Privacy Policy

Important Ameriplan information

Ameriplan membership plans are not insurance. They provide access to healthcare savings, services and participating-provider programs according to the applicable membership.

GNO Holdings, Inc dba Ameriplan (AmeriPlan, we or us) respects your privacy. This Policy describes information handling for our membership administration, company-operated websites and account tools, company-hosted BC pages and related communications. It applies to visitors, applicants, Members, eligible household users and BCs. Independent healthcare providers and other vendors may issue their own privacy notices for services they control.

It is not a HIPAA Notice of Privacy Practices and does not establish that every AmeriPlan activity is covered by HIPAA. Applicable privacy laws and service-specific notices govern their respective information and activities. This notice does not request blanket consent or waive your privacy rights.

Collection of your information

We collect information you give us, information generated through your account or interactions, and information provided by authorized household representatives, BCs, benefit vendors and payment or account service providers as needed for the relationship. The categories below describe information associated with the service you use; not every category applies to every person.

Personal and account data

Contact and identification information includes name, postal and email address, telephone number, member or BC identifier and account credentials. Enrollment and household records may include date of birth, eligibility information, household relationships, selected plan, status, authorizations and communication preferences. Adults use separate credentials where individual access is required.

BC business records may include an SSN or Tax ID, business ownership and signer information, sponsorship, sales and commission records, payout instructions and tax reporting information. Consumer rights may apply differently to information used solely in a business or employment context.

Financial data

Membership and payment records may include billing address, payment method details provided through the approved payment process, transaction references, recurring-payment authorizations, charges, refunds and payment disputes. Provide payment information only through an approved secure channel. Payment processing and retention are limited to authorized business purposes and applicable security requirements.

Support surveys and promotions

We may maintain chat or email messages, complaint details and records of your requests and our responses. If you enter a promotion, complete a survey, submit a provider referral or authorize a testimonial, we process information you supply for that activity under its stated terms. A public testimonial or recognition post requires the appropriate permission; enrollment alone is not permission to publish a private health or earnings story.

Digital data health information and uses

Derivative data and tracking technologies

Company-operated digital services may generate IP address, browser or device information, access times, visited pages, session or security identifiers, error records and approximate location inferred from an IP address. Cookies or similar tools may support sign-in, saved preferences, security and measurement. Their availability depends on the particular website or app.

You can use browser or device controls to manage cookies and permissions; disabling required tools can affect sign-in or functionality. A provider’s app may separately request a camera, microphone or location permission for a consultation. Permission to use one feature does not authorize unrelated advertising or ongoing location tracking. See the choices section for legally protected opt-outs. We do not treat a visit or continued browsing as consent to processing that requires affirmative consent.

Health and service information

AmeriPlan may receive identifiable health-related information when you ask for benefit access, help with a provider problem, a bill review or another membership service. It may include the concern you report, a requested service, provider details, a submitted bill, benefit eligibility and assistance records. This does not mean AmeriPlan receives every clinical record, prescription or counseling note maintained by a vendor.

Clinical histories, consultations, prescriptions and test results submitted directly to a healthcare provider or its app are governed by that provider’s applicable notice and law. Ask the provider for access to its medical records. The consumer health data notice below explains AmeriPlan’s handling of health data within its scope. Send clinical documents through the designated secure service, not to an upline, a public chat or a general marketing form.

Use of your information

We use relevant information to establish and administer accounts; verify eligibility and authority; provide requested benefits and access instructions; process authorized payments, refunds and BC payouts; answer support requests; investigate complaints and suspected misuse; maintain service and security; meet tax, regulatory and recordkeeping duties; and establish or defend lawful claims.

We may use contact information for permitted updates, training and marketing subject to your choices and required consent. Promotions, testimonials and recognition use the permissions applicable to that activity. We do not use sensitive health details as general marketing material. A materially different use requiring consent will be explained before that use begins.

We use only information reasonably needed for the stated purpose. Where we create deidentified information, we take reasonable measures to prevent association with an individual and do not attempt to reidentify it except as law permits to test whether the deidentification safeguards work. Recipients must maintain applicable safeguards.

Disclosure of your information

Employees and service providers

Authorized personnel and providers of hosting, account administration, payments, communications, customer support, security and other necessary operations may receive relevant information to perform their work. Access is limited by role and purpose, and service-provider arrangements must include applicable privacy and security restrictions. Payment or identity providers may also have obligations and notices of their own.

Benefit providers and requested services

We may disclose account identity, eligibility, contact details and the information needed to activate or support a benefit to the relevant dental network, pharmacy program, telehealth or other benefit provider. Health information is disclosed only with required authorization or consent, or as otherwise permitted or required by law. Service providers may independently collect information directly from you.

You can use one benefit without authorizing unrelated vendors to receive your entire health history. A household account does not give every household member access to another adult’s clinical records. A representative requesting access must establish appropriate authority, subject to minor-consent and other applicable law.

Benefit Consultants and sponsors

A BC assisting with enrollment or member support may receive limited contact, enrollment or status information needed for the authorized task. Sponsorship and compensation administration may involve business identity, qualifying activity and commission records. This is not permission to provide sponsors with payment credentials, an SSN, diagnoses, prescriptions, counseling records or copies of member bills. BCs must use information only for authorized AmeriPlan business and protect it under the Policies and Procedures.

By law or to protect rights

We may disclose information to comply with a valid legal obligation, cooperate with an authorized investigation, address fraud or security threats, or establish or defend rights, only as permitted by applicable law. We assess the request, authority and appropriate scope. This provision does not create an unrestricted right to disclose sensitive information or prevent you from exercising protected rights.

Business transfers

A lawful merger, reorganization or transfer of business operations may require disclosure to professional advisers or a successor subject to applicable safeguards and notice requirements. A transaction does not by itself erase commitments made about your information or authorize a materially different use without required notice or consent. Common ownership of AmeriPlan and another business does not by itself authorize unrelated use of member data.

Sale advertising and public disclosures

AmeriPlan does not sell personal information collected through its websites to an outside source. This commitment must be applied using any broader definition of sale under applicable law, rather than only an exchange for cash. Consumer health data is not authorized for sale or targeted advertising under this Policy.

If an activity is legally treated as sale, sharing for cross-context behavioral advertising or other targeted advertising, applicable notices, consent and opt-out requirements must be satisfied before that activity occurs. You may submit an opt-out request as described below. Posting or participating in a public event can make your voluntary public statements visible to others; do not disclose private information about another person.

Security retention and your choices

Security of your information

We maintain reasonable administrative, technical and physical measures appropriate to the information and risks, including access restrictions and instructions for authorized users. No system or transmission is completely secure. We do not promise an impenetrable system or represent that a particular certification covers every service. If a legally reportable incident occurs, we provide the notices required for the information and circumstances.

Protect your login and device, use available multifactor authentication and report suspected account misuse through support. Do not put passwords, complete financial credentials, SSNs or medical records in an ordinary email or public message. Support will explain an appropriate verification or secure transfer process.

Retention of information

We retain information for the period reasonably needed to provide the requested service, maintain the account, comply with tax and other legal requirements, resolve disputes, prevent fraud and meet valid legal holds. The period depends on the record type, purpose and required retention period. We then delete, deidentify or securely dispose of information under applicable procedures. Cancelling a membership does not necessarily require immediate deletion of every transaction or legal record.

Account information and privacy requests

You may review or update available account information through your portal or support. To request access, correction, deletion, a portable copy, a privacy opt-out or withdrawal of consent, email complaints@ameriplanusa.com, use ameriplanusa.com/support or write to the Privacy Request contact at the Houston address below. State the right requested and provide enough information to locate the relevant record. Do not send sensitive identity documents until we provide a secure process. You need not open a new account to make a request.

We verify identity and authority proportionately where required and request only information reasonably needed. An authorized agent may act where law permits; we may require proof of authority and any legally permitted direct confirmation. We explain applicable exceptions, including records we must retain. A request to delete data and a request to cancel paid membership are distinct; tell us if you want both.

Emails communications and browser controls

Use the unsubscribe instructions in marketing messages or contact support to stop marketing communications. Service messages needed for an active account may continue. Opting out of marketing does not authorize continued charges after cancellation. Where consent is required for marketing calls or texts, it is collected separately and may be revoked through a reasonable method.

Where applicable law requires, we recognize an authorized opt-out preference signal, such as Global Privacy Control, for the processing and browser or account to which it can lawfully be applied. A generic Do Not Track setting is different from a legally recognized opt-out signal; this Policy does not promise that every browser signal controls every service. Contact us if you need help applying an opt-out across accounts or devices.

Text messages

We do not sell or share mobile phone numbers, or text-message opt-in data and consent, with third parties or affiliates for their marketing or promotional purposes. Message frequency varies. Message and data rates may apply. Reply STOP to stop texts at any time, or HELP for help.

Children and household users

Our general marketing and enrollment tools are intended for adults, but eligible children may receive household benefits through a parent or other authorized person. We collect only information needed for that purpose and obtain parental consent or other authorization where required. Children should not independently submit sensitive information through general website forms. Parents may contact us about a child’s information, subject to clinical confidentiality and other applicable rights. If we learn of unauthorized collection, we take the action required by law.

State rights and consumer health data

Options regarding your information

Depending on your residence, the information and the law’s coverage, you may have rights to know or access data, correct it, delete it, obtain a portable copy, opt out of sale, targeted advertising or certain significant profiling, limit specified sensitive-data uses, withdraw consent and appeal a denial. We do not unlawfully discriminate or retaliate for a rights request. Some benefits cannot be provided without information necessary to deliver them.

For a covered Texas consumer request, we respond without undue delay and generally within 45 days; a necessary extension of up to 45 additional days is explained within the initial period. Applicable law controls different periods and exceptions. If we deny a request, we give the reason and appeal instructions. Send an appeal through the same channels with “Privacy Appeal.” For a Texas appeal we provide a written result within 60 days and, if denied, explain how to complain to the Texas Attorney General at texasattorneygeneral.gov.

California residents, where the CCPA applies, may request access or knowledge, correction, deletion, an opt-out of sale or sharing, and limitations on qualifying sensitive-information uses. They may use an authorized agent subject to verification requirements. Applicable notices at collection and state supplements govern the specific data and practices. California residents may also request applicable direct-marketing disclosure information under California Civil Code section 1798.83. We apply the rights and exceptions required for the information and activities involved.

Consumer health data privacy notice

This section covers identifiable consumer health data handled by AmeriPlan outside a separately applicable clinical privacy notice. Subject to the service requested, categories may include health concerns you voluntarily report, requested benefits, provider and appointment details, submitted medical bills and assistance or eligibility records. Sources are you, an authorized representative and the provider or benefit service involved in your request. We use that data to provide and support the requested service, address a complaint, maintain security and meet lawful obligations.

We share only relevant categories with the service providers and benefit providers needed for the requested task, authorized representatives and legally permitted recipients described above. No disclosure to a sponsor for recruiting or unrelated marketing is authorized. We do not authorize sale of consumer health data or its use for targeted advertising. Required consent for collection or sharing is separate from general acceptance of website terms; required written authorization for any otherwise lawful sale cannot be replaced by this Policy.

Use the privacy request channels to ask about health data, obtain access, request deletion or withdraw consent to collection or sharing, and appeal a denial where law provides. Withdrawal does not undo lawful earlier processing, and we explain any permitted retention or effect on a requested service. A provider may maintain separate records; we help direct you to the responsible provider. Applicable state health-data law controls additional rights and restrictions.

Third party websites and policy changes

Links and separate provider apps have their own notices for information they control. Review them before sharing sensitive information. A link does not waive AmeriPlan’s duties for its own processing. We post the approved revision date and give additional notice or obtain consent before a change where required. A website update does not retroactively authorize an incompatible use or replace a required affirmative consent.

Questions and privacy requests

• GNO Holdings, Inc dba Ameriplan
• 800 Town and Country Blvd Ste 500, Houston, Texas 77024
• Support: ameriplanusa.com/support | Monday–Friday, 9 a.m.–4 p.m. Central
• Billing: bcc@ameriplanusa.com | Cancellation: cancel@ameriplanusa.com
• Complaints and privacy: complaints@ameriplanusa.com

Questions about this?

Email customersupport@ameriplanusa.com, or ask our AI assistant.