Privacy Policy
Your privacy and the security of your health information are fundamental to our mission. We are committed to protecting your personal and health data with the highest standards of care.
Last Updated: February 17, 2026 · Version 2.1
Our Privacy Promise to You
Your Information Stays With Us. Period.
✓We NEVER sell your data. Your personal and health information is not for sale—not now, not ever.
✓We NEVER share your data with third parties for marketing. No advertisers, no data brokers, no hidden partnerships.
✓Your data is shared only to run the service you asked for. Your health information is sent to the AI platform that powers our specialists so your insights can be generated, and otherwise stays with us unless you direct a share or the law requires one. Our Consumer Health Data Privacy Policy names every recipient and exactly what each one receives.
In Plain English: Think of your health information like money in a bank. It's yours, it stays in your account, and we only move it when you tell us to. We're the secure vault—not the marketplace.
Introduction
Genesis World Health ("we," "our," or "us") operates a comprehensive health and wellness platform designed to provide personalized health assessments, health insights, educational resources, and wellness products. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.
We are committed to handling your information in accordance with the privacy laws that apply to you. Genesis World Health is a consumer wellness service. It is not a healthcare provider, health plan, or healthcare clearinghouse, and it is not a covered entity under HIPAA.
Information We Collect
1. Personal Information
- Name, email address, birth year, phone number
- Account credentials (username and encrypted password)
- Billing and payment information (processed securely through Stripe)
- Demographic information (gender, country, timezone)
2. Health and Wellness Information
- Health goals and wellness objectives
- Comprehensive health assessment data (medical history, current conditions, medications, lifestyle factors)
- Personalized health insights information
- Progress tracking data (habits, symptoms, wellness metrics)
All health information is encrypted in transit and at rest by our enterprise cloud infrastructure provider. Genesis World Health is a consumer wellness service and is not a covered entity under HIPAA, so this information is not protected health information as that term is defined by HIPAA.
3. Usage Information
- Device information (browser type, operating system, device identifiers)
- Log data (IP address, access times, pages viewed, actions taken)
- Cookies and similar tracking technologies
- Feature usage patterns and interaction data
4. Communications
- Email correspondence and support inquiries
- Chat conversations with AI health assistants
- Feedback, reviews, and survey responses
How We Use Your Information
We use your information for the following purposes:
- Service Delivery: To provide personalized health assessments, generate AI-driven health insights, track your progress, and deliver wellness recommendations.
- E-Commerce: To process orders for supplements and wellness products.
- Payment Processing: To manage subscriptions and process transactions securely through our payment partner, Stripe.
- Communication: To send you service updates, educational content, and respond to your inquiries.
- Platform Improvement: To analyze usage patterns, improve our AI models, enhance user experience, and develop new features.
- Security and Compliance: To maintain audit logs, detect fraud, prevent unauthorized access, and comply with legal obligations.
- Research (De-identified): To conduct aggregated research and analysis using de-identified data that cannot be traced back to individual users.
Data Security
We implement comprehensive security measures to protect your information:
- Encryption: Industry-standard encryption for data in transit and at rest, provided by our cloud infrastructure partner
- Access Controls: Role-based access with multi-factor authentication for team members
- Audit Logging: Comprehensive logging of all access to sensitive health information
- Secure Infrastructure: Enterprise-grade cloud hosting with redundant backups and an independently audited security program maintained by our infrastructure partner
- Privacy by Design: We collect only the information needed to deliver the service, and we do not sell or rent it
While we use industry-leading security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but continuously work to protect your information.
Information Sharing and Disclosure
Important: We NEVER sell, rent, or trade your personal or health information to third parties. Your data is not a commodity—it's your private health information, and we treat it with the utmost respect and protection.
We may share your information only in these specific, limited circumstances:
- Healthcare Providers Within Our Platform: Only when you explicitly choose to consult with a healthcare provider through our platform, we share relevant health information to facilitate your care.You control this—providers only see what you authorize.
- Essential Service Providers: We work with a small number of trusted partners who help us deliver core services: Abacus.AI, the platform hosting the AI models behind our specialists, which receives your health context and questions so your insights can be generated; Stripe for secure payment processing, which receives your email and an account identifier but no health data; a transactional email service; and our cloud hosting provider. These partners are contractually bound to:
- Use your information ONLY to provide the specific service we've contracted
- Never use your data for their own purposes or marketing
- Maintain the same security standards we uphold
- Delete or return your data when services are complete
- Legal Requirements: When required by law, court order, or government regulation, or to protect the rights, property, or safety of our users or the public.We will notify you of such requests when legally permitted.
- Emergency Situations: If we believe disclosure is necessary to prevent serious harm to you or others (e.g., imminent safety threats).
- Business Transfers: In connection with a merger, acquisition, or sale of assets, with appropriate notice to users and continued protection of your privacy rights.
What we DON'T do: We do NOT share your information with advertisers, data brokers, marketing companies, social media platforms, insurance companies (unless you direct us to), or any other entity outside Genesis World Health and the essential service providers listed above.
Your Privacy Rights
You have the following rights regarding your personal and health information:
- Access: Request a copy of your personal and health information
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your account and associated data (subject to legal retention requirements)
- Portability: Receive your data in a structured, machine-readable format
- Restriction: Request limitation on how we use your information
- Objection: Object to certain processing activities
- Opt-Out: Unsubscribe from marketing communications at any time
- Consent Withdrawal: Withdraw previously granted consent for specific uses
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.
Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience, analyze usage patterns, and maintain session security. You can control cookie preferences through your browser settings, though disabling cookies may affect platform functionality.
Types of Cookies We Use:
- Essential Cookies: Required for authentication and core functionality
- Performance Cookies: Help us understand how users interact with our platform
- Functional Cookies: Remember your preferences and settings
Data Retention
We retain your information for as long as necessary to provide our services and comply with legal obligations:
- Active Accounts: Data retained while your account is active
- Inactive Accounts: Data may be deleted after 3 years of inactivity (with prior notice)
- Health and Wellness Information: Retained while your account is active, and deleted when you delete your account or ask us to remove it
- Transaction Records: Retained for tax and auditing purposes (typically 7 years)
- De-identified Data: May be retained indefinitely for research and analytics
Do Not Sell or Share My Personal Information
Our Commitment: Genesis World Health does NOT sell, rent, trade, or share your personal information with third parties for monetary or other valuable consideration.
Under California law (CCPA/CPRA) and similar state privacy laws, you have the right to opt out of the "sale" or "sharing" of your personal information. Because we do not engage in selling or sharing personal information as defined by these laws, there is no need to submit an opt-out request. However, if you would like to exercise any of your privacy rights or have questions, please contact us at [email protected].
US State Privacy Rights Notice
If you are a resident of the following US states, you have specific privacy rights under applicable state law:
🏛️ California Privacy Rights (CCPA/CPRA)
California residents have the following rights under the California Consumer Privacy Act and California Privacy Rights Act:
- Right to Know: Request disclosure of categories and specific pieces of personal information collected
- Right to Delete: Request deletion of personal information (subject to exceptions)
- Right to Correct: Request correction of inaccurate personal information
- Right to Opt-Out: Opt-out of the sale or sharing of personal information
- Right to Limit Use: Limit use and disclosure of sensitive personal information
- Right to Non-Discrimination: Not be discriminated against for exercising privacy rights
We do NOT sell your personal information. We do NOT share your personal information for cross-context behavioral advertising.
🏛️ Virginia Privacy Rights (VCDPA)
Virginia residents have rights under the Virginia Consumer Data Protection Act:
- Right to access, correct, delete, and obtain a copy of personal data
- Right to opt-out of processing for targeted advertising, sale of personal data, or profiling
- Right to appeal our decision regarding your request
🏛️ Colorado Privacy Rights (CPA)
Colorado residents have rights under the Colorado Privacy Act:
- Right to access, correct, delete, and obtain a portable copy of personal data
- Right to opt-out of targeted advertising, sale of personal data, or profiling
- Right to appeal our decision with 45 days
🏛️ Connecticut Privacy Rights (CTDPA)
Connecticut residents have rights under the Connecticut Data Privacy Act:
- Right to access, correct, delete, and obtain a portable copy of personal data
- Right to opt-out of targeted advertising, sale of personal data, or profiling
- Right to appeal our decision within 60 days
🏛️ Utah Privacy Rights (UCPA)
Utah residents have rights under the Utah Consumer Privacy Act:
- Right to access and delete personal data
- Right to obtain a portable copy of personal data
- Right to opt-out of targeted advertising or sale of personal data
🏛️ Additional State Rights
Residents of Oregon, Texas, Montana, Iowa, Indiana, Tennessee, Florida, Delaware, New Hampshire, New Jersey, and other states with comprehensive privacy laws may have similar rights. We honor all legitimate privacy requests from US residents regardless of state. Contact us at [email protected] to exercise your rights.
📝 How to Exercise Your US State Privacy Rights
- Email: [email protected]
- Include: Your full name, state of residence, specific request, and account email
- Response Time: We will respond within 45 days (may be extended by 45 days if necessary)
- Verification: We may need to verify your identity before processing requests
- Authorized Agents: California residents may designate an authorized agent to make requests
World Privacy Rights Notice
Genesis World Health is available worldwide, and we extend the same core privacy rights to everyone who uses our service, wherever you live.
Your core rights
- Access: Ask what personal information we hold about you and receive a copy
- Correction: Correct information that is inaccurate or incomplete
- Deletion: Ask us to delete your account and the information associated with it
- Portability: Receive your information in a structured, machine-readable format
- Withdraw consent: Withdraw your consent at any time, without affecting processing that already took place
- Object or restrict: Object to, or ask us to limit, how we use your information
- Opt out of marketing: Unsubscribe from marketing email at any time
- No sale of your data: We do not sell or rent your personal information to anyone
To exercise any of these rights, email [email protected]. We will not discriminate against you for exercising them.
Additional local rights
Depending on where you live, your local privacy law may give you further rights, or may give you the right to complain to a supervisory authority in your country. Nothing in this policy limits any right you have under the law that applies to you. If you would like to exercise a right that is not listed above, contact us and we will respond in accordance with that law.
🔒 International Data Transfers
Your information may be transferred to and processed in the United States. We implement appropriate safeguards including:
- Data processing agreements with the service providers who handle information on our behalf
- Transfer safeguards required by applicable law, including standard contractual clauses where they apply
- Technical and organizational security measures, including encryption in transit and at rest
📧 International Privacy Requests
For all international privacy requests: [email protected]
Please include your country of residence and the specific right you wish to exercise.
Children's Privacy
Our services are not directed to individuals under the age of 18 (or the applicable age of majority in your jurisdiction). We do not knowingly collect personal information from children. If you are a parent or guardian and believe we have collected information from a child, please contact us immediately at [email protected], and we will take steps to delete such information within 30 days.
Data Breach Notification
In the unlikely event of a data breach involving your personal or health information, Genesis World Health is committed to prompt and transparent notification in accordance with applicable laws.
- Notification Timeline: We will notify affected individuals without undue delay, and in the time and manner required by applicable law.
- Notification Method: We will notify you by email at the address associated with your account, and if required by law, through a prominent notice posted on our platform.
- Information Provided: Our notification will include: a description of the nature of the breach, the types of data involved, the likely consequences, steps we have taken or plan to take to address the breach and mitigate its effects, and recommendations for actions you can take to protect yourself.
- Regulatory Reporting: We will report breaches to the relevant supervisory authorities, including state attorneys general and the data protection authority for your country, as required by applicable law.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by email or through a prominent notice on our platform at least 30 days before the changes take effect. Your continued use of our services after the effective date constitutes your acceptance of the updated Privacy Policy. If you do not agree to the modified Privacy Policy, you must discontinue use of our services.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
Genesis World Health - Privacy Office
Email: [email protected]
For security inquiries: [email protected]
We are committed to working with you to obtain a fair resolution of any privacy concern or complaint.