Licensed U.S. providers in all 50 states

Legal

Legal & privacy.

The documents that govern Medlly’s telehealth services. The research-use-only shop at research.medlly.org is a separate business with its own policies.

Terms of Service

Last updated July 8, 2026

These Terms of Service (the "Terms") form a binding agreement between you and Medlly LLC, doing business as Medlly ("Medlly," "we," "us," or "our"), and govern your access to and use of the website located at medlly.org, our mobile and web applications, and the related products, content, and services we make available (together, the "Services"). The Services are operated for the telehealth platform offered at medlly.org. The research-use-only shop available at research.medlly.org is a separate business with its own separate terms and policies and is not covered by these Terms. Please read these Terms carefully. They include important provisions that affect your legal rights, including a medical disclaimer, an assumption of risk, a limitation of liability, and a binding arbitration provision with a class-action waiver in Section 14. By creating an account, accessing, or using the Services, you agree to be bound by these Terms. If you do not agree, do not use the Services.

1. Acceptance of These Terms and Eligibility

By accessing or using the Services, you acknowledge that you have read, understood, and agree to be bound by these Terms and by our Privacy Policy, which is incorporated into these Terms by reference. If you are using the Services on behalf of another person, you represent that you are authorized to accept these Terms on that person's behalf, and references to "you" include that person.

To use the Services, you must be at least 18 years of age, reside in the United States, and be physically located in the United States at the time you use the Services. Certain products and care lines carry additional age or location requirements. In particular, sexual health products and services require that you be at least 21 years of age, and some products are further limited by age, state, or other clinical factors. You represent and warrant that you meet the applicable eligibility requirements and that all information you provide is true, accurate, current, and complete.

The Services are not directed to children, and we do not knowingly collect information from anyone under 18. You may not use the Services if we have previously suspended or terminated your account or your right to use the Services.

2. Description of the Platform

Medlly is a technology and patient-support platform. We provide software, communication tools, educational content, and administrative and logistical support that connect you with independent, licensed U.S. healthcare providers and licensed pharmacies through our clinical partner network. The providers and pharmacies are independent third parties who are solely responsible for the professional services they render.

Medlly is not a medical provider, a pharmacy, a pharmacy benefit manager, or an insurer. We do not practice medicine, dispense medications, or provide medical advice, diagnosis, or treatment. We do not engage in the practice of pharmacy. Using the Services does not create a provider-patient relationship, a pharmacist-patient relationship, or any other professional healthcare relationship between you and Medlly. Any professional healthcare relationship is formed solely between you and the independent provider or pharmacy who serves you.

Our care model is primarily asynchronous. You complete an online medical intake, and a provider reviews your information and may follow up through secure messaging or, where appropriate or required, a synchronous video visit. Some states require a synchronous (live) visit before an initial prescription may be issued. Where clinically appropriate, a provider may order laboratory testing through services such as Quest Diagnostics or Labcorp. Our care lines include weight management (GLP-1), GLP-1 microdosing, strength, longevity, and energy (peptides and wellness injectables), and sexual health. Availability of specific products and care lines varies by state and by your individual clinical eligibility.

3. No Guarantee of a Prescription or Particular Outcome

The independent providers accessed through the Services exercise their own independent professional medical judgment. Completing an intake, attending a consultation, or paying any fee does not guarantee that you will receive a prescription, a particular medication, a particular dose, or any specific treatment or outcome.

A provider may determine that a requested treatment is not appropriate for you, may recommend a different course of care, may request additional information or testing, or may decline to prescribe. These clinical decisions are made by the provider and are not controlled by Medlly. You acknowledge that fees you pay are for access to the platform and the associated consultation, support, and fulfillment services, and are subject to our Refund Policy as described in Section 6, rather than a promise of any particular clinical result.

4. Compounded Medication Disclosure

Certain medications offered through the Services are compounded medications prepared by licensed compounding pharmacies. Compounded medications are not approved by the U.S. Food and Drug Administration (FDA). The FDA does not review compounded drugs for safety, effectiveness, or quality before they are marketed or dispensed.

Compounded medications are not the same as, and are not generic versions of, brand-name products such as Ozempic, Wegovy, Mounjaro, or Zepbound. They are distinct preparations made by a compounding pharmacy for an individual patient pursuant to a valid prescription. By using the Services, you acknowledge that you understand this disclosure and that a provider may prescribe a compounded medication if that provider determines it is clinically appropriate for you.

You should discuss the benefits, risks, and alternatives of any compounded medication with your provider before deciding whether it is right for you.

5. Accounts and Account Security

To use most features of the Services, you must create an account. You agree to provide accurate, current, and complete information during registration and to keep that information up to date, including your medical history, current medications, allergies, and contact details. Providing inaccurate or incomplete information may affect the care you receive and may result in inappropriate treatment.

You are responsible for maintaining the confidentiality of your account credentials and for all activity that occurs under your account. You agree to use a strong password and to notify us promptly at [email protected] if you suspect any unauthorized use of your account. We are not liable for any loss or damage arising from your failure to safeguard your credentials.

Your account is personal to you. You may not share your account, allow another person to use it, or transfer it to anyone else. We may refuse, suspend, or terminate accounts in our discretion, including where we believe an account has been used in violation of these Terms or applicable law.

6. Subscriptions, Billing, and Payment

Many of the Services are offered on a subscription basis. Each plan is offered at a single all-in periodic price that covers the bundled platform, consultation, support, and medication fulfillment services associated with that plan, as described at the point of purchase. By enrolling in a plan, you authorize recurring charges of the all-in plan price at the stated interval until you cancel.

Payments are charged through the Medlly interface to the clinical partner's merchant of record, which acts as the seller of record for the consultation and medication services. We accept the following payment methods: Visa, Mastercard, FSA and HSA cards, Apple Pay, and Google Pay. We do not accept American Express. You represent that you are authorized to use the payment method you provide, and you authorize us and the merchant of record to charge that method for all amounts due.

By providing a payment method, you authorize the charge of the all-in plan price, plus any applicable taxes and fees, on a recurring basis at the interval disclosed at enrollment. Prices may change as described in Section 16. If a payment is declined or cannot be processed, we may suspend or cancel your plan and your access to the associated Services. You are responsible for keeping your payment and billing information current.

7. Cancellation and Refunds

You may cancel your subscription at any time, for any reason, through your account settings or by contacting [email protected]. Cancellation stops future billing periods, subject to the timing of your cancellation relative to your billing cycle.

You may cancel at any time. Whether a charge can be refunded is determined by our Refund Policy: for example, you are eligible for a full refund if you cancel within the first 72 hours and have not yet received any Subscription Services, or if a provider disqualifies you for a medical reason, and for plans billed several months at a time, any months for which no medication was shipped are refunded. Monthly charges for the then-current billing period are generally not refundable, and once a period's medication has been ordered it cannot be returned for a refund.

These cancellation and refund provisions are summarized here and are governed in full by our Refund Policy, which is incorporated into these Terms by reference. In the event of any conflict between this Section and the Refund Policy regarding refund mechanics, the Refund Policy controls.

8. Medical Disclaimer and Emergencies

The content available through the Services, including text, graphics, educational materials, and other information, is provided for general informational and platform-support purposes and does not constitute medical advice from Medlly. Medlly does not provide medical advice, diagnosis, or treatment. Medical advice is provided only by the independent licensed providers who treat you, based on their own professional judgment.

Always seek the advice of a qualified healthcare provider with any questions you have about a medical condition, a medication, or a treatment. Never disregard professional medical advice or delay seeking it because of something you read or received through the Services.

The Services are not designed or intended for use in medical emergencies. If you are experiencing a medical emergency, or if you think you may have one, call 911 immediately or go to the nearest emergency room. Do not use the Services to request emergency care, and do not rely on the Services for urgent or time-sensitive medical needs.

9. Assumption of Risk

All medical treatments and medications, including compounded medications, carry risks, including the risk of side effects, adverse reactions, allergic reactions, drug interactions, and the possibility that a treatment may not be effective for you. Telehealth, by its nature, relies on the information you provide and may not include an in-person physical examination, which can affect the assessment a provider is able to make.

To the fullest extent permitted by law, you knowingly and voluntarily assume the risks associated with using the Services, with telehealth generally, and with any medication or treatment you obtain, including compounded medications that are not FDA-approved. You agree to follow the instructions of your provider and pharmacy, to disclose complete and accurate medical information, and to seek appropriate in-person care when needed.

You acknowledge that Medlly does not control and is not responsible for the clinical decisions, professional services, or products provided by the independent providers and pharmacies in our clinical partner network.

10. Intellectual Property

The Services and all materials available through them, including the Medlly name and logo, software, text, graphics, images, user interfaces, designs, and the selection and arrangement of content, are owned by or licensed to Medlly and are protected by United States and international intellectual property laws. We reserve all rights not expressly granted to you.

Subject to your compliance with these Terms, we grant you a limited, personal, non-exclusive, non-transferable, revocable license to access and use the Services for your own personal, non-commercial use in obtaining care for yourself. You may not copy, modify, distribute, sell, lease, reverse engineer, or create derivative works from any part of the Services, or remove any proprietary notices, except as expressly permitted by these Terms or applicable law.

If you submit any feedback, suggestions, or ideas about the Services, you grant us a perpetual, irrevocable, worldwide, royalty-free license to use that feedback for any purpose without any obligation to you.

11. Prohibited Uses

You agree not to use the Services in any way that violates applicable law or these Terms. Without limiting the foregoing, you agree that you will not: provide false, misleading, or incomplete information, including impersonating another person or creating an account on behalf of someone who has not authorized you; use the Services to obtain medications for resale, diversion, or for any person other than yourself; or share, sell, or transfer any medication obtained through the Services.

You also agree that you will not: attempt to gain unauthorized access to the Services, other accounts, or our systems; interfere with or disrupt the integrity or performance of the Services; introduce viruses, malware, or other harmful code; use any robot, scraper, or automated means to access or collect data from the Services; or circumvent any security or access controls.

You will not use the Services to harass, abuse, or harm another person, to infringe the intellectual property or privacy rights of others, or for any fraudulent or unlawful purpose. We may investigate and take appropriate action, including suspending or terminating your access and reporting conduct to law enforcement, for any actual or suspected violation of this Section.

12. Third-Party Services and Links

The Services rely on and may link to or integrate with third parties, including the independent providers and pharmacies in our clinical partner network, laboratory testing services such as Quest Diagnostics and Labcorp, payment processors and merchants of record, shipping carriers, and other vendors. These third parties are not controlled by Medlly, and their products and services are governed by their own terms and privacy practices.

We provide links and integrations for your convenience and do not endorse and are not responsible for the content, products, services, accuracy, or practices of any third party. Your dealings with, and reliance on, any third party are solely between you and that third party. We encourage you to review the terms and privacy policies of any third party before using its services.

13. Disclaimers of Warranties

The Services are provided on an "as is" and "as available" basis, without warranties of any kind, whether express, implied, or statutory. To the fullest extent permitted by law, Medlly disclaims all warranties, including the implied warranties of merchantability, fitness for a particular purpose, title, and non-infringement, and any warranties arising out of course of dealing or usage of trade.

We do not warrant that the Services will be uninterrupted, timely, secure, or error-free, that defects will be corrected, or that the Services or the servers that make them available are free of harmful components. We make no warranty regarding the conduct, clinical decisions, professional services, or products of the independent providers or pharmacies, and we make no warranty that any treatment or medication will be safe, effective, or appropriate for you.

Some jurisdictions do not allow the exclusion of certain warranties, so some of the above exclusions may not apply to you. In that case, any required warranties are limited to the minimum extent permitted by law.

14. Limitation of Liability

To the fullest extent permitted by law, in no event will Medlly or its officers, directors, employees, agents, or licensors be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, or for any loss of profits, revenue, data, goodwill, or other intangible losses, arising out of or relating to your use of, or inability to use, the Services, even if we have been advised of the possibility of such damages.

To the fullest extent permitted by law, the total aggregate liability of Medlly arising out of or relating to these Terms or the Services will not exceed the greater of the amount you paid to us through the Services in the twelve (12) months immediately preceding the event giving rise to the claim, or one hundred U.S. dollars (USD 100).

Nothing in these Terms limits or excludes any liability that cannot be limited or excluded under applicable law. Because Medlly is a technology and support platform and not a medical provider or pharmacy, the limitations in this Section apply in addition to, and do not waive, the independent responsibility of providers and pharmacies for their own professional services. Some jurisdictions do not allow certain limitations of liability, so some of the above may not apply to you.

15. Indemnification

You agree to defend, indemnify, and hold harmless Medlly and its officers, directors, employees, agents, and licensors from and against any claims, liabilities, damages, losses, and expenses, including reasonable attorneys' fees and costs, arising out of or in any way connected with: your use of the Services; your violation of these Terms; your violation of any applicable law or the rights of any third party; or any information you provide through the Services, including inaccurate or incomplete medical information.

We reserve the right, at our own expense, to assume the exclusive defense and control of any matter otherwise subject to indemnification by you, in which case you agree to cooperate with our defense of that matter. This indemnification obligation survives the termination of these Terms and your use of the Services.

16. Dispute Resolution, Binding Arbitration, and Class-Action Waiver

Please read this Section carefully, because it affects your legal rights. It requires that most disputes between you and Medlly be resolved through binding individual arbitration rather than in court, and it waives your right to participate in a class action. This Section does not apply to claims that involve a medical emergency or that, by law, must be heard in court, and it does not limit your ability to bring an individual claim in small claims court if it qualifies.

Informal Resolution. Before starting an arbitration, you agree to first contact us at [email protected] and provide a written description of your dispute so that we can try to resolve it informally. You and Medlly agree to make a good-faith effort to resolve the dispute for at least sixty (60) days before initiating arbitration.

Binding Arbitration. If we cannot resolve a dispute informally, you and Medlly agree that any dispute, claim, or controversy arising out of or relating to these Terms or the Services will be resolved by final and binding arbitration administered by a recognized arbitration provider under its applicable consumer rules, before a single arbitrator. The Federal Arbitration Act governs the interpretation and enforcement of this Section. The arbitrator has exclusive authority to resolve disputes about the interpretation, applicability, or enforceability of this arbitration agreement.

Class-Action Waiver. You and Medlly agree that each may bring claims against the other only in an individual capacity, and not as a plaintiff or class member in any purported class, collective, consolidated, or representative proceeding. The arbitrator may not consolidate more than one person's claims and may not preside over any form of a class or representative proceeding.

Opt-Out. You may opt out of this arbitration and class-action waiver provision by sending written notice to [email protected] within thirty (30) days after you first accept these Terms, stating your name and your intent to opt out. If you opt out, the dispute resolution provisions of this Section will not apply to you, but the rest of these Terms will continue to apply.

17. Governing Law and Venue

These Terms and any dispute arising out of or relating to them or the Services are governed by the laws of the State of Wyoming, without regard to its conflict-of-laws principles, and by applicable U.S. federal law, including the Federal Arbitration Act with respect to Section 16.

To the extent any dispute is not subject to arbitration and may be brought in court, you and Medlly agree that the state and federal courts located in the State of Wyoming will have exclusive jurisdiction and venue, and you consent to the personal jurisdiction of those courts, except where prohibited by applicable law.

18. Changes to These Terms; Termination; Contact

We may update these Terms from time to time. When we make changes, we will revise the "Last Updated" date above and, where appropriate, provide additional notice through the Services or by other reasonable means. Changes are effective when posted unless we state otherwise. Your continued use of the Services after changes take effect constitutes your acceptance of the updated Terms. If you do not agree to the changes, you must stop using the Services.

We may suspend or terminate your access to the Services at any time, with or without notice, including if we believe you have violated these Terms or applicable law, or if we discontinue the Services. You may stop using the Services at any time and may cancel any subscription as described in Section 7. Provisions that by their nature should survive termination will survive, including the disclaimers, limitation of liability, indemnification, dispute resolution, and governing law provisions.

If you have questions about these Terms, you may contact us at [email protected] for general inquiries or at [email protected] for privacy and data-rights matters. Medlly is operated by Medlly LLC.

19. Pharmacy Partners and Service Availability

Medlly is not a pharmacy and does not compound, dispense, or ship medication. Prescriptions written by the independent, licensed providers in our clinical partner network are filled by independent, licensed compounding and dispensing pharmacies. The pharmacy partners currently used to prepare and dispense medication for Medlly patients are listed below. The pharmacy that fills a given prescription depends on the medication, the state in which you are located, and clinical and operational factors, and this list of pharmacy partners may change from time to time.

RedRock Pharmacy — 1240 E 100 S #220, St. George, UT 84790 — (801) 433-9500 — redrockhomepharmacy.com

Health Warehouse — 7107 Industrial Rd., Florence, KY 41042 — (800) 748-7001 — healthwarehouse.com

Precision Medicine — 2657 Merrick Road, Bellmore, NY 11710 — (516) 833-6262 — precisionmeds.com

Triad Rx — 26258 Pollard Road, Daphne, AL 36526 — (251) 380-7630 — triadrx.us

Service availability. Currently offering services in all 50 states plus Washington D.C. Some services may not be available in all 50 states or Washington D.C. Subject to change.

Privacy Policy

Last updated June 25, 2026

This Privacy Policy explains how Medlly collects, uses, shares, and protects personal information, including health information, when you use the telehealth services offered at medlly.org (the "Services"). In this policy, "Medlly," "we," "us," and "our" refer to Medlly LLC, and "you" and "your" refer to the individual who visits the site or uses the Services. Medlly is a technology and patient-support platform that connects patients with independent, licensed U.S. healthcare providers and licensed pharmacies through its clinical partner network. Medlly is not itself a medical provider, a pharmacy, or an insurer, and does not practice medicine. By using the Services, you agree to the practices described in this Privacy Policy. Please read it carefully, and read it together with our Notice of Privacy Practices, our Terms of Service, and our Telehealth and Medical Consent.

1. Scope of this Privacy Policy

This Privacy Policy applies only to the Medlly telehealth services offered at medlly.org. It describes how we handle personal information that we collect when you create an account, complete a medical intake, communicate with us, and obtain care through the Services.

This Privacy Policy does not cover the research-use-only shop operated at research.medlly.org. That storefront is a separate business with its own policies, and it is not governed by this Privacy Policy. If you visit research.medlly.org, please review the privacy policy posted there.

This Privacy Policy also does not change or override the Notice of Privacy Practices that applies to protected health information held by the treating providers and other covered entities in our clinical partner network. Where information is governed by the Notice of Privacy Practices, that notice controls. See Section 8 for how the two documents relate.

2. Information we collect

Account and contact information. When you create an account or contact us, we collect information such as your name, email address, phone number, mailing and shipping address, date of birth, and login credentials. We may also collect identity and eligibility details, such as your state of residence and confirmation that you are old enough to use a given Service.

Intake and health information. To connect you with a licensed provider and to support your care, we collect the health information you provide during the medical intake and afterward. This can include your medical history, current and past medications, allergies, symptoms, height and weight, photographs you choose to submit, treatment preferences, responses to clinical questionnaires, and information generated during your care such as provider notes, prescriptions, lab orders and lab results, and messages with your care team. Because Medlly offers compounded medications and care lines that include weight management (GLP-1), GLP-1 microdosing, strength, longevity and energy (peptides and wellness injectables), and sexual health, the intake is tailored to the care line you select.

Payment information. When you pay for a plan, your payment card and billing details are collected and processed by the payment processor that serves as, or supports, the clinical partner's merchant of record. Medlly does not store full payment card numbers. We may receive limited information from the payment processor, such as a confirmation of payment, the last few digits of your card, the card brand, and the billing status of your plan.

Device and usage information. When you use the Services, we automatically collect technical information such as your IP address, device and browser type, operating system, general location inferred from your IP address, pages and screens you view, links you click, dates and times of access, referring pages, and similar usage data. We collect some of this information using cookies and similar technologies, as described in Section 11.

Communications. When you contact support, message your care team, respond to surveys, or otherwise communicate with us, we collect the content of those communications and related metadata, such as the date, time, and channel used.

3. How we collect information

We collect information directly from you when you provide it, such as when you register, complete your intake, communicate with us, or make a payment. We collect some information automatically through your use of the Services, including through cookies and similar technologies.

We also receive information from third parties who help deliver your care or operate the Services. These include the treating providers and licensed pharmacies in our clinical partner network, laboratories such as Quest and Labcorp where lab work is clinically appropriate, the payment processor, and service providers that support functions such as identity verification, shipping, analytics, and security.

4. How we use information

Provide and operate the Services. We use your information to create and manage your account, to route your intake to an appropriate licensed provider, to enable your consultation and ongoing care, to coordinate prescriptions and fulfillment with licensed compounding pharmacies, to arrange lab orders where clinically appropriate, and to deliver and ship any products to you.

Process billing. We use your information to charge the single all-in periodic price for your plan through the Medlly interface to the clinical partner's merchant of record, to confirm and reconcile payments, to apply our cancellation and refund rule, and to detect and prevent payment fraud. Under our refund rule, you may cancel at any time; refunds are issued as described in our Refund Policy (for example, within the first 72 hours if you have not received services, on provider disqualification, or for prepaid months with no medication shipped), and monthly charges for the then-current period are generally not refundable.

Communicate with you. We use your contact information to send transactional and service messages, such as order and shipping updates, billing notices, appointment and refill reminders, security alerts, and responses to your inquiries. Where permitted, and subject to your choices, we may send you information about products and services that may interest you.

Improve, secure, and protect the Services. We use information to understand how the Services are used, to maintain and improve them, to develop new features, to keep them safe and secure, to detect and prevent fraud and abuse, and to protect the rights, property, and safety of Medlly, our users, and others.

Comply with law. We use information to comply with applicable legal, regulatory, licensing, tax, and recordkeeping obligations, and to establish, exercise, or defend legal claims.

5. How we share information

We do not sell your personal information. We share personal information only as described in this section and as otherwise described in this Privacy Policy.

Clinical partner and treating providers. We share your account and intake information with the clinical partner network and the independent, licensed healthcare providers who evaluate you and exercise independent professional medical judgment about your care. A consultation does not guarantee a prescription.

Pharmacies. We share information necessary to prepare, dispense, and ship your medication with the licensed compounding pharmacies in our clinical partner network. Because the medications offered through the Services are compounded, they are not FDA-approved and are not the brand-name products.

Laboratories. Where lab work is clinically appropriate, we share information needed to order and process lab tests with laboratories such as Quest and Labcorp, and we receive related results.

Payment processors. We share payment and billing information with the payment processor that serves as, or supports, the clinical partner's merchant of record, so that your plan can be charged and managed.

Service providers. We share information with vendors and service providers that perform functions on our behalf, such as cloud hosting and storage, customer support tooling, communications and messaging, shipping and logistics, identity verification, analytics, and security. These service providers are permitted to use the information only to perform services for us and are required to protect it.

Legal and safety. We may disclose information when we believe in good faith that disclosure is necessary to comply with applicable law, regulation, legal process, or a governmental or regulatory request; to enforce our Terms of Service or other agreements; to detect, prevent, or address fraud, security, or technical issues; or to protect the rights, property, or safety of Medlly, our users, or others.

Business transfers. If Medlly is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, personal information may be transferred as part of that transaction, subject to the commitments in this Privacy Policy.

With your direction or consent. We may share information for other purposes with your consent or at your direction.

6. No sale of personal information

We do not sell your personal information for money, and we do not share your personal information for cross-context behavioral advertising in a manner that requires an opt-out under applicable state law. We do not use or disclose sensitive personal information, including your health information, except as necessary to provide the Services you request and as otherwise permitted by law.

We may share limited device and usage information with analytics providers as described in Section 11 to operate and improve the Services. Where applicable law treats any such activity as a sale or sharing, you may exercise the rights described in Section 12.

7. Legal bases and your choices

We process your personal information to provide the Services you request and to perform our obligations to you, to pursue our legitimate interests in operating, securing, and improving the Services, to comply with our legal obligations, and with your consent where required.

You can make choices about your information. You can update your account information, manage certain communication preferences, and opt out of non-essential marketing messages by following the instructions in those messages or by contacting us. You can also control cookies as described in Section 11. Opting out of marketing does not affect transactional or service messages that are necessary to provide the Services and your care.

8. Relationship to the Notice of Privacy Practices

Some of the health information involved in your care is protected health information that is created, received, or maintained by the treating providers, pharmacies, and other covered entities in our clinical partner network. That protected health information is governed by the Health Insurance Portability and Accountability Act (HIPAA) and is described in the Notice of Privacy Practices, not by this Privacy Policy. Where there is any conflict between this Privacy Policy and the Notice of Privacy Practices with respect to protected health information held by those covered entities, the Notice of Privacy Practices controls.

This Privacy Policy governs the personal information that Medlly handles in its role as a technology and patient-support platform, including account, payment, device, usage, and communications information, and intake information before and apart from its handling as protected health information by the covered entities. To the extent Medlly acts as a business associate or service provider to covered entities in the clinical partner network, it handles protected health information in accordance with its agreements with them and applicable law.

Please review the Notice of Privacy Practices for a full description of how protected health information may be used and disclosed for treatment, payment, and health care operations, and of the rights you have with respect to that information.

9. Data retention

We retain personal information for as long as needed to provide the Services, maintain your account, and fulfill the purposes described in this Privacy Policy, and thereafter as required to comply with our legal, regulatory, licensing, tax, accounting, and recordkeeping obligations, to resolve disputes, and to enforce our agreements.

Medical and pharmacy records are subject to retention periods set by applicable law and professional requirements, and those records may be retained by the treating providers, pharmacies, and other covered entities in the clinical partner network for the periods those laws require, independent of your Medlly account. When we no longer need personal information, we take reasonable steps to delete it or to de-identify or anonymize it.

10. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, disclosure, and loss. These measures include encryption of data in transit, access controls, authentication, and monitoring.

No method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying us promptly if you believe your account has been compromised. If you have reason to believe your information is no longer secure, please contact us at [email protected].

11. Cookies and analytics

We use cookies and similar technologies, such as local storage and pixels, to operate the Services, remember your preferences and session, keep the Services secure, and understand how the Services are used. Some of these technologies are strictly necessary for the Services to function, while others support performance, functionality, and analytics.

We use analytics tools to measure, in aggregate, how visitors use the Services so that we can maintain and improve them. Most browsers let you view, manage, block, and delete cookies through their settings, and you can usually set your browser to warn you before accepting cookies or to refuse them. Blocking strictly necessary cookies may prevent parts of the Services from working. Where we offer additional cookie controls on the site, you can use those to manage non-essential categories. Some browsers offer a Do Not Track or Global Privacy Control signal, and we honor recognized opt-out preference signals where required by applicable law.

12. Your privacy rights

Subject to applicable law, you have rights with respect to your personal information. These may include the right to access and obtain a copy of the personal information we hold about you, the right to correct inaccurate personal information, the right to request deletion of your personal information, the right to obtain a portable copy of certain information, and the right to opt out of certain processing. You also have the right not to be discriminated against for exercising these rights.

State privacy rights. Residents of California and other states with comprehensive privacy laws may have additional rights under those laws, including the right to know the categories and specific pieces of personal information we have collected, the categories of sources, the purposes for collecting it, and the categories of third parties to whom we disclose it, as well as the rights to access, correct, delete, and to opt out of any sale or sharing and of certain uses of sensitive personal information. As described in Section 6, we do not sell your personal information. California residents may also have the right to designate an authorized agent to make a request on their behalf.

How to exercise your rights. To exercise your rights, contact us at [email protected]. We will verify your identity before responding, and we may ask for additional information for that purpose. We will respond within the time required by applicable law. Requests that concern protected health information held by the treating providers, pharmacies, or other covered entities in the clinical partner network are handled under the Notice of Privacy Practices, and we will direct or forward such requests as appropriate.

13. Children's privacy

The Services are intended only for adults. You must be at least 18 years old in the United States to use the Services, and certain care lines have higher age requirements (for example, sexual health requires that you be at least 21 years old, and some products are limited by age).

We do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from a person under 18, we will take steps to delete it. If you believe a minor has provided us with personal information, please contact us at [email protected].

14. Third-party links and services

The Services may contain links to, or interact with, websites and services operated by third parties, such as payment processors, laboratories, and pharmacies. This Privacy Policy does not apply to those third-party websites and services, and we are not responsible for their privacy practices. We encourage you to review the privacy notices of any third party before providing your information to it.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will revise the date at the top of this Privacy Policy and, where required by law or where the changes are material, provide additional notice, such as by email or through the Services. Your continued use of the Services after the updated Privacy Policy takes effect means that you accept the changes. This Privacy Policy is governed by the laws of the State of Wyoming.

16. Contact us

If you have questions about this Privacy Policy or about how we handle your personal information, or if you wish to exercise your privacy rights, contact us at [email protected]. For general questions about the Services, contact us at [email protected].

The Services are not for use in medical emergencies. If you are experiencing a medical emergency, call 911 or go to the nearest emergency room.

Notice of Privacy Practices

Last updated June 25, 2026

This Notice of Privacy Practices describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully. Under the federal Health Insurance Portability and Accountability Act of 1996 and its implementing regulations (together, "HIPAA"), the licensed healthcare providers and licensed pharmacies who treat you through the Medlly platform are required by law to maintain the privacy of your protected health information ("PHI"), to provide you with this Notice of their legal duties and privacy practices with respect to PHI, and to follow the terms of the Notice that is currently in effect. PHI is information that identifies you, or that could reasonably be used to identify you, and that relates to your past, present, or future physical or mental health, the healthcare you receive, or the payment for that care. Medlly (operated by Medlly LLC) is a technology and patient-support platform that connects you with independent, licensed U.S. healthcare providers and licensed pharmacies through its clinical partner network. Medlly is not itself a medical provider, a pharmacy, or an insurer and does not practice medicine. Medlly supports your treating providers and pharmacies by operating the platform through which your care is delivered, and it handles PHI on their behalf and under its agreements with them. This Notice applies to the telehealth service at medlly.org. The research-use-only shop at research.medlly.org is a separate business with its own policies and is not covered by this Notice.

1. Who Follows This Notice and How We Work Together

This Notice describes the privacy practices of the independent, licensed healthcare providers and the licensed pharmacies who furnish care and medications to you through the Medlly platform. These providers and pharmacies (which we refer to in this Notice as the "Covered Providers") are the entities that are directly responsible under HIPAA for protecting your PHI in the course of your treatment.

Your treating providers participate in an organized health care arrangement (an "OHCA"). An OHCA is a clinically integrated care setting in which more than one provider participates and in which the participants need to share PHI to manage and deliver the care you receive. Through the OHCA, your Covered Providers may share your PHI with one another as necessary to carry out treatment, payment, and the joint health care operations of the arrangement. This single joint Notice describes the privacy practices of the Covered Providers who participate in the OHCA.

Medlly operates the technology platform and patient-support services that the OHCA and the Covered Providers rely on to deliver your care. In doing so, Medlly handles PHI on behalf of the Covered Providers as their business associate, and it is bound by written business associate agreements that require Medlly to safeguard your PHI and to use and disclose it only as those agreements and HIPAA permit. Medlly is not a medical provider, a pharmacy, or an insurer, and a consultation through the platform does not guarantee that any provider will write a prescription. Providers exercise independent professional medical judgment.

You should also understand the nature of the medications offered. Medications dispensed through the platform are compounded medications prepared by licensed compounding pharmacies. Compounded drugs are not FDA-approved and are not evaluated by the FDA for safety, effectiveness, or quality. They are not the brand-name products (for example, Ozempic, Wegovy, Mounjaro, or Zepbound). This Notice governs how PHI about your compounded-medication care is used and disclosed.

2. How We May Use and Disclose Your PHI for Treatment, Payment, and Health Care Operations

The Covered Providers, and Medlly acting on their behalf, may use and disclose your PHI without your separate written authorization for the purposes of treatment, payment, and health care operations, as described below. Not every possible use or disclosure is listed, but every use and disclosure we make will fall within one of the categories described in this Notice.

For Treatment. We may use and disclose your PHI to provide, coordinate, and manage your healthcare and related services. For example, a provider reviews your intake questionnaire, medical history, photographs, and any lab results to decide whether treatment is appropriate; a provider may order labs through Quest Diagnostics or Labcorp where clinically appropriate and review the results; a provider transmits a prescription to a licensed compounding pharmacy, which then uses that information to prepare and ship your medication; and providers, pharmacists, and clinical support staff within the OHCA may share PHI with one another to follow up on your treatment, adjust your plan, and respond to your messages. This includes care across our care lines: weight management (GLP-1), GLP-1 microdosing, strength, longevity, and energy (peptides and wellness injectables), and sexual health.

For Payment. We may use and disclose your PHI to obtain payment for the care and medications you receive and to administer billing. Care is offered at a single all-in periodic price per plan, which is charged through the Medlly interface to the clinical partner's merchant of record. For example, we may use your PHI to process your payment using your Visa, Mastercard, FSA or HSA card, Apple Pay, or Google Pay; to confirm eligibility for FSA or HSA reimbursement; to issue receipts or documentation; to apply our refund and cancellation rule; and to manage account balances. Under that rule, you may cancel at any time; refunds are issued as described in our Refund Policy (for example, within the first 72 hours if you have not received services, on provider disqualification, or for prepaid months with no medication shipped), and monthly charges for the then-current period are generally not refundable.

For Health Care Operations. We may use and disclose your PHI for activities that are necessary to run our practice and operate the platform and to support quality and safety. For example, we may use PHI to review and improve the quality of care, to evaluate the performance of providers and pharmacies, to conduct training and supervision, to perform care coordination and case management, to handle customer-support inquiries, to investigate complaints and grievances, to conduct internal audits and compliance reviews, to detect and prevent fraud, and to perform business planning and general administration. We may share PHI among the participants in the OHCA for the joint health care operations of the arrangement.

3. Other Uses and Disclosures Permitted or Required Without Your Authorization

The law permits or requires us to use or disclose your PHI without your authorization in certain other situations. These include the following.

As Required by Law. We will disclose your PHI when federal, state, or local law requires it, and only to the extent the disclosure complies with and is limited to what that law requires.

Public Health Activities. We may disclose PHI for public health purposes, such as preventing or controlling disease, injury, or disability; reporting to a public health authority; reporting adverse events, product defects, or problems with medications or other products to the appropriate authority or to a person subject to the jurisdiction of the U.S. Food and Drug Administration; and notifying a person who may have been exposed to a disease or may be at risk of contracting or spreading a disease or condition.

Health Oversight Activities. We may disclose PHI to a health oversight agency for activities authorized by law, such as audits, investigations, inspections, licensure actions, and similar activities necessary to oversee the healthcare system and compliance with civil rights laws.

Judicial and Administrative Proceedings. We may disclose PHI in response to a court or administrative order, and we may disclose PHI in response to a subpoena, discovery request, or other lawful process if reasonable efforts have been made to notify you about the request or to obtain an order protecting the information.

Law Enforcement. We may disclose PHI to a law enforcement official for purposes permitted by law, such as in response to a valid court order, warrant, subpoena, or summons; to help identify or locate a suspect, fugitive, material witness, or missing person; or in connection with certain crimes or suspected criminal conduct.

To Avert a Serious Threat to Health or Safety. We may use or disclose PHI when necessary to prevent or lessen a serious and imminent threat to the health or safety of you or another person or the public, including disclosures to persons reasonably able to prevent or lessen the threat.

Decedents, Organ Donation, Workers' Compensation, and Other Permitted Disclosures. We may disclose PHI to coroners, medical examiners, and funeral directors as authorized by law; for cadaveric organ, eye, or tissue donation purposes; as authorized by and to the extent necessary to comply with workers' compensation or similar programs; to the extent permitted for victims of abuse, neglect, or domestic violence; for specialized government functions such as certain military, national security, and protective service activities; and for research that has been approved through a process that protects the privacy of your PHI as required by law.

4. Uses and Disclosures That Require Your Written Authorization

Other uses and disclosures of your PHI that are not described in this Notice will be made only with your written authorization. In particular, the following uses and disclosures will be made only with your authorization.

Marketing. Most uses and disclosures of PHI for marketing purposes require your written authorization. Communications that the law does not treat as marketing (for example, communications about your own treatment, refill reminders, or information about health-related services already provided to you) do not require authorization.

Sale of PHI. Any disclosure of your PHI that constitutes a sale of PHI under HIPAA requires your written authorization.

Psychotherapy Notes. In the limited circumstances in which psychotherapy notes are maintained, most uses and disclosures of those notes require your written authorization.

You may revoke an authorization in writing at any time, except to the extent that we have already taken action in reliance on it. To revoke an authorization, contact us using the information in the contact section of this Notice. Once we receive your written revocation, it will be effective going forward and will not affect any use or disclosure that already occurred while the authorization was in effect.

5. Communications With You

We may contact you to deliver your care and to administer your account. For example, we may send appointment and visit reminders, messages from your provider or pharmacy, shipment and refill notifications, lab result notifications, billing and payment messages, and other communications related to your treatment and the services you have requested. These communications may be sent through the platform and by email, text message, push notification, or telephone using the contact information you provide.

Some of these communications are treatment, payment, or health care operations communications that do not require your authorization. Where the law requires your authorization or consent for a particular type of communication, we will obtain it. You may ask us to communicate with you in a specific way or at a specific location, as described in your rights below.

6. Your Right to Access and Receive a Copy of Your PHI

You have the right to inspect and obtain a copy of the PHI that may be used to make decisions about your care and that is maintained in a designated record set, for as long as we maintain that information. This generally includes your medical and billing records, subject to limited exceptions permitted by law.

To request access, submit your request in writing using the contact information in this Notice. We may provide a summary or explanation instead of full access if you agree in advance to that approach and to any associated fees. You may ask that we provide the copy in a particular electronic form and format if it is readily producible in that form and format. We may charge a reasonable, cost-based fee for copies as permitted by law. In limited circumstances we may deny your request, and where the law provides a right to have a denial reviewed, we will tell you how to seek that review.

7. Your Right to Request an Amendment

If you believe that PHI we maintain about you is incorrect or incomplete, you have the right to request that we amend it for as long as the information is kept by or for the Covered Providers.

To request an amendment, submit your request in writing using the contact information in this Notice and include the reason that supports your request. We may deny your request in certain circumstances permitted by law, for example if the information was not created by us (unless the originator is no longer available to make the amendment), is not part of the PHI kept by or for the Covered Providers, is not part of the information you would be permitted to inspect and copy, or is already accurate and complete. If we deny your request, we will tell you in writing why, and you may submit a written statement of disagreement that will be included with the information.

8. Your Right to an Accounting of Disclosures

You have the right to request an accounting of certain disclosures of your PHI that we made for purposes other than treatment, payment, and health care operations, and other than certain disclosures that the law excludes from this right (for example, disclosures you authorized and disclosures made directly to you).

To request an accounting, submit your request in writing using the contact information in this Notice and state the time period you want covered. The period may not be longer than the six years before the date of your request. The first accounting you request within any twelve-month period will be provided free of charge. For additional requests within that period, we may charge a reasonable, cost-based fee, and we will tell you the cost in advance so that you may choose to modify or withdraw your request before any cost is incurred.

9. Your Right to Request Restrictions

You have the right to request a restriction or limitation on the PHI we use or disclose about you for treatment, payment, or health care operations, and on the PHI we disclose to someone involved in your care or the payment for your care, such as a family member or friend. We are not required to agree to your requested restriction, except as described below, and if we do agree we will comply with it unless the information is needed to provide you emergency treatment.

We will agree to a request to restrict disclosure of your PHI to a health plan for purposes of carrying out payment or health care operations (not treatment) if the PHI pertains solely to a healthcare item or service for which you, or someone on your behalf other than the health plan, has paid us in full out of pocket.

To request a restriction, submit your request in writing using the contact information in this Notice and tell us what information you want to limit, whether you want to limit our use, disclosure, or both, and to whom you want the limits to apply.

10. Your Right to Request Confidential Communications

You have the right to request that we communicate with you about medical matters in a certain way or at a certain location. For example, you may ask that we contact you only by email, or only at a particular phone number or mailing address.

To request confidential communications, submit your request in writing using the contact information in this Notice. We will accommodate reasonable requests and will not ask you the reason for your request. Please specify how or where you wish to be contacted.

11. Your Right to a Paper Copy and to Breach Notification

Paper Copy of This Notice. You have the right to obtain a paper copy of this Notice at any time, even if you have agreed to receive it electronically. To obtain a paper copy, contact us using the information in this Notice.

Breach Notification. You have the right to be notified following a breach of your unsecured PHI, as required by law. If such a breach occurs, we will notify you in accordance with applicable legal requirements.

Right to Choose Someone to Act for You. If you have given someone a medical power of attorney or if someone is your legal guardian, that person can exercise your rights and make choices about your PHI. We will verify that the person has this authority and can act for you before we take any action.

12. How to Exercise Your Rights

To exercise any of the rights described in this Notice, please submit your request to us in writing at [email protected], or by mail to Medlly LLC at the address provided to you in your account materials, attention Privacy Officer. For requests that specifically concern your privacy rights or your PHI, you may also contact us at [email protected].

We may need to verify your identity and authority before acting on a request. Where the law allows us a period of time to respond, we will respond within that time and will tell you if we need an extension permitted by law. Some requests may be subject to limited exceptions or reasonable, cost-based fees as described in the relevant sections above and as permitted by law.

13. Our Duties

The Covered Providers, supported by Medlly, are required by law to maintain the privacy and security of your PHI, to provide you with this Notice of our legal duties and privacy practices with respect to your PHI, to notify you following a breach of unsecured PHI as required by law, and to abide by the terms of the Notice that is currently in effect.

We are required to apply the privacy practices described in this Notice. We reserve the right to change this Notice and to make the revised Notice effective for PHI we already have about you as well as any information we receive in the future. We will post the current Notice at medlly.org/legal, and the Notice will state its effective date. You may request a copy of the current Notice at any time using the contact information above.

Where a state law or other applicable law provides greater privacy protections or greater rights with respect to your health information than HIPAA, we will follow that more protective law to the extent it applies.

14. How to File a Complaint

If you believe your privacy rights have been violated, you may file a complaint with us by contacting our Privacy Officer at [email protected], or in writing by mail to Medlly LLC, attention Privacy Officer, at the address provided in your account materials. You may also file your complaint with the Covered Provider involved in your care.

You may also file a complaint with the Secretary of the U.S. Department of Health and Human Services, Office for Civil Rights. You may do so by sending a letter to 200 Independence Avenue, S.W., Washington, D.C. 20201, by calling 1-877-696-6775, or by visiting www.hhs.gov/ocr/privacy/hipaa/complaints.

We will not retaliate against you, and no one will take any adverse action against you, for filing a complaint or for exercising any of the rights described in this Notice.

15. Effective Date, Governing Law, and Contact

Effective Date. This Notice is effective as of June 25, 2026, and remains in effect until we replace or revise it. The most current version will be available at medlly.org/legal.

Governing Law. To the extent not governed by HIPAA and other applicable federal law, matters relating to this Notice are governed by the laws of the State of Wyoming, without regard to its conflict of laws principles.

Contact. For general questions, contact [email protected]. For questions about this Notice, your PHI, or your privacy rights, contact our Privacy Officer at [email protected]. Medlly is operated by Medlly LLC.

Refund and Cancellation Policy

Last updated July 8, 2026

This Refund and Cancellation Policy explains how billing, cancellations, and refunds work for the telehealth service offered at medlly.org by Medlly LLC ("Medlly," "we," "us"). Medlly is a technology and patient-support platform that connects you ("you") with independent, licensed U.S. healthcare providers and licensed pharmacies through its clinical partner network. Medlly is not itself a medical provider, a pharmacy, or an insurer. This policy applies only to the telehealth service at medlly.org. It does not apply to the research-use-only shop at research.medlly.org, which is a separate business with its own separate policies. By enrolling in a Medlly plan, you agree to the billing and refund terms described below. Please read this policy carefully and keep a copy for your records.

1. Subscription Services

Your membership in the subscription program (the "Subscription Service") begins once you have completed the intake form and paid for the first month of the Subscription Services.

Please note that if you are disqualified by a healthcare provider for a medical reason, you will receive a full refund.

The Subscription Services include access to healthcare providers, medications where appropriate, and online support.

There is no guarantee of results or effectiveness of any treatment or care plan provided to you as part of your participation in or use of the Subscription Services.

This Refund and Cancellation Policy is incorporated into our Terms of Service, available at https://medlly.org/legal, which govern the Subscription Services.

2. Cancellation Policy

You may cancel your Subscription Service at any time, for any reason. To cancel your Subscription Services, please contact patient support at [email protected] and request a cancellation, or cancel through your online account or patient portal (if applicable).

To ensure a smooth process, we require your cancellation request to be received at least 72 hours prior to your next billing date. If prior notice is not received within this window, your subscription will be charged in accordance with the then-current billing cycle, and the cancellation will take effect on the subsequent billing cycle.

After cancellation, you will continue to receive the Subscription Services through the end of the then-current billing cycle.

Please see our Refund Policy below to determine if you are eligible for a refund for your canceled Subscription Service.

3. Refund Policy

If your Subscription Service is cancelled by notifying patient support at [email protected] within the first 72 hours of your Subscription term and you have not received any Subscription Services, you will be issued a full refund.

If your Subscription Service is cancelled due to disqualification by a healthcare provider, you will be issued a refund for your Subscription Service charges following the disqualification.

If your Subscription Service is charged monthly, YOU WILL NOT BE ISSUED A REFUND UPON CANCELLATION FOR THE MONTH IN WHICH THE CANCELLATION OCCURRED OR FOR ANY PRIOR MONTHS.

If your Subscription Service is charged two or more months at a time, you will be issued a refund for the months for which no medication was shipped to you.

Other than as outlined above, IN NO EVENT WILL YOU BE ISSUED A REFUND UPON CANCELLATION OF THE SUBSCRIPTION SERVICES.

Federal law generally prohibits the return of prescription medications to pharmacies for refund or reuse once they have been ordered for a patient. This policy ensures that all medications are handled and dispensed with the utmost care and in compliance with applicable law.

4. Damaged or Incorrect Items

Please inspect your items immediately upon receipt. If any item appears to be damaged or incorrect, please immediately contact patient support at [email protected].

Damaged items may be replaced by the pharmacy upon receipt of evidence of the damage. Incorrect items will be replaced by the pharmacy.

5. Subscription Services FAQs

What is included in my Subscription Services price? Your Subscription Services represent a single price for the subscription purchased. This may include consultations, both live and via electronic form submissions, and reviews by a healthcare provider for medications that are fulfilled through a pharmacy, lab services, or other healthcare services for which we collect payment, patient support, and other services to support your care.

What if my healthcare provider determines I am no longer eligible for the Subscription Services? If your healthcare provider determines you are no longer eligible for the Subscription Services, your subscription will be canceled, and a refund may be issued. If you have questions or concerns about an eligibility-initiated cancellation, please contact patient support at [email protected].

6. Governing Law

This Refund and Cancellation Policy and any dispute arising out of or relating to it are governed by the laws of the State of Wyoming, without regard to its conflict of laws principles. The exclusive venue for any such dispute is the State of Wyoming, to the extent permitted by applicable law.

If any provision of this policy is found to be unenforceable, the remaining provisions will continue in full force and effect. This policy should be read together with the other legal terms that govern the Medlly telehealth service, including the Terms of Service and Privacy Policy available at https://medlly.org/legal.

7. Contact Us

If you have any questions about billing, want to cancel your plan, or want to request a refund, please contact our patient support team at [email protected]. For questions about your personal data or privacy rights, you may contact us at [email protected].

When you contact us about a refund, it helps to include the email address associated with your account and any relevant order details so that we can locate your account and respond as quickly as possible.

Medlly LLC, doing business as Medlly. Medlly connects you with independent, licensed healthcare providers and pharmacies through its clinical partner; it is not itself a healthcare provider or pharmacy. Compounded medications are not FDA-approved. Not for emergencies. If you have a medical emergency, call 911. Questions: [email protected] or [email protected].