Patient App Privacy Notice
This notice explains how Rx ReLeaf LLC ("Rx ReLeaf," "we," "us") handles information in the Rx ReLeaf patient app. It supplements our website Privacy Policy and, where protected health information is involved, our HIPAA Notice of Privacy Practices. The HIPAA notice controls if it provides greater protection or different rights.
Information the app handles
Depending on the features you use, the app may process your name, email address, mobile number, home address, account identifiers, authentication and security events, appointment and service information, profile information such as date of birth, Ashley chat text, voice audio during an Ashley call, notification-device tokens, support requests, and technical information needed to secure and operate the app. Payment-card numbers are entered directly into Boulevard's secure payment service and are not received or stored by RROS.
How the app collects information
We collect information that you enter directly, information generated when you use app features, and information returned by services you ask the app to connect to, such as Microsoft authentication, Boulevard scheduling, HubSpot records, and Ashley. If you choose Ashley, the app collects the messages you type, voice audio during a voice session, resulting transcripts, and other information you voluntarily share in that conversation.
How we use it
We use information to create and secure your app account; verify and link you to the correct patient profile; show and manage eligible appointments and services; provide customer support; operate Ashley; deliver privacy-safe notifications; prevent fraud and misuse; maintain required records; and improve reliability. Ashley is an AI receptionist, not a clinician, and does not diagnose, prescribe, or replace professional medical care.
Service providers and integrations
We use service providers to deliver app functions, including Microsoft for authentication, Boulevard for patient profiles, scheduling and eligible checkout, HubSpot for consent and customer-relationship records, Retell AI and OpenAI for Ashley voice and chat, Render for protected application hosting, Apple and Google for app distribution and push delivery, and approved urgent-care providers when you choose that service. These providers receive only the information needed for the requested function and are contractually required to provide the same or equivalent protection for personal information that applies to Rx ReLeaf.
Notifications
Push previews are intentionally generic and do not display medical, appointment, payment, form, or provider details. You must unlock and sign in to the app to view protected content. You may disable notifications in your device settings.
AI and communications choices
The app identifies Ashley as AI. Before any Ashley data is sent, the app names Retell AI and OpenAI and lists every category that may be sent: messages, voice audio, transcripts, name, email address, phone number, service interests, appointment details, and health information you type or say. The app explains that this data is used to answer questions and help with Rx ReLeaf services and scheduling and asks for your express permission. If you do not agree, no Ashley session is created and you may continue using the rest of the app. You may withdraw Ashley permission in your profile. Promotional text messages and outbound calls using an artificial or AI-generated voice require separate optional consent and are not a condition of care or purchase.
Retention, security and deletion
Retell is configured to remove selected personal identifiers from stored Ashley artifacts after the session and automatically delete remaining Ashley conversation records after 30 days. We retain other information only as reasonably necessary for care, requested app functions, security, legal, accounting and recordkeeping obligations. Healthcare, billing, fraud-prevention and legal records may have mandatory retention periods. We use administrative, technical and physical safeguards, including encrypted transport and access controls, but no system can guarantee absolute security.
You may request deletion of your app account. We verify requests before deleting eligible app data. Account deletion does not cancel appointments or erase records we are legally required to retain.
Your choices and rights
You may request access, correction or deletion of eligible information and may have additional rights based on applicable law. App profile updates are matched to the authenticated patient record; the app does not intentionally create a conflicting second medical profile. Contact us for assistance or to exercise a right.
Children and emergencies
The app is not intended for independent use by children under 13. A parent or legal guardian should contact Rx ReLeaf about a minor's care. The app and Ashley are not emergency services. Call 911 in an emergency.
Contact
Rx ReLeaf LLC
158 First Avenue, Suite 1
Atlantic Highlands, NJ 07716
(732) 291-0000
hello@rxreleafllc.com
Do not send medical details, identification documents, or payment information through ordinary email.