Privacy Policy

1.1. Information You Provide. We collect information you voluntarily submit, including: (a) inputs, prompts, and messages you provide to AI conversation features; (b) order information when you purchase Products, including name, shipping address, and email address; and (c) communications you send to us.

1.2. Information Collected Automatically. We automatically collect: (a) device and browser information; (b) anonymized or pseudonymous device identifiers stored in local storage; (c) usage data, including pages viewed, features used, and timestamps; and (d) approximate location derived from IP address.

1.3. Payment Information. Payment card data is collected and processed directly by our third-party payment processor. WE DO NOT STORE FULL PAYMENT CARD NUMBERS ON OUR SYSTEMS.

1.4. Anonymous-First Design. The Services are designed to function without the creation of a named account. Where identifiers are used, they are pseudonymous device identifiers unless and until you voluntarily provide identifying information.

2.1. Inputs you submit to AI features may reference health conditions or other sensitive subjects. You should not submit information you do not wish to be processed. WE DO NOT USE AI CONVERSATION INPUTS TO PROVIDE MEDICAL SERVICES, AND SUCH INPUTS ARE NOT PROTECTED HEALTH INFORMATION UNDER HIPAA, AS THE COMPANY IS NOT A COVERED ENTITY OR BUSINESS ASSOCIATE.

2.2. AI inputs are transmitted to third-party AI model providers solely for the purpose of generating responses, subject to those providers' data-handling terms.

3.1. We use information to: (a) provide, maintain, and improve the Services; (b) generate AI responses to your inputs; (c) process orders, payments, shipping, and returns; (d) personalize your experience; (e) detect, prevent, and address fraud, abuse, and security incidents; (f) comply with legal obligations; and (g) communicate with you regarding orders and, with your consent where required, marketing.

3.2. We may create and use aggregated or de-identified data that does not reasonably identify you for any lawful purpose, including improving our AI systems.

4.1. Where the law of your jurisdiction so requires, we process personal information on the following bases: (a) performance of a contract (order fulfillment, service delivery); (b) legitimate interests (service improvement, security, fraud prevention); (c) consent (marketing communications, where required); and (d) compliance with legal obligations.

5.1. We disclose information only to: (a) service providers acting on our behalf, including hosting, payment processing, shipping, analytics, and AI model providers, each bound by contractual confidentiality obligations; (b) parties to a merger, acquisition, or asset sale, subject to this Policy; (c) governmental authorities where required by law, subpoena, or court order; and (d) other parties with your direction or consent.

5.2. WE DO NOT SELL PERSONAL INFORMATION, AND WE DO NOT SHARE PERSONAL INFORMATION FOR CROSS-CONTEXT BEHAVIORAL ADVERTISING, AS THOSE TERMS ARE DEFINED UNDER APPLICABLE U.S. STATE PRIVACY LAWS.

6.1. We use cookies and browser local storage for essential functions, including session continuity, device identification, and preference persistence. Essential storage cannot be disabled without impairing the Services. You may control non-essential storage through your browser settings.

7.1. We retain information for as long as reasonably necessary to fulfill the purposes described in this Policy, to comply with legal, tax, and accounting obligations, to resolve disputes, and to enforce agreements. Retention periods vary by data category; conversation data associated with a device identifier may be deleted upon verified request.

8.1. We employ commercially reasonable administrative, technical, and physical safeguards designed to protect information against unauthorized access, disclosure, alteration, and destruction. HOWEVER, NO METHOD OF TRANSMISSION OR STORAGE IS COMPLETELY SECURE, AND WE CANNOT GUARANTEE ABSOLUTE SECURITY.

9.1. Depending on your jurisdiction, you may have the right to: (a) access the personal information we hold about you; (b) request correction or deletion; (c) request portability; (d) opt out of certain processing; and (e) not be discriminated against for exercising such rights.

9.2. To exercise any right, contact us using the method identified in Section 13. We may take reasonable steps to verify your identity or your control of the relevant device identifier before acting on a request. Authorized agents may submit requests where permitted by law.

9.3. If you are located in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your supervisory authority.

10.1. The Services are not directed to children under thirteen (13), and we do not knowingly collect personal information from children under thirteen (13). If we learn that we have collected such information, we will delete it promptly. Parents or guardians who believe a child has provided information to us should contact us immediately.

11.1. The Services are operated from the United States. If you access the Services from another jurisdiction, you acknowledge that your information will be transferred to and processed in the United States, where data-protection laws may differ from those of your jurisdiction. Where required, we implement appropriate safeguards for such transfers.

12.1. We may revise this Policy from time to time. The revised Policy becomes effective upon posting with an updated effective date. Material changes will be highlighted by reasonable means. Your continued use of the Services after the effective date constitutes acceptance of the revised Policy.

13.1. Questions, requests, and complaints regarding this Policy may be directed to the Company through the contact mechanisms published on the Services.