Privacy Policy
Tomorrow Health Inc. — TryTomorrow.com
Effective June 27, 2026
This Privacy Policy explains how Tomorrow Health Inc. ("Tomorrow," "we," "us," or "our") collects, uses, and shares information when you visit TryTomorrow.com and use the products and services we make available through it (together, the "Service"). Please read it alongside our Terms of Service.
By creating an account, registering, signing in, or otherwise using the Service, you acknowledge the current version of this Privacy Policy. If we revise it, we will post the updated version and change the effective date above. If you use the Service for someone other than yourself, you confirm that you are authorized to act for that person and that they have been made aware of these practices.
The Service and how it is delivered
Tomorrow operates a direct-to-consumer telehealth experience. The technology that powers your account, checkout, and clinical workflow is provided through our platform partner, Bask. Licensed medical groups, their providers, and licensed pharmacies (together, the "Medical Groups," "Providers," and "Pharmacies") are responsible for evaluating you, prescribing treatment where appropriate, and fulfilling prescriptions. Tomorrow facilitates the relationship between you and those parties and handles the commercial and account side of the Service.
Because of this structure, the information you share falls into two broad buckets, and they are treated differently under the law: ordinary personal information that you give Tomorrow to run your account (described throughout this policy), and protected health information tied to your medical care (described in the "Health information" section below and in any separate Notice of Privacy Practices provided to you).
Use by adults only
The Service is intended for individuals who are at least eighteen (18) years old, or older where a particular state requires it. It is not directed to anyone under eighteen. If we learn that we have collected personal information from someone under eighteen through the Service, we will take reasonable steps to stop using and retaining it. We may, however, be required to keep certain information — for example, where a law requires retention, where the information is part of a medical record held by a Provider, where it has been de-identified, or where a third party has independently stored or reposted it.
Health information
When you open an account, you give Tomorrow information such as your name, email address, shipping address, phone number, and transaction history. We do not treat that account information as "protected health information" or "medical information."
Separately, when you use the clinical parts of the Service you may provide health or medical details that are protected under federal or state law. Tomorrow maintains a Notice of Privacy Practices and has designated a Privacy Officer responsible for handling PHI requests, complaints, and compliance, who can be reached at privacy@trytomorrow.com. The Medical Groups and Pharmacies that provide care and fulfillment through the Service may also be covered entities or business associates under HIPAA, and they maintain their own privacy obligations. HIPAA does not automatically apply just because health information is involved, and it may not apply to every interaction you have with Tomorrow, the Medical Groups, the Providers, or the Pharmacies. To the extent Tomorrow does act as a business associate, and only in that role, it may be subject to HIPAA with respect to the protected health information you provide to a Medical Group or Provider ("PHI"). Health or medical information that is protected under specific state laws is handled in line with those laws. Together, PHI and that state-protected information are referred to here as "Protected Information." Information that is not Protected Information may be used and shared as described in this policy. De-identified information is not Protected Information.
To be clear: information you give to set up and manage your account — name, username, email, shipping address, phone number — is not Protected Information. Health information used solely so a Medical Group or Provider can evaluate and treat you, or so a Pharmacy can fill a prescription, is Protected Information and is governed by the applicable health-privacy laws, not by the general terms of this policy.
Information we collect
Information you give us:
Contact details such as name, email address, phone number, and billing and shipping addresses.
Demographic details such as date of birth, sex, and ZIP code.
Payment details such as card number and related billing information, handled by our payment processor.
Content you submit such as photos, documents, and the messages you send us.
Government identifiers where needed to verify identity, such as a driver's license or passport image.
Account credentials such as a username together with a password or access code.
Health information that you choose to share, which may be Protected Information as described above.
Information we collect automatically:
Device and identifier data such as IP address, device type and identifiers, operating system, and browser, logged by our servers when you visit.
Usage data such as the pages you view, the links you click, time spent, access times, and the site you came from. Some usage data may be sensitive where it reflects activity on health-related pages.
Information we generate: We may infer additional information from what we collect — for example, estimating your general city or region from your IP address.
Information from other sources:
Service providers and partners that perform work on our behalf, including vendors that help deliver the Service.
Marketing partners with whom we run joint or co-branded activities.
Publicly available sources such as open government records.
You can decline to provide information, and you can use browser or device settings to limit some automatic collection — but certain features may not work without it. Because Tomorrow helps administer the Service for the Medical Groups and Pharmacies, we may also hold health information on their behalf, including records of your communications with Providers.
Cookies and similar technologies
We and our analytics and advertising partners use cookies, web beacons, pixels, mobile advertising identifiers, and similar tools to run the Service and to collect usage, identifier, and device data — including information about your activity over time and across sites. Cookies are small text files stored by your browser; web beacons are small images embedded in pages or emails that let a server log activity; mobile identifiers serve a similar role inside apps. We use these tools to remember your preferences, keep you signed in, measure performance, understand how the Service is used, develop inferences, support advertising, prevent fraud, and meet other legitimate needs, and we share some of this data with partners for those purposes. Your control options are described in "Your choices" below.
How we use information
Subject to the limits in the "Health information" section, we use the information we collect to:
Deliver the Service — provide and improve it, troubleshoot, confirm your location, and personalize your experience.
Run our business — billing, payments, accounting, account administration, security, fraud and abuse detection, identity verification, and meeting legal obligations.
Improve and develop — test and improve features, build new products, and analyze how the Service is used.
Personalize — tailor the experience to your preferences.
Support you — answer questions, fulfill requests, and place and track orders on your behalf.
Communicate — send confirmations, invoices, technical and security notices, and administrative messages, including on behalf of your Providers to support telehealth.
Market — tell you about new offerings, promotions, and updates from Tomorrow and selected partners.
Advertise — promote the Service and measure those efforts.
We may combine information from different sources for these purposes. We may use information about your browsing activity, including visits to health-related pages, to market the Service and measure advertising. Where state law requires consent before using sensitive information for these purposes, we will seek it. We do not use Protected Information for advertising or marketing. We may also de-identify information and use or share it for any lawful purpose; where we do, we maintain it in de-identified form and do not try to re-identify it except to test the de-identification process or as the law allows.
Text messages (SMS)
If you provide your phone number and opt in, you consent to receive recurring marketing and non-marketing text messages (SMS/MMS) from Tomorrow. Message frequency varies, and message and data rates may apply. These messages may include account notifications, updates, and offers related to the Service. Reply STOP to unsubscribe at any time, or HELP for help. Consent is not a condition of any purchase — you can use the Service without agreeing to texts, and you can opt out whenever you like.
How we share information
Subject to the limits in the "Health information" section, we share information with your consent, to complete the transactions you request, or as permitted or required by law. We may share information with:
Service providers — vendors that work on our behalf, such as customer support, hosting, security, and platform services (including Bask, which powers the Service).
Payment processors — when you make a purchase, payment and transaction data is shared with banks and processors as needed for payment, fraud prevention, and related financial services. Card payments are processed by Stripe, which is integrated through Bask; Stripe handles that data under its own privacy policy at stripe.com/privacy.
Advertising and marketing partners — we may share identifiers and activity data so that ads can be delivered to you or to similar audiences. This can include health-related browsing activity to the extent it is not Protected Information.
The Medical Groups, Providers, and Pharmacies — we facilitate the exchange of information needed for them to evaluate, treat, and dispense to you, and to collect payment on their behalf.
Legal and law enforcement — where we believe disclosure is needed to comply with law or valid legal process.
Safety and protection of rights — to protect customers and others, secure our systems, prevent fraud, and enforce our agreements and policies.
De-identified recipients — we may share de-identified information as the law allows.
Third-party analytics and advertising companies also collect device and usage data through the Service. For example, we use Google Analytics and Google Tag Manager to understand how the Service is used; you can review how Google handles this data at policies.google.com. Some of this activity may be considered a "sale" or "sharing" of personal information under California and other state laws — see "Your choices" and "California residents" below. Where the Service links to or integrates third-party services, those services are governed by their own privacy policies.
Your choices
You have several ways to control your information:
Marketing opt-out. You can stop promotional email or SMS by following the unsubscribe instructions in the message or by contacting us at care@trytomorrow.com. This does not affect required service messages.
Do Not Sell or Share / opt-out of targeted advertising. To opt out of the "sale" or "sharing" of your personal information for advertising, email us at care@trytomorrow.com and we will process your request. You can also use industry opt-out tools at the NAI (optout.networkadvertising.org) and DAA (optout.aboutads.info).
Deletion. To ask us to delete your information, email care@trytomorrow.com. We will delete what we can, except information that we, the Medical Groups, the Providers, or the Pharmacies are required to keep by law — for example, medical records and records needed for legal, tax, or safety obligations.
Cookie controls. Most browsers accept cookies by default; your browser settings let you delete or block them, though some features may stop working as a result.
Mobile identifiers. iOS and Android settings let you limit ad tracking or reset your advertising identifier.
Email images. Many email programs can block automatic image loading, which limits email tracking pixels.
We may decline a request where the law permits — for example, where we cannot verify your identity, where a request is unreasonable or excessive, or where fulfilling it would violate law or another person's rights. This policy covers personal information and is separate from Protected Information, which is governed by health-privacy law.
Data retention
We keep information for as long as we reasonably need it to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements, after which we may delete it except where law or another agreement requires retention. The Medical Groups, Providers, and Pharmacies retain information under their own obligations, and other third parties we work with apply their own retention practices.
Payments and transactions
When you transact through the Service, you may be asked for information such as your card number and expiration date, billing and shipping addresses, phone number, and email. By submitting it, you authorize us to share that information with the third parties needed to complete the transaction, such as payment processors. Card and other monetary transactions are processed through Stripe (integrated via Bask); Stripe operates as an independent third-party vendor under its own policies and is not controlled by Tomorrow.
Where the Service is available
The Service is offered in the United States. Some products and treatments are available nationwide, while others are limited to specific states based on licensing and applicable law. Your use of the Service, and our collection, use, and sharing of your information, is governed by U.S. law.
California residents
If you are a California resident and the California Consumer Privacy Act ("CCPA") applies to information about you, you have specific rights:
Notice at collection. You have the right to be told, at or before collection, what categories of personal and sensitive personal information we collect, why, whether it is sold or shared, and how long it is kept — all described in this policy.
Right to know. You can request the personal information we have collected about you and details about how we collect, use, and disclose it.
Right to correct or delete. You can ask us to correct inaccurate information or delete your information, subject to legal exceptions.
Right to opt out of sale or sharing. You can opt out of future "sales" or "sharing" of personal information, as those terms are defined by the CCPA, by emailing care@trytomorrow.com.
Right to limit sensitive information. You can ask us to limit use of sensitive personal information to what is needed to provide the Service or as otherwise permitted by law.
Authorized agents. You may use an authorized agent to make a request, with proof of authorization and verification of your identity.
No discrimination. We will not discriminate against you for exercising these rights.
The CCPA defines "sell" and "share" broadly. We let advertising and analytics providers collect identifiers (such as IP addresses and cookie and mobile IDs), activity data, device data, and related inferences through the Service, which may be considered a sale or share; we do not sell or share other categories of personal information. To verify a request, we may ask you to send it from the email on your account or to provide information that lets us confirm your identity. We do not knowingly sell or share the personal information of anyone under sixteen. Under California's "Shine the Light" law, we confirm that we do not disclose personal information to third parties for their own direct marketing purposes.
Security and your account
We use reasonable physical, technical, and administrative safeguards to protect information under our control. You are responsible for keeping your password and account secure; if you believe your account has been compromised, contact us immediately using the details below. Choosing not to provide certain information may limit features or prevent use of the Service.
Changes to this policy
We may update this Privacy Policy from time to time. Updates take effect when posted and are reflected in the effective date above. If a change is material, we will provide notice and, where appropriate, ask you to acknowledge the updated policy. Please review this policy when you use the Service.
Contact us
Tomorrow Health Inc.
90 Fort Wade Road, Suite 100 #1062
Ponte Vedra, FL 32081
United States
General and privacy questions: care@trytomorrow.com
Phone: (855) 879-8679
Questions about your medical care or treatment are handled directly by your Medical Group and Providers; email care@trytomorrow.com and we will direct you appropriately.