Skip to main content

Privacy Policy

Effective Date: 2026-05-04

Cortevi (“Cortevi,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at cortevi.com (the “Site”) or sign up for notifications about at-home tDCS device availability. This Policy also includes a specific Consumer Health Data Privacy Policy governing the collection and handling of health-related data as required by the Washington My Health My Data Act (MHMDA) and the California Consumer Privacy Act as expanded by the California Privacy Rights Act (CCPA/CPRA).

Cortevi is an independent information resource. We do not provide medical evaluation, diagnosis, treatment, prescription services, or medical device fulfillment.

1. Information We Collect

1.1 Information You Provide Directly

When you sign up for launch notifications, we collect:

  • First name
  • Email address
  • Interest in at-home tDCS for depression — this constitutes consumer health data under applicable laws.
  • Consent records documenting your agreement to this Privacy Policy and our Terms of Service.

You are not required to provide this information, but if you do not, we cannot add you to the notification list or notify you when the device becomes available.

1.2 Information Collected Automatically

When you visit the Site, we may automatically collect certain information about your device and usage, including IP address, browser type, operating system, referring URLs, page views, and the date and time of your visit. This data is collected through standard server logs and may use cookies or similar technologies.

2. How We Use Your Information

We use the information we collect to:

  • Maintain and manage the Cortevi notification list;
  • Notify you when the Flow Neuroscience FL-100 device becomes available for prescription in the United States;
  • Send you updates about at-home tDCS for depression, regulatory milestones, and related information;
  • Comply with applicable legal obligations, regulatory requirements, and law enforcement requests;
  • Detect, prevent, and address fraud, security incidents, or technical issues;
  • Improve our Site and services through aggregated, de-identified analytics.

We do not sell your personal information. We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects.

3. How We Share Your Information

We may share your information with trusted service providers who assist us in operating the Site and managing the notification list (such as hosting providers, email delivery services, and analytics providers). These providers are contractually bound to use your information only as directed by us and in compliance with this Policy. We may also disclose your information if required by law, regulation, subpoena, or court order, or to protect the rights, property, or safety of Cortevi, our users, or the public.

4. Data Retention

We retain your notification list information until you request its deletion, until the notification program concludes, or as long as necessary to comply with our legal obligations. Automatically collected analytics data is retained in aggregate form and does not identify individual users.

5. Data Security

We implement and maintain reasonable administrative, technical, and physical safeguards designed to protect your information against unauthorized access, alteration, disclosure, or destruction. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

6. Children’s Privacy

Cortevi is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that a child under 18 has provided us with personal information, we will delete it promptly.

7. Your Rights Under State Privacy Laws

7.1 CCPA/CPRA Rights (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA), as expanded by the California Privacy Rights Act (CPRA), grants you the following rights:

  • Right to Know: You may request that we disclose what personal information we collect, use, and disclose (we do not sell personal information).
  • Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
  • Right to Correct: You may request correction of inaccurate personal information.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

To exercise these rights, please contact us at [email protected]. We will verify your identity before processing your request. You may designate an authorized agent to make a request on your behalf.

7.2 Washington My Health My Data Act (MHMDA) Rights

If you are a Washington resident or if your consumer health data is collected in Washington, the My Health My Data Act grants you the following rights with respect to your consumer health data:

  • Right to Confirm: You may request confirmation of whether we collect, share, or sell your consumer health data.
  • Right to Access: You may request a list of all third parties and affiliates with whom we have shared or sold your consumer health data and an active email address or other online mechanism for contacting those entities.
  • Right to Withdraw Consent: You may withdraw your consent to our collection and sharing of your consumer health data at any time.
  • Right to Delete: You may request deletion of your consumer health data.

To exercise these rights, contact us at [email protected]. We will respond within 45 days as required by the Act. These rights are described in more detail in the Consumer Health Data Privacy Policy below.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated Policy on this page and updating the effective date. Your continued use of the Site after any changes constitutes acceptance of the updated Policy.

9. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at:

Email: [email protected]

Website: https://cortevi.com

Mailing address: 30 N Gould St Ste N, Sheridan, WY 82801, USA

Consumer Health Data Privacy Policy

This section supplements the general Privacy Policy above and specifically governs consumer health data collected through the Cortevi notification list, in compliance with the Washington My Health My Data Act (MHMDA) and other applicable state health privacy laws.

A. Categories of Consumer Health Data Collected

Through our notification list, we collect the following categories of consumer health data: your first name, your email address, and information indicating your interest in at-home tDCS for depression. This data, when linked to you as an individual, constitutes consumer health data because it identifies you and relates to your interest in a health condition and treatment.

B. Purposes of Collection and Use

We collect and use your consumer health data for the following purposes:

  • Notification list management — to maintain your place on the list and notify you in the order registrations are received.
  • Launch notifications — to notify you when the Flow Neuroscience FL-100 device becomes available for prescription in the United States.
  • Information updates — to send you updates about at-home tDCS for depression, regulatory milestones, and related information.

We do not collect, use, or share consumer health data for any purpose not listed above without first obtaining your separate, affirmative consent.

C. Sources of Consumer Health Data

We collect consumer health data directly from you when you submit the notification signup form on our Site. We do not purchase, license, or otherwise obtain consumer health data from third-party data brokers or aggregators.

D. Categories of Consumer Health Data Shared

We may share your consumer health data with service providers who assist in operating the Site, managing the notification list, and delivering email notifications. These service providers are contractually restricted from using your data for any purpose other than providing services to Cortevi. We do not sell your consumer health data to any third party.

E. Your Rights Under MHMDA

Under Washington’s My Health My Data Act, you have the right to:

  • Confirm whether we collect, share, or sell your consumer health data and to access that data.
  • Withdraw consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.
  • Delete your consumer health data from our records.

To exercise any of these rights, email us at [email protected]. We will respond to verified requests within 45 days. If we deny your request, we will provide a written explanation. You may appeal a denial by replying to our response.

F. Data Retention Schedule

We retain your consumer health data until you request its deletion, until the notification program concludes, or as long as necessary to satisfy our legal and regulatory obligations. Upon a verified deletion request, we will remove your identifiable consumer health data within 45 days.

For questions specifically regarding this Consumer Health Data Privacy Policy, contact [email protected].