Privacy Policy

1. Who we are

“Aunyx Labs,” “we,” “us,” and “our” refer to Aunyx Labs, an at-home lab testing and telehealth service operating in the United States. This Privacy Policy describes how we collect, use, disclose, and protect the information we receive when you visit aunyxlabs.com or use our services.

2. Information we collect

• Account and contact information: name, email, phone number, shipping and billing address.
• Health information: health goals, medical history, medications, pregnancy status, lab results, and other information you share with your provider as part of your care.
• Connected device and wearable data:if you connect a wearable or health app (such as Oura, Whoop, Apple Health, or Fitbit), the metrics you authorize it to share — for example sleep, recovery, activity, heart rate, heart rate variability, and temperature trends.
• Payment information: processed directly by our payment processor (Stripe). We do not store full payment card numbers on our servers.
• Usage and device information: IP address, browser type, pages visited, referring URL, and how you interact with the site.
• Marketing attribution: UTM parameters, click IDs (fbclid, gclid, etc.), and referrer information if you arrive via an ad or campaign.

3. How we use your information

• To provide and coordinate your at-home blood draws and telehealth visits.
• To enable provider review of your lab results and deliver a personalized care plan.
• To incorporate data from wearables you connect into your care and the insights we show you.
• To process payments and manage your account.
• To communicate with you about scheduling, results, and care updates.
• To improve our website, services, and customer experience.
• To comply with legal, tax, and regulatory obligations.

4. How we share information

We share information with the following categories of recipients, and only as needed to provide our services:

• Licensed providers and clinical staff who review your labs and deliver your care plan.
• Phlebotomy partners who perform your at-home blood draw.
• Certified laboratories that process your samples.
• Service providers that help us operate, including Stripe (payments), hosting and security providers, analytics providers, and email or SMS delivery services.
• Legal and regulatory authorities when required by law, subpoena, or court order.

We do not sell your personal information or protected health information, and we do not share it with advertisers for their independent use.

5. Protected Health Information (HIPAA)

When we act as a covered entity, the health information you share with your provider is Protected Health Information (PHI) governed by the Health Insurance Portability and Accountability Act (HIPAA). Our Notice of Privacy Practices describes your HIPAA rights and how your PHI may be used and disclosed.

6. Cookies and analytics

We use cookies and similar technologies to operate our site, keep you signed in, remember preferences, and understand how visitors use the site. We may use third-party analytics such as Google Analytics 4 and Microsoft Clarity. We may also use Meta Pixel and Conversions API to measure ad performance. You can opt out of most non-essential cookies through your browser settings.

7. Your rights

Depending on where you live, you may have the right to:

• Access, correct, or delete your personal information.
• Request a copy of the information we hold about you.
• Object to certain uses, or ask us to restrict processing.
• Opt out of marketing emails and SMS at any time.

To exercise any of these rights, contact us at hello@aunyxlabs.com. If we need to verify your identity before acting on your request, we will.

8. Data retention

We keep your information for as long as your account is active and as long as needed to provide care, comply with legal obligations, resolve disputes, and enforce our agreements. Medical records are retained in accordance with applicable state and federal law.

9. Security

We use industry-standard technical and administrative safeguards to protect your information, including encryption in transit (TLS), access controls, and HIPAA-aware vendor contracts. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Children

Aunyx Labs is intended for adults aged 18 and older. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child, please contact us and we will delete it.

11. Wearables and connected devices

Aunyx lets you connect third-party wearables and health apps — such as Oura, Whoop, Apple Health, and Fitbit — so the metrics they collect can inform your care. You connect these services through each provider’s own secure authorization process; we never ask for, or store, your password for a connected service.

Depending on the service and the permissions you grant, we may receive data such as sleep, readiness and recovery, activity, heart rate, heart rate variability, and temperature trends. We access only the data you authorize. Once this information becomes part of your Aunyx record, we treat it as your health information and protect it the same way as the rest of your PHI (see Section 5).

We use connected-device data only to provide and personalize your care and the insights we show you. We do not sell it, and we do not use it for advertising. We honor the API terms of each connected service.

You can disconnect a wearable at any time from within the Aunyx app or through the connected service’s own settings. Disconnecting stops future data sharing; information already incorporated into your health record is retained as described in Section 8.

We do not currently use automated artificial-intelligence systems to make clinical decisions about you. If we introduce AI-assisted insights in the future, they will be informational, used within your provider relationship, and never a replacement for your provider’s judgment; we will update this Policy before doing so.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will post the revised version on this page and update the effective date above. Significant changes will be communicated by email or an in-product notice.

13. Contact us

Questions, requests, or complaints about this Privacy Policy can be sent to hello@aunyxlabs.com. We will respond within a reasonable time.