Consumer Health Data Privacy Policy

Effective date: November 11, 2026 · Last updated: November 11, 2026

This Consumer Health Data Privacy Policy explains how BioQuest LLC (“BioAge,” “we,” “us,” or “our”) collects, uses, shares, stores and deletes your consumer health data, and how you can exercise your rights over it. It is written to meet the Washington My Health My Data Act, Nevada’s consumer health data law (SB 370), the Connecticut Data Privacy Act and similar laws. We apply it to every user in the United States, wherever you live.

This policy covers consumer health data only. Other personal information, such as payment details and general website use, is covered by our Privacy Policy (bioage.app/privacy).

1. What Is Consumer Health Data

Consumer health data is personal information that is linked or reasonably linkable to you and that identifies your past, present or future physical or mental health. It includes information we calculate or infer from other information about you.

2. Consumer Health Data We Collect

2.1 What You Tell Us in the Assessment

With your consent, our online assessment asks about:

• Body composition: height, weight and body type
• Smoking: whether you smoke, how often and how much
• Alcohol: how often you drink and how much
• Diet: your share of ultra-processed foods, sugar-sweetened drinks, and protein and fiber intake
• Sleep: how long you sleep, how regular your sleep schedule is, and how rested you feel
• Physical activity: strength training, cardio sessions and their length, daily steps, and time spent walking
• Functional health: your usual walking pace, the fastest pace you could keep for 15 minutes, and the result of an optional one-leg balance test
• Stress: how often you feel intense stress, and how much it affects your daily life

Not every question is asked to every person, and you may skip optional tests.

The assessment also collects your sex and age, which we use to calculate your results, and your first name and email address, which link your answers to you.

2.2 What We Calculate From Your Answers

• Your BioAge score
• Your eight biomarker scores and their status (for example Good, Medium, Low or Elevated)
• Your body mass index (BMI), calculated from your height and weight
• The goals, tactics and priorities shown in your Personal Longevity Plan and in any add-on you buy

2.3 What Your Purchases Show

The products you buy, such as the Tailored Supplement Guide or the Risk Assessment Guide, may reveal health interests. We treat your purchase history as consumer health data too.

2.4 What We Do Not Collect

We do not collect medical records, diagnoses, prescriptions, lab or blood test results, genetic data, biometric data, or precise location data. We do not use geofencing.

3. Sources of Consumer Health Data

We collect consumer health data from these sources only:

• You, when you answer the assessment or buy a product
• Us, when we calculate your scores, BMI and plan from your answers
• Your browser, which records each answer as you take the assessment (see section 7)

We do not buy consumer health data from data brokers or other third parties.

4. Why We Use Consumer Health Data

We use your consumer health data only to:

• Calculate your BioAge score, biomarker scores and BMI
• Build and show your Personal Longevity Plan and any add-on you buy, personalized to your answers
• Personalize the checkout and offer pages that follow the assessment, for example with your goal
• Give you access to your member space
• Understand where people stop in the assessment and improve it, using analytics
• Answer your questions and requests, including refund and privacy requests
• Prevent fraud, keep the Service secure and fix errors
• Comply with our legal obligations

We do not use your consumer health data for any other purpose without asking for your separate consent first.

5. Your Consent

• Collection. Before the first health question, the assessment asks for your consent to collect and use your consumer health data for the purposes in section 4. This consent is separate from accepting our Terms of Service. If you do not consent, you cannot take the assessment, because we need your answers to calculate your results.
• Sharing. We share consumer health data only with the service providers listed in section 6, which process it for us. If we ever want to share it with anyone else, we will first ask for your separate consent.
• Withdrawal. You can withdraw your consent at any time by emailing contact@bioage.app. We will then stop collecting and using your consumer health data and delete it as described in section 9. Without your answers, we can no longer provide your personalized results and plan.

6. Who We Share Consumer Health Data With

We share consumer health data only with service providers (“processors”) that act on our behalf, under written contracts that allow them to use it only to provide their services to us:

We have no affiliates that receive consumer health data.

Other service providers we use, such as our payment processor (Stripe) and Resend, which sends member space sign-in codes, do not receive your assessment answers or results.

We do not share consumer health data with advertising platforms such as Meta or Google. Our website and checkout pages may use advertising tags that record general visits and purchases, as described in our Privacy Policy, but they never receive your answers, scores or plan.

We may also disclose consumer health data when required by law, such as to answer a valid subpoena or court order. If BioQuest LLC is involved in a merger, acquisition or sale of assets, consumer health data may be transferred to the new owner, which must keep honoring this policy.

We do not sell consumer health data.

7. Where Your Data Is Stored

• Our database, hosted by Cloudflare in the United States.
• Our analytics, hosted by PostHog in the United States.
• Our checkout and customer records, hosted by Systeme.io, whose operator is based in Ireland. Only your purchase history is stored there, not your answers or results.
• Your browser. While you take the assessment and buy, your answers, first name and email are saved in your browser’s local storage on our own domain, so the checkout and offer pages can be personalized. You can clear them at any time by clearing your browser’s site data.

8. How Long We Keep Consumer Health Data

• Customers: we keep your consumer health data until you ask us to delete it, so you can keep using your plan and member space.
• People who took the assessment but did not buy: we delete your consumer health data 12 months after you completed the assessment.
• Refunds: if your purchase is refunded, you lose access to the refunded products, but your consumer health data is not deleted automatically. We keep it until you ask us to delete it.

9. Your Rights

You have the right to:

• Confirm and access. Confirm whether we collect, share or sell your consumer health data, get a copy of it, and get a list of all third parties and affiliates with which we have shared it, with an email address or other contact for each one.
• Delete. Have your consumer health data deleted. We delete it from our records and our service providers’ records, and from archives and backups within 6 months. We also notify every service provider and third party that received it.
• Withdraw consent. Withdraw your consent to the collection and sharing of your consumer health data at any time.

These rights are free of charge, up to twice a year. If you live in Connecticut, you may also ask us to correct inaccurate data.

9.1 How to Make a Request

Email contact@bioage.app from the email address you used for the assessment or purchase, and say which right you want to exercise. To protect your data, we may ask you to confirm your identity, for example with a code sent to that email address. You may also use an authorized agent who has your signed permission.

We answer within 45 days of receiving your request. If we need more time, we may extend this once by 45 more days, and we will tell you why within the first 45 days.

9.2 How to Appeal

If we refuse your request, in whole or in part, you can appeal by emailing contact@bioage.app with “Appeal” in the subject line within a reasonable time after our answer. We answer your appeal within 45 days and explain our decision in writing. If we deny your appeal, you can file a complaint with your state attorney general.

10. How We Protect Consumer Health Data

• Only the people who need consumer health data to provide the Service can access it.
• Data is encrypted in transit and stored with a secure hosting provider.
• Member space access uses one-time sign-in codes, so there are no passwords to steal.
• Our service providers must protect the data under their contracts with us.

If a breach affects your consumer health data, we will notify you and the authorities as the law requires.

11. Children

The Service is for adults aged 18 and over. We do not knowingly collect consumer health data from anyone under 18. If you believe a minor has given us their data, contact us and we will delete it.

12. Changes to This Policy

We may update this policy from time to time. The “Last updated” date at the top shows when it last changed. If we want to collect, use or share consumer health data in a way this policy does not describe, we will ask for your consent first.

13. Contact

Address: BioQuest LLC, 75 E 3rd St, Ste 7, Sheridan, WY 82801, United States.
Email: contact@bioage.app