Consumer Health Data Privacy Policy
Last updated September 19, 2026
What this policy covers
This policy describes how Biohacked Wellness collects, uses, shares and protects consumer health data. It is separate from our general Privacy Policy on purpose, and it governs wherever the two differ with respect to health data.
Biohacked Wellness is not a healthcare provider, health plan, or a business associate of one. We are not a HIPAA covered entity, and the information you give us is not protected health information under HIPAA. It is protected under this policy and under state consumer health data laws.
What we collect
Through our questionnaire, we collect information you choose to give us:
- Age, biological sex, height and weight
- Fitness goals and training history
- Dietary pattern, food allergies and restrictions
- Sleep duration and quality, stress and energy levels
- Health conditions you disclose, and whether you take prescription medications
- Supplements you currently take
We do not ask which medications you take, only whether you take any, because that is all our safety checks require.
Why we collect it
To generate your personalized fitness, nutrition and supplement plan, and to apply safety checks that flag when you should speak to a doctor first. That is the entire purpose. We do not collect health data for any other reason.
What we never do
- We never sell your health data. Not to anyone, for any price.
- We never share your health data with advertisers or ad networks.
- We never use your health data, or anything inferred from it, to target advertising to you.
- We never send your health data to analytics or session-recording tools.
- We never share it with data brokers.
Advertising on Biohacked Wellness is contextual only. An advertiser may know they are advertising on a wellness site. They never learn anything about you.
Who we share it with
We share health data only with service providers who process it on our behalf and are contractually barred from using it for anything else:
- [HOSTING PROVIDER] — application hosting
- [DATABASE PROVIDER] — encrypted data storage
- [EMAIL PROVIDER] — delivering your plan to you
Our payment processor never receives your health data. It receives only your email address and payment details.
Your rights
You can, at any time and at no cost:
- Ask for a copy of the health data we hold about you
- Ask us to correct it
- Withdraw your consent to our collection or use of it
- Ask us to delete it, including from our backups and from any service provider who holds it
Email privacy@biohackedwellness.com and we will respond within [NUMBER] days. We will not make you jump through hoops, and we will not charge you.
Withdrawing consent stops future processing. If you ask us to delete your data, we can no longer generate or update your plan.
How long we keep it
Incomplete questionnaires are deleted automatically after 90 days. Completed submissions are kept while your account is active and for [NUMBER] months afterwards, then deleted. You can ask us to delete yours sooner.
How we protect it
- Encrypted in transit and at rest
- Access restricted at the database layer, denied by default
- Access limited to employees who need it, and logged
- Health data is never written to application logs
Washington residents
Washington's My Health My Data Act gives you specific rights over consumer health data, including the right to withdraw consent and the right to have your data deleted. It also gives you a private right of action. To exercise any of these rights, email privacy@biohackedwellness.com.
Nevada and other states
Nevada residents have the right to opt out of the sale of covered health information. We do not sell health data at all, so there is nothing to opt out of, but you may still contact us to confirm. Residents of other states may have additional rights under their own laws; email us and we will honor them.
Children
Biohacked Wellness is for adults 18 and over. We do not knowingly collect health data from anyone under 18. If you believe a minor has given us data, email privacy@biohackedwellness.com and we will delete it.
Changes
If we change how we handle health data in any material way, we will ask for your consent again rather than relying on the consent you gave for the old terms.
Contact
[LEGAL ENTITY NAME]
[MAILING ADDRESS]
privacy@biohackedwellness.com