Injectly Privacy Policy
Effective Date: September 7, 2025
Last Updated: September 7, 2025
This Privacy Policy explains how Injectly collects, uses, stores, shares, and protects personal information when you use the Injectly mobile application, website, and related services. Injectly provides an on-demand medical injection delivery and administration service, personalized vitamin injection programs, and corporate wellness injection programs. Because our Services involve sensitive health information, we treat privacy and security as paramount and describe below how we handle your data. By downloading, accessing, or using the Services you consent to the collection and use of your information as described in this Privacy Policy; if you do not agree, do not use the Services.
Information we collect and why we collect it: To provide safe and effective medical services we collect contact and account information (such as name, email address, phone number, and billing details when required for invoicing or payment reconciliation), appointment and scheduling information, location data necessary for delivering services to your address, and device and technical information (including device type, operating system version, IP address, and crash logs) to maintain and improve the App. If you choose to receive injectable therapies through Injectly, we collect health and medical information that is necessary to deliver care, including prescriptions and medication details, injection records (date, time, dosage, and administration site), medical history, allergies, current medications, reported side effects and well-being notes, and any clinical notes created by the licensed healthcare professional who administers your injection. With your explicit consent we may import limited health data from third-party integrations such as Apple Health (iOS) or Health Connect (Android) for the purpose of improving your care and convenience. We collect payment or billing information only as necessary to process charges and refunds; where payments are processed through the Apple App Store, Google Play, or a third-party subscription manager (e.g., RevenueCat), we do not receive or store your full payment card details.
How we use your information: We use your information to provide, operate, and improve the Services, to facilitate appointments and safe administration of injections by licensed healthcare professionals, to communicate with you about appointments, prescriptions, and care instructions, to process payments, and to respond to your requests and support inquiries. We use aggregated and de-identified information to analyze trends, improve the App, and develop new service features. We may use diagnostic information and crash reports to fix bugs and make the App more reliable. We will never use your health data for advertising or sell your health data to third parties.
Health data and special protections: Health and medical information is considered sensitive personal data and is treated accordingly. We store health data separately from contact or billing information and apply enhanced safeguards. Where applicable, and in jurisdictions such as the United States, we implement administrative, technical, and physical safeguards consistent with the relevant legal requirements and industry best practices. When required by law and as appropriate to our operations, we enter into Business Associate Agreements (BAAs) or equivalent contracts with third-party vendors who process protected health information on our behalf. Our healthcare professionals administer treatments in accordance with applicable medical standards and local laws and you should only receive injections that are authorized by a prescription or medical clearance where required.
Third parties and who we share data with: We share information only with trusted service providers and partners who help us deliver the Services and operate the App. These partners may include cloud storage providers (for example, Apple iCloud for iOS users who opt to sync with iCloud and Google Firebase for Android users), authentication providers (e.g., Google Sign-In), analytics and product-analytics providers for non-health usage metrics, crash reporting providers, and subscription or billing platforms (such as RevenueCat). When we engage third parties to process health data, we require them to handle data only for the purposes we authorize and to maintain appropriate security measures. We may share information with emergency services, healthcare providers, or other third parties if necessary to prevent harm, to comply with legal obligations, or to respond to subpoenas or lawful government requests. In the event of a corporate transaction such as a merger, acquisition, or sale of assets, your data may be transferred to the buyer or successor; we will require the buyer to honor the commitments made in this Privacy Policy and notify you where required by law.
Storage, security, and international transfers: We store data in secure systems and implement reasonable administrative, technical, and physical safeguards to protect against unauthorized access, disclosure, alteration, or destruction of personal data. Data is encrypted in transit and at rest where supported. Depending on your platform and settings, your data may be stored in the United States or in other countries where our service providers maintain facilities. If your data is transferred internationally, we will use appropriate safeguards such as Standard Contractual Clauses, data transfer agreements, or other lawful transfer mechanisms when required by applicable data protection law. No system can be guaranteed fully secure; in the unlikely event of a security incident involving your data, we will follow applicable breach notification laws and notify you and regulators as required.
Retention and deletion: We retain your personal and health information for as long as necessary to provide the Services, to comply with legal obligations, to resolve disputes, and to enforce agreements. For individual users, account data and associated health records will generally be retained until you delete your account or remove the App and its data from your device and cloud backups; certain anonymized or aggregated records may be retained indefinitely for analytics and product improvement. If you delete your account, we will remove your personal and health data from our active systems within a reasonable timeframe, subject to any legal obligations to retain records for a longer period. You may request export, correction, restriction, or deletion of your data through the App’s settings or by contacting us at info@injectlyapp.com, we will respond to requests in accordance with applicable law.
Your rights and choices: Subject to local law, you may have the right to access, correct, export, restrict or object to processing of your personal data, and to request deletion of your personal data. You can manage certain privacy settings in the App, including opting out of non-essential analytics and integrations, and you can withdraw consent for data uses that require it. For corporate wellness programs, employers may provide or request certain employee data as part of program administration; we rely on employer representations and employee consents where applicable, and employees participating in employer-sponsored programs may have different choices governed by the corporate agreement. If you are located in the European Economic Area, the United Kingdom, or other jurisdictions with specific privacy rights, you may have additional protections; please contact us for details about how to exercise those rights.
Children’s privacy: The Services are intended for adults and for the avoidance of doubt are not directed to children under 18. We do not knowingly collect personal information from children under 18 without verifiable parental consent. If we learn that we have collected personal data from a child under an applicable minimum age without appropriate consent, we will take steps to delete that information.
Cookies, analytics and marketing: Our website uses cookies and similar technologies for essential functionality and to analyze and understand how visitors use the site. We use analytics tools to measure non-health usage of the App and aggregated website traffic. We do not use your health data for marketing and do not sell your personal information to third parties. You may opt out of most analytics tracking through your device settings or within the App where those options are provided.
Payments and billing: Payments for Injectly services and corporate programs are processed via the Apple App Store, Google Play, or our subscription manager (e.g., RevenueCat) and/or directly through payment processors for corporate clients. We do not store your full payment card details unless explicitly required and only through PCI-compliant processors. Billing queries can be directed to info@injectlyapp.com.
Legal bases and compliance: Where required by applicable law, we rely on legal bases such as your consent, performance of a contract, compliance with legal obligations, or our legitimate interests (for non-health operational and security purposes) to process your data. For customers in different jurisdictions, local consumer, healthcare, and data protection laws may impose additional requirements; we will comply with those laws when applicable.
Corporate wellness programs: For employer-sponsored programs, the scope of data we collect, process, and share will be governed by the agreement between Injectly and the corporate client and by applicable employment and health privacy laws. Employers may provide lists of eligible employees or consent mechanisms; employees will be informed about what data is shared with their employer and how it is used as part of the enrollment process.
Changes to this Privacy Policy: We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. Material changes will be posted in the App and on our website with an updated effective date. Continued use of the Services after a revised Privacy Policy has been posted constitutes acceptance of the changes.
Contact us and data controller: Injectly Co. is the data controller responsible for your information under this Privacy Policy. If you have questions, requests to access, export, correct, or delete your data, or privacy concerns, please contact us at info@injectlyapp.com. You may also write to us at the address provided in the App or corporate agreements. If you remain unsatisfied after contacting us, you may have the right to lodge a complaint with your local data protection authority.
Additional health data privacy supplement: In addition to the practices described above, this supplement explains our handling of sensitive health information. Health data is collected only when necessary for care delivery and only with your explicit consent where required. Health data is stored with enhanced safeguards and, where applicable to our operations, we enter into Business Associate Agreements or equivalent contracts with vendors who handle protected health information on our behalf. We never use health data for advertising, and we do not sell your health data. You may access, export, correct, and request deletion of your health records within the App or by contacting info@injectlyapp.com. If we deny a request regarding your health data, we will explain the basis for the denial and the options for appeal consistent with applicable law.
Data breach notifications: If we become aware of a security incident that creates a risk of serious harm to you, we will notify you and the appropriate supervisory authorities in accordance with applicable law and will take steps to mitigate the impact of the incident.
Final note: Because Injectly provides medical services, local healthcare laws, telemedicine rules, and data protection regulations may affect how we operate in your jurisdiction. This Privacy Policy is intended to be a clear statement of our practices but does not constitute legal advice. We recommend that organizations or partners deploying Injectly’s services consult appropriate legal and compliance counsel to ensure full compliance with applicable healthcare, employment, and privacy laws.
If you have any questions about this Privacy Policy or how we handle your personal or health data, please email us at info@injectlyapp.com
