Privacy Policy

Last updated: October 18, 2026

Aminova Health ("Aminova," "we," "us") provides a software platform that longevity, hormone, and peptide clinics use to manage their practice, and a companion patient app that lets patients of those clinics view their care. This policy explains what information the platform handles, how it is used and protected, and the choices available to you.

1. Who controls your information

When you use Aminova as a patient, the clinic you are a patient of is the entity responsible for your health information (your "covered entity" under HIPAA). Aminova acts as that clinic's service provider / business associate and processes information on the clinic's behalf under a Business Associate Agreement. Each clinic's data is logically isolated from every other clinic's.

2. Information we handle

• Account & identity: name, email, phone, date of birth, and the login credentials you set.
• Health information (PHI): information your clinic records as part of your care — e.g. protocols, prescriptions, lab/outcome entries, appointments, messages, and documents.
• Payments: when you pay a clinic through Aminova, card details are collected and processed directly by the payment processor your clinic has connected — for example Stripe, Square or a specialist processor for prescription items. The merchant account is your clinic’s own, and Aminova never stores full card numbers.
• Usage & device: basic app/device and log information used to operate, secure, and troubleshoot the service.

3. How we use information

• To provide the platform and patient app and the features your clinic enables.
• To authenticate you, secure accounts, and prevent abuse.
• To send transactional messages (e.g. account, appointment, billing notifications) on your clinic's behalf.
• To operate, maintain, and improve the service.

We do not sell your personal information, and we do not use your health information for advertising.

4. Service providers we use

We share information only as needed with vetted infrastructure providers that process data on our behalf: Google Cloud (hosting), Supabase (database), Resend (email delivery) and Whereby (video visits), together with whichever payment processor your clinic has connected. Where these providers handle protected health information, we maintain appropriate agreements (including Business Associate Agreements) with them. We may also disclose information when required by law.

We also use Google Analytics to understand how visitors use this marketing website. It sets first-party cookies on this site and collects standard usage data such as pages viewed, approximate location and device type. We do not use it to build advertising profiles, and we do not share this data with advertising networks. It does not involve patient information or any data held in the Aminova product, which is served from a separate application that sets no analytics cookies and carries no analytics or advertising trackers of any kind.

5. Aminova Connect browser extension

Aminova Connect is a browser extension for clinic staff. It lets a signed-in staff member send a lab result from a laboratory’s website to their clinic’s Aminova account, where it waits for the clinic to review it.

• What it reads: only the document a staff member chooses to send, at the moment they choose it — by right-clicking it, pressing the extension’s keyboard shortcut, or pressing its button. It does not read other pages or tabs, does not look at browsing history, and never runs on its own. It sends nothing from Aminova’s own pages.
• What it sends: the chosen document, which contains the patient’s health information; the name of the website it came from; and the staff member’s Aminova sign-in. It sends these only to Aminova, over an encrypted connection.
• What it keeps on the device: the sign-in, the clinic’s and staff member’s names, the clinic code and email last used to sign in, a note that the staff member has seen what the extension sends, and a short list of recent sends — the website’s name and whether the send worked — which is cleared when the browser closes. It never keeps documents. Signing out removes all of it.
• Passwords and sign-in: a password is used only to sign in and is never stored. A sign-in ends after 30 days without use and after 180 days at most, and sooner if the staff member signs out, changes or resets their password, or is deactivated by their clinic.
• How the information is used: only to deliver the document to the clinic’s Aminova account for review. Once there, it is handled like any other record in Aminova, as described in this policy, on the clinic’s behalf.

Aminova’s use of information received through the extension adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements. We do not sell it, use it for advertising, or use it to decide anyone’s creditworthiness, and we do not transfer it except to provide this service, to keep it secure, or where the law requires. Aminova personnel do not read it except with the clinic’s permission to provide support, for security, or where the law requires.

6. Google Calendar

A clinician can choose to connect their own Google Calendar to Aminova, so their Aminova appointments appear on it and Aminova does not book them at times they are already busy. Connecting is optional and can be undone at any time.

• What Aminova reads: only the busy and free times on the connected calendar, so those times are not offered for booking. Google returns times only, never event titles, descriptions, attendees or locations, and Aminova does not store them.
• What Aminova writes: only the clinician’s own Aminova appointments, either on a separate “Aminova” calendar or, if the clinician chooses, on their main calendar. Each event carries the visit type and a link back to Aminova, never a patient’s name. Aminova changes or removes only events it created and never touches any other event.
• What Aminova keeps: the connection itself (which calendar, and the access Google grants) and a record of the events it created, so it can update or remove them. Disconnecting in Aminova, or removing Aminova’s access in the Google Account settings, stops all of it.
• No AI or machine learning: Google user data is never sent to any artificial intelligence or machine learning service, inside or outside Aminova, and is never used to create, train or improve any AI or machine learning model.

Aminova’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell it, use it for advertising, or use it to decide anyone’s creditworthiness, and we do not transfer it except to provide this feature, to keep it secure, or where the law requires. Aminova personnel do not read it except with the clinician’s permission to provide support, for security, or where the law requires.

7. Security

Information is encrypted in transit (HTTPS/TLS) and at rest, access is restricted and role-based, and each clinic's data is isolated. No system is perfectly secure, but we work to protect your information using industry-standard safeguards.

8. Data retention & deletion

Because Aminova holds medical records on behalf of clinics, that information is subject to your clinic's legal record-retention obligations and cannot always be deleted on demand. You can request deletion of your account and data from within the patient app (Account → request deletion); this sends a request to your clinic, which will remove what it is legally permitted to remove and explain anything it must retain. You may also contact your clinic directly.

9. Your choices

You can view and update your profile in the patient app, adjust notification preferences, and request access to or correction of your health information through your clinic. Patients in certain regions may have additional rights under applicable law; contact your clinic or us to exercise them.

If you are visiting this website, you can opt out of Google Analytics with Google’s browser add-on at tools.google.com/dlpage/gaoptout, or by blocking cookies in your browser settings. The Aminova patient app and clinic platform do not depend on analytics cookies, so blocking them does not affect your care or your access to your records.

10. Children

Aminova is not directed to children under 13, and patients use the app under the care of a clinic. Minors are managed by their clinic in accordance with applicable law.

11. Changes

We may update this policy; material changes will be reflected by the "Last updated" date above and, where appropriate, communicated through the service.

12. Contact

Questions about this policy or your information? Email privacy@aminova.health. For your own health records, contact your clinic directly.

This policy describes the Aminova platform generally; your clinic may provide additional privacy notices specific to its practice.