Tuly is in development and not yet accepting members or payments. This policy describes the practices we are building toward. Have it reviewed by qualified privacy counsel before you begin collecting real user data at launch.
Privacy Policy
Last updated: September 21, 2026
This Privacy Policy explains how Tuly Health (“Tuly,” “we,” “us”) collects, uses, shares, and protects information when you visit our website, join our waitlist, or use our products and services (together, the “Services”). Because Tuly is a women's health service, some of the information we handle is sensitive, and we treat it with heightened care.
1. Information we collect
Information you provide
- Contact & account details — name, email address, and password when you join the waitlist or create an account.
- Profile & health inputs — cycle dates, symptoms, notes, goals, and other information you choose to log in the app.
- Testing & care information — details related to at-home tests and clinical services you request, where those become available.
- Communications — messages you send us and your newsletter or marketing preferences.
Information collected automatically
- Device & usage data — IP address, browser and device type, pages viewed, and interactions, collected through cookies and similar technologies.
- Approximate location — derived from your IP address for security and regional content.
Information from third parties
- Service providers who help us operate the Services (for example, hosting, analytics, and email).
- Laboratory or clinical partners involved in testing and care, where applicable and with appropriate safeguards.
2. Sensitive health data
Reproductive and sexual-health information is sensitive. We collect it only to provide features you ask for, we do not sell it, and we apply additional access controls. Where the law requires it (for example, certain U.S. state privacy laws or GDPR special-category rules), we rely on your consent to process this data and you can withdraw that consent at any time. Note that information you log in Tuly for wellness tracking is generally not the same as records held by a HIPAA-covered provider; where clinical care is involved, those records may be governed by separate provider notices.
3. How we use information
- Provide, personalize, and improve the Services and your experience.
- Create and secure your account and authenticate you.
- Communicate with you about updates, waitlist status, and support requests.
- Send newsletters or marketing where you have opted in; you can opt out anytime.
- Understand aggregated, de-identified usage to improve features.
- Detect, prevent, and address fraud, abuse, and security issues.
- Comply with legal obligations and enforce our terms.
4. Legal bases (EEA/UK)
Where GDPR or UK GDPR applies, we process personal data on the basis of your consent, the performance of a contract with you, our legitimate interests in operating and improving the Services, and compliance with legal obligations. For special-category health data, we rely on your explicit consent.
5. How we share information
We do not sell your personal information. We share it only as described here:
- Service providers under contract who process data on our behalf (hosting, analytics, email delivery, payment processing) and may only use it to provide those services.
- Clinical & testing partners when you request testing or care, limited to what is needed to deliver it.
- Legal & safety when required by law or to protect the rights, safety, and security of users, the public, or Tuly.
- Business transfers in connection with a merger, acquisition, or sale of assets, subject to this policy.
6. Cookies & tracking
We use strictly necessary cookies to run the site and, with your consent, analytics and marketing cookies. You can review categories and change your choices at any time through our Cookie Policy or by opening .
7. Data retention
We keep personal data only as long as needed for the purposes above, to comply with legal obligations, resolve disputes, and enforce agreements. When data is no longer needed, we delete or de-identify it. You can ask us to delete your account data as described below.
8. Your rights & choices
Depending on where you live, you may have the right to access, correct, delete, or export your personal data; to object to or restrict certain processing; and to withdraw consent. U.S. state residents may have rights to know, delete, correct, and opt out of the sale or sharing of personal information and targeted advertising — Tuly does not sell personal information. To exercise any right, contact us at privacy@tulyhealth.com. We will not discriminate against you for exercising your rights, and you may appeal a decision by replying to our response.
9. Security
We use administrative, technical, and physical safeguards designed to protect your information, including encryption in transit, access controls, and least-privilege practices. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
10. Children
The Services are intended for adults and are not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us information, contact us and we will delete it.
11. International transfers
We are based in the United States and may process data there and in other countries. Where required, we use appropriate safeguards (such as standard contractual clauses) for cross-border transfers.
12. Changes to this policy
We may update this policy from time to time. We will post the new version here and update the “Last updated” date, and for material changes we will provide additional notice where appropriate.
13. Contact us
Questions or requests? Email privacy@tulyhealth.com or write to us at:
Tuly Health
265 Denison Drive
Mount Pleasant, MI 48858