Privacy Policy

1. Introduction

Whole Gene Health, LLC (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our genetic analysis service. Please read this policy carefully. By using our services, you consent to the practices described in this policy.

2. Information We Collect

2.1 Genetic Data

We collect genetic data that you voluntarily provide by uploading your raw DNA data file from services such as 23andMe or AncestryDNA. This data contains information about your genetic variants (SNPs) and is used solely to generate your personalized genetic analysis report.

2.2 Personal Information

We collect:

• Contact Information: Email address (for delivery of your report)
• Payment Information: Processed securely through our payment processor (Stripe)
• Communication preferences

2.3 Health & Demographic Information

To provide personalized and safe supplement recommendations, we collect the following health information:

• Height and weight (for accurate dosing calculations based on body size)
• Age (metabolic needs and absorption rates vary by age group)
• Biological sex (hormonal differences affect supplement metabolism and needs)
• Current medications and dosages (critical for identifying dangerous drug-supplement interactions)
• Known health conditions (to ensure recommendations are safe for your medical situation)
• Allergies to supplements or ingredients
• Pregnancy or nursing status (if applicable, as many supplements are contraindicated)
• Activity level (optional, for enhanced personalization of recommendations)
• Dietary restrictions (optional, e.g., vegan, vegetarian, to suggest appropriate supplement forms)
• Current supplements you're taking (optional, to avoid redundancy and check for interactions)

Why we need this information: Your genetic data alone isn't sufficient for safe, effective supplement recommendations. We need your complete health context to:

• Prevent dangerous interactions: For example, someone taking SSRIs shouldn't supplement with 5-HTP. Someone on blood thinners needs to avoid high-dose Vitamin K.
• Calculate appropriate dosages: A 120-pound person needs different amounts than a 220-pound person.
• Account for life stage: Supplement needs differ significantly by age, sex, and life circumstances (pregnancy, menopause, etc.).
• Respect medical conditions: Certain genetic variants combined with health conditions require modified protocols.
• Honor your preferences: Dietary restrictions and current supplement regimens help us avoid conflicts and redundancy.

This comprehensive approach ensures your personalized protocol is both maximally effective AND safe for your unique situation.

2.4 Technical Information

We automatically collect:

• IP address
• Browser type and version
• Device information
• Usage data and analytics

3. How We Use Your Information

We use your information to:

• Generate your personalized genetic analysis report with safe, tailored supplement recommendations
• Calculate appropriate supplement dosages based on your body size and metabolism
• Identify potential drug-supplement interactions based on your medications
• Adjust recommendations for your age, sex, health conditions, and lifestyle
• Deliver your report via email
• Process your payment
• Respond to your inquiries and provide customer support
• Improve our services
• Comply with legal obligations

4. Third-Party Data Processing

To generate your personalized report, your genetic data is processed through third-party professional genetic analysis services. These services analyze your DNA file and provide detailed variant information that we use to create your recommendations.

4.1 Genetic Analysis Services

Your raw DNA file is processed by specialized third-party genetic analysis services that extract and interpret genetic variant information. These services have strict privacy policies and data retention practices:

• Genetic Genie: Processes methylation and detoxification profiles. Automatically deletes your genetic data within 24 hours. They do not store data long-term, sell it, or use it for research. View their privacy policy
• Genetic Lifehacks: Processes comprehensive SNP analysis. Data stored on offline encrypted drive and deleted within 30 days. They never sell or share data. View their privacy policy

4.2 Computational Analysis

After genetic processing, we use advanced computational systems to analyze the results and generate your personalized recommendations. These systems:

• Synthesize complex genetic variant data into understandable insights
• Cross-reference your genetic variants with your personal health profile
• Identify research-backed supplement recommendations
• Screen for potential drug-supplement interactions
• Calculate personalized dosages based on your individual characteristics
• Generate your comprehensive report with implementation guidance

The computational analysis providers process data according to their privacy policies and do not retain your information after report generation. Your data is not used to train models or shared with other users.

4.3 Other Services

We also use the following services:

• Stripe: Secure payment processing
• Resend: Email delivery for reports and communications
• Cloudflare R2: Temporary secure file storage
• Neon: Database hosting for order information and health profiles

These services have their own privacy policies governing the use of your information. We select service providers with strong security and privacy practices.

5. Data Retention and Deletion

5.1 Raw Genetic Data File

Important: Your raw DNA data file—the most sensitive genetic data—is permanently and securely deleted from our servers within 7 days of delivering your report. This deletion timeline allows us to address any immediate technical issues or re-delivery requests while ensuring your sensitive genetic data is not retained long-term.

5.2 Generated Reports

Your personalized genetic analysis report (PDF) is retained for 90 days after delivery to provide customer support, quality assurance, and re-delivery if needed. After 90 days, reports are archived in encrypted storage. You can request deletion of your report at any time.

5.3 Processed Genetic Data

The processed genetic variant information used to generate your report (not your raw DNA file) is retained for 90 days in case you have questions about specific variants or need clarification on recommendations. After 90 days, this data is archived in encrypted storage. You can request deletion at any time.

5.4 Other Information

• Email address and contact information: Retained until you request deletion
• Transaction records: Retained for 7 years for legal and tax requirements
• Health profile information: Retained until you request deletion (in case you want an updated report in the future)

5.5 Aggregated Data

We may retain anonymized, aggregated statistical data that cannot be linked back to you for service improvement purposes.

6. Data Sharing

We do NOT sell, share, or provide your genetic data or health information to:

• Insurance companies
• Employers
• Third-party marketers
• Research institutions (unless you explicitly consent)
• Law enforcement (except as required by valid legal process)
• Any other third parties for their own purposes

7. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• SSL/TLS encryption for data in transit
• Encryption at rest for stored data
• Access controls and authentication
• Regular security assessments
• Secure data deletion procedures

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your information
• Withdraw consent
• Data portability
• Object to processing

To exercise these rights, contact us at privacy@wholegene.health.

9. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect genetic information from minors. If you are a parent or guardian and believe your child has provided us with genetic data, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the “Last Updated” date. Your continued use of our services after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Email: privacy@wholegene.health

13. California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete personal information, and the right to opt-out of the sale of personal information. We do not sell your personal information.

14. European Residents (GDPR)

If you are a resident of the European Economic Area (EEA), you have certain data protection rights under the General Data Protection Regulation (GDPR). Our legal basis for processing your genetic data and health information is your explicit consent, which you provide when uploading your data and submitting your health information.