-notice.

E. Texas Privacy Rights

Under the Texas Medical Records Privacy Act (Health & Safety Code Chapter 181), your health information is confidential and may only be disclosed as authorized by you or as permitted by law. You have the right to file a complaint with the Texas Attorney General or the U.S. Department of Health and Human Services Office for Civil Rights if you believe your privacy rights have been violated.

VIII. Data Protection and Security Measures

We implement industry-standard security measures to protect your personal and health data, including:

– Encryption of data in transit (TLS/SSL) and at rest.

– HIPAA-compliant telehealth platform and data storage infrastructure.

– Firewalls, intrusion detection systems, and regular security monitoring.

– Role-based access controls limiting data access to authorized personnel with a legitimate need to know.

– Business Associate Agreements (BAAs) with vendors and technology partners that handle PHI.

– Audit logging to track access to sensitive information.

– Staff training on privacy, HIPAA compliance, and data security protocols.

– Device encryption and mobile device management (MDM) policies for staff devices that may access patient data.

– Policies prohibiting the transmission of PHI via personal text messages or consumer email.

While we strive for maximum security, no online service can guarantee absolute protection. You are encouraged to report any suspected unauthorized access to your information immediately by contacting info@evolveyourbod.com.

IX. Data Retention

We retain personal information only as long as reasonably necessary to provide services, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary depending on the type of information and applicable legal requirements:

– Medical records are retained in accordance with applicable state and federal medical record retention laws. In Texas, medical records must generally be retained for a minimum of seven years from the date of last treatment (or longer for minors).

– Account and billing information is retained for the duration of your active account and for a reasonable period thereafter to comply with tax, accounting, and legal obligations.

– Website analytics and technical data is retained in accordance with our analytics platform’s retention settings, typically no longer than 26 months.

– Marketing and preference data is retained until you opt out or request deletion.

When personal information is no longer needed, we will securely delete or de-identify it in accordance with our data retention and destruction policies.

X. External Websites and Services

Our Platform may contain links to external websites, applications, and services operated by third parties. We are not responsible for the privacy practices, content, or security of these third-party sites. We strongly encourage you to review the privacy policies and terms of use of any external service before providing personal information or engaging with their content.

XI. Age Restrictions

Evolve Your Bod’s services are strictly intended for individuals 18 years of age or older. We do not knowingly collect, use, or process personal information from individuals under the age of 18. If we become aware that we have collected personal information from a minor, we will take steps to delete that information promptly. If you believe that a minor has provided us with personal information, please contact us at info@evolveyourbod.com.

XII. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, services, technology, legal requirements, or regulatory guidance. Any changes will be posted on this page with an updated “Last Updated” date. Material changes will be communicated to active users via email or through the Platform.

Your continued use of our Platform following the posting of modifications signifies your acceptance of the updated Privacy Policy. If you do not agree with the changes, your recourse is to discontinue use of the Platform.

XIII. Contact Information

For privacy-related inquiries, questions about this Privacy Policy, or to exercise your privacy rights, you may contact us at:

Evolve Your Bod — Privacy Office

AA Health Solutions, LLC

5521 Bellaire Drive South, Suite 200

Fort Worth, TX 76109

Email: info@evolveyourbod.com (Subject: Privacy Office)

Phone: 866-301-3141

You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights or the Texas Attorney General’s office if you believe your privacy rights have been violated. You will not be retaliated against for filing a complaint.