Privacy Policy

Dayhoff Technologies Inc. ("Dayhoff Health")

Version 1.0 | Effective Date: March 2, 2025 | Last Revised: March 2025

This Privacy Policy ("Policy") describes the data protection practices of Dayhoff Technologies Inc. and its affiliates (collectively, "Dayhoff," "we," "our," or "us"). It applies when you visit any Dayhoff website that links to this Policy (including www.dayhoffhealth.com and www.dayhoff.ai), use our mobile applications ("Apps"), submit a biological sample to our CLIA-certified laboratory, participate in research programs, or otherwise provide data to Dayhoff (collectively, the "Services"). This Policy is incorporated into our Terms of Use.

PLEASE READ THIS POLICY CAREFULLY. BY USING OUR SERVICES OR SUBMITTING A SAMPLE, YOU AGREE TO THE COLLECTION, USE, AND DISCLOSURE OF YOUR INFORMATION AS DESCRIBED HEREIN. IF YOU DO NOT AGREE, PLEASE DO NOT USE THE SERVICES.

Important: HIPAA and Health Information

Because Dayhoff operates a CLIA-certified laboratory that analyzes human fecal samples and produces health reports, much of the information you share with us — including your biological sample, sequencing data, and test results — may constitute Protected Health Information (PHI) governed by HIPAA. Our HIPAA Notice of Privacy Practices (available at dayhoffhealth.com/hipaa) supplements this Policy and controls in the event of any conflict with respect to PHI.

Table of Contents

  1. Definitions
  2. Information We Collect and Sources
  3. Biological Samples and Laboratory Data
  4. How We Use Your Information
  5. Research, Research Studies, and Study Participations
  6. Online Analytics and Advertising
  7. How We Disclose Your Information
  8. Your Rights and Choices
  9. How to Submit a Request
  10. How We Process Rights Requests
  11. State-Specific Privacy Disclosures
  12. International Privacy
  13. Children
  14. How We Protect Your Information
  15. Data Retention
  16. Third-Party Services
  17. Links to Other Websites
  18. Changes to This Policy
  19. Contact Us

1. Definitions

The following terms are used throughout this Policy and have the meanings set forth below:

  • Personal Information. Any information that identifies or could reasonably identify you, alone or in combination with other data.
  • Sensitive Personal Information. A subset of Personal Information including health data, microbiome data, genetic data, race/ethnicity, sexual orientation, and government-issued ID numbers.
  • Protected Health Information (PHI). Health information linked to you that is governed by HIPAA, including test results, medical records, and payment for healthcare.
  • Self-Reported Information. Information you voluntarily provide about your health, diet, lifestyle, symptoms, family history, and other personal traits via questionnaires, surveys, or direct communications.
  • Biological Sample. Your self-collected stool, saliva, blood, or other biological specimen submitted to Dayhoff for analysis using a Dayhoff collection kit.
  • Sample Data. Molecular data generated from your Biological Sample, including raw sequencing data, RNA and DNA reads, and microbial identification data.
  • Test Data. Information extracted from Sample Data and combined with Self-Reported Information to produce your personalized microbiome report and health recommendations.
  • De-identified Data. Samples or data from which all personal identifiers have been removed and replaced with a unique code, such that the data cannot reasonably be linked back to you without access to a separately held key.
  • Pseudonymized Data. Data from which identifiers have been replaced with an artificial pseudonym held separately under strong technical safeguards, such that re-identification is not possible without that additional information.
  • Aggregate Data. Data collected from a group of individuals and combined into summaries such that no specific individual can reasonably be identified.
  • Research. Internal data analysis and research conducted by Dayhoff using de-identified, pseudonymized, or aggregate data to improve the Services.
  • Research Study. A structured scientific study conducted by Dayhoff, using IRB-approved protocols, that may use individual-level data with your explicit consent.
  • Study Participation. An optional research collaboration between Dayhoff and a third-party institution (e.g., academic, non-profit, or commercial research partner), governed by a separate, study-specific Consent Form.

2. Information We Collect and Sources

2a. Information You Provide Directly

We collect information you provide when you:

  • Register an account or purchase a Dayhoff test kit
  • Submit a Biological Sample using a Dayhoff collection kit
  • Complete health questionnaires or Self-Reported Information forms
  • Contact customer support or communicate with us by email, chat, or phone
  • Participate in surveys, research, contests, or promotional programs
  • Connect with a healthcare provider through the Services
  • Submit employment applications

Specific types of information collected include:

  • Identifiers: name, postal address, email address, telephone number, date of birth
  • Billing information: shipping address, payment card information (collected by our payment processors; Dayhoff retains only the last four digits and expiration date for recurring subscriptions)
  • Commercial information: purchase history, transaction records, and healthcare provider details
  • Demographic information: gender, age, marital status
  • Self-Reported Information: symptoms, medical history, lifestyle habits, diet, medications, family history, and other health-related data you voluntarily disclose
  • User-generated content: photos, videos, signatures, and posts on public forums or shared with healthcare providers
  • Contact information for others: family members or emergency contacts you designate

2b. Sensitive Personal Information

Our testing services necessarily involve collection and processing of sensitive personal information, including:

  • Health and medical information — symptoms, medical history, lifestyle factors, prescriptions, mental health data, drug or alcohol use, genetics, treatment options, and insurance information
  • Biological Samples — human fecal (stool) specimens and potentially saliva, blood, or other samples you provide
  • Microbiome composition data — species identification, relative abundances, diversity metrics, and functional pathway data derived from your sample
  • Genetic and gene expression data — including RNA sequencing and microbial gene expression data generated from your sample
  • Information about your sex life and sexual orientation
  • Sensitive demographic data — race and ethnicity
  • Identity verification information — government-issued ID
  • Log-in credentials

Your Microbiome Data is Uniquely Yours

The analysis of your stool sample produces a microbiome profile that is uniquely and persistently associated with you. Dayhoff treats this data as sensitive health information subject to the highest level of protection under this Policy and our HIPAA Notice of Privacy Practices. We will not sell, license, or share your individual-level microbiome or genetic data for any commercial purpose without your explicit written consent.

2c. Information Collected Automatically

When you use our websites or Apps, we and our service providers automatically collect technical and usage data, including:

  • IP address, browser type and language, operating system, device type and identifiers
  • Pages visited, click-through paths, time on page, files downloaded, referring and exit URLs
  • General location derived from IP address (city, state, or postal code)
  • Mobile advertising identifiers (subject to your device settings)
  • Error logs, performance data, and other diagnostic information

We and our service providers use cookies, web server logs, SDKs, tracking pixels, and similar technologies to collect this data. Please see our Cookie Policy at dayhoffhealth.com/cookies for full details on your cookie choices.

2d. Information from Social Media and Third-Party Platforms

If you interact with us on social media (e.g., Facebook, Instagram, X/Twitter), log in via a third-party account, or connect the Services to a health or fitness platform (e.g., Apple Health), that platform may share data with us. You can prevent this by not initiating these connections.

2e. Information from Third-Party Sources

We may receive information about you from healthcare providers, analytics providers, marketing partners, advertising networks, and other third parties. This may be combined with information we collect directly from you.

2f. Chatbot and AI-Assisted Interactions

Our Services may include chatbot or AI-assisted customer support features. If you interact with these features, a record or transcription of your interaction may be retained by us or our service providers. By using the Services, you consent to this retention. Records of chatbot interactions are used only in a manner consistent with this Policy and are subject to the same data protection measures. We require our chatbot service providers to use interaction records only for the purpose of delivering their services to us.

3. Biological Samples and Laboratory Data

Because Dayhoff collects and analyzes human fecal samples in a CLIA-certified laboratory, our handling of biological specimens is governed by HIPAA, CLIA, and applicable state laboratory regulations. This section explains our practices with respect to your sample and derived data.

3a. Collection and Transport

Your stool sample is self-collected at home using a Dayhoff test kit and shipped to our CLIA-certified laboratory using pre-paid, biohazard-compliant collection materials. Collection kits contain only a unique sample ID code — your name and personal identifiers are not written on the collection materials. We strongly recommend following all instructions included with the kit to ensure sample integrity and validity.

3b. Laboratory Processing and De-identification

Upon receipt, your Biological Sample is immediately assigned a unique internal laboratory code and de-identified — your personal identifiers are separated from the sample and held in a separately secured system. All downstream testing, sequencing, and analysis are performed using only the unique laboratory code. This pseudonymization practice prevents your personal identity from being associated with your raw sample data except to the limited extent necessary to deliver your Test Results to you.

3c. Sample Data and Test Data Pipeline

Your sample undergoes next-generation sequencing (NGS) and related analyses to produce Sample Data. Dayhoff's proprietary AI and data analysis methods then process Sample Data together with your Self-Reported Information to produce Test Data, which is used to generate your personalized microbiome report and health recommendations.

3d. Physical Sample Retention and Disposal

Physical Biological Samples are retained for a limited period following analysis (typically 30–90 days) to allow for quality control and re-testing if required, unless you have expressly consented to longer retention for research purposes. After the retention period, samples are destroyed in accordance with applicable federal and state biohazard disposal regulations. You may request written confirmation of your sample's disposition by contacting privacy@dayhoff.ai.

3e. Storage of Electronic Data

Electronic Sample Data, Test Data, and associated health records are retained in our secure systems in accordance with HIPAA requirements and our data retention policy (see Section 15). Your test results remain accessible through your Dayhoff account for the duration of our retention period.

4. How We Use Your Information

Providing and Managing the Services

  • Analyze your Biological Sample and generate your personalized microbiome report
  • Deliver Test Results and health insights through the Services
  • Process payments, fulfill orders, and deliver test kits
  • Verify your identity and administer your account
  • Communicate with you about your test status, results, and follow-up care
  • Facilitate healthcare provider consultations connected to the Services
  • Provide customer support and troubleshoot technical issues

Improving the Services

  • Conduct internal Research using de-identified, pseudonymized, or aggregate data to improve laboratory methods, AI models, and product offerings
  • Analyze usage patterns to enhance the user experience
  • Validate and refine our microbiome sequencing and AI interpretation models
  • Externally published or shared research results will be presented in de-identified, aggregate form only

Advertising and Marketing

  • Communicate with you about promotions, new products, and Services (subject to applicable law and your preferences)
  • Provide more relevant advertising and personalized content where permitted
  • Measure the effectiveness of our advertising and marketing programs
  • We will not use your Sensitive Personal Information or test results for third-party advertising purposes

Legal and Compliance Purposes

  • Comply with applicable laws, regulations, and legal process
  • Establish, exercise, or defend our legal rights
  • Detect, prevent, and respond to fraud, security incidents, and illegal activity
  • Enforce our Terms of Use and other agreements

We may combine information from different sources for the purposes above. We may use Aggregate Data or De-identified Data for any lawful purpose without further notice to you.

5. Research, Research Studies, and Study Participations

Dayhoff distinguishes among three tiers of research use, each with different data protections and consent requirements:

5a. Internal Research (Default — No Additional Consent Required)

By using our Services, you consent to the use of your De-identified Data, Pseudonymized Data, and Aggregate Data for internal Research purposes. Internal Research includes:

  • Improving our data analysis methods and AI engine
  • Enhancing the accuracy and personalization of microbiome reports
  • Identifying connections between microbiome composition and health outcomes at a population level
  • Performing quality control and validating laboratory methods

Internal Research uses only de-identified, pseudonymized, or aggregate forms of your data — your personal identity is never associated with research outputs. Any externally published results of Internal Research will be presented in aggregate form that cannot be used to identify any individual.

Opt-Out of Internal Research

You may opt out of the use of your De-identified Data for Internal Research at any time by contacting studies@dayhoff.ai with the subject line "Research Opt-Out." Opting out will not affect the Services you receive. It may take up to 30 days to process your opt-out. Previously included de-identified data cannot be recalled from completed analyses.

5b. Dayhoff Research Studies (Opt-In — Explicit Consent Required)

From time to time, Dayhoff may conduct structured Research Studies — formal scientific studies governed by an IRB-approved protocol — that require use of individual-level data. Participation in Research Studies is strictly voluntary and requires your separate, explicit consent by way of a study-specific Consent Form presented to you before any individual-level data is used.

Consent Forms for Research Studies will clearly specify:

  • The purpose and scope of the study
  • The specific categories of data to be used
  • Whether data will be shared with any third parties and the identity of those parties
  • The duration of data use
  • How to withdraw consent

You may accept or decline any Research Study invitation. Declining will not affect your access to the Services.

5c. Study Participations (Optional — IRB-Approved, Separate Consent Form)

Study Participations are optional research collaborations between Dayhoff and third-party institutions — such as academic institutions, non-profit foundations, or commercial research partners — that are focused on a specific disease, condition, or population. Study Participations are governed by:

  • Independent Review Board (IRB) approval
  • A separate, study-specific informed Consent Form describing the study, collaborators, data use, and your rights
  • Contractual data use agreements between Dayhoff and each collaborating institution

We will contact you by email or through the Services with Study Participation invitations if we believe you may be a suitable candidate. You may accept, decline, or not respond to these invitations without affecting your Services. If you have accepted a Consent Form and later change your mind, you may withdraw your consent as described below.

5d. Withdrawing Research Consent

You may withdraw your consent for any Research Study or Study Participation at any time by submitting a written request to:

Email: studies@dayhoff.ai — Subject line: "Consent Withdrawal"
Mail: Dayhoff Technologies Inc., Studies Team, Suite 312, 750 North St. Paul St. 200, Dallas, TX 75201

Upon receipt of your withdrawal request, we will cease using your Individual-level Personal Information in any Research Study or Study Participation that begins more than 45 days after the date of your request. Research activities using your data that have already been completed or published prior to your withdrawal cannot be reversed or recalled. To the extent permitted by law, de-identified, pseudonymized, or aggregate data that cannot be linked back to you may continue to be used after withdrawal.

6. Online Analytics and Advertising

6a. Web and App Analytics

We may use third-party analytics services (including Google Analytics with Demographics and Interest Reporting, Google Signals, Metabase, Amplitude, and Mixpanel) to collect and analyze usage data via cookies and similar tools. These services help us understand how users navigate the Services, measure marketing effectiveness, and improve the user experience. You may opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on. To opt out of Google Signals, go to your device Settings > Google > Ads > turn on "Opt out of Ads Personalization."

6b. Targeted Online Advertising

The Services may integrate third-party advertising technologies (e.g., Google Ads, Facebook, TikTok, Criteo, Retention.com, PebblePost) that use cookies, pixels, and similar technologies to deliver relevant advertising on our Services and elsewhere. We may match your email address with advertising partners in de-identified or hashed form to improve ad relevance. You may opt out through:

  • Network Advertising Initiative: optout.networkadvertising.org
  • Digital Advertising Alliance: optout.aboutads.info
  • Your Online Choices: youronlinechoices.eu (EU users)
  • Specific third-party opt-outs: e.g., app.retention.com/optout; pebblepost.com/privacy-policy

We do not use your Sensitive Personal Information, Biological Sample data, or test results for targeted advertising purposes.

6c. Mobile Advertising

We may use third-party providers to deliver tailored in-app advertising. Each mobile operating system (iOS, Android) provides its own controls for opting out of personalized in-app advertising. Please refer to your device settings to exercise these controls.

6d. Do Not Track

We do not currently recognize browser-initiated Do Not Track (DNT) signals. However, we honor browser-based opt-out signals for targeted advertising as required by applicable state law.

7. How We Disclose Your Information

We disclose your information only as necessary for the stated purpose and as described below. We do not sell your personal information.

  • Affiliates and Subsidiaries. We may share information within the Dayhoff group to deliver Services, ensure consistent quality, and improve our products.
  • Healthcare Providers and Services. We disclose your information to healthcare providers for scheduling, delivering, and supporting healthcare services connected to the Services. Disclosures of PHI to providers are governed by our HIPAA Notice of Privacy Practices.
  • Partner Laboratories. Your Biological Sample and associated data may be transferred to partner CLIA-certified laboratories for testing or quality control. These laboratories are bound by contractual obligations to use your data only for the purposes described in this Policy.
  • Oversight and Physician Partners. For certain tests that require physician authorization or pre/post-test medical consultations, we share relevant information with our licensed physician oversight partners. Such disclosures are covered by existing contractual arrangements and are necessary to provide these Services. Oversight partners may use third-party service providers subject to data protection requirements we impose.
  • Service Providers. We share information with third-party service providers who perform services on our behalf, including data hosting, payment processing, shipping, customer support, analytics, security, and legal services. These providers are contractually prohibited from using your information for their own purposes.
  • Research Collaborators. Where you have accepted a study-specific Consent Form for a Study Participation, we may share Individual-level Personal Information with identified third-party research collaborators as specified in that Consent Form. See Section 5c.
  • Advertising Networks. See Section 6 for details on advertising-related disclosures.
  • Legal Purposes. We may disclose your information to courts, regulators, law enforcement, or other parties when required by law, subpoena, or court order, or when we have a good-faith belief that disclosure is necessary to protect our rights, your safety, or the safety of others.
  • Business Transfers. In connection with a merger, acquisition, or asset sale, your information may be transferred to a successor entity. We will notify you if your information becomes subject to a materially different privacy policy.
  • Public Forums. Information you post in public areas of our Services may be visible to other users and the public. Please exercise caution when using these features.
  • With Your Consent. We may disclose your information in other ways you direct us to or when we have obtained your explicit consent.
  • Aggregate/De-identified Data. We may create and share Aggregate Data or De-identified Data for research, public health, marketing, or other lawful purposes without further notice.

We Do Not Sell Your Health or Microbiome Data

Dayhoff does not sell, rent, or license your Personal Information, Biological Samples, Sample Data, or Test Data to any third party for their independent commercial use. We do not allow advertising partners to access your test results, microbiome profiles, or any other health data for targeting purposes.

8. Your Rights and Choices

Depending on where you live, you may have legal rights with respect to your information. State-specific rights are described in Section 11. All users have the following general choices:

8a. General Data Rights

  • Right to Know: what categories of personal information we collect, use, and disclose, and the specific pieces of information we hold about you
  • Right to Access: a copy of your personal information in a portable format, to the extent technically feasible
  • Right to Correct: inaccurate personal information we hold about you
  • Right to Delete: your personal information, subject to legal retention obligations

8b. Opt-Out of Sale / Targeted Advertising

As described in Section 6, Dayhoff allows certain third parties to receive information via cookies and pixels to enable targeted advertising. To opt out, visit the "Your Privacy Choices" page on our website or email privacy@dayhoff.ai. Opting out will not eliminate all advertising.

8c. Sensitive Data Opt-Out

You may limit our use of your Sensitive Personal Information for purposes beyond providing the Services you have requested. To exercise this right, visit our "Your Privacy Choices" page or email privacy@dayhoff.ai.

8d. Research Opt-Out and Consent Withdrawal

See Section 5 for detailed instructions on opting out of Internal Research (5a), declining Research Study invitations (5b), and withdrawing Study Participation consent (5d).

8e. Marketing Communications

You may opt out of promotional communications at any time by following the unsubscribe instructions in any email or by contacting privacy@dayhoff.ai. You will continue to receive operational communications necessary for the Services, such as test result notifications and account alerts.

8f. Non-Discrimination

Dayhoff will not discriminate against you for exercising any of your privacy rights. However, in some cases, exercising certain rights (such as requesting deletion of your data) may limit our ability to continue providing certain Services.

9. How to Submit a Request

You may submit a request to exercise your data rights through any of the following channels:

  • Web form: dayhoffhealth.com/privacy-request
  • Email: privacy@dayhoff.ai
  • Mail: Dayhoff Technologies Inc., Suite 312, 750 North St. Paul St. 200, Dallas, Texas 75201

Research consent withdrawal requests must be submitted separately to studies@dayhoff.ai (see Section 5d).

If you wish to have an authorized agent submit a request on your behalf, the agent must provide written proof of their authorization (such as a power of attorney). We may still contact you directly to verify your identity before processing the request. We will never ask you for your password, full payment card number, or other sensitive security credentials as part of an identity verification process.

10. How We Process Rights Requests

Upon receipt of your request, we will confirm receipt and begin evaluation. Please note:

  • We may require identity verification — typically two or more pieces of personal information to match against information we already hold. Verification data is used solely for that purpose.
  • We will respond within the timeframe required by applicable law (generally 45 days, extendable by an additional 45 days with notice).
  • We will inform you in writing if we reject a request, including the basis for rejection.
  • Certain information may not be subject to rights requests due to HIPAA, laboratory record retention laws, legal holds, or other applicable exemptions.
  • If we cannot verify your identity, we may be unable to process your request.

Appeals

If you disagree with our decision on a rights request, you may appeal by contacting privacy@dayhoff.ai with a clear description of your basis for disagreement. We will provide a written response. If you remain dissatisfied, you may file a complaint with your applicable state attorney general's office.

11. State-Specific Privacy Disclosures

11a. California Residents (CCPA / CPRA)

The CCPA and CPRA provide California residents with the following rights:

  • Right to Know: categories and specific pieces of personal information collected, sources, business purposes, and third parties to whom it is disclosed
  • Right to Delete: personal information we hold about you, subject to legal exceptions
  • Right to Correct: inaccurate personal information (documentation may be required)
  • Right to Opt-Out of Sale or Sharing: we do not sell personal information; you may opt out of sharing for advertising purposes via our "Do Not Sell or Share My Personal Information" page
  • Right to Limit Sensitive PI: direct us to limit use of sensitive personal information to purposes necessary to provide the Services or as otherwise permitted by law
  • Right to Non-Discrimination: we will not discriminate against you for exercising your rights
  • Authorized Agent: you may designate an authorized agent to make CCPA requests on your behalf; contact privacy@dayhoff.ai for the authorization form

PHI governed by HIPAA is not subject to CCPA. Your rights with respect to health data are governed by our HIPAA Notice of Privacy Practices.

11b. Colorado Residents (CPA)

Colorado residents have the following rights under the Colorado Privacy Act: right to confirmation and access; right to correct; right to delete; right to data portability; right to opt out of targeted advertising, sale of personal information, and automated profiling producing legal or significant effects. Dayhoff does not engage in automated profiling that produces such effects.

Colorado residents may appeal any decision on a rights request to privacy@dayhoff.ai, and thereafter to the Colorado Attorney General at coag.gov/file-complaint.

11c. Texas Residents (TDPSA)

Texas residents have rights under the Texas Data Privacy and Security Act, including rights to access, correct, delete, and obtain a portable copy of personal information, and to opt out of targeted advertising and sale of personal information. Dayhoff will seek your consent before processing Sensitive Personal Information for purposes beyond providing the requested Services, and you may withdraw consent at any time by contacting privacy@dayhoff.ai.

11d. Nevada Residents

We do not sell personally identifiable information for monetary consideration as defined under Nevada law. Nevada residents may submit an opt-out request to privacy@dayhoff.ai. We will honor such requests in the event our practices change.

12. International Privacy

Dayhoff's Services are currently directed at individuals in the United States. If you are located outside the United States and choose to use the Services, please be aware that your information will be transferred to, stored, and processed in the United States, where our servers and laboratory are located. The privacy laws of the United States may differ from those in your country.

For individuals in the European Union, European Economic Area, or United Kingdom: Our processing of your personal data is based on your consent (for sensitive data) and our legitimate interests (for other data). You may have rights under the GDPR or UK GDPR including rights of access, rectification, erasure, restriction, portability, and objection. Please contact privacy@dayhoff.ai to exercise these rights or for more information. You may also lodge a complaint with your local supervisory authority.

13. Children

Our Services are not directed to individuals under the age of 18. Because our testing services involve collection of biological specimens and production of health diagnostic reports, we require users to be at least 18 years of age to create an account and independently order a test kit.

Parents or legal guardians may order a test kit on behalf of a minor through their own account, but minors may not create independent accounts. We do not knowingly collect personal information from children under 13. If you become aware that a child under 13 has provided us with personal information, please contact privacy@dayhoff.ai immediately so that we may delete such information. We will not knowingly retain personal information from children under 13.

14. How We Protect Your Information

Dayhoff implements technical, administrative, and organizational security measures appropriate to the nature and sensitivity of the information we process, including:

  • Encryption of data in transit (TLS) and at rest (AES-256 or equivalent)
  • Immediate pseudonymization of Biological Samples upon receipt at the laboratory
  • Role-based access controls and least-privilege principles
  • Regular security testing, vulnerability assessments, and penetration testing
  • Third-party SOC 2 Type II audits
  • HIPAA-compliant data handling and Business Associate Agreements with service providers
  • Employee privacy and security training
  • Incident response procedures including breach notification protocols

No method of electronic storage or Internet transmission is 100% secure. We cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account password. We will never ask you for your password via email or phone. The information you disclose in public areas of the Services may be viewed by anyone.

15. Data Retention

We retain your information for as long as necessary to fulfill the purposes in this Policy and as required by applicable law. Factors affecting retention duration include:

  • The nature and sensitivity of the data
  • The purposes for which data was collected and used
  • HIPAA and CLIA laboratory record retention requirements (typically a minimum of 2–10 years for lab records, depending on jurisdiction and test type)
  • Legal holds, litigation, and regulatory obligations
  • Your account status and activity

Physical Biological Samples are retained for 30–90 days post-analysis for quality control and re-testing purposes, then destroyed under applicable biohazard disposal regulations, unless you have separately consented to longer retention for Research Studies. Electronic test results and health records may be retained longer as required by HIPAA and laboratory law.

We may anonymize personal information at the end of its retention period rather than deleting it. Anonymized data is no longer considered personal information and may be used without further notice.

16. Third-Party Services

This Policy does not apply to third-party websites, applications, or services linked to or integrated with our Services, including healthcare providers who use the Services, device manufacturers, or social media platforms. We are not responsible for the privacy practices of these third parties. We urge you to review their privacy policies before sharing your information. PHI disclosures to healthcare providers are governed by our HIPAA Notice of Privacy Practices.

17. Links to Other Websites

Our Services may contain links to third-party websites. Clicking a link takes you outside our Services and subjects you to that site's privacy policy. We are not responsible for the content or privacy practices of any linked site. We encourage you to review the privacy policy of every website you visit.

18. Changes to This Policy

We may revise this Policy at any time by posting a revised version on our website. For material changes to the way we collect or process your personal information, we will provide prominent notice on our website and, where required by applicable law, notify you by email or through the Services. The version number and effective date at the top of this Policy will reflect any updates. Your continued use of the Services after the effective date of a revised Policy constitutes your acknowledgment of those changes.

19. Contact Us

For questions about this Policy or Dayhoff's privacy practices, to exercise your data rights, or to withdraw research consent, please contact us:

Dayhoff Technologies Inc.
Suite 312, 750 North St. Paul St. 200
Dallas, Texas, USA 75201

General Privacy Inquiries / Data Rights: privacy@dayhoff.ai
Research Consent / Study Opt-Out: studies@dayhoff.ai
Privacy Request Form: dayhoffhealth.com/privacy-request
HIPAA Notice of Privacy Practices: dayhoffhealth.com/hipaa
Cookie Policy: dayhoffhealth.com/cookies