Privacy Policy

Effective 2026-07-10 (version 2026-07-10). This policy covers the Onus iV member app at onusiv.app, operated by Onus iV, a Colorado-based IV therapy and wellness business.

1. What we collect

Account and profile details you or the Onus team provide: name, email address, phone number (optional), and birthday (optional, used for birthday benefits on qualifying membership tiers).
Membership and visit records the Onus team enters: your membership tier and status, your Onus location, and your credit and transaction history.
Lab-result links your care team shares with you. The reports themselves stay on the laboratory's own system - this app stores only a secure link and a record of when it was opened.
Your consent choices (terms acceptance and marketing preference), with a timestamp and the policy version you saw.
Security and activity records: sign-in events and a log of account-affecting actions, kept to protect your account and keep the credit ledger accurate.

We practice data minimization: the app does not collect payment card numbers, precise location, advertising identifiers, or analytics profiles, and it does not use third-party advertising or tracking cookies. The only cookies are the ones that keep you signed in.

2. How we use it

Run your member account: balances, booking links, lab links.
Send transactional messages: invitations, sign-in links, password resets, and important account or security notices. These are part of operating your account and are separate from marketing.
Send promotional email ONLY if you opt in. You can opt out anytime in Account > Privacy, and opting out never affects your account or transactional messages.
Protect the service: audit records, access controls, fraud prevention.

We do not sell your personal information.

3. Who processes it

Your information is stored with our infrastructure providers: Supabase (database, authentication, and email delivery for account messages) and Vercel (application hosting), both operating data centers in the United States. Booking happens on external scheduling sites (Square, or onusiv.com pages) - what you enter there is governed by those sites' own policies. Laboratories host lab reports on their own systems. Beyond these processors, we share personal information only when the law requires it or to protect against fraud or abuse.

4. How long we keep it

Account and profile details are kept while your account is active. Records of care, credits, payments-related entries, consent, and security logs may need to be kept longer to meet legal, clinical, billing, tax, or fraud-prevention obligations - we keep those only as long as those obligations require, then delete or de-identify them.

5. Your choices and rights

Access and correction: your profile shows the details we hold, and you can edit your name, phone, and birthday in the app. For a copy of your other records, or corrections you cannot make yourself, contact us using the details below.
Marketing: opt in or out anytime in Account > Privacy. Every promotional email we send must include a way to unsubscribe.
Deletion: request account deletion in Account > Delete account (you confirm with your password), or contact us. Your account is closed immediately, promotional email stops, and we delete or de-identify your information except what the retention rules above require us to keep. Deletion requests get a recorded status you can ask about.
Colorado residents: Colorado privacy law gives consumers rights to access, correct, and delete personal data and to opt out of targeted advertising and data sales. We do not sell data or run targeted advertising; the access, correction, and deletion channels above are how to exercise those rights, and you may appeal a decision by contacting us with the details below.

6. Security

Access to your information is limited by role: you see your own records, and Onus staff see only the members of the locations they work at. Connections are encrypted in transit, sign-in requires an invitation and password (or emailed link), and account-affecting actions are logged. No system is perfectly secure, but the app is designed so that sensitive details - like lab-result links - are never exposed in URLs, logs, or emails.

7. Children

The member app is intended for adults and is not directed to children. Accounts exist only by invitation from Onus iV.

8. Changes and contact

If this policy changes materially we will update the version and effective date above and note the change in the app. For privacy requests - access, correction, deletion, marketing, or appeals - call your Onus location (phone numbers are in the app and on onusiv.com), call customer service at (720) 417-9590, or use the contact form at onusiv.com/contact-us.