Privacy Policy
Effective October 15, 2026
Overview
This Privacy Policy explains how NŌVAP (“we,” “us”) collects, uses and shares personal information through the NŌVAP website and brand communications (the “Site”). It also includes our Consumer Health Data Privacy Policy.
Two different places, two sets of rules
This Site. Our marketing website, articles and brand emails. This policy applies here.
The care platform. When you start a visit, you move to a secure care platform operated by our telehealth partner. Your intake answers, medical records, prescriptions and payment details are collected there by the healthcare provider and its service providers. That information is “protected health information” governed by the Health Insurance Portability and Accountability Act (HIPAA) and the provider’s Notice of Privacy Practices, which you will be shown on the platform. Where we receive patient information to provide non-clinical membership services (such as support and care navigation), we do so under a HIPAA business associate arrangement and only as permitted by HIPAA.
Information we collect on this Site
- Information you give us, such as your name and email address when you contact us or sign up for emails, and the content of your messages.
- Device and usage information, such as IP address, browser type, pages viewed and referring links, collected automatically through standard web technologies. The Site loads fonts and code libraries from third-party content delivery networks, which receive your IP address in order to deliver those files.
- Cookies and similar technologies, as described below.
We do not ask for health information on this Site. Please do not send us health details by email; share them with your Provider on the care platform instead.
How we use information
- To operate, secure and improve the Site;
- To respond to your questions and provide customer support;
- To send brand emails you have asked for (you can unsubscribe at any time using the link in each email);
- To comply with law, enforce our terms and protect our rights and users.
Cookies, analytics and advertising
We may use cookies and similar technologies for essential site functions and, if enabled, for analytics and advertising on our general marketing pages. We do not place advertising or analytics tools on pages where you enter health information, and we do not share health information with advertising platforms. Where required by law, we will ask for your consent before using non-essential cookies, and we honor browser-based opt-out signals such as Global Privacy Control. You can also control cookies through your browser settings.
How we share information
We share personal information only with: service providers who help us run the Site and communications (for example, hosting and email delivery), under contracts that limit their use of the data; our telehealth partner when you choose to start a visit; professional advisers; and authorities when required by law or to protect safety. If NŌVAP is involved in a merger or acquisition, information may transfer as part of that transaction, subject to this policy. We do not sell personal information or share it for cross-context behavioral advertising.
Consumer Health Data Privacy Policy
Some state laws, including Washington’s My Health My Data Act and Nevada’s consumer health data law, protect “consumer health data” that is not covered by HIPAA. This section explains our practices.
Consumer health data we collect
On this Site we do not intentionally collect consumer health data. Some information, such as the treatment pages you view or a message you send, could indicate an interest in a health topic. We collect it as described in “Information we collect on this Site.”
Why we collect and use it
To operate the Site, respond to you and, with your consent, send you information you request. We do not use it for advertising targeted to you based on health interests.
Sharing
We do not sell consumer health data. We share it only with service providers acting on our behalf, or with your consent.
Your rights
You may ask to confirm whether we collect your consumer health data, access it, see the third parties it was shared with, request deletion, and withdraw consent. Email legal@getnovap.com with the subject “Health data request.” If we deny your request, you may appeal by replying to our decision, and you may contact your state Attorney General.
Your privacy rights
Depending on where you live (for example, California, Colorado, Connecticut, Virginia, Texas, Oregon and other states), you may have the right to: know what personal information we collect and how we use it; access, correct or delete it; obtain a copy; opt out of sales, targeted advertising and profiling; and limit use of sensitive information. We do not sell or “share” personal information as those terms are defined under California law.
To make a request, email legal@getnovap.com. We will verify your request and respond within the time required by law. You may use an authorized agent. We will not discriminate against you for exercising your rights. If we deny your request, you may appeal by replying to our response.
Security and retention
We use reasonable administrative, technical and physical safeguards to protect personal information. No method of transmission or storage is completely secure. We keep personal information only as long as needed for the purposes described here or as required by law.
Children
The Site and services are intended for adults 18 and older. We do not knowingly collect personal information from children under 18. If you believe a child has provided us information, contact us and we will delete it.
Changes to this policy
We may update this policy. We will post the updated version with a new effective date and, for material changes, provide additional notice.
Contact us
Privacy questions and requests: legal@getnovap.com. Customer support: support@getnovap.com.