Privacy Policy

This policy is issued by Form Blends LLC, a Wyoming limited liability company ("FormBlends", "we", "us"), 30 N Gould St, Ste R, Sheridan, WY 82801, the operator of formblends.com and the FormBlends tracking app.

FormBlends iPhone and iPad app

This section covers the FormBlends tracking app, including the version 1.1 update. The app helps you keep your own records; using it does not automatically send those records to a clinician, pharmacy or the website checkout. The clinical-service descriptions below apply when you separately use those services.

Account and cloud records: Supabase provides app authentication and database storage. Starting as a guest creates an app account with a unique identifier even if you do not provide an email. The records you choose to save can include your profile, protocols, compounds and doses, injection history, vial inventory, weight, measurements, nutrition, symptoms, lab values, goals, research notes and AI chat messages. Cloud records are associated with your app account to save, retrieve, export and delete them. Do not assume guest records are anonymous or that an unlinked guest account can be recovered on another device.
On-device information: app preferences, check-ins and progress-photo files are stored on your device. Progress photos taken for your timeline are separate from optional AI photo scans. The app does not automatically upload your progress-photo library for AI analysis. Device backups and copies you export or share are controlled separately by you and your device or destination service.
Optional AI photo scans — OpenAI: when you choose a vial, label, certificate or meal image for an AI scan, that image is sent through the FormBlends AI backend to OpenAI for analysis. Images can contain personal or health information; select only what you want processed and review the result before saving it.
Optional personalized insights — OpenAI: discovery questionnaires and personalized insights use the profile, answers, protocol and recent check-in context supplied by that feature. Depending on the feature, that can include your name, symptoms, health goals, active compounds, dose-cycle information and recent progress. With this sharing enabled, the app may request personalized greetings and check-in insights automatically.
Optional Kai text chat — Anthropic: your message and recent saved chat are sent through a FormBlends Supabase function to Anthropic with saved health context. That context can include active compounds and doses, recent dose history, starting and goal weight, height, weight trends, nutrition targets and recent averages, sleep, symptoms, menstrual-cycle history and latest body measurements. This context is retrieved from your cloud records to personalize the reply. Your message and the reply are saved in your FormBlends cloud account.
Optional Kai voice — OpenAI: live microphone audio is sent directly to OpenAI after the FormBlends backend creates a short-lived voice session. The session also receives the profile and protocol context used by the feature, including your name, active compounds and recent check-in when available. The app displays a transcript during the session. End the session to stop sending live audio; actions you ask Kai to save, such as a dose or weight entry, become app records.
AI choices: the version 1.1 update asks for permission before sharing with each AI feature group. Tracking and manual logging remain available if you decline. Review or turn off future sharing in Profile → Privacy & AI. Turning sharing off does not delete earlier requests or saved chat history. AI providers process requests under their applicable service terms and retention policies; we do not promise that requests are never retained. See OpenAI's privacy policy and Anthropic's privacy policy.
App subscriptions: Apple processes App Store purchases. RevenueCat receives app account identifiers, product and transaction identifiers, purchase history, entitlement status and subscription events so the app can unlock Pro, restore purchases and keep access current. FormBlends does not receive your full payment-card number from Apple. Subscription measurement sent to PostHog is limited to subscription events, product, environment, timing, available price/currency fields and pseudonymous identifiers; raw health records, chat content and customer attributes are excluded from this billing connection.
App analytics and diagnostics: PostHog measures app sessions, feature use and subscription screens. The version 1.1 app uses a random installation identifier and an event/property allowlist instead of sending your account ID, email, protocol details, health values, chat text or photos as analytics properties. Session replay is disabled. Sentry helps diagnose crashes and errors; the app filters error content and omits account identity from its monitoring configuration. Pseudonymous identifiers still distinguish activity and are not a claim that all data is anonymous. Network services also receive technical connection information when requests are delivered.
Permissions and advertising: camera, selected-photo and microphone access are used for the feature you choose. Notifications require your permission and can be changed in the app or iOS Settings. The current app does not import Apple Health or HealthKit records. We do not use app health records for advertising targeting or sell them to data brokers. The website's browser advertising tools described below are separate from the native app.
Export, deletion and retention: use Profile → Your Data to export records, remove cloud log history, or delete the app account and its associated cloud records. These are separate actions: clearing log history retains the account, protocols and inventory. Account deletion also attempts to clear local app records and progress-photo files on that device. Deletion does not remove copies you exported, independent clinical records, or transaction records retained by Apple or RevenueCat for billing, fraud prevention and legal obligations. Service logs and backups can remain until their normal retention or replacement cycles finish; contact us for a privacy request concerning those records or earlier AI requests. Deleting the app or its account does not cancel an Apple subscription — cancel it in your Apple subscription settings.

For mobile app privacy questions, access or deletion requests, contact support@formblends.com. If you use a guest account, contact us before signing out or deleting the app so we can help identify your records.

1. Information We Collect

When you use formblends.com, complete an assessment, request information, or begin the process of connecting with healthcare or pharmacy services, we may collect the following categories of information:

Personal identifiers: name, email address, phone number, shipping address, date of birth.
Health information: medical history, current medications, symptoms, treatment goals, lab results, body measurements, and other information you provide during medical consultations.
Payment information: credit card or payment method details (processed securely by our payment processor; we do not store full card numbers).
Technical data: browser type, IP address, device identifiers, pages visited, and interaction data collected through cookies and similar technologies.
Communications: messages you send to our care team, support inquiries, and consultation records.

2. How We Use Your Information

We use your information for the following purposes:

To facilitate telehealth consultations between you and licensed healthcare providers.
To process prescriptions and coordinate medication fulfillment with our pharmacy partners.
To process payments and manage your account.
To communicate about your treatment, appointments, and account.
To respond to support requests and care team inquiries.
To improve our platform, services, and user experience.
To send marketing communications if you have opted in (you may opt out at any time).
To comply with legal obligations and regulatory requirements.

We never sell your personal information or health information to third parties.

3. How We Share Your Information

We share your information only with the following categories of recipients, and only as necessary to provide our services:

The independent provider: the US-licensed provider (MD, DO, NP or PA) who reviews your intake receives your identity details, date of birth, state of residence, the answers you give in the medical intake, your medication history, the identification you upload for identity verification, and your messages in the patient portal. The provider network is independent of Form Blends LLC.
The dispensing pharmacy: the state-licensed 503A compounding pharmacy that fills your prescription receives the details needed to fill and ship the prescription: your name, date of birth, shipping address, phone number, allergies, and the prescription itself.
Payment processors: for secure payment processing (PCI DSS compliant).
Shipping carriers: for medication delivery (name and address only).
Technology providers: hosting, analytics, and communication tools that help us operate the platform, subject to confidentiality agreements. The checkout and the medical intake run on a HIPAA-compliant hosted platform.
Legal and regulatory: when required by law, court order, or regulatory authority.

4. Integrated Clinical and Commerce Services

Checkout, consultation, and fulfillment use integrated technology and independent clinical and pharmacy services. Information you submit is shared with the relevant service providers as needed to process your request, payment, consultation, or order, as described above.

Independent healthcare providers maintain their own privacy notices for clinical records. Additional policies and consents are presented during the applicable care process. Embedding a service on this website does not change which provider delivers it.

5. Health Information and HIPAA

FormBlends facilitates access to healthcare services provided by independent, licensed healthcare providers. The healthcare providers who deliver clinical services through our platform are subject to the Health Insurance Portability and Accountability Act (HIPAA) and maintain their own Notice of Privacy Practices governing how your protected health information (PHI) is used and disclosed for treatment, payment, and healthcare operations.

To the extent that FormBlends receives, maintains, or transmits PHI on behalf of healthcare providers, we operate as a business associate under HIPAA and are bound by applicable business associate agreement obligations, including:

Implementing reasonable and appropriate administrative, technical, and physical safeguards to protect PHI.
Reporting any breach of unsecured PHI promptly.
Ensuring that any subcontractors who access PHI agree to the same restrictions and conditions.
Making PHI available to individuals who request access to their records, as required by HIPAA.

Your rights regarding health information: You have the right to request access to your health records, request amendments to your records, receive an accounting of disclosures, request restrictions on certain uses and disclosures, and file a complaint with the U.S. Department of Health and Human Services if you believe your privacy rights have been violated. To exercise any of these rights, contact us at support@formblends.com.

6. Payment Processing

All payments are processed securely through our payment processor. We do not store your full credit card information on our servers. Payment data is encrypted and handled in compliance with PCI DSS standards.

7. Cookies and Tracking

We use cookies and similar technologies to maintain your session, remember your preferences, analyze site traffic, and improve our services. You can control cookie settings through your browser. Disabling cookies may affect certain platform functionality. We use analytics tools to understand how users interact with our platform. These tools may collect information about your browsing behavior. We do not use health information for advertising targeting.

Tracking and analytics choices

These are the analytics and advertising tools formblends.com actually loads:

PostHog (product analytics and error tracking): page views, clicks on assessment and checkout links, and JavaScript errors. Person profiles are created only for identified users.
Google Analytics 4: page views, scroll depth and conversion-link clicks, including attribution between this website and its integrated checkout services.
Meta pixel: page views and assessment-start events, used to measure advertising.
First-party attribution storage: campaign identifiers from the URL you arrived on (utm parameters, gclid, fbclid) are stored in this site's own storage so the assessment can record where you came from.
Embedded media: some pages embed videos from third-party platforms, which load that platform's own scripts when the embed is on the page.

Global Privacy Control: if your browser sends a Global Privacy Control signal, we honor it. Google Analytics and advertising storage are set to denied, the Meta pixel is not loaded, and PostHog is opted out of capturing. This applies to every page on formblends.com and takes effect on the next page load after the signal is enabled.

Do not sell or share: we do not sell personal information. To record a do-not-sell-or-share request, or to opt out of the tools above without a Global Privacy Control signal, email support@formblends.com with the subject line "Privacy request". You can also block these tools in your browser or with a content blocker; the site works without them.

8. Data Security

We implement industry-standard security measures including SSL/TLS encryption for all data in transit, encryption of sensitive data at rest, secure server infrastructure, access controls limiting data access to authorized personnel, and regular security assessments. While no method of electronic transmission or storage is completely secure, we take reasonable steps to protect your personal and health information.

9. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. Health information and medical records are retained in accordance with applicable state and federal medical record retention requirements. We retain certain information as required by law or for legitimate business purposes, including dispute resolution and legal compliance.

10. Your Rights

You have the right to access, correct, or request deletion of your personal information. You can unsubscribe from marketing emails using the link in any email. To exercise any of your data rights, contact us at support@formblends.com. We will respond to verified requests within 30 days.

Privacy requests: access, deletion, do not sell

You can ask us at any time to tell you what personal information we hold about you, to correct it, to delete it, or to stop any sale or sharing of it (we do not sell personal information, and this request records your preference in case that ever changes). Send the request by email:

Email support@formblends.com with the subject line "Privacy request".
Say which right you are exercising: access, correction, deletion, or do not sell or share.
Send it from the email address on your account, or tell us that address, so we can verify it is you. We may ask one follow-up question to confirm identity before releasing or deleting anything.

We respond within 30 days. Some records cannot be deleted on request: prescription and dispensing records are retained for the period state pharmacy law requires, and payment records are retained for tax and fraud-prevention purposes. We will tell you which records those are. If you have not heard back within 2 business days, reply to your ticket with the subject "Escalate".

11. California Residents (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect, request deletion of your data, opt out of the sale or sharing of personal information, and not be discriminated against for exercising these rights. We do not sell personal information. To exercise your rights, email support@formblends.comwith the subject line "Privacy request".

12. Other State Privacy Rights

Residents of Washington, Nevada, Connecticut, and other states with consumer health data privacy laws may have additional rights regarding the collection and use of health-related data. We process consumer health data in accordance with applicable state laws. To exercise state-specific privacy rights, contact us at support@formblends.com.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated revision date and, where appropriate, notified to you by email. Continued use of our platform after changes constitutes acceptance of the updated policy.

14. Contact

For questions about this Privacy Policy, your personal data, or to exercise any of your privacy rights, contact Form Blends LLC, a Wyoming limited liability company, 30 N Gould St, Ste R, Sheridan, WY 82801, by email at support@formblends.com, or visit our contact page.

The short version