Privacy Policy

1. Who we are

“Aunyx Labs,” “we,” “us,” and “our” refer to Aunyx LLC, doing business as Aunyx Labs, an at-home lab testing and telehealth service operating in the United States. This Privacy Policy describes how we collect, use, disclose, and protect the information we receive when you visit aunyxlabs.com or use our services.

2. Information we collect

• Account and contact information: name, email, phone number, shipping and billing address.
• Health information: health goals, medical history, medications, pregnancy status, lab results, and other information you share with your provider as part of your care.
• Progress photos: photos of yourself that you choose to take in the Aunyx app to track your progress.
• Documents you upload: lab reports from other providers and other files you add to your record.
• Video visit recordings and transcripts: if you agree to recording, the recording and transcript of your video visits.
• Connected device and wearable data: if you connect a wearable or health app (such as Oura, Whoop, Apple Health, or Fitbit), the metrics you authorize it to share, for example sleep, recovery, activity, heart rate, heart rate variability, and temperature trends.
• Payment information: processed directly by our payment processor (Stripe). We do not store full payment card numbers on our servers.
• Usage and device information: IP address, browser type, pages visited, referring URL, and how you interact with the site.
• Marketing attribution: UTM parameters, click IDs (fbclid, gclid, etc.), and referrer information if you arrive via an ad or campaign.

3. How we use your information

• To provide and coordinate your at-home blood draws and telehealth visits.
• To enable provider review of your lab results and deliver a personalized care plan.
• To incorporate data from wearables you connect into your care and the insights we show you.
• To record and transcribe your video visits when you agree, and to draft visit notes and summaries from the transcript with AI assistance for your clinician to review (see Section 12).
• To read values from lab reports you upload so you do not have to type them (see Section 12).
• To process payments and manage your account.
• To communicate with you about scheduling, results, and care updates.
• To improve our website, services, and customer experience.
• To comply with legal, tax, and regulatory obligations.

4. How we share information

We share information with the following categories of recipients, and only as needed to provide our services:

• Licensed providers and clinical staff who review your labs and deliver your care plan.
• Phlebotomy partners who perform your at-home blood draw.
• Certified laboratories that process your samples.
• Video visit platform: we hold video visits on Zoom for Healthcare, which has signed a HIPAA business associate agreement with us. If you agree to recording, Zoom stores the recording and makes a transcript.
• AI service:we send visit transcripts, and lab reports you upload, to Anthropic’s Claude service under a HIPAA business associate agreement. Anthropic does not use your information to train its AI models and may not use it for its own purposes. See Section 12.
• Service providers that help us operate, including Stripe (payments), hosting and security providers, analytics providers, and email or SMS delivery services.
• Legal and regulatory authorities when required by law, subpoena, or court order.

We do not sell your personal information or protected health information. We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All of the categories above exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. See Section 14.

5. Protected Health Information (HIPAA)

When we act as a covered entity, the health information you share with your provider is Protected Health Information (PHI) governed by the Health Insurance Portability and Accountability Act (HIPAA). Our Notice of Privacy Practices describes your HIPAA rights and how your PHI may be used and disclosed.

6. Cookies and analytics

We use cookies and similar technologies to operate our site, keep you signed in, remember preferences, and understand how visitors use the site. We may use third-party analytics such as Google Analytics 4 and Microsoft Clarity. We may use Meta Pixel to understand website visits. We never send health information, mobile phone numbers, or SMS opt-in data to Meta, Google, or any advertising or analytics provider. You can opt out of most non-essential cookies through your browser settings.

7. Your rights

Depending on where you live, you may have the right to:

• Access, correct, or delete your personal information.
• Request a copy of the information we hold about you.
• Object to certain uses, or ask us to restrict processing.
• Opt out of marketing emails at any time, and stop text messages at any time by replying STOP.

To exercise any of these rights, contact us at hello@aunyxlabs.com. If we need to verify your identity before acting on your request, we will.

8. Data retention

We keep your information for as long as your account is active and as long as needed to provide care, comply with legal obligations, resolve disputes, and enforce our agreements. Medical records are retained in accordance with applicable state and federal law. Recordings and transcripts of your video visits, and the visit notes made from them, are part of your medical record and are kept with it. Progress photos you remove in the app are permanently deleted from our systems. Documents you upload stay in your record unless you ask us to remove them.

9. Security

We use industry-standard technical and administrative safeguards to protect your information, including encryption in transit (TLS), access controls, and HIPAA-aware vendor contracts. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Children

Aunyx Labs is intended for adults aged 18 and older. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child, please contact us and we will delete it.

11. Wearables and connected devices

Aunyx lets you connect third-party wearables and health apps, such as Oura, Whoop, Apple Health, and Fitbit, so the metrics they collect can inform your care. You connect these services through each provider’s own secure authorization process; we never ask for, or store, your password for a connected service.

Depending on the service and the permissions you grant, we may receive data such as sleep, readiness and recovery, activity, heart rate, heart rate variability, and temperature trends. We access only the data you authorize. Once this information becomes part of your Aunyx record, we treat it as your health information and protect it the same way as the rest of your PHI (see Section 5).

We use connected-device data only to provide and personalize your care and the insights we show you. We do not sell it, and we do not use it for advertising. We honor the API terms of each connected service.

You can disconnect a wearable at any time from within the Aunyx app or through the connected service’s own settings. Disconnecting stops future data sharing; information already incorporated into your health record is retained as described in Section 8.

You can also keep a device connected while stopping your care team from seeing its readings. Under Privacy and Security in the Aunyx app, you control whether your provider sees your connected-device metrics in your chart. If you turn sharing off, your provider is told that you turned it off rather than being shown blank values, and you continue to see all of your own data in the app. You can turn it back on at any time.

How we use artificial intelligence is described in Section 12.

12. How we use artificial intelligence

We use AI software in two places, always inside your care relationship.

Visit notes. If you agree to recording, your video visits are recorded and transcribed. AI software drafts a visit summary and a draft clinical note from the transcript. Your clinician reviews and edits every draft before any of it becomes part of your record or is shared with you. You can turn recording off at any time under Privacy and Security in the Aunyx app or by telling your clinician at the start of a visit, and your care is the same either way.

Lab reports you upload. When you upload a lab report from another provider, AI software reads the values, dates, and reference ranges so you do not have to type them. AI can misread a number, so you check every value against your report before it is saved, and your care team can see that those values came from a report you uploaded.

AI does not make decisions about your care. A licensed clinician makes every clinical decision. We do not use AI to look at your progress photos. The AI service we use is Anthropic’s Claude, under a HIPAA business associate agreement. Anthropic does not train its models on your information and may not use it for its own purposes.

If you want to talk with a person about anything AI helped produce, message your care team in the app or email hello@aunyxlabs.com.

13. Progress photos and documents you upload

The Aunyx app lets you take progress photos (front, side, and back) to track your progress toward your goals, and upload lab reports from other providers. Photos and uploads are part of your medical record and are protected as PHI (see Section 5).

Who can see them. You, and the Aunyx staff who work on your care. Photos are stored with our HIPAA-covered database provider under a business associate agreement and never leave Aunyx. We do not use AI to analyze your photos.

What we never do with them. We do not use your photos or uploads for marketing, testimonials, research, or to train AI models unless you sign a separate written authorization, which you can decline or revoke at any time with no effect on your care.

Removing a photo. When you remove a progress photo in the app, it is permanently deleted from our systems.

Rules for photos. Wear underwear or fitted athletic clothing; no nudity. Make sure no one else is in the photo. You must be 18 or older.

14. Text messages (SMS)

Aunyx LLC (Aunyx Labs) sends the following text messages to patients who opt in:

• At-home blood draw scheduling confirmations and reminders.
• Notices that your lab results are ready to view in the secure patient app. These notices never include your results or any other health details.
• Two-way messages with your care team.
• Login verification codes.
• Account and billing notices, such as membership renewals.

Aunyx Labs does not send marketing or promotional text messages.

We text you only if you opt in by checking the optional text message box on the contact step of signup at aunyxlabs.com/start (see aunyxlabs.com/sms-consent). Agreeing to texts is not a condition of purchase or of care.

• Message frequency varies with your care.
• Message and data rates may apply.
• Reply STOP to any message to stop receiving texts. We will send one message confirming you are unsubscribed. Reply START to resume.
• Reply HELP for help, or email hello@aunyxlabs.com.
• Carriers are not liable for delayed or undelivered messages.

Your mobile phone number and your text message opt-in are used only to send you the messages you asked for. They are shared only with the service provider that delivers our text messages, for that purpose. We do not sell, rent, or share mobile information or text messaging opt-in data and consent with third parties or affiliates for their marketing or promotional purposes. We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. We do not share, sell, or provide your mobile phone number or messaging consent data to third parties or affiliates for marketing or promotional purposes.

15. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will post the revised version on this page and update the effective date above. Significant changes will be communicated by email or an in-product notice.

16. Contact us

Questions, requests, or complaints about this Privacy Policy can be sent to hello@aunyxlabs.com. We will respond within a reasonable time.