Plain language, from the beginning.

Scope of this notice

This notice describes the personal information SignPost Health collects through its prelaunch website, interest forms, educational tools and events, and authorized member, affiliate, and contributor or administrative accounts. Public membership enrollment is not open yet; account features are for people who have been granted access. This notice does not cover a separate clinical portal or care delivered by a licensed clinical partner. Those services will provide their own notices and consent materials before clinical information is collected.

Information you choose to provide

If you join the launch list, we collect your email address, optional first name, consent date, and registration source. We use this information to send the launch and educational communications you requested, manage the list, and understand interest in SignPost Health.

If you join the Professional Network interest list, we collect the name, professional email, role, primary state, optional website or professional profile, optional interest statement, consent date, and registration source that you submit. We use it to evaluate interest in and communicate about the developing network. An expression of interest is not an employment or contractor application and does not guarantee acceptance.

If you apply to the affiliate program, we collect your name, email, optional phone number, optional website or social profile, intended promotion method, audience description, promotion plan, consent date, training and agreement status, and program status. Approved affiliates also receive a unique referral code. Affiliate records must not contain member health or clinical information.

Sign-in, accounts, and operational records

If you request account access or a sign-in link, we process your email address to check access and, for an eligible account, send a password-free sign-in email through Supabase authentication and its configured email delivery service. Authentication uses an account identifier and browser cookies to complete sign-in and maintain your session. Some sign-in screens also keep a short request-cooldown timestamp in browser storage.

Member access records can include your email, first name, account identifier, membership or preview-access status, plan and access dates, and non-clinical external references used to reconcile access. We also store optional email category preferences and their update dates. We process affiliate training answers to score the assessment and keep assessment results, agreement acceptance, approval status, referral attribution, and commission records. Authorized contributor and administrative accounts include role and access details; operational changes may be recorded with the actor, action, affected record, and time in an audit trail. Contributor names and bylines may appear on published resources.

Optional member nutrition tracker

If you use the nutrition tracker, we store food and saved-meal names, serving descriptions and amounts, calorie and macronutrient values, diary dates and completion status, favorites, optional goals, display preferences, and creation dates against your account. Nutrition records are health-related personal information. We use them to restore your diary across devices and calculate the summaries you request. These records are not published to the community or made available through professional-network accounts, and are not used for advertising or referral attribution.

Food database searches send your search words to USDA FoodData Central through our server; we do not send your account identifier, diary, goals, or membership details to USDA. Values you select from USDA are saved with a food-source identifier. Barcode lookup sends only the product number through our server to Open Food Facts. Camera images are decoded on your device and are not uploaded or stored. Selected product values and their barcode are stored in your private diary, with source attribution. Manual entries and favorites do not require a USDA search. The tracker does not keep food logs in local browser storage. Your browser may retain an export you download.

You can delete individual diary entries and favorites in the tracker, clear optional goals, and export the seven days displayed in the review. Records remain until you remove them or request deletion. Contact Privacy@SignPostHealth.com for a full export or tracker deletion request. Deleted records may remain in provider backups until those backups expire; see the retention information below. Keep medical histories, symptoms, diagnoses, and medication information out of food descriptions.

Member streaks, check-ins, and badges

We record calendar days when you visit while signed in, your selected time zone, optional water and sleep goals and check-ins, weekly reflection check-ins, resources you mark as read, and earned badges. We also use your completed food diaries, approved wins, encouragement reactions, and staff-confirmed event attendance to calculate milestones. Goals are self-selected; these features do not prescribe targets or measure medical outcomes. Check-ins retain the goal recorded with them; later changes do not rewrite earlier days.

These records and badges are private to your account and are not added to the public Wins board, advertising, or referral attribution. Records remain until removed or you request deletion. Earned badges remain through breaks and later edits unless you request their removal. Contact Privacy@SignPostHealth.com for access, full export, correction, or deletion.

Compass choices and browser-based tools

The public Compass preview uses predefined educational pathways. Unsaved answers stay in the current page and are not submitted as a Compass route. If you have authorized member access and choose to save a route, we store your selected priority, type of help, readiness, current focus, and creation and update dates against your account. The route contains fixed choices, not a free-text medical history, diagnosis, or treatment plan. These choices can still reflect health-related interests. We use them to restore the route in your member experience. Joining the email list does not save your route.

The coverage calculator, meal planner, and employer planning tools process entered numbers and selections in your browser rather than submitting those entries to SignPost. You can use hypothetical values. The meal planner keeps your grocery-price overrides in local browser storage until you reset them or clear that storage. Its area and meal selections, and the other tools' entries, remain in the current page. Loading a tool still involves the technical page-request information described below. Copy and print actions place the content in your clipboard or your chosen print destination.

Educational events and webinars

When event registration is available, we process registration details such as your name, email, selected event, registration status, contact consent and timestamps, and, for members, your account identifier. We use this information to reserve places, control admission, and send event confirmations, reminders, or schedule-change messages. We also keep delivery-status records so failed messages can be addressed. Event-related messages are separate from optional newsletter subscriptions.

If you join a webinar hosted through Daily, we provide Daily with an event-room identifier, your account identifier and display name, and admission permissions. Daily processes connection and device information, and the audio, video, screen sharing, or chat you choose to use, to provide the session. Other participants may see or hear what you share. Events are educational; do not share private medical or patient information. Any recording should be explained in the event-specific notice before you participate.

Campaign, browser, and technical information

To understand which outreach efforts are useful, the site saves a random first-visit identifier and limited campaign information in your browser. If you submit a form, we may store that identifier with campaign labels from the link you followed, the first SignPost page path you visited, and the referring site's domain. We do not use it to follow you across unrelated websites.

Our hosting and security providers may automatically process standard technical information needed to deliver and protect the site, such as an IP address, browser or device information, requested pages, timestamps, and diagnostic or security logs. Member, affiliate, contributor, and administrative areas use essential authentication and session technology when an authorized person signs in.

The homepage loads a typeface from Google Fonts. Your browser requests its stylesheet and font files from Google, which receives standard connection information such as your IP address and browser details. This font request does not submit your form entries or Compass choices.

If you follow an affiliate link or enter an affiliate code, SignPost stores the first valid referral in an essential, HTTP-only browser cookie for up to 90 days. Later links or codes do not replace it. We also count a unique link visit using a random browser token; this affiliate event does not store your IP address, user agent, name, email, or health information. If you later register as a member, the affiliate attribution is attached once to your internal account identifier so the referral cannot be claimed twice.

Please do not submit health information

The public forms are not clinical intake forms and are not monitored for care requests. Do not submit symptoms, diagnoses, medications, laboratory results, patient information, or other health information. When clinical services are available, clinical information will be handled separately through the designated clinical experience.

This website is not an emergency service. Call 911 or go to the nearest emergency department if you may be experiencing a medical emergency.

How we use information

We use the information described above to:

• provide requested updates and respond to inquiries
• operate, secure, troubleshoot, and improve the website
• measure the effectiveness of our own outreach
• maintain consent and suppression records
• manage authorized access, saved Compass routes, and email preferences
• operate educational events and affiliate or contributor programs
• comply with law and protect rights, safety, and site integrity

How information is disclosed

We do not sell personal information submitted through this prelaunch website. We may disclose limited information to service providers that help us operate the site and communications, including Vercel for hosting, Supabase for database, storage, and account authentication services, Resend for email-list management, submission confirmations, and event messages when enabled, and Daily for webinars you choose to join. The homepage also uses Google Fonts as described above. Authentication emails use Supabase's configured delivery service. These providers process information on our behalf for the services they provide.

We may also disclose information when reasonably necessary to comply with law, respond to lawful process, protect people or the service, investigate abuse, or complete a reorganization or transfer of the business subject to appropriate protections. We may disclose information at your direction or with your consent.

Retention and security

We retain information while it is reasonably needed for the purposes described above, including to honor unsubscribe requests and meet legal, security, and recordkeeping obligations. Retention periods may differ by record type. We use administrative, technical, and organizational safeguards designed to protect information, but no online service can guarantee absolute security.

Your choices

You may unsubscribe from launch and educational emails at any time using the unsubscribe link in an email. You may also ask to access, correct, or delete information you submitted through the prelaunch site by contacting us. We may need to verify a request and may retain limited information when required or permitted by law, including a suppression record needed to honor an opt-out.

You can clear the first-visit information stored in your browser through your browser settings. Clearing it may cause a new random identifier to be created on a later visit.

Members with access can change optional email categories in their member preferences. Essential account and event-registration messages are handled separately. In Compass, an authorized member can select “Erase saved route” to remove the saved route from the active member experience. Starting again or pausing a route does not erase it. If you no longer have access, contact us to request removal. Erasing a route does not delete your account, registration, or referral records.

Use “Reset my prices” in the meal planner to remove its saved price overrides, or clear this site's browser storage. Clearing session cookies signs you out; clearing local storage does not delete records held on our servers. Contact us for account or other server-held information requests.

You may also clear an affiliate referral cookie through your browser settings before registering. Once a valid referral is attached to a member account, it is retained as a financial and fraud-prevention record and can be corrected only through a documented administrative process.

Children's privacy

This prelaunch website is not directed to children under 13, and we do not knowingly collect personal information from children under 13 through its forms. A parent or guardian who believes a child submitted information may contact us to request deletion.

Changes to this notice

We may update this notice as the website and our practices develop. We will post the revised notice here and change the effective date. If a change materially affects how we use information already collected, we will provide additional notice when appropriate.

Contact

Privacy questions and requests may be sent to privacy@signposthealth.com. General questions may be sent to info@signposthealth.com.