Operated by Mica Health Ventures, LLC (d/b/a Mica Peak Health). Effective / last updated: June 20, 2026
Two important notes. This Privacy Policy describes how Mica Peak Health, the technology and administrative platform, handles information collected through our website, apps, and patient portal. The protected health information (PHI) you share with your clinicians and Empathra Medical P.C. while receiving care is governed by HIPAA and that practice's separate Notice of Privacy Practices. And if you are a Washington resident (or in certain other states), please also read our separate Consumer Health Data Privacy Policy, which is linked on our homepage.
Summary of Key Points
- We collect information you give us, information collected automatically, and limited information from service providers and partners.
- We use it to operate the platform, support your care, process payments, communicate with you, keep the Services secure, and meet legal obligations.
- We do not sell your personal information, and we do not share health information for cross-context or targeted advertising.
- We use only strictly necessary cookies today and do not run third-party advertising trackers.
- You have privacy rights, including under California and Washington law, described below.
- The Services are for adults 18 and older.
1. Scope of This Policy
This Policy applies to micapeakhealth.com, our mobile and web applications, and our patient portal (the “Services”), operated by Mica Health Ventures, LLC (d/b/a Mica Peak Health). It does not apply to third-party websites, to the manufacturer or retail pharmacies you may pay directly, or to PHI governed by HIPAA and the Notice of Privacy Practices of Empathra Medical P.C.
2. Information We Collect
Information you provide
- Identity and contact details: name, email, phone number, shipping address, and date of birth.
- Account and verification information: login credentials and information used to verify your identity and that you are located in a supported state.
- Payment information, processed by our payment vendors; we do not store full payment-card numbers.
- Health-related information you submit: intake answers, symptoms, goals, measurements, and medical history. Some of this is sensitive, and some is also PHI handled by the Medical Group under HIPAA.
- Communications: messages to support or through the platform, and your preferences.
Information collected automatically
- Device and connection data: IP address, browser and device type, and operating system.
- Usage data: pages and features used and dates and times of access.
- Cookies and similar technologies, limited to what is described in Section 5.
Information from third parties
- Service providers and partners (such as payment processors, identity-verification vendors, the Medical Group, and Pharmacies) may provide limited information needed to deliver and support the Services.
3. How We Use Information
We use information to: create and secure your account and verify eligibility; operate the platform and facilitate the services you request, including connecting you with the Medical Group and Pharmacies; process payments and manage memberships and orders; communicate with you about your account, care, and service updates, and (where you opt in) send marketing; provide support; maintain security and prevent fraud and abuse; improve the Services while protecting your privacy; and comply with legal obligations and enforce our Terms.
4. How We Disclose Information
We do not sell your personal information. We disclose information only as follows:
- To the Medical Group, Providers, Pharmacies, and laboratories, as needed to provide and support your care.
- To service providers (such as hosting, payment processing, identity verification, communications, and customer support) that process information on our behalf under contracts limiting their use of it.
- For legal and safety reasons: to comply with law, respond to lawful requests, enforce our Terms, or protect rights, safety, and the integrity of the Services.
- In a business transfer, such as a merger, financing, acquisition, or sale of assets, subject to this Policy and applicable law.
- With your direction or consent.
No health data for advertising. We do not share information that reveals your health conditions or treatments with advertising networks or data brokers, and we do not use health information for cross-context or targeted behavioral advertising.
5. Cookies and Similar Technologies
Today we use only strictly necessary cookies: those required to keep you logged in, maintain your session, secure the Services, and remember basic preferences. We do not currently use third-party advertising or cross-site tracking technologies, so no advertising consent banner is presented. Strictly necessary cookies do not require opt-in consent. If in the future we add analytics or advertising technologies, we will update this Policy and provide any required notice and choices before doing so. You can control cookies through your browser settings; disabling strictly necessary cookies may prevent parts of the Services from working.
6. Your Choices
Marketing. Opt out of marketing emails using the unsubscribe link, and out of marketing texts by replying STOP. You may still receive non-marketing messages necessary for your account and care.
Access and updates. You can review and update much of your account information directly, or contact us at legal@micapeakhealth.com. Information that is part of your medical record is handled by the Medical Group under HIPAA.
7. State Privacy Rights
California (CCPA/CPRA)
California residents may request to know the personal information we collect and how we use and disclose it; request access to, deletion of, and correction of personal information; and limit the use of sensitive personal information, subject to legal exceptions. We do not “sell” or “share” personal information as those terms are defined under California law, and we will not discriminate against you for exercising your rights. You may submit a request at legal@micapeakhealth.com; we may need to verify your identity.
Washington
Washington residents have additional rights regarding consumer health data under the Washington My Health My Data Act. Those rights, the categories of consumer health data we collect, how we use and share it, and how to exercise your rights (including the right to withdraw consent and to delete consumer health data) are described in our separate Consumer Health Data Privacy Policy, linked on our homepage. Requests may be sent to legal@micapeakhealth.com.
Other states
Residents of other states with comprehensive privacy laws (such as Virginia, Colorado, Connecticut, Oregon, Texas, and others) may have rights to access, correct, delete, and obtain a copy of personal information, and to opt out of targeted advertising, sale, or certain profiling. We honor applicable rights and do not engage in targeted advertising or sale of personal information.
How to exercise your rights, agents, and appeals
To submit a request, email legal@micapeakhealth.com. We will acknowledge and respond to verifiable requests within the time required by applicable law (generally within 45 days, with any extension permitted by law). We may need to verify your identity before acting. You may use an authorized agent to submit a request where the law allows, in which case we may require proof of the agent's authority and verification of your identity. If we decline your request, you may appeal by emailing legal@micapeakhealth.com with “Privacy Appeal” in the subject line; if your appeal is denied, you may contact your state attorney general.
8. How We Protect Information
We maintain administrative, technical, and physical safeguards designed to protect information, including encryption in transit and access controls. No system is perfectly secure, and we cannot guarantee absolute security.
9. Data Retention
We keep personal information for as long as needed to provide the Services, comply with legal obligations (including medical-record retention requirements that apply to the Medical Group), resolve disputes, and enforce our agreements, after which we delete or de-identify it.
10. Third-Party Platforms and Links
The Services may link to third-party sites or services we do not control, including manufacturer and retail pharmacies. Their privacy practices are governed by their own policies, and we are not responsible for them.
11. Adults Only
The Services are intended for adults 18 and older. We do not knowingly collect personal information from anyone under 18; if we learn we have, we will delete it.
12. United States Only; Changes; Contact
The Services are intended for use in the United States, and information is processed in the United States. We may update this Policy from time to time; when changes are material we will update the date above and provide additional notice where appropriate. Your continued use after an update means you accept the revised Policy.
Contact: Mica Health Ventures, LLC (d/b/a Mica Peak Health), 522 W Riverside Ave Ste N, Spokane, WA 99201. Privacy requests: legal@micapeakhealth.com.