Privacy policy

aiCurePath Prescription Portal Privacy Policy

Effective Date: Sept 25th, 2026
Last Updated: Sept 25th, 2026

Important Notice

This Privacy Policy explains how aiCurePath Health Inc. (“aiCurePath,” “we,” “our,” or “us”) collects, uses, stores, processes, discloses, and protects information in connection with the aiCurePath Prescription Portal. The Prescription Portal is intended only to support practitioner-directed prescription-related product order administration, including prescription or order submission, payment link communication, Patient mailing address collection, payment coordination, order transmission, and fulfillment-related processes. The Prescription Portal is not intended to be used for conducting consultations, providing diagnosis, delivering treatment recommendations, providing medical or Traditional Chinese Medicine advice, or communicating clinical care instructions to Patients. Patient consultations, clinical assessments, treatment discussions, and related healthcare communications must be conducted through the aiCurePath App or other appropriate consultation channels used by the Practitioner. By accessing, registering for, submitting information through, placing an order through, completing payment through, or otherwise using the Prescription Portal, you acknowledge that you have read and understood this Privacy Policy.

1. Definitions

For the purposes of this Privacy Policy:

“aiCurePath,” “we,” “our,” or “us” means aiCurePath Health Inc.

“Prescription Portal” or “Portal” means the aiCurePath prescription page, order submission system, payment tools, communication tools, product display tools, and related technology services used by Practitioners to prescribe or recommend products for Patients.

“Practitioner” means a licensed Traditional Chinese Medicine practitioner or other healthcare professional authorized to prescribe, recommend, or order products for Patients within their legal scope of practice.

“Patient” means the individual for whom the Practitioner issues a prescription, recommendation, or product order.

“Purchaser” means a Patient or other person who receives a payment link, provides mailing or payment information, or completes a purchase through the Prescription Portal.

“Supplier” or “Fulfillment Provider” means an independent product supplier, pharmacy, herbal product provider, product vendor, manufacturer, distributor, logistics provider, or fulfillment service provider responsible for preparing, packaging, dispensing, shipping, or delivering prescribed or recommended products.

“Personal Information” means information about an identifiable individual.

“Health Information” means information relating to a Patient’s health, healthcare, prescription, product recommendation, allergies, contraindications, medication or supplement use, or other health-related circumstances.

2. Scope of this Privacy Policy

This Privacy Policy applies only to information collected, used, stored, processed, or disclosed through or in connection with the aiCurePath Prescription Portal. This Privacy Policy does not replace any privacy notice, consent form, clinic policy, professional obligation, supplier agreement, payment processor policy, or other third-party privacy policy that may also apply. Practitioners, suppliers, pharmacies, fulfillment providers, payment processors, and other third parties may have their own privacy obligations and policies. aiCurePath is not responsible for the privacy practices of independent third parties except as required by applicable law or expressly agreed in writing.

3. Information We May Collect

Depending on how the Prescription Portal is used, we may collect or process the following categories of information.

3.1 Account and User Information

We may collect information used to create, verify, manage, or support accounts, including:

  • Name;
  • Email address;
  • Phone number;
  • Login credentials or account identifiers;
  • Role or user type;
  • Clinic, business, supplier, or organization information;
  • Account status;
  • User preferences;
  • Support communications.

3.2 Practitioner Information

For Practitioners using the Prescription Portal, we may collect or process information such as:

  • Name;
  • Contact information;
  • Clinic or business information;
  • Professional title;
  • License, registration, certificate, or authorization information;
  • Regulatory body or professional college information;
  • Professional standing information;
  • Identity verification information;
  • Insurance or business information, where applicable;
  • Portal access and prescription-related activity.

aiCurePath may request proof of license, registration, professional standing, identity, insurance, business information, or other credentials where necessary for Portal access, compliance, safety, or platform integrity.

3.3 Patient and Prescription-Related Information

The Prescription Portal may collect or process Patient-related information submitted by a Practitioner, Patient, purchaser, supplier, or other authorized user, including:

  • Patient name;
  • Patient email address;
  • Patient phone number, where applicable;
  • Mailing or delivery address;
  • Prescription-related product order information;
  • Product names, quantities, and order details;
  • Dosage or usage instructions, where provided by the Practitioner;
  • Product-use guidance, cautions, contraindication notes, or special instructions, where applicable;
  • Patient consent, acknowledgement, or disclosure records, where applicable;
  • Communications related to prescription-related product orders, payment, shipping, fulfillment, follow-up, or product-use guidance.

The Practitioner is responsible for ensuring that Patient information entered into the Prescription Portal is accurate, necessary, authorized, and collected with all required Patient consents and disclosures.

3.4 Order, Payment, and Transaction Information

We may collect or process order and transaction-related information, including:

  • Product order details;
  • Prescription-related order status;
  • Payment link status;
  • Payment confirmation or failure status;
  • Transaction identifiers;
  • Refund, return, exchange, or cancellation information;
  • Chargeback or dispute information;
  • Amounts collected, processed, transferred, paid, distributed, reimbursed, remitted, or allocated;
  • Technology, administrative, coordination, operational, or service-support portions retained by aiCurePath;
  • Tax, invoice, receipt, or reporting information, where applicable.

Payment information may be processed by third-party payment processors or payment platforms, including but not limited to Stripe, Shopify, or other payment service providers. aiCurePath may not receive or store full payment card numbers where such information is processed directly by third-party payment providers.

3.5 Supplier, Pharmacy, Fulfillment, and Logistics Information

We may collect or process information relating to suppliers, pharmacies, product vendors, fulfillment providers, logistics providers, or other third parties, including:

  • Business name;
  • Representative name;
  • Contact information;
  • Product listing information;
  • Product availability;
  • Order fulfillment status;
  • Shipping, delivery, pickup, or fulfillment information;
  • Product concern, damaged product, incorrect shipment, recall, or adverse event information;
  • Payment allocation, payout, tax, or business information, where applicable.

3.6 Communications and Support Information

We may collect communications and support information, including:

  • Messages or communications related to order processing, payment, shipping, fulfillment, administrative support, product concerns, complaints, adverse events, or safety matters;
  • Customer support requests;
  • Practitioner, Patient, purchaser, supplier, or fulfillment provider inquiries;
  • Dispute, complaint, refund, return, exchange, or cancellation communications.

3.7 Technical and Usage Information

When users access or use the Prescription Portal, we may collect technical and usage information, including:

  • IP address;
  • Device information;
  • Browser type;
  • Operating system;
  • Log data;
  • Access times;
  • Pages or features used;
  • Portal activity;
  • Error logs;
  • Security logs;
  • Cookies or similar technologies;
  • Other technical usage data needed to operate, secure, improve, or monitor the Prescription Portal.

4. How We Use Information

aiCurePath may use information collected or processed through the Prescription Portal for the following purposes:

  • To provide, operate, maintain, and support the Prescription Portal;
  • To create, manage, verify, or administer user accounts;
  • To support Practitioner access to the Prescription Portal;
  • To support prescription-related product order preparation and submission;
  • To allow Patient information entry required for order processing, including Patient email and mailing address;
  • To send payment links or payment-related communications to Patients or purchasers;
  • To facilitate payment processing through third-party payment processors or payment platforms;
  • To coordinate order transmission to suppliers, pharmacies, product vendors, fulfillment providers, or logistics providers;
  • To support shipping, delivery, fulfillment, refund, return, exchange, or cancellation processes;
  • To communicate with Practitioners, Patients, purchasers, suppliers, pharmacies, fulfillment providers, logistics providers, payment processors, or other relevant parties;
  • To provide administrative, technical, operational, and customer support;
  • To investigate complaints, disputes, product concerns, safety concerns, adverse events, fulfillment issues, damaged products, incorrect shipments, or payment issues;
  • To support compliance, legal, regulatory, privacy, security, fraud prevention, payment integrity, and platform integrity purposes;
  • To protect Patient safety, confidential information, intellectual property, payment integrity, and the availability and integrity of the Prescription Portal;
  • To enforce the Terms of Service, this Privacy Policy, supplier agreements, platform policies, or other applicable agreements;
  • To improve, troubleshoot, test, monitor, and secure the Prescription Portal;
  • To create records, logs, reports, or documentation required for business, legal, compliance, tax, audit, safety, or operational purposes.

5. How We Disclose Information

aiCurePath may disclose information where necessary for the operation of the Prescription Portal, lawful clinical care, prescription processing, order fulfillment, payment processing, Patient communication, safety reporting, dispute resolution, legal compliance, or other authorized purposes.

We may disclose information to the following categories of recipients.

5.1 Practitioners

We may disclose Patient, order, prescription-related, payment status, fulfillment status, and communication information to the Practitioner responsible for the prescription, recommendation, or product order.

5.2 Patients and Purchasers

We may disclose order, payment link, product order, shipping, fulfillment, refund, return, exchange, cancellation, product-use, or administrative information to Patients or purchasers as necessary to process or support the transaction.

5.3 Suppliers, Pharmacies, Product Vendors, and Fulfillment Providers

We may disclose information necessary for product preparation, packaging, dispensing, shipping, delivery, fulfillment, recall coordination, product concern investigation, or related support, including:

  • Patient name;
  • Mailing or delivery address;
  • Product order details;
  • Prescription-related order information;
  • Practitioner information;
  • Order status;
  • Fulfillment instructions;
  • Product concern, adverse event, or safety information, where necessary.

5.4 Payment Processors and Payment Platforms

We may disclose transaction-related information to payment processors or payment platforms, including Stripe, Shopify, or other payment service providers, as necessary to process payments, refunds, chargebacks, disputes, payouts, tax calculations, fraud reviews, compliance reviews, or payment-related services. Payment processors and payment platforms may collect, use, store, process, and disclose information in accordance with their own terms, policies, and privacy practices.

5.5 Service Providers

We may disclose personal information to third-party service providers that support the operation, security, administration, and functionality of the Prescription Portal. These service providers may include providers of:

  • Cloud hosting and infrastructure services;
  • Data storage and backup services;
  • Cybersecurity and information-security services;
  • Identity verification and authentication services;
  • Email, notification, and messaging services;
  • Payment processing and payment coordination services;
  • Customer and technical support services;
  • Analytics and service-performance monitoring;
  • Error detection, logging, and system monitoring;
  • Technical operations, maintenance, and platform support; and
  • Legal, accounting, regulatory compliance, audit, and administrative services.

Service providers are permitted to access, use, or process information only to the extent reasonably necessary to provide services to aiCurePath or fulfill related legal and operational requirements. Where applicable, aiCurePath requires service providers to handle personal information in accordance with contractual confidentiality, privacy, and security obligations and applicable privacy laws.

5.6 Legal, Regulatory, Compliance, and Safety Disclosures

We may disclose information where we believe it is necessary or appropriate to:

  • Comply with applicable laws, regulations, court orders, subpoenas, legal processes, or regulatory requests;
  • Protect Patient safety;
  • Investigate adverse events, product concerns, recalls, contamination concerns, labeling concerns, or safety issues;
  • Prevent fraud, abuse, unlawful activity, or misuse of the Prescription Portal;
  • Protect privacy, security, payment integrity, platform integrity, or legal compliance;
  • Enforce our Terms of Service, this Privacy Policy, platform policies, or agreements;
  • Protect the rights, property, safety, or interests of aiCurePath, Patients, Practitioners, suppliers, pharmacies, fulfillment providers, logistics providers, payment processors, or other users.

6. Practitioner Responsibilities

Practitioners are responsible for ensuring that any Patient information they collect, enter, upload, submit, download, retain, disclose, or transmit through or in connection with the Prescription Portal is handled securely, lawfully, and in compliance with applicable privacy, confidentiality, professional, consent, and recordkeeping obligations.

Practitioners are responsible for:

  • Obtaining all required Patient consents and authorizations;
  • Providing all required privacy notices and disclosures;
  • Ensuring that Patient information submitted through the Prescription Portal is accurate, complete, necessary, and authorized;
  • Using the Prescription Portal only within their professional scope of practice;
  • Protecting Patient information, health information, prescription information, and Portal-related confidential information;
  • Maintaining appropriate clinical, prescription-related, professional, and Patient records;
  • Complying with applicable laws, regulations, professional standards, clinic policies, documentation duties, and standards of care.

Practitioners must not rely solely on any consent forms, notices, disclosures, templates, AI-generated materials, or other content provided through the aiCurePath App, the Prescription Portal, or any other aiCurePath platform feature if additional or different consent, disclosure, documentation, communication, or professional review is required.

7. Supplier and Fulfillment Provider Responsibilities

Suppliers, pharmacies, product vendors, fulfillment providers, logistics providers, and other authorized third parties are responsible for protecting any Patient information, prescription information, order information, delivery information, payment-related information, and Portal-related confidential information they receive through or in connection with the Prescription Portal. Such parties must use information only as necessary for authorized purposes, including product preparation, packaging, dispensing, shipping, delivery, fulfillment, product concern investigation, recall coordination, safety reporting, payment processing, dispute resolution, or legal compliance. Suppliers and fulfillment providers must not access, use, disclose, download, copy, store, transfer, retain, or share Patient information except as necessary for authorized and lawful purposes.

8. Patient and Purchaser Responsibilities

Patients and purchasers are responsible for providing accurate, complete, and current information through the Prescription Portal, including contact information, mailing address, payment-related information, and any other information required for the order. Patients and purchasers should not submit false, incomplete, misleading, or unauthorized information. Patients and purchasers should contact their Practitioner if they have questions about a prescription, recommendation, dosage, usage instruction, contraindication, adverse reaction, allergy, drug-herb interaction, product concern, or healthcare matter. The Prescription Portal is not intended for emergencies. In an emergency, call 911 immediately or go to the nearest emergency department.

9. Legal Basis and Consent

aiCurePath may collect, use, disclose, store, and process information with consent, as necessary to provide the Prescription Portal, as necessary to process transactions or fulfill orders, as necessary for legitimate business and operational purposes, or as otherwise permitted or required by applicable law. Where Patient information or Health Information is submitted through the Prescription Portal, the Practitioner is responsible for obtaining any required Patient consent before submitting such information. By using the Prescription Portal, users authorize aiCurePath to collect, use, disclose, store, and process information as described in this Privacy Policy and the applicable Terms of Service.

10. Cookies and Similar Technologies

The Prescription Portal may use cookies, pixels, logs, analytics tools, or similar technologies to:

  • Enable Portal functionality;
  • Support login and authentication;
  • Remember user settings;
  • Monitor usage;
  • Improve performance;
  • Detect errors;
  • Maintain security;
  • Prevent fraud or misuse;
  • Support analytics and operational reporting.

Users may be able to adjust browser settings to refuse or limit cookies. However, some Portal features may not function properly if cookies or similar technologies are disabled.

11. Data Security

aiCurePath uses reasonable administrative, technical, and organizational safeguards designed to protect Personal Information, Health Information, prescription-related information, order information, payment-related information, and Portal-related confidential information. These safeguards may include access controls, authentication, encryption, logging, monitoring, secure hosting, confidentiality controls, and other reasonable security measures. However, no system, platform, network, transmission, or storage method can be guaranteed to be completely secure. Users are responsible for maintaining the confidentiality of their login credentials and for promptly notifying aiCurePath of any suspected unauthorized access, privacy incident, or security issue.

12. Data Retention

aiCurePath retains information for as long as reasonably necessary to:

  • Provide and support the Prescription Portal;
  • Process prescription-related product orders;
  • Maintain transaction, payment, order, fulfillment, and support records;
  • Comply with legal, regulatory, tax, accounting, audit, privacy, safety, and compliance obligations;
  • Resolve disputes;
  • Investigate complaints, adverse events, product concerns, or fulfillment issues;
  • Enforce agreements and policies;
  • Protect Patient safety, platform integrity, payment integrity, and legal rights.

Practitioners remain responsible for maintaining their own clinical, prescription-related, professional, and Patient records in accordance with applicable laws, regulatory requirements, professional standards, clinic policies, privacy obligations, and standards of care.

13. Storage and Cross-Border Processing

Information may be stored or processed in Canada or in other jurisdictions where aiCurePath, its service providers, payment processors, technology providers, or operational partners maintain systems or provide services. Where information is stored or processed outside a user’s province, territory, or country, it may be subject to the laws of that jurisdiction. aiCurePath will take reasonable steps to protect information in accordance with applicable privacy laws and this Privacy Policy.

14. Access, Correction, and Privacy Rights

Subject to applicable law, users may request access to, correction of, or deletion of certain Personal Information held by aiCurePath. Patients seeking access to or correction of clinical records, prescription records, treatment records, diagnosis information, consultation notes, or professional healthcare records should contact the responsible Practitioner directly, as the Practitioner is responsible for clinical and professional records. aiCurePath may need to verify the identity and authority of the person making the request before responding. In some cases, aiCurePath may be unable to fulfill a request if retention is required or permitted for legal, regulatory, tax, audit, safety, compliance, dispute resolution, security, or operational reasons.

15. Children and Minors

The Prescription Portal is not intended for independent use by children or minors. Where a prescription-related product order concerns a minor, the Practitioner is responsible for ensuring that all required consents, authorizations, notices, disclosures, professional standards, and legal requirements are satisfied before submitting information through the Prescription Portal.

16. AI-Assisted Features and Privacy

The aiCurePath platform may include AI-assisted features that support practitioner-facing functions such as intake support, documentation support, clinical decision support, TCM pattern identification or syndrome differentiation support, treatment planning support, prescription support, summaries, references, alerts, or other outputs. Where AI-assisted features process Personal Information or Health Information, such processing is intended to support Practitioner review and decision-making. AI-generated materials do not replace the Practitioner’s independent professional judgment. Practitioners are responsible for ensuring that any use of AI-assisted features complies with applicable laws, professional standards, Patient consent requirements, privacy obligations, documentation duties, and standards of care. aiCurePath may use information processed through AI-assisted features to provide, operate, maintain, secure, monitor, troubleshoot, and improve the relevant platform features, subject to applicable privacy laws, user permissions, contractual restrictions, and this Privacy Policy.

17. Confidentiality

Practitioners, suppliers, pharmacies, product vendors, fulfillment providers, logistics providers, and other authorized users must protect Patient information, Personal Information, Health Information, prescription information, order information, and Portal-related confidential information. Users must not access, use, disclose, download, copy, store, transfer, retain, or share Patient information, Personal Information, Health Information, prescription information, or Portal-related confidential information except as necessary for lawful clinical care, prescription processing, order fulfillment, payment processing, Patient communication, safety reporting, dispute resolution, legal compliance, or other authorized purposes under the applicable Terms of Service and this Privacy Policy.

18. Payment Information

Payments through the Prescription Portal may be processed by third-party payment processors or payment platforms, including Stripe, Shopify, or other payment service providers. These third-party payment providers may collect and process payment information, payout information, business information, tax information, identity information, fraud review information, compliance review information, and transaction information in accordance with their own terms, policies, and privacy practices. aiCurePath is not responsible for the privacy practices of third-party payment processors or payment platforms, except where required by applicable law. Users are responsible for ensuring that their payment information, payout information, tax information, business information, and account details are accurate, complete, and current.

19. Product, Shipping, and Fulfillment Information

To support product orders, shipping, delivery, and fulfillment, aiCurePath may disclose necessary order information, Patient mailing information, Practitioner information, and prescription-related product information to suppliers, pharmacies, product vendors, fulfillment providers, logistics providers, or other relevant third parties. Such information may be used for product preparation, packaging, dispensing, shipping, delivery, fulfillment, order support, recall coordination, product concern investigation, adverse event reporting, safety review, refund, return, exchange, cancellation, or legal compliance.

20. Adverse Events, Product Concerns, and Safety Reporting

Where a Practitioner, Patient, supplier, pharmacy, product vendor, fulfillment provider, or other relevant party notifies aiCurePath of an adverse event, product concern, safety concern, incorrect shipment, damaged product, product quality concern, suspected contamination, labeling concern, regulatory issue, or fulfillment concern, aiCurePath may collect, use, disclose, and retain information necessary to support Patient safety, platform compliance, supplier investigation, fulfillment correction, recall coordination, legal compliance, or regulatory requirements. aiCurePath may share relevant information with Practitioners, suppliers, pharmacies, fulfillment providers, logistics providers, regulators, legal advisors, insurers, or other relevant parties where necessary or appropriate.

21. Business Transfers

If aiCurePath is involved in a merger, acquisition, financing, corporate reorganization, sale or transfer of assets, change of control, insolvency proceeding, or other similar business transaction, personal information may be disclosed, transferred, or otherwise made available as part of the evaluation, negotiation, or completion of that transaction. Any such disclosure or transfer will be handled in accordance with applicable privacy laws and, where appropriate, subject to confidentiality, security, and other reasonable safeguards designed to protect personal information.

22. Updates to this Privacy Policy

aiCurePath may update this Privacy Policy from time to time. Updated versions will become effective when posted on the Prescription Portal unless a later effective date is stated. Your continued access to or use of the Prescription Portal after an updated Privacy Policy is posted means you acknowledge the updated Privacy Policy. This Privacy Policy will also be made available on the aiCurePath TCM Prescription Portal webpage at: https://www.aicurepathhealth.com/tcm-prescription-portal.

23. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or the handling of information through the Prescription Portal, please contact aiCurePath at:

aiCurePath Health Inc.
Email: info@aicurepathhealth.com

Patients with questions about clinical records, prescriptions, diagnosis, treatment recommendations, product-use instructions, or healthcare advice should contact their Practitioner directly.