Your Privacy & Rights with Flexpa
Last updated March 30, 2026 · Full Privacy Notice · Full Terms of Service
Flexpa operates a website, API, and mobile application. It lets you link your health data to health apps. Your personal information and health data belong to you. Generally, Flexpa is not subject to HIPAA as a matter of law when it provides services to you. It is subject to HIPAA only when it provides those services to you on behalf of plans or providers.
FLEXPA DOES NOT PROVIDE BIDIRECTIONAL SERVICES. YOU WILL HAVE THE ABILITY TO REQUEST ACCESS TO YOUR HEALTH INFORMATION VIA TEFCA EXCHANGE. YOU WILL NOT BE ABLE TO USE FLEXPA TO SHARE YOUR HEALTH INFORMATION WITH OTHER PARTICIPANTS IN TEFCA.
#Consent
When you first use Flexpa, we explain what you are agreeing to and ask for your consent via electronic signature. We keep a secure record of that consent. If we make a significant change to how we use your data, we will ask for your consent again. You can update that choice at any time at privacy.flexpa.com.
You are responsible for making sure the information you share is accurate and lawful. You must also have the right to access and share it.
#What we collect
We collect your name, telephone, email, and health records when you link them, along with basic device and usage data. If you use AI features, we may collect what you submit, and the responses generated. We do not sell your data.
We use server logs, cookies, tracking pixels, and other similar technologies to analyze how you use the Flexpa platform and so we remember your browsing preferences. You can disable cookies or change your cookie settings. But if you disable cookies that are necessary or essential, you will not be able to access all parts of the Flexpa platform and it may not operate as expected. Visit allaboutcookies.org/manage-cookies to update your settings or opt out of third-party cookies.
#How we use your data
We use your data to run the platform, respond to your requests, contact you about the service, keep it secure, and improve our products. We may also anonymize and de-identify your data. We may use the de-identified data to improve the Flexpa platform and for research.
If you share health data related to your genetic or family history, that information may impact your family members. Please keep this in mind.
We will not access, exchange, use, or disclose your data to assert any claim against you except if ever necessary for the collection of fees.
We share your data only with companies that help us operate Flexpa. These third parties are required to protect your data and may use it only to provide services we requested. They cannot use your data for their own marketing.
The Flexpa platform also contains links to third-party websites. If you choose to use these sites, you may disclose your information to those third parties, their users and the public. We are not responsible for the content or practices of those websites or services, so please read their privacy and security policies.
If we are requested or required by law to disclose your data, we will make reasonable efforts to notify you within three business days, unless prohibited by law. This should allow you time to object or otherwise respond to the legal requests.
Personal information related to reproductive health care and gender-affirming care may be disclosed if compelled by a court order, subpoena, or search warrant. This includes demands across state lines.
#Your rights
You have the right to access, correct, or delete your data. You can restrict how we use it and you may withdraw your consent at any time. You have the right to be notified if your data is affected by a security incident. If you choose to delete your data, we will delete it where possible, but some data may need to be kept for legal or security reasons. Flexpa does not charge fees for you to use the Flexpa platform or to exercise your rights.
To revoke any connection: (1) Login to your account at privacy.flexpa.com; (2) Revoke any connection of your choice; (3) Confirm your revocation. You may make other requests, including to delete your account, by contacting us at privacy@flexpa.com.
We provide your data in a machine-readable format, including a means to interpret such machine-readable format. Local law may give you additional rights. We may ask you to verify your identity first.
#Security incidents
Flexpa uses commercially reasonable efforts to protect your data from unauthorized or illegal access, modification, use, or destruction. Flexpa encrypts all of your data held by Flexpa.
If your data is affected by a security incident, we will notify you promptly. We will tell you what happened, what data was involved, what steps you can take, what Flexpa is doing to deal with the security incident, and who to contact for more information.
#Business transfers
If Flexpa is sold or reorganized, you agree that your data may be transferred to the new owner. If Flexpa is sold or reorganized, you have the right to request disposal or download of your data. You can also close your account and ensure the new owner follows obligations summarized here.
#Data retention
We retain your data only as long as needed to provide our services and as required under the law. Close your account or go inactive for over a year, and we delete your data within 45 days. Our obligations summarized here remain in effect for as long as we maintain your data.
#Children
We do not collect data from children under 16. If a child has shared data without parental consent, email privacy@flexpa.com and we will delete it and cancel the child's account.
#Warranties and liability
The platform is provided as-is with no warranties. We do not guarantee it will be available or error-free. We are not liable for losses from user error, server failure, data loss, or third-party attacks. If you are not satisfied, your only remedy is to stop using the platform.
#Your indemnification obligation
You agree to indemnify Flexpa and its affiliates against claims, damages, and legal fees. This applies when those claims result from your use or misuse of the platform, your violation of these terms, or harm you cause to a third party. You must promptly notify Flexpa of any third-party claims and cooperate with us in the defense.
#Disputes
If you have a concern, contact support@flexpa.com and give us 60 days to resolve it. If we cannot, disputes go to binding arbitration via JAMS in San Francisco under California law. By using Flexpa, you waive your right to a jury trial and to participate in a class action. Our maximum liability is $500. We are not liable for any indirect or consequential damages. You may apply for a JAMS fee waiver. Small claims court remains available for qualifying cases.
#Suspension or termination
We may suspend or terminate your access if you violate these terms.
#Changes to terms and services
We may update these terms from time to time. If we do, we will post a notice. If you keep using Flexpa after we update the terms, you agree to the changes.
We may change or discontinue the service at any time without notice.
#Medical advice
Flexpa does not provide medical advice. Nothing here replaces professional medical care. In an emergency, seek help immediately.