Privacy Policy

We collect the information you give us directly: your name, email, age, biological sex, life stage, lifestyle context (sleep, stress, alcohol, cannabis, caffeine, nicotine, current symptoms), bloodwork results you upload or order through us, daily logs (sleep, energy, cycle, menopause symptoms), exercise logs, and any notes you choose to write.

We also collect minimal technical data needed to run the service: account timestamps, device type, and basic usage events. We do not load third-party advertising trackers.

Your data is used to generate your vitality score, personalize your protocol, detect multi-marker patterns, and let our clinical team review your account when you ask them to. That is the entire list. We do not use your data to train external AI models.

You. Members of your account who you explicitly invite (for example a partner on a Concierge family plan). Our clinical and engineering team, only when needed to operate the service or respond to a request from you. Nobody else.

We do not share data with insurers, employers, advertisers, or data brokers. We do not respond to informal third-party data requests. If we ever receive a lawful subpoena, we will notify you unless prohibited.

Data is encrypted in transit (TLS) and at rest. Each member's data is isolated by row-level security at the database layer, meaning even our internal services cannot read your data without your account context. Access by our staff is logged.

Our infrastructure is HIPAA-aligned. We are not a HIPAA-covered entity in the strict legal sense (we are not a healthcare provider, payer or clearinghouse), but we operate to the same data-handling standard.

For as long as your account is active. You can export everything (panels, logs, notes) from your account at any time. On request, we will permanently delete your account and all associated personal data within thirty days, except where retention is required by law (for example financial records of payments).

You can access, correct, export or delete your data at any time. If you live in the EU, UK or California, you have additional rights under GDPR, UK GDPR and CCPA respectively, including the right to object to processing and to lodge a complaint with your local data-protection authority.

The service is for adults eighteen and older. We do not knowingly collect data from minors. Family plans are designed for adult household members only.

If we materially change this policy, we will email account holders before the change takes effect.

Questions or requests: privacy@familyvitalitylabs.com