Skip to main content

Privacy Policy

Effective Date: 2026-09-30 • Last Updated: 2026-09-30

At Hollis Health, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or communicate with us.

Using the Hollis Workouts app? See the Workouts privacy policy.

Privacy Policy

Effective Date: September 30, 2026

This Privacy Policy ("Policy") describes how Hollis Health LLC, a Texas limited liability company ("Hollis Health," "Company," "we," "us," or "our"), collects, uses, discloses, retains, and protects information in connection with our website, mobile application, member portal, consultations, memberships, and related wellness services (collectively, the "Services").

This Policy applies to information that we collect directly from you or about you in connection with our consumer-facing Services. Hollis Health is not a medical provider, does not practice medicine, and does not bill for or sell medical services. If you choose to receive medical care from an independent licensed provider, including a provider in our referral network, that provider is responsible for its own clinical services, billing, records, and privacy notices. With your written consent or as otherwise permitted by law, Hollis Health may receive, maintain, and display health information that an independent provider shares with us at your direction, so that it can be organized alongside your training, nutrition, and recovery data in one place. Hollis Health may also pay for, or reimburse the cost of, a membership or subscription with an independent third-party health-testing company on your behalf as a benefit of certain membership tiers; that account is yours, and Hollis Health does not receive information from that company. See Section 1.5.

This Policy does not serve as a Notice of Privacy Practices ("NPP") for any physician, laboratory, or other Covered Entity. If you receive clinical services from an independent licensed physician, laboratory, or other Covered Entity, that provider maintains its own NPP and remains independently responsible for its own clinical privacy practices.

Please read this Policy carefully. By using the Services, creating an account, enrolling in a membership, or otherwise interacting with Hollis Health, you acknowledge that you have reviewed this Policy.

1. Privacy Roles and Data Categories

Hollis Health may handle information in more than one legal and operational role. Those roles matter because different legal rules may apply to different categories of data.

1.1 Direct Member and Consumer Data. This includes information you provide directly to Hollis Health through consultations, enrollment, the website, the mobile application, the member portal, messaging tools, nutrition logs, workouts, journals, historical product orders, support requests, and similar consumer-facing touchpoints. This data may include sensitive health and wellness information even when it is not regulated as HIPAA PHI.

1.2 Independent Provider Data Shared With Consent. In some workflows, Hollis Health may receive, maintain, display, or transmit health information from independent licensed physicians, laboratories, imaging providers, or other Covered Entities with your written consent or as otherwise permitted by law. The independent provider remains responsible for its own clinical services, billing, records, privacy notices, and HIPAA rights workflows.

1.3 Mixed Workflows. Some program features may combine direct-member wellness data with data received from independent providers. Where that occurs, Hollis Health applies administrative, technical, and contractual safeguards designed to separate roles, limit access, and route HIPAA-specific requests to the appropriate Covered Entity when required.

1.4 Public-Facing Health App Considerations. Because Hollis Health operates consumer-facing digital health and wellness tools, some information we collect directly from you may be subject to laws and guidance outside HIPAA, including state consumer privacy laws and health data breach notification requirements, where applicable.

1.5 Sponsored Third-Party Testing Programs. Hollis Health sponsors, at its own expense and without separate charge, a membership with an independent third-party health-testing company (currently Function Health) as a perk of certain coaching memberships. The account is yours, established in your name and governed by that company's own terms and privacy practices. That company and its own independent licensed clinicians order, arrange, and perform any testing, review your results and flag issues, and contact you about any critical result. Following up with your own primary care provider is your responsibility. Hollis Health does not select your test panel, does not arrange or schedule your specimen collection, does not receive your results from that company, and has no access to your account with that company. Hollis Health's sponsorship of the membership does not make Hollis Health the provider of, or responsible for, any testing, laboratory, or clinical service.

You may choose to share your results with your Hollis Health coach by exporting them yourself from your own account with that company. If you do not, Hollis Health does not receive them. We receive and display what you share only after you have given written consent, and we use it only to display and organize your information and as non-clinical context for training, nutrition, and recovery programming. Hollis Health coaches do not diagnose or interpret results as medical advice.

2. Information We Collect

We may collect the following categories of information.

2.1 Contact and Account Information.

  • Full legal name
  • Date of birth
  • Email address
  • Telephone number
  • Mailing and billing address
  • Emergency contact information
  • Username, password hash, authentication settings, and security metadata

2.2 Membership, Billing, and Commercial Information.

  • Consultation records
  • Selected membership tier, term, and add-ons
  • Contract documents and signature records
  • Billing dates, invoices, receipts, refunds, credits, and payment status
  • Historical product orders and related fulfillment, support, and refund records, where applicable

2.3 Health and Wellness Information Submitted Directly to Hollis Health.

  • Intake forms and questionnaires
  • Goals, complaints, preferences, and program objectives
  • Training attendance, exercise logs, and performance metrics
  • Body composition and non-diagnostic assessment data
  • Nutrition logs, meal plans, hydration tracking, and food photos
  • Recovery modality usage logs
  • Sleep, energy, mood, stress, and journal entries
  • Self-reported medications, supplements, injuries, and conditions

2.4 Connected Device and Platform Data. Where you grant permission, our mobile application may read selected data from Apple HealthKit, Google Health Connect, wearable integrations, or similar connected sources, such as:

  • Step count
  • Heart rate
  • Resting heart rate
  • Calories burned
  • Distance and activity data
  • Body weight
  • Sleep data
  • Workout records

Our application reads this data to support your wellness program. Unless expressly stated in a feature-specific disclosure, we do not write, modify, or delete data in HealthKit or Health Connect.

2.5 Health Information You Share With Us From Independent Providers and Third-Party Testing Programs. When you share health information with us that was created by an independent licensed physician, laboratory, imaging provider, or third-party health-testing company — including a results report you export from your own account with such a company and then upload or send to us — or when you authorize such a provider to transmit information to us, we may receive categories of health information such as:

  • Laboratory, biomarker, and other test results
  • Clinical screening findings
  • Imaging summaries
  • Diagnoses or clinical impressions
  • Medication or supplement directions issued by a licensed clinician
  • Clinical visit summaries or notes transmitted by an independent provider, where you have authorized that provider to share them with us

We receive and display information in this category only after you have given written consent. Hollis Health does not request or receive results directly from an independent third-party health-testing company whose membership Hollis Health pays for on your behalf; that information reaches us only if you export it and share it with us yourself.

2.6 Technical, Device, and Usage Data.

  • IP address
  • Device identifiers and push notification tokens
  • Operating system, browser, and app version
  • Session activity and feature usage logs
  • Crash logs and security events
  • Authentication and access metadata

2.7 Communications.

  • Emails, text messages, push notifications, and in-app messages
  • Support tickets and customer service communications
  • Survey responses and feedback

3. How We Use Information

We may use information for the following purposes.

3.1 Service Delivery and Administration. To provide consultations, enroll members, manage accounts, deliver wellness programming, schedule coaching sessions, and administer memberships and support historical product orders, where applicable. Hollis Health is not currently accepting orders for supplements or other physical products.

3.2 Program Personalization. To tailor training, nutrition, recovery, and engagement features based on your goals, preferences, wellness metrics, and authorized connected-device data.

3.3 Independent Provider Referrals and Member-Shared Records. To provide referrals, at your request, to independent licensed physicians, laboratories, imaging providers, and other third-party healthcare providers, and to display and organize records that you share with us or that you authorize those providers to share with us. Records shared with us may also be used as non-clinical context for training, nutrition, and recovery programming.

3.4 Billing and Collections. To process payments, manage renewals, prevent fraud, collect outstanding amounts, investigate chargebacks, and maintain financial records.

3.5 Communications. To send transactional communications, service updates, program-related messages, security alerts, and, where you have opted in or where permitted by law, marketing communications.

3.6 AI-Assisted Features. To support features such as meal-photo analysis, drafting of wellness content, summarization of user-submitted information, and operational assistance tools. AI-assisted features are used to support wellness programming and administrative workflows. They are not a substitute for physician judgment, medical diagnosis, or emergency care.

3.7 Security, Compliance, and Risk Management. To authenticate users, monitor for misuse or unauthorized access, investigate incidents, enforce our agreements, comply with legal obligations, and protect the rights, safety, and property of Hollis Health, our users, and the public.

3.8 Internal Operations and Service Improvement. To improve the platform, test new features, analyze operational performance, conduct internal quality assurance, and use aggregated or de-identified information for business planning, analytics, and service improvement where lawful.

3.9 No Clinical Review or Monitoring. Hollis Health does not review or monitor records you share with us for urgent, abnormal, or clinically significant findings, and has no duty to identify, flag, interpret, or notify you or any other person of any finding. Interpretation of results and clinical follow-up remain the responsibility of the provider who ordered the testing or rendered the care.

We do not sell your personal information or use your health or wellness data for third-party behavioral advertising.

4. How We Share Information

We may share information in the following categories and circumstances.

4.1 Workforce and Internal Access. Authorized workforce members, contractors, and service personnel may access information on a need-to-know basis to deliver services, support members, secure systems, or carry out permitted operational functions.

4.2 Independent Healthcare Providers. We may share information with independent licensed physicians, laboratories, imaging providers, pharmacies, and other healthcare providers where you request a referral or otherwise authorize us to share your information with them.

4.3 Service Providers and Subprocessors. We may disclose information to vendors and infrastructure providers that support our Services, including categories such as:

  • Cloud hosting and storage providers
  • Authentication and identity providers
  • Payment processors
  • Secure messaging and communications vendors
  • AI and machine-learning service providers
  • Crash reporting and security monitoring tools
  • Logistics, fulfillment, and professional service providers

Examples of vendors we may use include Google Cloud services, Amazon Web Services, Stripe, and Sentry. Vendor use varies by feature and workflow. When a vendor handles regulated health information for us in a workflow that requires additional contractual protections, we require appropriate privacy and security terms.

4.4 AI and Machine-Learning Processing. Some user-submitted content, such as meal photographs and related wellness context, may be processed by AI-enabled vendors to support feature functionality. We do not permit such vendors to use your data for their own advertising purposes. We work to limit retention, logging, and secondary use consistent with applicable contracts and service configurations.

4.5 Legal, Compliance, and Safety Disclosures. We may disclose information when we reasonably believe disclosure is required by law, court order, subpoena, legal process, regulatory inquiry, or to prevent fraud, misuse, security incidents, or imminent harm.

4.6 Business Transactions. If Hollis Health undergoes a merger, acquisition, financing, restructuring, sale of assets, or similar transaction, information may be transferred subject to confidentiality obligations and applicable law.

4.7 De-Identified and Aggregated Information. We may use or disclose de-identified or aggregated information for analytics, service improvement, program evaluation, business planning, or other lawful purposes.

4.8 Sponsored Third-Party Testing Enrollment. Where your membership tier includes it, Hollis Health sponsors a membership with an independent third-party health-testing company, at its own expense, as a perk of your coaching service. That is a payment benefit only. You establish the account yourself, directly with that company, in your own name. Hollis Health does not create the account for you and does not transmit your name, email address, contact details, or any other information about you to that company. Our involvement is limited to paying for the membership.

Everything you provide to that company, and every result generated under that account, is governed by that company's own terms of service and privacy practices, not by this Policy. That company's licensed clinicians review your results, flag issues, and contact you about any critical result. Hollis Health has no access to that account and does not receive your results. We see a result only if you choose to share it with your coach yourself, in which case it is handled under Section 5 and your signed Informed Consent for Health Services. If your employer sponsors your membership, your employer never receives your results.

4.9 Employer-Sponsored Memberships. Some employers pay Hollis Health for coaching memberships for their employees. If your employer (your "sponsor") invites you, we receive your name, work email address, and the plan your sponsor has chosen for you, so that we can send your invitation. We do not ask your sponsor for, and your sponsor does not give us, any health information about you.

Your sponsor can see only your enrollment information: your name, work email address, plan, enrollment status (invited, active, ending, ended, or declined), and the dates you were invited, became active, and your sponsorship ends. We may also show your sponsor program-wide totals, such as the number of active members or the number of coaching calls completed in a month. Those totals do not identify anyone, and we do not report them at all when fewer than five (5) members in that sponsor's program are active.

Your sponsor never sees anything else. We do not disclose to your sponsor your health or wellness information, goals, intake answers, check-ins, messages, call notes or content, workout or nutrition data, whether you booked, attended, or missed a call, any biomarker or laboratory result, or your payment information. Any upgrade you buy for yourself is billed to your own payment method, and we do not tell your sponsor that you bought it. We share information about you with your sponsor beyond your enrollment information only if you direct us to in writing or the law requires it. Your sponsor has agreed in its contract with us not to request your information. If your plan includes a sponsored testing membership, your sponsor never receives your results, and the testing program is offered to you as an employee only. Your sponsor may treat that benefit as part of its own employer health plan, and plan notices come from your sponsor. If your sponsor's plan requires it, Hollis Health may enter into a business associate agreement with your sponsor, which governs only plan enrollment information and does not give your sponsor access to your health information.

If your sponsorship ends, your account and records remain yours under this Policy, whether or not you continue coaching at your own expense, and your sponsor receives no information about that choice. The Sponsored Member Terms you sign describe these limits in more detail.

5. HIPAA-Related Information

5.1 Health Information Shared by Independent Providers. Where Hollis Health receives, maintains, or transmits health information from an independent licensed physician, laboratory, or other Covered Entity with your consent or as otherwise permitted by law, Hollis Health handles that information under applicable privacy and security requirements and any contract that applies to the workflow.

5.2 HIPAA Rights Requests. If your request concerns PHI maintained by an independent Covered Entity, your HIPAA rights, including access, amendment, restriction, and accounting requests, are generally exercised through the applicable Covered Entity. For convenience, you may contact us, and we will route or coordinate the request where appropriate.

5.3 Direct Member Data Outside HIPAA. Not all information in the Hollis Health ecosystem is HIPAA PHI. Information you provide directly to Hollis Health through consumer-facing wellness features may be governed by this Policy and by other applicable federal or state privacy laws rather than by HIPAA.

5.4 Separate HIPAA Notice. For a more detailed explanation of Hollis Health's role with respect to health data shared by you or by independent providers with your consent, please review our separate Health Data Privacy Notice.

6. Your Rights and Choices

Your rights depend on the type of information at issue and the law that applies.

6.1 Account and Profile Controls. You may update certain account information directly in the platform or by contacting us.

6.2 Marketing Opt-Out. You may opt out of non-essential marketing emails and similar optional promotional communications at any time. Opting out of marketing does not stop transactional or security-related messages.

6.3 Access, Correction, and Deletion Requests for Direct Member Data. Subject to verification, applicable law, and operational limitations, you may request access to, correction of, or deletion of certain information that Hollis Health maintains directly in its consumer-facing role. We may deny or limit requests where retention is required by law, contract, fraud prevention, claims defense, security, backup integrity, or other legitimate business or legal needs.

6.4 HIPAA Rights. If your request concerns PHI maintained by a Covered Entity, please review Section 5.2 above. We may redirect or coordinate such requests with the applicable physician, laboratory, or other Covered Entity.

6.5 California and Other State Privacy Rights. Residents of certain states may have additional rights regarding access, deletion, correction, opt-out, or appeal under applicable state privacy laws. We will evaluate verified requests under the law that applies to the request and the data at issue.

To submit a privacy request, contact us at admin@hollis.health with a clear description of your request. To request deletion of your account and associated data, email admin@hollis.health, use the account deletion request page at https://hollis.health/delete-account, or the Delete Account control in the Hollis Health mobile application under Settings.

7. Cookies, Analytics, and Similar Technologies

7.1 Essential Technologies. We use cookies, session tokens, local storage, and similar technologies necessary for authentication, security, platform functionality, fraud prevention, and user preferences.

7.2 Limited Analytics. We may use first-party or service-provider analytics tools to understand feature usage, performance, and stability. We do not use health or wellness data for third-party behavioral advertising.

7.3 No Sale or Behavioral Advertising of Health Data. We do not sell your health or wellness data, and we do not use it for cross-context behavioral advertising.

7.4 Browser Controls. You may configure your browser or device settings to manage cookies or similar technologies, although doing so may affect platform functionality.

8. Data Retention

We retain information for different periods depending on the category of data, the role in which we received it, and our legal, contractual, operational, and security obligations.

8.1 General Retention Principles. We retain information for as long as reasonably necessary to:

  • provide the Services;
  • maintain account and transaction records;
  • comply with legal, tax, accounting, and contractual obligations;
  • investigate incidents, chargebacks, and disputes;
  • preserve evidence for claims defense and audits; and
  • satisfy retention obligations applicable to health-related records.

8.2 Membership and Transaction Records. Membership agreements, billing records, payment history, refunds, and related business records are typically retained for no less than seven (7) years after the end of the relevant relationship, and longer where required or advisable.

8.3 Health and Wellness Program Records. Health and wellness records may be retained for longer periods where needed for program continuity, claims defense, or compliance with provider, contractual, or legal retention obligations.

8.4 Connected Device, Wearable, and Health Connect Data. Information our mobile application reads from a connected device platform under Section 2.4 — including Apple HealthKit and Google Health Connect readings such as step count, heart rate, resting heart rate, heart rate variability, calories burned, distance, floors climbed, body weight, sleep, and workout records — is consumer wellness telemetry. It is not a clinical record, and it is not subject to the extended retention periods described in Sections 8.3 and 8.5, which apply only to records Hollis Health is required or advised to retain under statute, regulation, or contract.

  • Deletion on account deletion. When you delete your Hollis Health account, the connected-device records we hold for you — daily activity logs, daily metric readings, and wearable workout sessions — are permanently deleted from our production systems as part of processing your deletion request, rather than held for a retention window.
  • Revoking permission or disconnecting a source. If you revoke the HealthKit or Health Connect permission, or disconnect the integration at the device level, our application stops reading new data from that source. You may also request deletion of device data already synced to us, without closing your account, by emailing admin@hollis.health or by using the account deletion request page at https://hollis.health/delete-account.
  • Readings incorporated into a health record. Where a specific reading has been recorded into a health or clinical record maintained by Hollis Health or by an independent licensed provider, that record remains subject to the retention obligations described in Sections 8.3, 8.5, and 8.6 even after you disconnect the integration or revoke the permission.

8.5 Health Information From Independent Providers and Third-Party Testing Programs. Where Hollis Health maintains health information received from an independent Covered Entity with your consent or as otherwise permitted by law, or a results report you exported from your own account with an independent third-party health-testing company and shared with us, retention may be governed by the applicable workflow, contractual requirements, and applicable law.

8.6 Backups and Residual Copies. Deleted or suppressed information may remain in backups, archives, logs, or disaster-recovery systems for a period of time and may not be immediately removable from every system.

9. Security

We use administrative, technical, and physical safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure.

These safeguards may include:

  • encryption in transit and at rest where appropriate;
  • role-based access controls;
  • authentication controls and multi-factor authentication for privileged access;
  • audit logging;
  • vendor due diligence and contractual controls;
  • backup and recovery controls;
  • workforce training and incident response procedures.

No system can guarantee absolute security. If we determine that a security incident requires notice under applicable law, we will provide notice in accordance with the law that applies to the data and workflow involved.

10. Children's Privacy

Our Services are intended for adults. Unless Hollis Health expressly offers a particular minor-access workflow with separate consent and onboarding requirements, we do not knowingly provide consumer-facing accounts to individuals under eighteen (18).

If you believe that information from a minor has been submitted to us in error outside an approved workflow, contact us at admin@hollis.health.

11. Changes to This Policy

We may update this Policy from time to time. If we make a material change, we will provide notice through an appropriate channel, such as email, website notice, or in-app notice, as reasonably required by law and appropriate to the change.

The "last updated" date above indicates when this Policy was last revised.

12. Contact Us

For privacy-related questions, verified requests, or complaints regarding this Policy, please contact:

Hollis Health LLC
Attn: Privacy
818 Knights Cross Dr, Suite 5104
San Antonio, TX 78258
(Studio location; opening October 17, 2026.)

Email: admin@hollis.health
Phone: (210) 891-9005

For HIPAA-related concerns involving PHI maintained by an independent provider, you may also review our Health Data Privacy Notice or contact the applicable physician or clinical provider directly.

This Privacy Policy was last updated on September 30, 2026.

Terms of Service•HIPAA Notice•Cancellation Policy