Privacy Policy

Introduction

This Privacy Policy describes how Ajeris Inc. and its corporate affiliates (collectively, "Ajeris," "we," "us," or "our") collect, use, and share personal information through our Ajovia platform and services (collectively, the "Service"). Ajovia provides comprehensive preventive health screening including laboratory testing and medical imaging services.

Ajeris Inc. respects your privacy and is committed to protecting your personal information, including your Protected Health Information ("PHI") as defined under the Health Insurance Portability and Accountability Act ("HIPAA"). This Privacy Policy applies to all users of our Service, including website visitors, registered members, and enterprise customers.

For information about how we process Consumer Health Data as defined by applicable US state laws, please see our Consumer Health Data Privacy Policy, which supplements this Privacy Policy.

Our Guiding Privacy Principles

At Ajovia, we built our platform with privacy at its core. We believe you should control your health data. Our principles:

• Your data is not for sale. We do not sell your personal information or PHI to third parties for money.
• Minimum necessary collection. We only collect information needed to provide our services.
• Transparent data use. We clearly explain how we use your information.
• Security first. We implement industry-standard safeguards to protect your data.
• Your control. You can access, correct, and delete your information.

Information We Collect

Information You Provide

When you use Ajovia, you may provide us with:

Information We Collect Automatically

When you use our Service, we automatically collect:

Information From Third Parties

We may receive information about you from:

How We Use Your Information

We use your personal information to:

Provide Our Services

• Process your test orders and appointments
• Deliver test results and health insights
• Generate AI-powered health recommendations
• Track your health progress over time
• Coordinate with testing partners
• Provide customer support

Improve and Develop Our Service

• Analyze usage patterns and preferences
• Develop new features and services
• Conduct research and analytics
• Fix bugs and improve performance
• Train and improve our AI models (using de-identified data)

Communicate With You

• Send test results and health reports
• Provide appointment reminders
• Share health insights and recommendations
• Respond to your inquiries
• Send important service updates
• Marketing communications (with your consent)

Legal and Safety Purposes

• Comply with legal obligations
• Respond to legal requests and subpoenas
• Protect rights, safety, and property
• Detect and prevent fraud
• Enforce our terms and policies
• Maintain platform security

Business Operations

• Process payments and billing
• Conduct audits and compliance reviews
• Analyze business metrics
• Manage enterprise relationships

How We Share Your Information

We share your information only as described below:

With Your Consent

• Healthcare providers you designate
• Family members you authorize
• Third parties you explicitly approve

Testing Partners

We share necessary information with:

• Quest Diagnostics for laboratory testing
• Partner imaging centers for MRI scans
• Other diagnostic service providers

This includes demographic information and test orders, but only what's required to perform services.

Service Providers

We work with trusted vendors who help us operate our business:

• Supabase (database and authentication)
• Stripe (payment processing)
• OpenAI (AI insights - de-identified data only)
• Email and SMS communication providers
• Cloud storage providers (AWS/Google Cloud)
• Customer support tools

All service providers are contractually required to protect your information and use it only for providing services to us.

Business Transfers

If Ajeris is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or control.

Legal Requirements

We may disclose your information if required by law, subpoena, or court order, or if we believe disclosure is necessary to:

• Comply with legal obligations
• Protect our rights or property
• Prevent fraud or abuse
• Protect anyone's safety

Aggregated and De-identified Data

We may share aggregated or de-identified information that cannot reasonably identify you for research, marketing, or other purposes.

We Do NOT Share

• Your PHI with employers (only eligibility verification)
• Health data with advertising networks
• Test results without your authorization
• Information with data brokers

Your Rights and Choices

Access and Portability

You can:

• View your test results and health data
• Download your records in standard formats
• Request copies of your information
• Transfer data to other providers

Correction and Deletion

You can:

• Update your account information
• Correct errors in your health records
• Request deletion of your account
• Remove specific test results

Communication Preferences

You can:

• Opt out of marketing emails
• Manage notification settings
• Unsubscribe from SMS messages
• Control push notifications

Privacy Rights by State

Depending on your location, you may have additional rights:

• California residents: See CCPA section below
• Nevada residents: Opt out of sale of personal information
• European residents: GDPR rights including data portability

To exercise any rights, contact us at Hi@ajovia.com

California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

To exercise these rights, email Hi@ajovia.com or call 1-800-AJOVIA-1

Data Security

We implement administrative, technical, and physical safeguards designed to protect your information:

Technical Safeguards

• Encryption at rest (AES-256) and in transit (TLS 1.2+)
• Multi-factor authentication available
• Regular security audits and penetration testing
• Access controls and audit logging
• HIPAA-compliant infrastructure

Administrative Safeguards

• Employee training and confidentiality agreements
• Business Associate Agreements with partners
• Incident response procedures
• Regular risk assessments
• Minimum necessary access policies

Physical Safeguards

• Secure data center facilities
• Controlled facility access
• Secure disposal procedures

Despite our safeguards, no security system is impenetrable. We cannot guarantee absolute security of your information.

Data Retention

We retain your information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations (typically 7 years for medical records)
• Resolve disputes and enforce agreements
• Support legitimate business purposes

When you delete your account, we will delete or anonymize your information, except where retention is required by law.

Children's Privacy

Ajovia is not intended for children under 18. We do not knowingly collect information from children under 18 without parental consent. If you believe we have collected information from a child under 18, please contact us at Hi@ajovia.com.

International Data Transfers

Ajovia operates in the United States. If you use our Service from outside the US, your information will be transferred to and processed in the US, where privacy laws may differ from your jurisdiction. By using our Service, you consent to this transfer.

Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

HIPAA Compliance

Ajeris Inc. maintains HIPAA compliance for Protected Health Information. Our use and disclosure of PHI is also governed by our Notice of Privacy Practices, which is provided separately to members who receive healthcare services through our platform.

Updates to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by:

• Posting the updated policy on our website
• Sending you an email notification
• Displaying a notice in our app

Your continued use of our Service after changes indicates acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

Additional Disclosures

Do Not Track

We do not currently respond to "Do Not Track" browser signals.

Analytics

We use analytics services to understand Service usage. These services may collect information about your visits using cookies and similar technologies.

Marketing

With your consent, we may use your information for marketing. You can opt out at any time by clicking "unsubscribe" in our emails or contacting us.

Data Processing

We process your information lawfully based on:

• Your consent
• Contract performance
• Legal obligations
• Legitimate interests