Legal
Vifexa may update this policy from time to time. The most current version is always published at this URL. Material changes are communicated by email.
Effective date: July 30, 2026 Version: 1.7
Vifexa LLC ("Vifexa," "we," "us," or "our") takes your privacy seriously. This Privacy Policy explains what data we collect, how we use it, and your rights.
Account data: Name, email address, and password hash (managed by our authentication provider).
Contact & communications: Phone number (optional, if you provide it) and your email and SMS communication preferences, including timestamped records of each opt-in and opt-out.
Health profile: Age, sex, weight, height, activity level, diet type, sleep, stress level, medications (free text), and health goals — all entered voluntarily.
Bloodwork data: Lab markers, reference ranges, and lab metadata (draw date, lab company) extracted from your uploaded reports, plus the original uploaded file, stored securely in your account. Uploaded reports may contain personal identifiers printed on them (name, date of birth, address, medical record number); we do not extract or use these identifiers, and we redact them before any AI processing — but they remain part of the stored file until you delete the upload, which you can do at any time.
Usage data: Log files, device type, browser, IP address, and feature-interaction events. For signed-in users these events are linked to your account through our product-analytics provider to understand product usage; we never send your bloodwork or health-profile data to it. We do not collect analytics from visitors located in the EU/EEA, UK, or Switzerland.
Payment data: Handled entirely by our PCI-compliant payment processor. We never see or store your full card number.
Your health data is processed by our AI service provider. Before any data is transmitted:
Redaction is automated and verified, but no automated process is perfect; in rare cases an identifier in an unusual format may not be caught. We do not use your identified health data to train AI models.
We do not sell your personal data. We share data only with:
Advertising measurement: If we advertise on social media or other advertising platforms, we may share limited conversion signals with those platforms so we can measure whether our ads work: a one-way hashed identifier (such as a hash of your email address) and a generic event name (for example, that an account was created or that an order was placed, with its dollar value). We never share your lab results, biomarker values, health profile, or the contents of your supplement plan with advertising platforms, and we do not use your health information to build advertising audiences. You may opt out of advertising-measurement sharing at any time by emailing support@vifexa.com.
Text messaging (SMS): If you expressly opt in, we send recurring automated marketing and account texts through our messaging provider. Your phone number is used only to send the messages you signed up for and to measure their delivery, and is never sold. Our website uses cookies and session data to keep track of items you put into your cart, including when a cart has been abandoned; if you have opted in to texts, this information may be used to determine when to send you a cart reminder by text message. Text messaging originator opt-in data and consent are never shared with, or sold to, any third party. You can opt out at any time by replying STOP to any message; message and data rates may apply.
We implement industry-standard security measures including:
Breach notification: Vifexa is not a HIPAA-covered entity; instead, as a vendor of personal health records we are subject to the FTC's Health Breach Notification Rule. If a breach of security results in unsecured identifiable health data being acquired without authorization, we will notify affected users and the FTC without unreasonable delay and no later than 60 calendar days after discovery, describing what happened, what data was involved, and what we are doing about it.
You have the right to:
To exercise any of these rights, email support@vifexa.com. We will respond within 30 days.
California residents (CCPA): You have additional rights to know, delete, and opt out of sale of personal information. We do not sell personal information.
Consumer health data (Washington, Nevada, and similar state laws): Some states, including Washington (My Health My Data Act) and Nevada (SB 370), give consumers specific rights over "consumer health data." The bloodwork results, biomarker values, and health-profile details you provide are consumer health data under these laws. For all users, regardless of state: we collect and process your health data only with your consent, requested separately from your acceptance of our Terms (the AI-analysis consent at upload), and analysis does not proceed without it; we do not sell consumer health data or share it with third parties for their own use; you may withdraw consent and delete any upload or your whole account at any time as described in Sections 5 and 7, with deletion requests extending to our service providers; and you may request a list of the third parties with whom your data has been shared, as described in Section 4. Washington residents may appeal a refused request by replying to our response, and may contact the Washington Attorney General if the appeal is unsuccessful.
Our service is not directed to children under 13, and primary accounts require you to be at least 18. Family member profiles are created and managed by the adult account holder. Bloodwork analysis is available only for family members 13 and older; children under 13 may receive age-appropriate standard daily products, and we do not provide lab-based analysis for them.
We may update this Privacy Policy from time to time. The current version is always available at vifexa.com/privacy. For material changes, we will notify you by email and, where required, seek your renewed consent.
Vifexa LLC 418 Broadway #7583 Albany, NY 12207 support@vifexa.com