Last Updated: November 5, 2026
Welcome to AI Coaching Inc., d/b/a Gala GLP-1 (“Gala GLP-1,” “we,” “us,” or “our”). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal and health information when you use our telehealth platform, website, mobile applications, and related services (collectively, the “Services”).
AI Coaching Inc., d/b/a Gala GLP-1, operates the services branded as Gala, Gala GLP-1 and Gala Health at galaglp1.com and galahealth.co. References to Gala, we, us or our mean AI Coaching Inc. This document applies to those services on both domains.
Personal Information: This may include your name, contact details, date of birth, and payment information (if applicable). Identity and transaction information may also include your address, account identifiers, identity-verification details, purchases, plan selection, billing status, payment token and fulfillment information; payment-card data may be processed by a payment provider.
Health Information: Details about your medical history, symptoms, treatment plans, prescriptions, and other data shared with or generated by healthcare providers.
Usage Data: We collect technical information like IP addresses, device type, and browsing activities via cookies or similar technologies. Usage data can include referral URLs, page views and interactions, which may reveal or imply treatment interests.
Communications: If you contact us or respond to our communications, we may retain those messages and any accompanying data. Communications may also include support tickets, emails and AI-generated summaries of calls. We also keep inferences and preferences, such as service interests, account preferences, and security and fraud indicators.
Provide Telehealth Services: We share your health information with licensed providers and partner pharmacies to facilitate consultations, diagnoses, and prescriptions if medically appropriate.
Communications: We may contact you about appointments, follow-ups, or updates to our Services.
Service Improvements: We use your information, including call recordings, transcripts and messages, to operate, secure and improve the Services, and we may use aggregated or de-identified data for analytics and to improve clinical outcomes.
Legal Compliance: We may use your data as required by law or to respond to valid legal requests. Sources include you, your device and browser, licensed providers and pharmacies where lawfully shared, payment and communication vendors, and partners you authorize. We also use information to manage subscriptions, protect systems, prevent fraud and conduct quality assurance. We limit personnel and vendor access to authorized purposes.
Healthcare Providers: We share relevant data with the licensed providers who deliver telehealth services through our platform.
Partner Pharmacies: If a prescription is issued, necessary information is shared with partner pharmacies for dispensing.
Service Providers: We use third-party vendors for IT support, analytics, or payment processing; they must protect your information under confidentiality agreements.
Advertising Partners: We use cookies, pixels and similar tools from advertising partners such as Meta, TikTok and Google to measure advertising, build audiences and personalize ads. These partners may receive information about your visits to our pages, including pages about specific treatments, and a one-way hashed version of details such as your email address or phone number. Hashing alone does not make information anonymous. Where configured, these technologies can receive page URLs, device or cookie identifiers and IP addresses. Browser controls may block some cookies. You may request information about your choices at team@galaglp1.com.
Legal Requirements: We may disclose information to comply with legal obligations or protect our rights, users, or the public. Information may also be disclosed to laboratories, professional advisers and authorities with lawful process. Contractual safeguards, access limits and HIPAA business associate agreements are used where required.
We implement administrative, technical, and physical safeguards to protect your personal and health information. While we strive to maintain a secure environment, no system is 100% impenetrable. If a security incident affects your information, we will notify you and the authorities where the law requires it, including under HIPAA or the FTC Health Breach Notification Rule where applicable. We investigate suspected incidents.
We retain your information only as long as necessary to fulfill the purposes outlined in this Policy or as required by law. We may retain de-identified data for research or statistical purposes beyond this period. We retain information for purposes including clinical coordination, account administration, legal obligations, audit evidence, fraud prevention and disputes. Specific periods depend on record type and applicable medical, tax, consumer and privacy law; this Policy does not promise immediate deletion of records legally required to be retained.
What we collect: your phone number, whether you agreed to receive texts, opt-out requests, the content of text messages you send and receive, call details (time, duration, number), and, when a call is recorded, the recording and its transcript.
How we use it: to send the texts and place the calls described in our SMS & Call Terms, including order, refill, appointment and treatment updates, reminders about an intake or checkout you did not finish, customer support and, if you agreed, promotional offers. Texts and calls may be sent or placed using automated technology, and calls may use an artificial or AI-generated voice or a prerecorded message. Calls may be recorded, monitored, transcribed and analyzed with artificial intelligence tools, ours and our service providers’, to provide and improve the Services and for quality assurance. Where the law requires notice or consent before a call is recorded, that requirement applies. AI output may be inaccurate and does not independently make clinical decisions.
Retention: we keep your text preference and opt-out requests for as long as needed to honor your choices and to show compliance with the law, and recordings, transcripts and message logs for as long as needed for the purposes above or as required by law, after which we delete or de-identify them.
Text messaging opt-in data and SMS consent are never shared with third parties or affiliates for their marketing or promotional purposes, that is, for their independent promotional use. We share this information only with our affiliated medical providers, our pharmacy partners and service providers that help us run the program, under confidentiality obligations. We do not share your SMS consent with advertising partners.
Your choices: reply STOP to any text, ask us to stop during a call, or email team@galaglp1.com to withdraw consent to texts and calls. For help, email team@galaglp1.com. Message and data rates may apply. Text messages are not encrypted, so please do not send us sensitive health information by text.
Access & Correction: You may request access to, correction, or deletion of your personal information by contacting us at the details below. Do not send sensitive medical records or identity documents by ordinary email unless directed to a secure channel. We verify requests proportionately and permit authorized agents where law requires.
Opt-Out: You can opt out of non-essential communications by following unsubscribe instructions or contacting us directly.
Connecticut Rights: Where Connecticut law applies, you may also correct inaccurate personal data, obtain a portable copy, and opt out of targeted advertising, sales of personal data and profiling covered by that law. You may also access inferences about you and request the legally required list of third parties to which personal data was sold. Where feasible, you may question qualifying automated profiling decisions, receive their reasons and review the data used. For qualifying housing decisions, you may correct inaccurate data and request reevaluation. Email team@galaglp1.com to exercise these rights. Unsubscribing from texts or emails is a separate choice.
Connecticut Appeals: Where Connecticut law applies, you may appeal our refusal to act on any personal-data rights request by replying to our decision or emailing team@galaglp1.com. No particular subject line is required. We will provide a written decision explaining our reasons within 60 days after receiving the appeal. If we deny the appeal, we will provide an online method for submitting a complaint to the Connecticut Attorney General. The shorter appeal deadline stated in our Consumer Health Data Privacy Notice continues to apply to requests covered by that notice.
Telehealth Consent: Telehealth services are subject to the applicable provider’s informed consent process. This Privacy Policy and general website use do not replace any consent required for treatment.
If you live in Washington, Nevada or Connecticut, if your consumer health data is collected in Washington, or if another state’s consumer health data law applies to you, our Consumer Health Data Privacy Notice explains the consumer health data we collect, why, who we share it with, and how to exercise your rights over it. It supplements this Privacy Policy.
Your treating providers and pharmacies are responsible for their own HIPAA obligations and their own Notices of Privacy Practices. Where Gala GLP-1 acts as their business associate, the applicable HIPAA agreements and law govern your protected health information (PHI). We implement safeguards to protect the privacy and security of your Protected Health Information (PHI). This Policy does not replace a provider notice or a required HIPAA authorization.
Our Services are intended for users who are at least 18 years old. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us so we can delete it.
If you access our Services from outside the United States, your information may be transferred to and processed in the U.S. Information may be processed in the United States and other locations used by approved vendors, subject to applicable safeguards.
We may update this Privacy Policy from time to time. The “Last Updated” date indicates when the current version became effective. We post updated notices with a new Last Updated date. Posting alone does not satisfy any additional notice or consent requirements. Where Connecticut law applies, retroactive material changes require reasonable electronic notice to affected consumers and a reasonable opportunity to withdraw consent to materially different collection, processing or transfer of previously collected data. A policy update does not itself provide consent to new data practices. Where applicable law requires affirmative consent or a separate authorization for a new category, purpose, disclosure or sale, continued use of the Services does not provide it. This Privacy Policy does not waive your statutory privacy rights.
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us at:
Email: team@galaglp1.com
Address: 1007 N Orange St. 4th Floor Suite #2920, Wilmington, Delaware 19801, United States
