What is collected, and what is never done with it

No advertising or analytics tag is loaded on any page of this site. In the connected service, continuing to sign-up saves your questionnaire answers in a server-side session before your account exists.

Reference implementation

Pluto Care is a reference build of a telehealth platform. No live service runs behind it: no account can be created, no payment can be taken, and every patient in it is synthetic. This document is written as the one a deployment would publish, and it describes how the software actually behaves — but it binds nobody, because there is no operator and no patient on either side of it.

Before you have an account

The eight-screen questionnaire collects your goal, your height and weight, weight-related conditions you have been diagnosed with, a treatment preference, your state and your date of birth, along with your acknowledgement of the displayed pricing ladder. These answers start in your browser’s session storage under the key intake.phase-a and are read back by the same browser to decide which screen you are on.

In the connected service, pressing “Create my account” after completing the account form and consent checkboxes creates or resumes a server-side session and sends these answers to it, before you reach sign-up and before an account exists. If saving is interrupted, answers already sent remain on the server; retrying resumes that session. The browser-only demo keeps the answers in the tab.

The browser copy. Closing the tab discards this copy. It does not delete answers already sent to the server.
The server copy. The session can be resumed for seven days from its creation. After that, the server refuses access through the session routes, but expiry does not delete the stored answers. There is currently no automatic cleanup of abandoned sessions. If you sign in and submit the clinical questionnaire, the session is bound to you and its intake answers become part of your medical record.
The key names nothing. Storage keys show up in developer tools, in screen shares and in browser-sync interfaces, so it carries neither the brand nor a health term.

Minors

This product is not available to anyone under 18. Being 18 or older is a hard eligibility requirement checked at intake against the date of birth you enter; it is not independent verification of your age or identity.

Tracking

This site loads no Meta pixel, no Google tag, no Snap pixel, no TikTok pixel and no product analytics SDK — on the marketing pages, in the questionnaire, and in the authenticated application. No script is loaded from another origin at all.

That is why there is no cookie banner. A consent banner is not a feature; it is the cost of having tags whose consent state can be got wrong. With no tags there is no state to get wrong, and nothing you answer here is shared with an advertising network under any consent setting.

After you have an account

Two companies hold different things, and the split is structural rather than administrative. Pluto Care, Inc. holds your account: email address, the name you asked to be called, your subscription and billing status, and the consent records described in the terms of service. Pluto Care Medical, P.C. holds your medical record: the clinical questionnaire, clinician notes, prescriptions, messages with your care team and the decisions made about you.

Pluto Care, Inc. cannot use the medical record for marketing, for pricing or for anything else — that is the point of the separation, and it is enforced in the data model rather than by policy alone.

Categories of sources

You — questionnaire answers, account and contact details, consent choices, shipping details and messages you send to your care team.
Your care team — clinician notes, prescriptions, replies and decisions recorded in the course of your care.
Pharmacy and carrier integrations — dispatch, tracking and delivery updates for your prescription shipment.
The payment processor — payment status and transaction references used to keep your billing records. Your card details go directly to the processor.

Who your information is shared with

The clinician treating you — licensed in your state, and employed by Pluto Care Medical, P.C. rather than by the company running this site.
The dispensing pharmacy, which receives the prescription and the shipping details it needs and nothing else.
The payment processor, which handles card details directly. Card numbers are never stored by either company.

Nobody else. Your information is not sold, is not licensed, is not traded for advertising reach, and is not shared with a data broker. There is no category of “marketing partner” in this list because there is no such partner.

How it is protected

Everything is encrypted in transit and at rest. Access is restricted to the people involved in your care and the smallest set of staff who need it to run the service, and every access to a medical record is logged. The clinical record and the account record live in separate stores with separate access rules, so a compromise of one is not a compromise of both.

How long it is kept

Medical records are retained by Pluto Care Medical, P.C. for the minimum period the state licences involved require. A retention obligation is not something a patient can waive, and this page will not pretend otherwise.
Account and billing records are kept while the account is open and for as long afterwards as tax and payment-dispute rules require.
Pre-account questionnaire answers in the browser are discarded when you close the tab. The server-side session expires for access after seven days, but its answers remain stored unless erased; abandoned sessions have no automatic deletion deadline today. Answers incorporated into a submitted medical record follow the medical retention rules above.

Your privacy rights — CCPA/CPRA

The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), names rights to know, access, correct and delete personal information and to receive equal treatment when exercising those rights. Here is what you can ask us for:

Know and access. A copy of everything held about you, in a form you can read, including what is collected, where it comes from, why it is used and who it reaches.
Correct. Correction of anything wrong in it.
Delete. Deletion of your account and marketing data — subject only to the retention obligations above, which are stated rather than used as a reason to refuse the whole request.
Understand a decision. An explanation of any decision made about you, and who made it.

Exercising these rights does not affect your price, service or ability to use the product.

Write to support@care.plutohealth.com. Requests are acknowledged within 12 hours by a person.

Limit the Use of My Sensitive Personal Information

Your health answers and medical record are sensitive personal information. We use and disclose sensitive personal information only as needed to provide the care and service you request. Patient data is not used for analytics, marketing or model training; the planned clinical AI assistant is designed not to train on patient data either.

Our basis for not offering a separate limitation mechanism is the CCPA/CPRA exemption for uses and disclosures that are reasonably necessary and proportionate to provide the service you request. We expect that exemption to apply to these service-only uses; that is our current basis, subject to legal review before launch, not a final legal determination.

Changes to this policy

Each version has an identifier, printed below. A change that alters what is collected or who it reaches is a new version and is told to you, not published quietly — the same rule the consent records apply to the terms of service.

Version privacy-2026.08. Questions about this document go to support@care.plutohealth.com, answered by a person within 12 hours.