Privacy Policy

We collect information you provide directly: name, email address, quiz responses (health goals, symptoms, dietary preferences, activity level, GLP-1 status, age range), and payment information processed securely through Stripe.

When you purchase testing, our lab partner our laboratory partners collect biological samples for biomarker analysis. Gut microbiome testing is processed by our laboratory partner. These partners maintain their own privacy policies and HIPAA-compliant data handling procedures.

We use your information to: deliver personalised health blueprints, process testing kit orders, facilitate physician interpretation calls via CareValidate, send your results and protocol updates via Klaviyo, process payments via Stripe, and improve our services.

Quiz responses are used exclusively to generate your personalised meal plan, workout protocol, and supplement recommendations. We do not sell, rent, or share your personal health information with third-party advertisers.

We share data only with service providers essential to delivering your care:

• Laboratory partners — blood panel processing and results delivery
• gut microbiome — gut microbiome sequencing and analysis
• CareValidate — physician consultations and prescription management
• Stripe — payment processing
• Klaviyo — email communications and result notifications

We implement industry-standard security measures including encrypted data transmission (TLS), secure payment processing (PCI-DSS compliant via Stripe), and access controls on all personal and health data. Biomarker data is stored by our lab partners under HIPAA-aligned security practices.

You may request access to, correction of, or deletion of your personal data at any time by contacting hello@wellspry.com. You may unsubscribe from marketing emails via the link in any email. California residents have additional rights under the CCPA, including the right to know, delete, and opt out of the sale of personal information.

We use Vercel Analytics for performance monitoring and Google Analytics for traffic analysis. These services use cookies and similar technologies. No health or biomarker data is shared with analytics providers.

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected or as required by law:

• Account and quiz data — retained for the duration of your relationship with WellSpry plus 3 years following account closure
• Biomarker and lab results — retained per the data retention policies of our laboratory partners; typically 7 years per CLIA requirements
• Payment records — retained for 7 years per tax and financial regulations
• Email communications — retained for 3 years, or until you unsubscribe and request deletion

You may request deletion of your personal data at any time by emailing hello@wellspry.com. Deletion requests are processed within 30 days. Certain data may be retained longer if required by applicable law or for legitimate business purposes such as dispute resolution.

In the event of a data security incident that affects your personal or health information, WellSpry will:

• Notify affected individuals within 72 hours of becoming aware of the breach, where feasible
• Notify relevant regulatory authorities as required by applicable law (including CCPA and applicable state breach notification statutes)
• Provide information about the nature of the incident, data categories affected, and recommended protective steps

To report a suspected security issue, contact hello@wellspry.com with the subject line “Security Report.”

For privacy-related inquiries: hello@wellspry.com

WellSpry LLC, United States