Lemur PBC · HIPAA Covered Entity

HIPAA Notice of Privacy Practices

This Notice describes how Lemur PBC may use and disclose your protected health information (PHI) when you use the QwikCare app to complete a 10 USD medical encounter for a one-year COVID-19 vaccine prescription. It also describes your rights and our responsibilities under the Health Insurance Portability and Accountability Act of 1996 (HIPAA).

Effective Date: January 1, 2025

Our Commitment to Your Privacy

Lemur PBC is a HIPAA-covered healthcare provider. We provide medical evaluations through QwikCare to determine whether a COVID-19 vaccine prescription is clinically appropriate. We are legally required to:

Maintain the privacy and security of your protected health information (PHI).
Provide you with this Notice of our legal duties and privacy practices.
Follow the terms of the Notice that is currently in effect.
Notify you if a breach occurs that may have compromised your PHI.

How We May Use and Disclose Your Health Information

HIPAA allows Lemur PBC to use or disclose your PHI for certain purposes without your authorization. These uses are essential for delivering clinical care, issuing prescriptions, and operating the QwikCare service.

1. Treatment

We use PHI to evaluate your medical history, review your screening responses, and determine whether it is medically appropriate to issue a one-year COVID-19 vaccine prescription. We may also share PHI with:

Lemur PBC physicians and nurse practitioners involved in your care.
Pharmacies administering your COVID-19 vaccination when you present your prescription.
Other healthcare providers involved in your care, if you ask us to coordinate with them.

2. Payment

Your QwikCare encounter is paid directly by you (10 USD). If you later choose to request reimbursement or allow us to coordinate with a health plan, we may disclose the minimum PHI necessary to process claims consistent with HIPAA.

3. Healthcare Operations

We may use PHI to improve services, maintain quality, train clinical staff, and ensure regulatory compliance. When data is used for analytics, it is de-identified whenever possible.

4. When Required by Law

We may disclose PHI to comply with federal or state law, court orders, public-health reporting obligations, or governmental requests authorized by law.

5. Business Associates

We may share PHI with vendors who assist in providing secure technology services (such as messaging, hosting, or electronic prescribing). These partners are bound by Business Associate Agreements (BAAs) requiring HIPAA-compliant safeguards.

Your Rights Under HIPAA

You have the following rights regarding your PHI. These rights may be exercised by contacting Lemur PBC using the information at the bottom of this page.

Right to Access. You may request copies of your medical record, encounter summaries, or prescription information.
Right to Amend. You may request corrections to your PHI if you believe it is incomplete or inaccurate.
Right to Restrict Uses and Disclosures. You may request limits on certain uses or disclosures, where allowed by law.
Right to Confidential Communications. You may request that we communicate with you using a specific method (e.g., email, phone, secure text).
Right to an Accounting of Disclosures. You may request a list of certain disclosures of your PHI.
Right to Receive a Paper or Electronic Copy of This Notice.

Special Information for QwikCare Users

Prescription PDFs Stored on Your Device

When a Lemur provider issues a COVID-19 prescription, the signed PDF is delivered directly to your device. You control the file. We do not distribute prescription PDFs for marketing or non-clinical purposes.

Apple Health (Optional)

If you sync QwikCare vaccine records with Apple Health, the data is governed by Apple’s HealthKit policies. You may revoke access at any time within your iPhone settings.

Identity & Fraud Prevention

To prevent misuse of medical credentials, we may use name, date of birth, and device integrity checks to verify your identity and ensure prescriptions are validly associated with the correct patient.

Uses and Disclosures Requiring Your Written Authorization

Lemur PBC will never use or disclose your PHI for:

Marketing or advertising by third parties
Sale of patient data
Most sharing of psychotherapy notes

Any such activity would require your explicit written authorization, which you may revoke at any time.

Changes to This Notice

We may update this Notice as laws or QwikCare services evolve. Updated versions will always be available within the QwikCare app and on our website.

Contact Us

To ask questions, request your records, or exercise your HIPAA rights, contact Lemur PBC at:

Email (privacy): privacy@lemurpbc.com
Email (clinical support): prescriptions@lemurpbc.com