Privacy policy

The short version: your health data exists to write your reports. We don't sell it, share it with advertisers, insurers, or employers, or use it for anything you wouldn't expect. Your subscription is the business model.

What we collect

Your email, the profile and health information you enter (measurements, lab values, lifestyle answers, notes, uploaded files), and product usage events (like "cycle closed") that we use to measure whether the product works. If you arrive through a creator's link (plus.bio/r/...), we record that link's code so we can pay the creator — this is our own record, never shared with ad networks, and it says nothing about your health.

How it's used

To generate your monthly reports (your data is sent to an AI model provider for processing at generation time, and is not used to train their models per our provider agreements), to send you the emails that run your cycle, and to operate the service. A small sample of reports may be reviewed by authorized staff for quality and safety.

What we never do

No third-party advertising trackers or pixels. No selling or renting data. No access for insurers, employers, or data brokers. No social features exposing your data to other members.

Where it lives

Data is stored with Supabase (Postgres, US region) with row-level security so only your authenticated account can read your rows. Payments are processed by Stripe, so we never see your card number. Emails are delivered by Resend.

Your rights

Export everything from Settings at any time. Delete your account from Settings; deletion is immediate and permanent for our systems. Residents of states with consumer health data laws (including Washington's My Health My Data Act) may exercise the same rights by email.

Not a HIPAA covered entity

HIPAA covers health providers, health plans, and the companies that work on their behalf. Plus Bio is none of those: we collect your health information directly from you, for your own use, we do not work on behalf of any health plan or doctor, and we run no insurance billing. On that basis Plus Bio is generally not a HIPAA covered entity.

Who pays for your membership does not change that by itself. An employer or a spending account can pay the bill without getting access to your data, and without any say in what we do with it. If your employer is paying, Plus Bio for employers sets out what we can and cannot tell them.

We follow the FTC's Health Breach Notification Rule: if a breach of your health data occurs, we will notify you.

Questions: plusbio@dalt.ai