Privacy Policy

1. What Information We Collect

ImmuneSpan collects the minimum information necessary to provide you with a personalized wellness education experience. We collect information in three categories:

• Account Information: Your email address, password (stored as a salted hash — never in plaintext), account creation date, and subscription tier. If you choose to provide it: first name and age.
• Biomarker Values You Enter: The laboratory biomarker values you manually type into the ImmuneSpan assessment forms (e.g., WBC, NLR, CRP, albumin). You control exactly what you enter. These values are associated with your account and stored in our database to generate and retrieve your wellness report.
• Usage Data: Anonymized analytics about how you use the platform — which sections you view, time spent, and feature interactions. This data is collected to improve the product and is never linked to personally identifying information in our analytics system.
• Payment Information: ImmuneSpan does not store your credit card number. Payment processing is handled entirely by Stripe. We receive only a tokenized customer ID and transaction confirmation status.

2. How We Use Your Information

We use your information for three purposes only:

• To generate your wellness report: Your biomarker values, age, and account details are processed by the ImmuneSpan Engine to calculate your Wellness Age, archetype assignment, and Five Biological Dimensions profile. This is the core service you paid for.
• To improve the platform: Aggregated, de-identified analytics data helps us understand which features are useful and identify technical issues. No individual biomarker values are used in aggregate product analysis.
• To communicate with you: We use your email address to deliver your report, send product updates you have opted into, and provide Tier 3 check-in reminders. You may unsubscribe from non-essential communications at any time.

Your identified data is NEVER sold. De-identified research data is only shared with partners if you explicitly opt in to the Research Network. ImmuneSpan does not sell, license, rent, or share your personal information or identified biomarker data with any third party for any commercial purpose. The Research Network program is described in full in Section 8 below.

3. Zero-Knowledge Architecture

This architectural design decision was made deliberately to eliminate the risk of ImmuneSpan being classified as an IVD accessory under FDA regulations (IS-REG-002 compliance). It also means your original lab report remains 100% private on your device.

For the assessment form itself, you manually type selected values into our web form. You choose which values to enter. You are not required to enter any value, and partial panels are fully supported.

4. Data Storage and Security

Your data is stored in Supabase PostgreSQL, a SOC 2 Type II compliant database platform. We have implemented the following security measures:

• Encryption at rest: All database records are encrypted at rest using AES-256.
• Encryption in transit: All data transmitted between your browser and our servers is encrypted via TLS 1.3.
• Row-Level Security (RLS): Supabase Row Level Security policies ensure that each user account can only access its own data. No cross-account data access is technically possible at the database level.
• HIPAA-Conscious Design: While ImmuneSpan is a general wellness platform and not a HIPAA-covered entity, we have adopted HIPAA-aligned data handling practices as a design standard — including minimum necessary data collection, access controls, and audit logging.
• No EHR Integration: ImmuneSpan maintains no connections to electronic health record systems, hospital networks, or clinical data infrastructure.

5. Third-Party Services

ImmuneSpan uses a small number of trusted third-party services to operate the platform. Each service is governed by a data processing agreement and handles data only as necessary to fulfill its specific function:

Service	Purpose	Data Shared	Privacy Policy
Stripe	Payment processing	Email, payment card data (Stripe only — never reaches ImmuneSpan servers)	stripe.com/privacy
Klaviyo	Email communications	Email address, first name, tier, report delivery	klaviyo.com/legal/privacy-notice
PostHog	Product analytics	Anonymized usage events (UUID only — no name, email, or biomarker values)	posthog.com/privacy
Supabase	Database and authentication	All account and assessment data (encrypted, RLS protected)	supabase.com/privacy
AWS S3	Compute, static file hosting, and encrypted Research Network data store	Report HTML files (by UUID); de-identified Research Network records (opt-in only, encrypted)	aws.amazon.com/privacy

6. Your Privacy Rights

You have the following rights with respect to your personal information. To exercise any of these rights, contact us at privacy@immunespan.com.

We will respond to all privacy rights requests within 30 days. We do not charge a fee to exercise your rights.

7. Data Retention — Two-Tier System

ImmuneSpan operates a two-tier data handling system. The tier that applies to you depends on what you choose at the time your report is delivered.

Tier	What Happens to Your Data	Default?
Standard	Your biomarker values and report are used solely to generate and deliver your report. All identified session data is destroyed immediately after delivery. Nothing is retained on ImmuneSpan servers beyond what is necessary to serve your report to you.	Yes — default for all users
Research Network	You explicitly opt in at report delivery. Your data is immediately de-identified (one-way hash, PII stripped) and the de-identified record is stored encrypted on AWS S3. Details in Section 8.	Opt-in only

Account information (email, subscription tier, payment confirmation) is retained for as long as your account is active and for 7 years afterward as required for tax compliance. If you request account deletion, we will delete all personal information and biomarker data within 30 days. Anonymized, aggregated analytics data (with no personal identifiers) may be retained indefinitely for product improvement purposes.

8. Research Network — Optional Data Contribution Program

8.1 What Is the Research Network?

The Research Network is an opt-in program that allows ImmuneSpan users to contribute de-identified wellness data to a curated research dataset. This dataset may be used for internal research, licensed to pharmaceutical companies, or shared with academic institutions under IRB-approved research protocols.

If you opt in, your data contributes to population-level scientific understanding of immune aging, inflammaging, and biomarker patterns — while your identity remains permanently and irreversibly disconnected from that contribution.

8.2 How Opt-In Works

At the time your report is delivered, you will be presented with a clear, plain-language opt-in screen. The opt-in requires an affirmative action (checking a box or clicking a confirmation button). There is no pre-checked default. If you take no action, you are in the Standard tier and no data is retained.

You may also opt out of a previous opt-in at any time by contacting privacy@immunespan.com. See Section 8.6 for the limits of what opting out can accomplish.

8.3 What Gets Retained

If you opt in, the following de-identified data elements are retained and stored in the Research Network dataset:

• Biomarker values you entered (e.g., WBC, NLR, CRP, albumin, HbA1c, and any other values submitted)
• Your wellness archetype assignment (e.g., "Jade Rabbit")
• Your Wellness Age score
• Age range (5-year bucket, e.g., "45–49") — not your exact date of birth
• Biological sex (if provided)
• 3-digit ZIP code prefix (e.g., "331") — not your full ZIP or address
• A one-way cryptographic hash of your user_id — this is a randomly generated identifier that cannot be reversed to identify you

8.4 What Is Destroyed Immediately

Before the de-identified record is written to the Research Network dataset, the following fields are permanently and irreversibly deleted:

• Your name
• Your email address
• Your full date of birth (replaced by age range bucket)
• Your exact address (replaced by 3-digit ZIP prefix)
• Your original user_id (replaced by a one-way cryptographic hash)

8.5 One-Way De-identification

8.6 How Data May Be Used

De-identified Research Network data may be used for the following purposes only:

• ImmuneSpan internal research to improve the Methuselah Engine scoring model
• Academic research publications — data contributed to peer-reviewed studies will be published at the population level with no individual-level records released
• Licensing to pharmaceutical or biotech companies for research purposes, under written agreements requiring IRB-approved research protocols and prohibiting re-identification attempts
• Licensing to academic institutions under similar IRB-approved protocols

De-identified Research Network data will never be sold to data brokers, used for advertising targeting, shared with insurance companies, or used for any purpose that could result in a determination about a specific individual's insurability, employment, or creditworthiness.

8.7 Your Rights After Opting In

If you opt into the Research Network and later wish to withdraw, you may contact us at privacy@immunespan.com at any time. Withdrawal will immediately stop any future use of your record for new research activities or new licensing arrangements.

However, please understand an important technical limitation: because de-identification is one-way and irreversible, and because no link between your identity and your de-identified record is maintained, ImmuneSpan cannot retrieve, locate, or delete a specific de-identified record on your behalf after it has been written to the Research Network dataset. The de-identified record is not linked to you — which is precisely what makes the program privacy-protective.

If your de-identified record has already been included in a research publication or licensed dataset, withdrawal cannot remove it from those uses. Withdrawal prevents all future uses from the point of your withdrawal request.

8.8 IRB Commitment

ImmuneSpan commits that no de-identified Research Network data will be shared with any external partner — pharmaceutical, academic, or otherwise — without a documented IRB (Institutional Review Board) approval covering the specific research protocol under which the data will be used. ImmuneSpan will maintain records of all IRB approvals and external data sharing agreements and will make summary information about active research uses of the dataset available upon written request to privacy@immunespan.com.

9. Children's Privacy

ImmuneSpan is intended for adults 18 years of age and older. We do not knowingly collect personal information from individuals under the age of 18. If we learn that we have collected personal information from a minor, we will delete it promptly. If you believe a minor has provided us with personal information, please contact us at privacy@immunespan.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email and update the effective date at the top of this page. Your continued use of ImmuneSpan after a material change constitutes acceptance of the updated policy.

11. Contact Us