Hims & Hers Privacy Policy

This document is the Hims & Hers Health, Inc. Privacy Policy governing data collection, use, and disclosure across the hims.com and forhers.com platforms and associated mobile applications, with stated legal basis grounded in user acknowledgment upon account creation or service access. The policy authorizes collection of an extensive range of personal information including government-issued identifiers, biometric data, health data, sexual orientation and sex life information, geolocation, browsing activity on health-related pages, and communications content, and the terms authorize disclosure of sensitive personal information including health data and sexual orientation data to marketing and advertising partners where such information does not qualify as Protected Information under applicable law. The document explicitly states that sensitive personal data including health data and sexual orientation information may be sold as defined under state privacy laws, and authorizes sharing of transaction data with third parties under an irrevocable, perpetual, universe-wide license grant; the policy also states that de-identified data may be used to train AI models, and that the Do Not Track browser signal is not honored. The policy engages HIPAA, CCPA and other U.S. state privacy laws, COPPA, and potentially the FTC Act, with the company expressly noting it is not a HIPAA covered entity but may operate as a business associate in some contexts, creating jurisdictionally variable compliance obligations across its telehealth, pharmacy, and consumer product functions. Material compliance considerations include the adequacy of consent mechanisms for sensitive personal information use in advertising, the scope of the data sale notice and opt-out mechanisms, the treatment of health-related browsing data shared with ad partners, and the operational boundary between Protected Information and non-protected personal information as drawn by this policy.