Version 1.1. Effective date September 7, 2026
Effective date September 7, 2026. BioWellth, Inc. ("BioWellth", "we") operates biowellth.ai, a wellness platform that helps you understand your blood test results and related wellness information. This policy describes what we collect, why, where it goes, and the choices you have. BioWellth is a wellness and educational service. It does not diagnose, treat, cure, or prevent any disease.
Account information such as your name, email address, and date of birth. Wellness information you choose to provide, including uploaded blood test reports, cycle and life stage information, dietary preferences, supplements, wellness goals, and notes you add for context. Information generated for you, including transcribed results, wellness interpretations, scores, and trends. Sana conversations, meaning your questions to our AI companion and its responses. Basic technical information needed to run the service, such as login and security records.
To transcribe and interpret your reports against functional wellness ranges. To show your results, trends, and wellness plans over time. To answer your questions through Sana when you choose to use it. To keep your account secure and the service working. To meet our legal obligations. We do not use your health information for advertising. We do not sell your health information.
Report interpretation is performed with Anthropic, whose Claude API processes your uploaded report together with the profile context needed to read it accurately for you. That context is limited to these categories. Your age, cycle and life stage information, dietary pattern, supplements, wellness goals, and any conditions or context notes you have added. Anthropic processes this primarily on infrastructure in the United States.
Sana runs on Microsoft Azure AI Foundry. When you use Sana, your questions and BioWellth information relevant to your question may be processed by Microsoft through Azure AI Foundry to generate a response. Sana conversations are stored by Microsoft until you delete your Sana history or delete your account. Sana processing may occur in Microsoft data center regions globally.
Sana remembers between conversations. After a conversation ends, an automated process reads it and updates a short health profile for you, covering things like the concerns, conditions, allergies, medications, goals, and recurring symptoms you have mentioned, along with how you prefer Sana to talk with you. This profile is generated by an AI model on Microsoft Azure, stored with your account, and read by Sana at the start of each new conversation so she does not ask you the same things twice, and kept while your account is active. It is not shared with anyone else. Deleting your Sana history deletes this profile. Deleting your account deletes it too.
Our AI service providers do not use your information to train their general purpose AI models or for their own independent commercial purposes. They may process information as necessary to provide the services, maintain security, prevent abuse, enforce their usage policies, and comply with law.
Microsoft operates automated abuse monitoring systems for Azure AI services. In limited circumstances, prompts or responses may be retained for abuse detection and may be reviewed by authorized personnel. This processing is separate from model training and is used for security and abuse prevention.
We use Resend to send transactional account emails, such as account confirmation, password reset, and sign-in emails. Resend receives your email address, display name, and the contents of the transactional email needed to deliver it. Resend may use Amazon Web Services/Amazon SES as its delivery infrastructure.
Your account and wellness information is stored with Supabase in Mumbai, India. AI processing occurs with the providers and in the locations described in section 3. This means some of your information is processed outside India and outside the United States, as described above.
You can use BioWellth without Sana. Sana asks for your separate consent the first time you use it, and you can withdraw that consent at any time in your settings. Withdrawing Sana consent stops Sana and stops further processing of your Sana history. You can separately delete your Sana conversation history, which deletes the stored conversations at Microsoft and our copies. You can delete individual reports. You can delete your entire account. You can also reach us at support@mybiowellth.com for any of these requests.
When you delete your account, we delete your information from our active systems promptly. Our AI providers then delete their copies on their own schedules. Anthropic deletes report processing inputs and outputs up to 30 days after processing. Microsoft retains Sana related content for up to 30 days for abuse monitoring. Content flagged by a provider's safety systems may be retained longer under that provider's policy, for security, abuse prevention, or legal compliance. Residual copies may persist briefly in secure, access restricted backups until they are overwritten in the normal cycle, and our database backups are overwritten on a rolling basis of about seven days. Backups do not include your uploaded report files, which are deleted immediately and are not recoverable from backup.
BioWellth is available to adults 18 and over. We ask for your date of birth to confirm you are 18 or older and to read your results accurately for your age. Accounts identified as under 18 are refused and their signup records are deleted promptly.
We do not use your identifiable health information to improve our products. Any analysis we perform for improvement uses aggregated or de identified information under our internal de identification standard, which prohibits re identification.
We and our service providers may disclose information when required by law, legal process, or a lawful governmental request.
If BioWellth is involved in a merger, acquisition, financing, reorganization, or sale of assets, personal information may be transferred as part of that transaction, subject to this policy's protections and applicable law. Any successor will be required to honor materially equivalent protections for your information. Nothing in this section permits the sale of your health information.
For users in India, we process personal data consistent with the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025. You have the rights described in that law, including notice, consent, withdrawal, and erasure, exercised through the controls in section 5 or by contacting us.
We will update this policy when our practices change, and the current version will always be available on our site. Questions and requests go to support@mybiowellth.com.