Privacy Policy

1. Scope and responsible company

This Privacy Policy applies to the A2B Care mobile application and related account, delivery, communication, and support services operated under the A2B and A2B Rx brands (collectively, the “Services”). “A2B,” “we,” “us,” and “our” refer to the company operating the Services from 105 Sandford St, Brooklyn, NY 11205.

This policy does not replace the privacy notices of pharmacies, healthcare providers, insurers, payment providers, mobile operating-system providers, or other third parties whose services you may separately use.

2. Information we collect

Account and profile information

• Name, mobile and home phone numbers, email address, date of birth, profile photo, account identifiers, and authentication activity.
• Street address, apartment or suite, city, state, ZIP code, saved address information, and address coordinates supplied by an address-lookup provider.
• Pharmacy invitations, accepted relationships, family-member contact entries you choose to create, notification preferences, and account status.

Order, delivery, and pharmacy information

• Order number, pharmacy, delivery address and window, package count, delivery status, route progress, arrival estimate, driver details, and applicable instructions.
• Prescription or refill-related records made available for an authorized order, refill-review requests, pharmacy responses, and records showing whether a delivery photograph or signature was collected.
• Delivery and safety evidence may include timestamps, delivery coordinates, photographs, signatures, signer relationship, failed-delivery or return status, and associated operational records.

Communications and content

• Messages exchanged through authorized in-app chat with pharmacies, drivers, administrators, or support personnel, including files or images you choose to attach.
• Questions and messages sent to Abby, Abby’s responses, conversation history visible in the app, support requests, feedback, and account-deletion requests.

Device and usage information

• Device type, operating system, app version/build, IP address, push-notification token, language, time zone, app events, diagnostics, crash information, and server logs.
• Camera or photo-library access when you choose a profile image or attachment, and notification permission when you request delivery, pharmacy, chat, or account alerts.

Information from other sources

We may receive information from pharmacies, delivery organizations, drivers, administrators, address and mapping providers, SMS and phone-verification providers, push-notification providers, app stores, AI service providers, and security vendors. For example, a pharmacy may create an order, invite your account to connect, or provide delivery information.

3. How we use information

We use information to:

• create, authenticate, maintain, and secure your A2B Care account;
• verify your phone number and register your device for requested notifications;
• connect your account with pharmacies after an authorized invitation or request;
• display orders, delivery status, route progress, estimated arrival, pharmacy details, and authorized delivery records;
• support refill-review requests without representing that a refill has been approved or processed;
• provide chat, attachments, notifications, calls initiated by you, Abby, and customer support;
• investigate delayed, missing, returned, or incorrectly delivered packages and preserve delivery evidence;
• detect fraud, misuse, unauthorized access, and security incidents; enforce our Terms; comply with law; and protect users, organizations, drivers, A2B, and the public;
• maintain, troubleshoot, analyze, and improve the Services; and
• send operational communications such as verification codes, delivery updates, invitations, refill updates, chat alerts, and service notices.

Where required, we rely on your consent for device permissions. We may also process information to provide requested Services, comply with legal obligations, and pursue legitimate operational, safety, security, and business interests.

4. Abby and artificial intelligence

Abby is an AI-powered virtual assistant, not a person, doctor, pharmacist, healthcare professional, emergency service, or substitute for professional advice. Abby may use limited account and delivery context authorized for your account to personalize responses. Messages you send to Abby and limited relevant context may be processed by contracted AI and cloud service providers to generate a response.

Do not use Abby for emergencies. Call 911 for an emergency and contact an appropriate licensed professional for medical questions. Do not submit information about another person unless you are authorized to do so. Abby may make mistakes, and you should independently verify important information. We do not use Abby conversations to make automated decisions that determine eligibility for medical care, insurance, employment, credit, or housing.

5. How we disclose information

We may disclose information as reasonably necessary to:

• Connected pharmacies and authorized organizations. A connected pharmacy may access information needed to manage its relationship and its own orders, communications, refill-review requests, and delivery records. A relationship with one pharmacy does not grant access to another pharmacy’s orders.
• Drivers and delivery participants. An assigned driver may receive the name, address, contact information, instructions, and other limited information needed to complete an authorized delivery. You may receive limited driver and route information for your active delivery.
• Service providers. Vendors may process information for cloud hosting, database and file storage, SMS verification, push notifications, address lookup, mapping, real-time messaging, AI responses, diagnostics, support, security, and other infrastructure under applicable agreements.
• Legal and safety purposes. We may disclose information when required by law, legal process, insurance or audit obligations, or when reasonably necessary to protect rights, safety, packages, systems, or the public.
• Business transactions. Information may be transferred in a merger, financing, acquisition, reorganization, bankruptcy, or sale of all or part of a business, subject to applicable law.
• At your direction. We may disclose information when you request or authorize us to do so.

We do not sell personal information for money. We do not use prescription, delivery-evidence, chat, or precise account information for third-party targeted advertising.

6. Data retention

We retain information for as long as reasonably necessary to provide the Services, maintain business and delivery records, resolve disputes, prevent fraud, enforce agreements, and comply with legal, insurance, accounting, safety, and audit obligations.

Order and delivery records—including status, photographs, signatures, timestamps, and location evidence—may be retained after account closure because they document package custody and completed services. Pharmacy relationships, chat, refill-review, support, security, and account records may also be retained where necessary. When information is no longer required, we take reasonable steps to delete, de-identify, or securely isolate it.

7. Your choices and privacy rights

• Profile. You can review and update supported profile and delivery information in the app.
• Notifications, camera, and photos. You can manage permissions in iOS or Android settings. Disabling a permission may prevent the related feature from working.
• Pharmacy connections. You can accept or decline invitations and disconnect a relationship. Historical records remain preserved and another pharmacy’s relationship is not affected.
• Account deletion. You can submit an account-deletion request in Profile. Access is closed as described in the app, while records may be retained as explained above.
• Access, correction, deletion, or appeal. Depending on where you live, you may have additional rights. Contact us using Section 11. We may verify identity and may deny or limit a request where permitted by law.

Authorized agents may submit requests where applicable, subject to proof of authorization and identity verification. We will not discriminate against you for exercising an applicable privacy right.

8. Security

We use administrative, technical, and physical safeguards designed to protect information, including authenticated access, access controls, encrypted network transmission, restricted operational access, logging, and security review. No system can be guaranteed completely secure. Protect your phone and verification codes and notify us promptly if you suspect unauthorized access.

9. Children

A2B Care is intended for adults and is not directed to children under 18. An adult may enter limited family-recipient information only when authorized. We do not knowingly permit a child to independently create an account. Contact us if you believe a child provided personal information without appropriate authorization.

10. Changes to this policy

We may update this Privacy Policy as the Services, technology, or law changes. We will post the revised policy at this URL and update the effective date. When required, we will provide additional notice through the app or another appropriate channel.