1. Who we are and what this covers

This policy explains how Biohacking Bestie LLC ("we," "us," "our") collects, uses and shares personal information through biohackingbestie.com, our course and program pages, the Bestie app, our emails and texts, our community, and our social media pages (the "Services"). It also covers information we receive when you buy our products through Amazon, TikTok Shop or another marketplace.

Cycle, symptom and other health information that Washington, Nevada and Connecticut residents give us is also covered by our separate Consumer Health Data Privacy Policy, included at the end of this document.

At a glance: We use your information to ship your orders, run your courses and app, personalize your cycle-synced plan, and send you marketing you can opt out of. We use advertising cookies and pixels on our website, which some state laws call "selling" or "sharing"; you can opt out. We never sell your health data, and we never use cycle, symptom or food logs for advertising.

2. Information we collect

3. How we use your information

• Provide the Services: process and ship orders, manage subscriptions, run courses, the app, live calls and the community, and provide customer support
• Personalize your experience: suggest workouts, recipes, macros and supplements for your cycle phase and goals, and answer your Ask Aggie questions
• Communicate with you: order and subscription notices, renewal reminders, program updates and, with your consent where required, marketing emails and texts
• Advertise and measure: show our ads on other sites and social platforms and measure how they perform, using website and device data only, never health data (section 5)
• Improve and protect: analyze how the Services are used, fix bugs, develop new features, prevent fraud, and keep the Services secure
• Meet legal obligations: keep tax and transaction records, respond to lawful requests, and enforce our Terms

We use health and wellness data only to provide and improve the features you use, and only with your consent where the law requires it. The AI providers behind Ask Aggie are contractually barred from using your inputs to train their models.

Marketplace orders. We use information from Amazon, TikTok Shop and other marketplace orders only to fulfill, ship and support those orders, handle returns, and meet tax and legal obligations, as each marketplace's data policies require. We do not use it for marketing, do not add marketplace buyers to our email or SMS lists, and do not combine it with other data for advertising unless you separately create an account with us or opt in.

4. How we share information

We share personal information only as described here:

• Service providers who work for us under contract and may use the data only for us: e-commerce and course platforms (Shopify, Kajabi), payment processors (Stripe, Shopify Payments, Apple, Google), fulfillment and shipping partners, email and SMS providers, customer support tools, cloud hosting, analytics, and AI providers that power Ask Aggie
• Advertising and analytics partners such as Meta (Facebook and Instagram), TikTok and Google, which receive website and device data through cookies and pixels (section 5). They never receive app health data
• Marketplaces you buy through (Amazon, TikTok Shop), to the extent needed to fulfill and support your order
• Coaches and practitioners in programs you join (for example, a live naturopathic doctor call), only with the information you choose to share in that program
• Legal and safety: when required by law or to protect rights, safety and property
• Business transfers: if we are involved in a merger, sale or financing, subject to this policy
• With your consent or at your direction, for example when you connect Apple Health or post in the community

5. Cookies, pixels and advertising

Our website uses cookies, pixels (including the Meta Pixel and TikTok Pixel), tags and similar tools to keep you signed in, remember your cart, understand how the site is used, and show and measure our ads on other platforms. Our app uses software development kits (SDKs) for analytics and crash reporting only; the app contains no advertising SDKs.

We do not sell personal information for money. Letting ad partners collect website data for targeted advertising may count as "selling" or "sharing" under California and other state laws. You can opt out:

• Click "Your Privacy Choices" or "Do Not Sell or Share My Personal Information" in our website footer
• Turn on Global Privacy Control (GPC) in your browser; we treat it as an opt-out for that browser
• Change your choices anytime under "Cookie Settings" in the footer
• Use the industry tools at optout.aboutads.info and the ad settings in your Meta, TikTok and Google accounts

Opt-outs apply to the browser and device you use. We do not respond to "Do Not Track" signals, because there is no common standard for them, but we do honor GPC.

6. Email and text messages

Email. When you buy from us or create an account, we may send you service emails about your order, subscription or account. We send marketing emails only to people who have signed up or bought from us on our website, and every marketing email includes an unsubscribe link, which we honor within 10 business days.

Text messages. We send marketing texts only with your express written consent, which you give by entering your number and ticking the SMS box at checkout or on a sign-up form. Consent is not a condition of purchase. Message frequency varies. Message and data rates may apply. Reply STOP to cancel at any time and HELP for help. We do not share your phone number or SMS consent with third parties for their own marketing.

7. Health and wellness data

Cycle, period, symptom, fertility, pregnancy, weight, food and connected-device data is sensitive. Here is how we protect it:

• We collect it only to run the features you use, with your consent where the law requires it, and you can change your choices in Settings > Privacy in the app
• We never sell it, and we never use it or share it for advertising
• We do not share it with anyone except service providers who run the app for us, or people you choose to share it with
• You can delete your logs or your whole account at any time in the app or by emailing team@biohackingbestie.com
• Washington, Nevada and Connecticut residents have more rights under our Consumer Health Data Privacy Policy below
• If health data is ever accessed or disclosed without authorization, we will notify you as the law requires

The Bestie app is not a medical device, and we are not a healthcare provider covered by HIPAA.

8. Your choices and rights

Everyone. You can update your account details, unsubscribe from marketing emails using the link in any email, reply STOP to texts, turn off app notifications, and delete your account in the app.

US state privacy rights. Depending on where you live (including California, Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, Virginia and other states with privacy laws), you may have the right to:

• Know and access the personal information we hold about you, and get a portable copy
• Correct inaccurate information
• Delete your information
• Opt out of the "sale" or "sharing" of your information, of targeted advertising, and of profiling that produces legal or similarly significant effects
• Limit our use of sensitive information (such as health data) to what is needed to provide the Services
• Appeal if we deny your request

We will not treat you differently for using these rights. To make a request, use our [privacy request form] or email team@biohackingbestie.com with "Privacy Request" in the subject line. We will verify your identity by matching information we already have, and respond within 45 days (we may extend once by 45 days and will tell you if so). You can use an authorized agent, who must give us your signed permission. If we deny your request, you can appeal by replying to our decision; if you are still unhappy, you can contact your state attorney general.

California notice at collection. Section 2 lists the categories we collect, section 3 why, and section 4 who receives them. In the past 12 months we may have "sold" or "shared" identifiers, device data and internet activity to advertising partners for targeted advertising. We have not sold or shared sensitive personal information, and we do not knowingly sell or share data of anyone under 16. We keep each category for the periods in section 9. California residents can also ask once a year for information about disclosures for direct marketing ("Shine the Light").

Financial incentives. Our welcome discount, loyalty rewards and referral program give you a discount in exchange for your email, phone number or purchase history. You can join or leave them at any time. We value the data at roughly the cost of the discount we give, based on what it costs us to reach a new customer through advertising.

9. How long we keep information

We keep information as long as we need it for the purposes in this policy: account and app data while your account is active; order records for 7 years for tax and accounting; marketing data until you unsubscribe plus a suppression record so we do not contact you again; and marketplace order data only as long as the marketplace's policies and our tax obligations require. App health logs are deleted within 30 days after you delete them or close your account, except for backups that are overwritten on a regular schedule.

10. Security

We use administrative, technical and physical safeguards, including encryption in transit and at rest, access controls, and vendor security reviews. No system is completely secure, so please use a strong, unique password.

11. Children

The Services are for adults 18 and over. We do not knowingly collect information from children under 13, and we do not direct any part of the Services to children. If you think a child has given us information, contact team@biohackingbestie.com and we will delete it.

12. International users

We are based in the United States, and your information is processed here. If you are in the UK, EU, Canada, Australia or another region with its own privacy law, you may have additional rights, including the right to access, correct, delete and port your data and to object to or restrict processing. Our legal bases for processing under the UK and EU GDPR are: performing our contract with you, your consent (for health data and marketing), and our legitimate interests in running and improving the Services. Contact team@biohackingbestie.com to use these rights, and you may also lodge a complaint with your local data protection authority.

13. Changes to this policy

We will post any update here with a new "Last updated" date. For material changes, especially to how we use health data, we will notify you by email or in the app and ask for your consent where the law requires it.

14. Contact us

Biohacking Bestie LLC, 25 First Ave SW, STE A, Watertown, SD 57201 · team@biohackingbestie.com ·

ADDITIONAL PRIVACY PROTECTIONS

Consumer Health Data Privacy Policy

Last updated: November 11, 2026

This policy applies to residents of Washington, Nevada and Connecticut and to anyone whose consumer health data we collect in those states. It supplements our Privacy Policy under the Washington My Health My Data Act, Nevada SB 370 and the Connecticut Data Privacy Act. Where the two conflict, this policy controls for consumer health data.

1. Consumer health data we collect

• Menstrual cycle dates, period logs, cycle phase predictions and symptom logs
• Pregnancy, postpartum, fertility and reproductive health goals and status
• Weight, body measurements and body composition you enter
• Food logs, macros and food photos you upload to Ask Aggie
• Workout logs and fitness goals
• Sleep, activity and heart-rate data you choose to share from Apple Health or Garmin
• Supplement use and quiz answers about your health
• Questions you ask Ask Aggie that reveal a health condition or goal
• Inferences we draw from the data above to personalize your plan, such as your likely cycle phase

2. Why we collect it

We collect consumer health data only to provide the Bestie app and program features you choose: cycle tracking and predictions, cycle-synced workout, recipe, macro and supplement suggestions, Ask Aggie answers, and progress tracking. We also use it to fix bugs and improve those features, and to meet our legal obligations.

3. Where it comes from

You give it to us directly in the app, in course quizzes and in questions to Ask Aggie, or you authorize Apple Health or Garmin to share it with us.

4. How we share it

We share consumer health data only with:

• Service providers who host and run the app and the AI behind Ask Aggie for us, under contracts that bar them from using it for any other purpose, including training AI models
• Coaches or practitioners in a program you join, only with the data you choose to share in that program
• Anyone you direct us to share it with
• Law enforcement or regulators when the law requires it

We do not sell consumer health data, and we will never sell it without your separate written authorization. We do not share it with advertising partners, and we do not use it for targeted advertising.

5. Your rights

You have the right to:

• Confirm whether we collect, share or sell your consumer health data, and get a list of everyone we have shared it with
• Access and get a copy of it
• Withdraw your consent to collection or sharing
• Delete it, including from our service providers and from backups within the time the law allows

To use these rights, email team@biohackingbestie.com with "Health Data Request" in the subject line, or use Settings > Privacy in the app. We will verify your identity using information we already have and respond within 45 days. You can use an authorized agent with your signed permission. If we deny a request, you can appeal by replying to our decision. Washington residents who are still unhappy can contact the Washington Attorney General; Connecticut residents, the Connecticut Attorney General; Nevada residents, the Nevada Attorney General.

6. Contact

Biohacking Bestie LLC, 25 First Ave SW, STE A, Watertown, SD 57201 · team@biohackingbestie.com

https://help.biohackingbestie.com/