Privacy Policy
Last updated:
TheraGrid LLC, doing business as MitoLoop ("we" and "us"), operates mitoloophealth.com. This policy explains how we handle information from our storefront and updates we receive after you continue to a separate care portal. The care portal handles accounts, medical care, and payment under its own privacy documents.
Information we collect
When you visit our site, our hosting and error-monitoring providers receive technical information such as your IP address, browser, pages requested (including programs viewed), visit time, errors, and limited performance measurements. Pages you view may reveal your health interests. When first-party analytics is enabled, we may record how you use our site, including pages and features you view, actions you take, how you reached us, and time spent actively viewing pages. We use a browser identifier to connect this activity across visits. If you email us, we receive your email address and message. We do not ask for clinical intake or payment card details on this site.
Referral sources and care portal updates
Some links to our site include a source tag, such as utm_source. We may retain an approved source as you browse and pass it on when you continue to the care portal. The portal may send us that tag with a portal-issued patient ID and visit or transaction details, such as the program, status, amount, and date. Those updates may carry more than we need, including contact or health details; we discard anything beyond those items when we receive it. We use visit and transaction details to reconcile transactions. We may use a returned source tag for internal reporting on which sources brought patients to us. We do not use patient-level records to market to individuals or pay referral partners. We do not keep your clinical record.
Care portal records and protected health information
Information we receive from the care portal about patients is protected health information. We handle it as a business associate of the medical group, only as our agreement with the group and HIPAA allow. Updates may include contact or health details; we discard these on receipt and do not store them. To access or amend these records, contact the medical group through the care portal, and we will help fulfill your request. Our clinical care partner's care team may call, text or email you under the MitoLoop name, including reminders and outreach for up to two years unless you opt out.
How we use and share information
We use information to run and secure the site, respond to messages, fix errors, understand how visitors use the site, improve the experience, and carry out the reporting described above. We keep browser-linked site activity separate from care-portal patient records. We limit access to information we hold and use safeguards to protect it. Our hosting, database, error-monitoring, and email providers handle information for us. When you continue to the care portal, it receives your selected program and any source tag. We may also disclose information when required by law or as part of a business transfer, which does not include protected health information except as our agreement with the medical group and HIPAA permit. We do not sell personal information or share it for targeted advertising.
Cookies and browser signals
We do not use advertising trackers. Your browser may store a site display preference. When first-party analytics is enabled, we also use a browser identifier to connect activity across visits on this site. Clearing browser storage may start a new history but does not delete records already held by us. We do not respond differently to Do Not Track or Global Privacy Control signals because we do not sell information or use it for targeted advertising.
How long we keep information
We retain information for the time needed to operate and improve the site, reconcile transactions, meet legal obligations, and resolve disputes. If first-party analytics is enabled, we remove detailed browser-linked activity within six months of each event. We may keep grouped counts for longer to understand trends, without keeping individual journeys. Other retention periods vary by record and service provider.
Your choices and rights
Depending on where you live, you may be able to request access, correction, or deletion of your other personal information, such as site activity and messages to us. Email support@mitoloophealth.com; we may need to verify your identity. HIPAA does not give a general right to delete patient records received from the care portal. For access or amendment of those records, see the section above.
Children
This site is intended for adults and is not directed to anyone under 18.
Changes and contact
We may update this policy by posting a new version and date here. Email support@mitoloophealth.com with privacy or security questions or concerns.
See also our Terms of Service.