Rebel Health Alliance Privacy Policy
Last Modified: June 18, 2025
This Privacy Policy (“Policy”) describes the personal information collected by RHA Systems A Incorporated and Rebel Health Medical Services, PA (collectively, “Rebel Health,” “we,” “us,” or “our”) via Our website made available at https://www.rebelhealthalliance.io (the "Site"), including any accounts (“Accounts”) and the Member Center portal (“Member Center”) available through our Site. Collectively, the Site, Member Center, and Account are referred to as the “Platform.” This Policy also describes how we use, disclose and protect such personal information. This Policy only applies to the Rebel Health Platform, and no other affiliate or third-party website. If you have questions or concerns about this Policy, please contact us as set forth below.
We may modify this Policy at any time. All changes will be effective immediately upon posting to the Site. Material changes will be conspicuously posted on the Site or otherwise communicated to you.
If you use the Platform, you must comply with our Term of Use ("Terms").
Information We Collect
We may collect information that can be used, alone or in combination with other information, to identify you (“Personal Information”) when you use our Platform. The information we collect falls into four categories: (a) information you provide to us; (b) information we collect through automated methods when you use our Platform; (c) information we collect from other sources (as further detailed below); and (d) new Personal Information learned or created when we analyze your Personal Information (e.g., potential food intolerances learned from a blood draw).
You can visit the Platform without submitting Personal Information. However, Personal Information is required to use certain services, such as the health and wellness services that we provide on a subscription basis (“Services”). We are unable to provide you with Services unless you provide certain Personal Information related to such Services. The Services are governed by the Subscription Services Agreement.
Generally, we collect, retain, use, and disclose Personal Information for business purposes, including treatment and diagnosis purposes, that you have consent to and as outlined in this Privacy Policy. We do not sell Personal Information.
Information You Provide to Us
We collect Personal Information that you provide directly to us, including in the following ways:
- Online Accounts. To create an online Account, you must submit your name, email address, state of residence, and any other information requested from you at such time, as well as create a password. This data is used to populate a profile within your Account.
- Information Related to the Services. We will collect Personal Information that you provide to us via your Account or otherwise in the Member Center. Depending upon the Services purchased, we collect different types of Personal Information from you, including information that you may feel is sensitive information. This type of information includes, without limitation, information relating to your health and wellness such as physical or mental conditions, diagnoses, height, weight, dietary restrictions, allergies or preferences, genetic information, information learned from blood tests such as blood type, information about epigenetics, diet plans, gender, sex, and other similar information. We use this information to provide the Services to you and give you information about other services you may be interested in, including services provided by affiliates and third parties, in addition to other uses described throughout this Policy.
- Order & Payment Data. Online purchases of products or services made on the Platform must be made by credit or debit card. All credit and debit card information is provided directly to our PCI-compliant third-party payment processor. To complete a transaction through the Platform, you will need to submit your name and your credit or debit card type, number, expiration date, security code, and billing address. Your payment information may be stored by our payment processor(s) as permitted by PCI-DSS and used for recurring billing. We do not directly access, handle, or store your credit or debit card information; however, we may maintain a record of your purchases that you make using our Platform. Please see your Subscription Services Agreement for more information about billing and payment.
- Applying to Work with Rebel Health. If you inquire about working with Rebel Health or apply for open positions with us online, we will use and share the information you submit to evaluate your qualifications to work with Rebel Health and its affiliates.
- Marketing Communications; Email Opt-Out. If we have your email address, we may send you promotional and other electronic communications. We may use third-parties or service providers to deliver such communications to you. You may opt-out of such marketing emails by using the unsubscribe link in the email or by emailing information@rebelhealthalliance.io. Opting out of marketing communications does not opt you out of non-marketing communications, such as emails about your Account or transactions.
- Live Chat/Video/Audio. If you use the Platform’s chat feature, or any video or audio features provided, we will collect all text, video, audio, and other data that you submit via that chat feature. We may record text, video, and audio for quality control and improvement purposes. If you use any of these features while signed into your Account, we may link that information to your Account.
- Feedback. When you provide comments or feedback about our Platform, the content on the Platform, or our Services ("Feedback"), we will not treat that Feedback as confidential, and we may use that Feedback for any purpose in our sole discretion so long as it does not personally identify you. Feedback will be used without attribution or compensation to you.
- Your Posts. Any information, documents, videos, photos, comments, or other materials that you upload or post to the Platform (“Your Posts”) will be collected by us and may be linked to your Account. We may use and disclose Your Posts to provide you the Services, improve our products and Services, and as otherwise described in this Policy. We have no obligation to review Your Posts, and we may delete Your Posts in our sole discretion. We make no commitments that Your Posts will be stored or maintained for any certain period of time.
SMS and Text Message Marketing Privacy Policy
We will not share your opt-in to an SMS campaign with any third party for purposes unrelated to providing you with the services of that campaign. We may share your Personal Data, including your SMS opt-in or consent status, with third parties that help us provide our messaging services, including but not limited to Platform providers, phone companies, and any other vendors who assist us in the delivery of text messages. All of the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
New Information Created via Reports/Analyses
In addition to the information you provide directly to us, we may collect and/or develop additional Personal Information about you when analyzing the Personal Information you provide (e.g., potential food intolerances, health risk factors, etc.). Please keep in mind that you may learn new information about yourself and your health – please discuss any concerns you may have with your health care provider prior to any applicable tests or analysis. We may also provide you reports and other analyses about your health and wellness (“Reports”). We may use and share those Reports as described in this Policy.
Data Automatically Collected
We may use automated technologies to collect information from you or your device when you use our Platform. This may include the following:
- Account Activity. We may collect data about how you use (i) your online Account, and (ii) the Platform when you are logged into your Account. We may combine data automatically collected from you with other Personal Information about you. We may monitor your activities when you are using the Platform or signed into your Account.
- Cookies & Other Tracking Technologies
We may use cookies, web beacons, pixel tags and other tracking technologies (collectively "Cookies") on our Platform. A cookie is a small text file that our Platform saves onto your computer or device when you use the Platform that provides us certain information about your activities. Cookies allow the Platform to remember your actions and preferences and recognize you or your browser, along with some information you provided. Web beacons/ pixel tags are small graphics on a webpage that monitor your activity when viewing a webpage.
A Cookie can either be a “session” Cookie or a “persistent” Cookie. Session Cookies exist only for so long as you are visiting the applicable site and are typically deleted when you exit your web browser. Persistent Cookies exist for a set period of time, for example, up to several months or years. Each time you visit a site that has implemented a persistent Cookie, the persistent Cookie is renewed and that Cookie will remain active until its predetermined expiration date. You can manually delete persistent Cookies through your browser settings.
Cookies may either be “first-party” or “third-party” Cookies. A first-party Cookie allows your web browser to talk to the actual site that you are visiting (i.e., our Site). A third-party Cookie allows your web browser to talk to a third-party website, such as the source of an ad that appears on the website you are visiting or a third-party analytics provider. We may not have control over how a third-party uses information collected through third-party Cookies.
Most browsers automatically accept cookies. You can disable this function by changing your browser settings, but disabling cookies may impact your use and enjoyment of the Platform. Not all features or functions of the Platform may work properly if you disable Cookies. You cannot disable all Cookies, such as Cookies that are essential to the functioning of the Platform.
The Cookies on our Platform may collect information such as:
- IP addresses assigned to the computers and other devices you use;
- your internet service provider;
- device ID number;
- approximate geographic location;
- browser type;
- Platform pages visited;
- Text, video and audio recordings;
- websites you access before and after visiting the Platform, and
- data related to how and when you use the Platform.
California's "Do-Not-Track" Requirement
Some web browsers include a “Do Not Track” (“DNT”) feature that signals to websites you visit that you do not want to have certain information collected. Because there is not yet a common understanding of how to interpret DNT signals, we do not currently respond to them or honor DNT requests
Video and Map Content
The Platform may contain videos and maps that use embedded content provided by a third party, including visible content and/or feeds scripts embedded in the Platform’s code. Our use of these tools requires us to implement certain application programming interfaces (APIs) from those third-party vendors, which allow for data collection, disclosure and use by those third parties.
Data from Other Sources
We obtain data about individuals from various third-party companies and public sources, and we may combine that data with other Personal Information. This may include information from third party applications or websites that you use in conjunction with our services, such as mobile fitness tracking information and scheduling information. We may also receive Personal Information about you from our affiliates that are also providing health-related services to you. We may receive Personal Information from third parties that we use to help analyze your data, such as laboratories that you send bloodwork to. All of this additional information enhances our existing data about our users, improves and compliments our Services, and enhances our marketing capabilities.
How We Use Your Information
We may use Personal Information that we collect for the following purposes:
- As Stated or Agreed to at the Point of Collection. We may use Personal Information for the purposes stated or agreed-to (or as is obvious) at the point of collection. For example, we use Personal Information to respond to your questions, comments, or complaints. We may also use Personal Information as requested or consented to by you, including for treatment and diagnosis purposes.
- Provide you the Services. We use Personal Information to provide the Services you requested or purchased.
- Administration. We may use Personal Information for administrative purposes, such as managing your Accounts, providing the Services your request, facilitating transactions, to inform our business strategies, and to understand the Platform’s demographics and user preferences.
- Platform Management. We may use Personal Information for Platform management, such as troubleshooting problems, improving the content and functionality of the Platform, statistical and other analyses of the Platform, and to customize the Platform to you and our users.
- Business Analytics. We may use Personal Information, including consumer and operations research, to assess the effectiveness of our sales, online services, marketing, and advertising, and to analyze market trends and (future) customer demand.
- Advertising and Communications. We may use Personal Information to send you promotions or to perform advertising, to notify you of new services, products or programs, to notify you of new features of our Platform, to notify you of changes to our Terms or this Policy, to notify you of complimentary services you may be interested in, and for other similar communications.
- To Protect Our Rights. We may use Personal Information to protect our legal rights or interests, or those of other parties, including to bring a legal action against you or anyone who may be causing harm to us, our Platform, or to other users of the Platform. We may also use Personal Information to seek business, financial, or legal advice, and to respond to other legal requests.
How We Use Data Collected by Automatic Technologies
We use Cookies to: (i) make our Platform function properly; (ii) provide personalized experiences; (iii) tailor our interactions with you; (iv) help with our marketing efforts; (v) provide us with valuable data and statistics about the usage and effectiveness of our Platform and to help us improve our Platform; and (vii) help us improve our services.
Google Analytics
We may use Google Analytics to collect and process information about your use of the Platform. Google sets cookies on your browser or device, and then your web browser will automatically send information to Google. Google uses this information to provide us with reports that we use to better understand and measure how users interact with our Platform. To learn more about how Google uses data, visit Google’s Privacy Policy and Google’s page on “How Google uses data when you use our partners’ sites or apps.” You may download the Google Analytics Opt-out Browser Add-on for each web browser you use, but this does not prevent the use of other analytics tools. To learn more about Google Analytics cookies, visit Google Analytics Cookie Usage on Websites.
Retention of Personal Information
We will keep Personal Information for the period necessary to fulfil the purposes described in this Policy, unless a longer retention period is permitted or required by law.
Disclosure of Personal Information
We may disclose Personal Information to the following categories of parties, in compliance with applicable laws:
- Employees and Affiliates. We may disclose Personal Information to our employees and affiliates who have a need to know the information for our business purposes, as well as for providing you additional services you may seek from those affiliates. Our affiliates may use your Personal Information pursuant to separate agreements and policies that they will provide you at such time.
- Third Parties and/or Service Providers. We may disclose Personal Information to third parties and/or service providers that provide services for us. For example, we may disclose Personal Information with vendors to help us host and manage the Platform; provide advertising and other marketing services; improve the content and functionality of the Platform; perform data analysis and statistical analysis; troubleshoot problems with the Platform; provide payment processing services and online storefronts; and support or provide the security of the Platform.
We use contractors to perform certain Services on our behalf, including health and wellness Services, and your Personal Information may be shared with them as relevant.
We may also share Personal Information with third parties that provide complimentary products or services, or that we feel our customer base may be interested in. - Government Officials / Law Enforcement. We may cooperate with law enforcement and other governmental agencies, and may disclose Personal Information: (i) if we believe in good faith we are legally required to disclose that Personal Information, (ii) if we are advised to disclose Personal Information by our legal counsel, or (iii) when necessary to identify, contact or bring a legal action against someone who may cause or be causing harm to, or interfering with the legal rights of, Rebel Health or any other party.
- Professional Advisors. We may disclose Personal Information to our professional advisors, such as our attorneys, accountants, financial advisors and business advisors, in their capacity as advisors to Rebel Health.
- Change in Ownership. In the event Rebel Health is the subject of a change of control or in the event the Platform changes ownership, in whole or in part, or in the event of a bankruptcy, receivership or a similar transaction, we may provide Personal Information to the subsequent owner(s) and/or with respect to related due diligence.
- Other. We may disclose Personal Information to third parties when explicitly requested by or consented to by you, or for the purposes for which you disclosed the Personal Information to us as indicated at the time and point of the disclosure (or as was obvious at the time and point of disclosure).
Children's Information
The Platform is not directed at children under 18 years of age. If you are under 18 years old, you are prohibited from using the Platform and Services.
Data Security
We use commercially reasonable technical and organizational measures to help secure Personal Information against loss, misuse, and alteration appropriate to the type of Personal Information processed. If a breach of your Personal Information occurs, we will notify you of the breach if required under applicable law.
You understand that no data transmission over the internet or device can be guaranteed to be 100% secure. While we strive to protect Personal Information, we do not guarantee the security of Personal Information and you provide Personal Information at your own risk.
Social Media
We are active on social media, which may include Facebook, YouTube, Twitter, Instagram and LinkedIn (“Social Media”). Anything you post on Social Media is public information and will not be treated confidentially. We may post (or re-post) on the Platform and our Social Media pages any comments or content that you post on our Social Media pages. Your use of Social Media is governed by the privacy policies and terms of the providers that own and operate those websites and not by this Policy. We encourage you to review those policies and terms.
The Platform allows you to connect and share data with Social Media platforms. These features may require us to use cookies, plug-ins, and APIs provided by such Social Media platforms to facilitate those communications and features. The Platform may use advertising networks and services offered by Social Media platforms to deliver advertising content. Use of these services requires Social Media platforms to implement cookies or pixel tags to deliver ads to you while you access the Platform.
Access from Outside the United States
If you access the Platform from outside the United States, please be aware that Personal Information may be transferred to, stored in, and processed in the United States. Certain governmental authorities may not consider the level of protection of Personal Information in the United States to be equivalent to that required by the in other jurisdictions.
Other Data
We may collect, create or aggregate data when you use the Platform or Our Services that does not identify you. We may use and disclose this data for any purpose in our sole discretion so long as such use and disclosure complies with applicable laws.
Third-Party Websites and Applications
The Platform may link to, or be linked to, websites or applications not controlled by us. We are not responsible for third parties’ or affiliates’ privacy policies or practices. This Policy does not apply to any third-party or affiliate websites or to any data that you provide to third parties. You should read the privacy policy for each website that you visit. For example, when you use Calendly and Trainerize, you are providing your information directly to such third party, so their privacy policy and terms apply to their use of your information. Further, Rebel Health Medical Services, PA contracts with Genemetrics and Heads Up (“Contractors”) in connection with providing professional medical services to members. Any data shared with Contractors for the purposes of providing treatment or diagnosis to members is subject to Contractors’ privacy policies.
If you provide Personal Information directly to a third party, even if in connection with the Services, this Policy does not control. For example, if you send blood to a laboratory, that laboratory’s policies shall apply instead of this Policy – and that laboratory may send us your Personal Information (e.g., your laboratory results).
Rights related to Personal Information.
Under certain state privacy laws, you may have specific rights regarding your information. You may have the right to request that we disclose certain information to you about our collection and use of your information over the past twelve months, which includes: categories of information we collect about you; the categories of sources from which we collected information; our business or commercial purpose for collecting that information; the categories of third parties with whom we share information; the categories of information about you that we disclosed for a business purpose, and the categories of service providers to whom disclosed that information for a business purpose. Additionally, you may request that we provide specific information we collect about you in a portable format.
You may have the right to request that we delete any of your information that we have collected from you directly or from other sources and retained, subject to certain exceptions. We may deny your request if retaining the information is necessary for us or our service providers to: complete the transaction for which we collected the information; provide the Services; take actions reasonably anticipated within the context of our ongoing business relationship; detect security incidents, protect about malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities; engage internal uses that are reasonable aligned with consumer expectations based on your relationship with us; comply with a legal obligation; or use the information in any other lawful way. We will delete or de-identify Personal Information not subject to one of the foregoing exceptions for our records and direct our Contractors to take similar action.
You have the right to request correction of any inaccurate information we hold about you.
You have the right to opt-out of our sale or our use of information for targeted advertising purposes.
You have the right to receive notice of our practices at or before collection of information and you have a right not to receive discriminatory treatment for exercising any of your rights described under this section. We will not discriminate against you based on your exercise of any of your rights.
Certain personal information may be classified as sensitive information and depending on your state of residence, you may have the right to revoke consent to our processing of such information, and/or request that we limit the use or disclosure of your sensitive information outside of internal business purposes.
You may have the right to opt-out of profiling in the furtherance of decisions that produce legal or similarly significant effects. However, we do not carry out profiling or automated decision-making activities in a manner that requires us to provide specific opt-out rights. Depending on your place of residence, you may be limited to the number of free requests you can make in a twelve-month period. If you exceed the number of requests allotted under applicable law, we reserve the right to charge a reasonable fee to respond to your request.
Requests should be submitted in writing via email to information@rebelhealthalliance.io. If you become aware of changes or inaccuracies in your information, you should inform us of the same so that the information may be updated and/or corrected.
If you are in a jurisdiction that recognizes the ability to use an authorized agent and wish to contact us through an authorized agent, the authorized agent can submit a request on your behalf to information@rebelhealthalliance.io, along with an authorized agent form.
If you are in a jurisdiction that recognizes your ability to appeal a decision we have made in connection with your attempt to assert a right under applicable privacy laws, you may file an appeal of our decision refusing your request to exercise your rights under this Privacy Policy. Requests to change our policies or practices are not grounds for an appeal. You may request an appeal of such decision by contacting us at information@rebelhealthalliance.io, please provide the state that you are writing from, accompanied with documentation that you may have regarding the matter you are appealing.
California residents may opt out of the sharing of personal information (as defined by California’s “Shine the Light law”), with third parties for their own direct marketing purposes. California residents may opt out and/or request for an accounting of what third-parties we have shared your personal information with. This right is in addition to and different than rights granted to California residents pursuant to the California Consumer Privacy Act (CCPA). California residents exercising their Shine the Light rights should email requests to our address below identifying the request as a Shine the Light Request and include a statement attesting to your California residency.
Contact Us
If you have questions or concerns regarding this Policy, contact us at:
- Phone Number : +1 202-695-3578
- Email Address : information@rebelhealthalliance.io
