Privacy policy

Effective Date: 10/06/2026

The website at summaup.com is owned and operated by SummaUp LLC, an Arkansas limited liability company (“SummaUp”, “Company,” “we,” “us,” or “our”). The Service may link to sites operated by independent Medical Groups, Pharmacies, and Labs. SummaUp does not control those parties and does not practice medicine. This Privacy Policy covers information SummaUp collects. It is not the Medical Group’s Notice of Privacy Practices.

This Privacy Policy and Terms of Use (“Privacy Policy”) describes how we collect information from you through our website and the linked third-party websites (collectively, the “Websites”), why we collect information about you, how we use or disclose this information, and how you may update, delete, or request identifiable information about you from our records. Your use of the Service is governed by the Terms of Use. If this Privacy Policy conflicts with the Terms of Use on arbitration, liability, or who provides care, the Terms of Use control. Privacy disputes are disputes under the Terms of Use and are subject to the arbitration agreement and class waiver there, unless you timely opted out.

At SummaUp, we take your privacy seriously. Please read this Privacy Policy to learn how we treat your personal data. By using or accessing our Services in any manner, you acknowledge that you accept the practices and policies outlined below, and you hereby consent that we will collect, use and share your information as described in this Privacy Policy.

By creating, registering, or logging into an account through the Service, or otherwise accessing or using the Service, you are acknowledging the most recent version of this Privacy Policy.

Remember that your use of SummaUp’s Services is at all times subject to our Terms of Use, which incorporates this Privacy Policy. Any terms we use in this Policy without defining them have the definitions given to them in the Terms of Use.

We respect your privacy and are committed to protecting your personal information. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Personal Identifiable Information (PII) is never shared, sold, or conveyed to third parties for marketing purposes unless you have explicitly opted in. All text messaging data, including opt-in data and consent, will not be shared with any third parties unless required by law

1. Protected Health Information

When you set up an account with SummaUp, you are creating a direct customer relationship with SummaUp that enables you to access and/or utilize the various functions of the Platform and the Service as a user. As part of that relationship, you provide information to SummaUp, including but not limited to, your name, email address, shipping address, phone number and certain transactional information, that we do not consider to be "protected health information" or "medical information".

However, in using certain components of the Service, you may also provide certain health or medical information that may be protected under applicable laws. SummaUp is not a "covered entity" under the Health Insurance Portability and Accountability Act of 1996, Public Law 104-191, and its related regulations and amendments from time to time (collectively, " HIPAA"). One or more of the Labs, Pharmacies or Medical Groups (as defined in our Terms and Conditions) may or may not be a "covered entity" or "business associate" under HIPAA, and SummaUp may in some cases be a "business associate" of a Pharmacy or Medical Group. It is important to note that HIPAA does not necessarily apply to an entity or person simply because there is health information involved, and HIPAA may not apply to your transactions or communications with SummaUp, the Medical Groups, the Providers, the Labs, or the Pharmacies. To the extent SummaUp  is deemed a "business associate" however, and solely in its role as a business associate, SummaUp, may be subject to certain provisions of HIPAA with respect to "protected health information," as defined under HIPAA, that you provide to SummaUp, the Medical Group or the Providers (" PHI"). In addition, any medical or health information that you provide that is subject to specific protections under applicable state laws (collectively, with PHI, "Protected Information" ), will be used and disclosed only in accordance with such applicable laws. However, any information that does not constitute Protected Information under applicable laws may be used or disclosed in any manner permitted under this Privacy Policy. Protected Information does not include information that has been de-identified in accordance with applicable laws.

The Medical Groups and Providers have adopted a Notice of Privacy Practices that describes how they use and disclose Protected Information. By accessing or using any part of the Service, you acknowledge receipt of the Notice of Privacy Practices from your Medical Group and Provider(s). By using the Service you acknowledge receipt of the Medical Group’s Notice of Privacy Practices. The Medical Group, not SummaUp, is responsible for clinical records.

By accessing or using any part of the Service, you understand that even if HIPAA does apply to SummaUp, the Medical Groups, the Providers, the Labs, or the Pharmacies, any information that you submit to SummaUp that is not intended and used solely for the provision of diagnosis and treatment by the Medical Group and Providers, laboratory services by the Labs or prescription fulfillment by the Pharmacies, is not considered Protected Information, and will only be subject to our Privacy Policy and any applicable state laws that govern the privacy and security of such information. For purposes of clarity, information you provide to SummaUp in order to register and set up an account on the Platform, including name, username, email address, shipping address and phone number, are not considered Protected Information

2. Tracking Technologies and Explicit Consent for Health Data Sharing

We use cookies and tracking technologies (including Meta Pixel) to collect information about your use of our websites and apps. Some collection is required for the platform to function and cannot be disabled.

Some cookies are required for the site to function and cannot be disabled. We use analytics to operate and measure the site. Advertising measurement uses a server-side integration with Meta. 

We do not place a Meta browser pixel on pages that collect health information. Events sent for measurement do not include your name, email, phone number, intake answers, prescription, dose, or account identifier. Clicking “I Agree” is not consent to share health information with an advertising platform, and it does not override a do-not-call or do-not-text request. We may use session-replay software, including Mouseflow, on marketing pages to see how those pages are used. Inputs are masked. Session replay does not run on intake, consent, checkout, or account pages, and it does not record keystrokes in health fields. We do not use a session recording for advertising. The intake funnel may be hosted with a third party software platform that receives the information you submit in that funnel so the form can be provided to the Medical Group and to us for account setup. The third party software platform is a service provider. It may not use that information for its own marketing. 

We do not use Protected Information, prescription data, or intake answers for advertising.

3. What this Privacy Policy Covers

This Privacy Policy covers how we treat any information that identifies or relates to a particular individual and also includes information referred to as “personally identifiable information” or “personal information” under applicable data privacy laws, rules or regulations (collectively, “Personal Data”) that we gather when you access or use our Services.  This Privacy Policy does not cover the practices of companies we don’t own or control or people we don’t manage. The personal data we collect depends on how you interact with us, the services you use, and the choices you make.

We collect information about you from different sources and in various ways when you use our services, including information you provide directly, information collected automatically, information from third-party data sources, and data we infer or generate from other data.

4. Information we collect

Categories of Personal Data We Collect

This chart details the categories of Personal Data that we collect and have collected over the past 12 months:

Category of Personal Data 

Examples of Personal Data We Collect

Categories of Third Parties With Whom We Share this Personal Data: 

Profile or Contact Data

  • First and last name

  • Email

  • Phone number

  • Service Providers

  • Parties You Authorize, Access or Authenticate

Online Identifiers

  • Unique identifiers such as account name

  • Session management identifiers, browser input such as mouse and keyboard strokes

  • Service Providers

  • Analytics Partners

Device/IP Data

  • IP address

  • Device ID

  • Domain server

  • Type of device/operating system/browser used to access the Services

  • Service Providers

  • Analytics Partners

Web Analytics

  • Web page interactions

  • Referring webpage/source through which you accessed the Services

  • Non-identifiable request IDs

  • Statistics associated with the interaction between device or browser and the Services

  • Service Providers

  • Analytics Partners

Geolocation Data

  • IP-address-based location information

  • Service Providers

  • Analytics Partners

Visual Data

  • Photo for profile photo 

  • Audio/video for telehealth

  • Service Providers

Other Identifying Information that You Voluntarily Choose to Provide

  • Identifying information in emails or letters you send us

  • Service Providers

Categories of Sources of Personal Data

We collect Personal Data about you from the following categories of sources:

  • When you provide such information directly to us.

  • When you create an account or use our interactive tools and Services.

  • When you voluntarily provide information in free-form text boxes through the Services or through responses to surveys or questionnaires.

  • When you send us an email or otherwise contact us.  

  • When you use the Services and such information is collected automatically.

  • Through Cookies (defined in the “Tracking Tools and Opt-Out” section below).

  • If you download our mobile application or use a location-enabled browser, we may receive information about your location and mobile device, as applicable.

  • If you download and install certain applications and software we make available, we may receive and collect information transmitted from your computing device for the purpose of providing you the relevant Services, such as information regarding when you are logged on and available to receive updates or alert notices.

  • Third Parties

  • Vendors

  • We may use analytics providers to analyze how you interact and engage with the Services, or third parties may help us provide you with customer support.

  • Advertising Partners

  • We receive information about you from some of our vendors who assist us with marketing or promotional services related to how you interact with our websites, applications, products, Services, advertisements or communications.

  • Social Networks 

  • If you provide your social network account credentials to us or otherwise sign in to the Services through a third-party site or service, some content and/or information in those accounts may be transmitted into your account with us.

5. Why we collect it

We use personal information to create and manage your account, process orders, provide the product or service you requested, support you, secure the Service, debug, and improve the Service. We use non-health browsing data to measure and market the Service. We use information to respond to you, to meet legal duties, to enforce the Terms, and to resolve disputes. We will not use personal information for a materially different purpose without notice.

6. How we share it

We share personal information with service providers that host the Service, prevent fraud, provide support, process payments, host the intake form, or measure traffic. We share it with a Medical Group, Pharmacy, or Lab when you ask us to, so they can provide the service you requested. We share it if the law, a court, or a regulator requires it. We share it in a merger or sale of the business, and we will try to notify you before your information becomes subject to a different policy. 

You are not establishing a physician-patient relationship with SummaUp by using the Service. 

Health-page measurement does not include your name, intake answers, prescription, or account identifier. We do not transmit Protected Information to Meta, Google, or any other advertising partner. We may use and share de-identified or aggregated data that cannot reasonably identify you.

Additionally, we may use your browsing and other activity on the Service to promote and market SummaUp, the Service, and the products and/or services offered via the Service, as well as to measure our advertising and marketing efforts. Depending on your activity on the Service, this may include information related to you visiting health-related pages on the Service. In some states, we may be required to obtain your consent prior to using information that constitutes sensitive personal information. While we may use information about your browsing activity on health-related pages, we do not use Protected Information for advertising or marketing.

We may de-identify your information and use, create and sell such de-identified information or any business or other purpose not prohibited by applicable law.

7. Cookies

We use essential cookies to run the Service, functional cookies to remember settings, and analytics cookies to measure marketing pages. Google Analytics may set a cookie on marketing pages. You can opt out of Google Analytics at https://tools.google.com/dlpage/gaoptout/. You can control cookies in your browser. Blocking essential cookies may break the Service. We do not respond to browser Do Not Track signals.

Tracking Tools and Opt-Out

The Services use cookies and similar technologies such as pixel tags, web beacons, clear GIFs and JavaScript (collectively, “Cookies”) to enable our servers to recognize your web browser, tell us how and when you visit and use our Services, analyze trends, learn about our user base and operate and improve our Services. Cookies are small pieces of data– usually text files – placed on your computer, tablet, phone or similar device when you use that device to access our Services. We may also supplement the information we collect from you with information received from third parties, including third parties that have placed their own Cookies on your device(s). Please note that because of our use of Cookies, the Services do not support “Do Not Track” requests sent from a browser at this time.

We use the following types of Cookies:

Essential Cookies. Essential Cookies are required for providing you with features or services that you have requested. For example, certain Cookies enable you to log into secure areas of our Services. Disabling these Cookies may make certain features and services unavailable.

Functional Cookies. Functional Cookies are used to record your choices and settings regarding our Services, maintain your preferences over time and recognize you when you return to our Services. These Cookies help us to personalize our content for you, greet you by name and remember your preferences (for example, your choice of language or region).

Performance/Analytical Cookies. Performance/Analytical Cookies allow us to understand how visitors use our Services. They do this by collecting information about the number of visitors to the Services, what pages visitors view on our Services and how long visitors are viewing pages on the Services. For example, Google LLC (“Google”) uses cookies in connection with its Google Analytics services. Google’s ability to use and share information collected by Google Analytics about your visits to the Services is subject to the Google Analytics Terms of Use and the Google Privacy Policy. You have the option to opt-out of Google’s use of Cookies by visiting the Google advertising opt-out page at www.google.com/privacy_ads.html or the Google Analytics Opt-out Browser Add-on at https://tools.google.com/dlpage/gaoptout/.

You can decide whether or not to accept Cookies through your internet browser’s settings. Most browsers have an option for turning off the Cookie feature, which will prevent your browser from accepting new Cookies, as well as (depending on the sophistication of your browser software) allow you to decide on acceptance of each new Cookie in a variety of ways. You can also delete all Cookies that are already on your device. If you do this, however, you may have to manually adjust some preferences every time you visit our website and some of the Services and functionalities may not work.

To explore what Cookie settings are available to you, look in the “preferences” or “options” section of your browser’s menu. To find out more information about Cookies, including information about how to manage and delete Cookies, please visit http://www.allaboutcookies.org/.

8. Security and retention

We use reasonable physical, technical, and administrative measures. No method of transmission or storage

is completely secure. We keep personal information for as long as your account is open and as needed to

provide the Service, comply with law, resolve disputes, and collect amounts owed. We may keep de-

identified information.

You should also help protect your data by appropriately selecting and protecting your password and/or other sign-on mechanism; limiting access to your computer or device and browser; and signing off after you have finished accessing your account. Although we work to protect the security of your account and other data that we hold in our records, please be aware that no method of transmitting data over the internet or storing data is completely secure.

We retain Personal Data about you for as long as you have an open account with us or as otherwise necessary to provide you with our Services. In some cases we retain Personal Data for longer, if doing so is necessary to comply with our legal obligations, resolve disputes or collect fees owed, or is otherwise permitted or required by applicable law, rule or regulation. We may further retain information in an anonymous or aggregated form where that information would not identify you personally.

9. Minors

The Service is for people 21 or older, or the age of majority if higher. It is not directed to children under 13. If we learn we have personal information from a child under 13, we will delete it or stop using it. A parent may request removal of a minor’s posted information by emailing help@startsumma.com or by certified mail to the address below, with the subject “Removal of Minor Information,” the URL, and the parent’s contact details. We do not accept that request by phone.

10. State privacy rights 

California residents may email help@startsumma.com to opt out of disclosure of personal information to a third party for that party’s own direct marketing. 

Nevada residents may email help@startsumma.com with the subject “Nevada Do Not Sell Request.” We do not sell personal information as “sale” is defined in Nevada Revised Statutes Chapter 603A. 

If you live in Washington, Nevada, or another state with a consumer-health-data law, we treat intake answers, weight, prescription status, and similar information as consumer health data. We do not sell that data and we do not share it with an advertising platform for cross-context advertising. To request access or deletion, email help@startsumma.com with the subject “Health Data Request.” We will not discriminate against you for asking. We may deny a request where a Medical Group or Pharmacy must keep the record under law. 

11. Changes 

We may update this policy by posting the new version. If we make a material change, we will post a notice or email you. Use of the Service after the new version is posted is acceptance of it. Information is handled under the policy in effect when we collected it, unless you agree to the new one. 

We strive to use reasonable physical, technical and administrative measures to protect information under our control. However, you must keep your Account password secure and your Account confidential, and you are responsible for any and all use of your Account. If you have reason to believe that the security of your Account has been compromised, please notify us immediately in accordance with the "Contacting Us" section below.

When using the Service, you may choose not to provide us with certain information, but this may limit the features you are able to use or may prevent you from using the Service all together. You may also choose to opt out of receiving certain communications (e.g., newsletters, promotions) by emailing us your preference. Please note that even if you opt out, we may still send you Service-related communications. We do not currently respond to web browser "do not track" signals or other mechanisms that provide a method to opt out of the collection of information across the networks of websites and online services in which we participate. If we do so in the future, we will describe how we do so in this Privacy Policy. SummaUp may supplement, amend, or otherwise modify this Privacy Policy at any time. Such supplements, amendments and other modifications will be posted on this or a similar page of the Service, and shall be deemed effective as of the "Last Updated" date; provided, however, that SummaUp will notify you and/or require you to accept the updated Privacy Policy if the supplemented, amended or otherwise modified Privacy Policy implements material changes from SummaUp' then-current Privacy Policy. It is your responsibility to carefully review this Privacy Policy each time you visit, access or use the Service.

12. Contact 

SummaUp, LLC 

Email: help@startsumma.com Mail: 

519 W 22nd St, Suite 300-59742, Sioux Falls, SD 57105 

13. Text messages 

If you opt in, SummaUp, LLC may text you about an order, an account, or a promotion. Consent to automated texts is not a condition of purchase. Message frequency varies. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. Reply STOP to opt out. We will send a confirmation. Reply START to opt back in. Reply HELP, or email help@startsumma.com, for help. Call (650) 800-3424 only if that number is the SummaUp help line you control. Marketing texts are sent only after a separate opt-in. Opt-in data and consent are not shared with third parties for their own marketing. Your name and mobile number may be shared with the vendor that sends the texts, and that vendor may use them only to send the texts

SMS TERMS & CONDITIONS:

SMS Terms & Conditions: By subscribing to SummaUp, LLC SMS services, you agree to receive text messages from us. SummaUp, LLC will send SMS messages to communicate with customers on the status of the projects they have requested to provide a better overall customer experience. For HELP, please contact us at (650) 800-3424. To opt-out of receiving messages, reply with “STOP” at any time. Message frequency may vary. Standard message and data rates may apply.

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All the stated categories in this privacy policy exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. End users can opt out of receiving further messages by replying STOP or ask for more information by replying HELP. Message frequency may vary. Message and data rates may apply.

Text / SMS Marketing

If you choose to opt-in to SMS communications from SummaUp, LLC, you will receive text messages at the mobile number you provide. These messages might be automated and might include promotional offers, coupons, and/or information related to SummaUp, LLC or our affiliated brands, as well information related to your orders and account. 

Consent to Receive Automated Messages

You understand that consent to receive automated messages is not a condition of purchase or use of SummaUp, LLC’s services Messages may include but not limited to, order confirmations, updates, and special offers.

 Frequency of Messages

Message frequency may vary based on your orders, account activity, and ongoing promotions. You will receive messages relevant to your transactions and occasional promotional updates.

Opt-Out and Support Options

You may opt out of receiving text messages at any time by texting "STOP". Upon receipt of your opt-out request, you will be unsubscribed and will no longer receive text messages from us. A confirmation message will be sent to confirm that you have unsubscribed. Should you wish to re-subscribe, you may text "START" to receive SMS messages again. For assistance with the messaging service, text "HELP" or contact help@startsumma.com

Wireless Carrier Rates and Services Wireless message and data rates may apply. Wireless carriers are not liable for delayed or undelivered messages.

Confidentiality

 We will maintain the confidentiality of your mobile number. Your mobile number will not be shared with third parties for their own marketing purposes. However, for operational purposes, your name and mobile number may be shared with our service providers who assist in the delivery of our SMS communications. These providers use your personal information solely to carry out the services they provide to SummaUp LLC.