Privacy Policy | Baiology

PrivacyPolicy

This Privacy Policy describes how Baiology LLC (doing business as Baiology® and BaiologyMD®, referred to as "Baiology," "we," "us," or "our") collects, uses, and protects your personal information when you use our services ("Services"), such as when you:

Visit our website at baiologymd.com, or baiology.com, or any media platform that links to this privacy notice.
Download and use our mobile application (BaiologyMD®), our Facebook application (BaiologyMD®), or any application or service provided by Baiology that links to this privacy notice.
Engage with us in other related ways, including sales, marketing, formal learning opportunities, or events.

Questions or concerns: Reading this privacy notice will help you understand your privacy rights and choices. By using Baiology's services, you acknowledge and agree with this Privacy Policy and related practices.

If you have questions, please contact us at contact@baiology.com.

SUMMARY OF KEY POINTS
What we collect — Names, contact details, health data (height, weight, goals), payment information, and usage data.
Why we collect it — To provide and improve our services, process transactions, communicate with you, and comply with applicable law.
Who we share it with — We do not sell your data. We may share it with Baiology service providers, and in the event of a business transfer.
How we keep your information safe — We have organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can guarantee to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, modify, or use your information.
How long we keep it — For as long as your account is active, plus up to 6 months after closure.
Your rights — You may access, correct, delete, or restrict your data. Rights vary by state.
How to contact us — contact@baiologymd.com

1. INFORMATION WE COLLECT
In Short: We collect information you provide directly and some data automatically when you use our services.
We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.

Information You Provide
When you register, make a purchase, or interact with our services, we may collect:

Contact details: name, email address, phone number, mailing address
Account credentials: username and password
Payment information: billing address, credit/debit card number, security code, and expiration date
Health and lifestyle data: height, weight, health goals, diseases, ethnicity, gender, age, date of birth

Sensitive Information
We may process sensitive data — including health data, financial data, and demographic information — only when required to deliver our services and in accordance with applicable law.

Information Collected Automatically
When you use our services, we automatically collect:

Device and technical data: IP address, browser type, operating system, device identifiers
Usage data: pages viewed, features used, search history within our system, timestamps
Location data: approximate location derived from IP address; precise location only if you grant permission

Social Media Login Data
If you register using a social media account (e.g., Facebook, Twitter, or other social media account), we receive basic profile information such as your name, email, and profile picture. We use this information solely for account creation and authentication.

Application Data
If you use our application(s), we also may collect the following information if you choose to provide us with access or permission:

Geolocation information. We may request access or permission to track location-based information from your mobile device, either continuously or while you are using our mobile application(s), to provide certain location-based services. If you wish to change our access or permission, you may do so in your device's settings.
Push Notifications. We may request to send you push notifications regarding your account or certain features of the application(s). If you wish to opt out of receiving these types of communications, you may turn them off in your device's settings.

This information is primarily needed to maintain the security and operation of our application(s), for troubleshooting, and for our internal analytics and reporting purposes.
All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information. If it has been determined that information provided has been falsified, services will be terminated.

Mobile App Permissions
Our mobile application may request access to your camera, SMS, calendar, and push notifications. You can manage these permissions in your device settings at any time.

2. HOW WE USE YOUR INFORMATION
In Short: We use your information to provide our services, improve your experience, and communicate with you.
Specifically, we use your data to:

Create and manage your account
Deliver the services you request, including weight management and lifestyle features
Process payments and manage orders
Respond to your inquiries and provide customer support
Send service-related notifications and administrative updates
Send marketing communications (you may opt out at any time)
Display personalized content and relevant advertising
Analyze usage trends to improve our services
Detect and prevent fraud and security threats
Comply with applicable legal obligations

3. LEGAL BASIS FOR PROCESSING
In Short: We process your data only when we have a valid legal basis to do so.
Depending on your location, we rely on one or more of the following legal bases:

Consent — You have given us explicit permission to process your data for a specific purpose by this Policy. You may withdraw permission at any time.
Contract Performance — By providing your data to Baiology, we are able to fulfill our agreement with you.
Legitimate Interests — We have a valid business reason that does not override your rights (e.g., fraud prevention, analytics, marketing improvements).
Legal Obligation — We are required to process data to comply with applicable law.

Payment Data: For your security, Baiology does not collect, store, or process any financial information (credit card numbers or any other customer payment data). All financial transactions are securely handled and processed by a reputable third-party payment processing company. By making a payment, you agree to their Terms of Service and Privacy Policy.

4. HOW WE SHARE YOUR INFORMATION
In Short: We do not sell your personal data. We share it only in limited, specific circumstances.
We may share your information in the following situations:

Service Providers — Baiology engages trusted third-party vendors (bound by written contracts) to help operate our services.
Google Analytics — Baiology uses Google Analytics to understand how our services are used. You may opt out at tools.google.com/dlpage/gaoptout.
Use of Artificial Intelligence (AI) — In order to provide the nutritional analysis function, your meal description/picture will be sent to a third-party AI service provider (Anthropic) for processing, and the data will not be used to train third-party models.
Business Transfers — If Baiology enters into a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
Public Areas — Baiology may provide content you have posted publicly within our services that may be visible to other users.
Legal Requirements — Baiology discloses your information as required by law or to protect our legal rights.

We have not sold or shared personal information with third parties for commercial purposes in the preceding twelve (12) months, and we do not intend to do so in the future.

5. COOKIES AND TRACKING TECHNOLOGIES
In Short: We use cookies and similar technologies to operate and improve our services.
We use cookies, web beacons, and pixels to collect usage data and deliver personalized content. You may configure your browser to refuse cookies, although this may affect certain features. For full details, see our Cookie Policy at baiologymd.com/cookie-policy.

6. DATA RETENTION
In Short: We retain your information only as long as necessary.
We retain personal information for as long as your account is active and for up to six (6) months following account closure. After this period, data is securely deleted or anonymized, unless a longer retention period is required by law.

7. DATA SECURITY
In Short: We implement reasonable security measures to protect your information.
We maintain appropriate technical and organizational safeguards to protect your personal information. However, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, and transmission of data to our services is at your own risk. Please access our services only through secure environments.

8. CHILDREN'S PRIVACY
In Short: Our services are not directed at children under the age of 18.
We do not knowingly collect personal information from individuals under 18 years of age. If you believe we have inadvertently collected such data, please contact us at contact@baiologymd.com. Upon notification, we will promptly deactivate the account and delete the relevant information.

9. YOUR PRIVACY RIGHTS
In Short: Depending on your location, you may have significant rights over your personal data.
All Users
Regardless of location, you may:

Request access to or an electronic copy of your personal information
Request correction of inaccurate data
Opt out of marketing communications (via unsubscribe link or by emailing us)
Update or delete your account through your account settings or by contacting us

European Economic Area (EEA), UK, and Switzerland
Under the GDPR and UK GDPR, you have additional rights to: restrict or object to processing, request data portability, and lodge a complaint with your local data protection authority. You may also contact the Federal Data Protection and Information Commissioner if located in Switzerland.

California Residents (CCPA)
You have the right to know what personal information we collect and how it is used, to request deletion, to opt out of the sale or sharing of your data, and to limit the use of sensitive personal information. We will not discriminate against you for exercising these rights. To submit a request, visit baiologymd.com/contact-form or email contact@baiologymd.com.

Colorado, Connecticut, Virginia, and Utah Residents
You have rights under your applicable state privacy laws, including access, correction, deletion, portability, and opt-out of targeted advertising or profiling. To exercise your rights or appeal a decision, email contact@baiologymd.com. Response timelines: Colorado — 45 days; Connecticut — 60 days; Virginia — 45 days (extendable by 45 days); Utah — 45 days.

Canada
We process your data based on your express or implied consent. You may withdraw consent at any time, subject to legal or contractual restrictions.

Australia and New Zealand
We process your information in accordance with Australia's Privacy Act 1988 and New Zealand's Privacy Act 2020. You may contact the relevant privacy commissioner if you believe we have breached applicable privacy principles.

10. DO-NOT-TRACK SIGNALS
Our services do not currently respond to Do-Not-Track (DNT) browser signals, as no uniform standard for DNT has been established. If a recognized standard is adopted in the future, we will update this policy accordingly.

11. POLICY UPDATES
We may update this Privacy Policy periodically to reflect changes in our practices or applicable law. The "Last Updated" date at the top of this document indicates when it was most recently revised. Material changes will be communicated via a notice on our website. We encourage you to review this policy regularly.

12. CONTACT US
If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:
Email: contact@baiologymd.com
Mail: Baiology LLC 11010 Harbor Hill Drive, Suite 280 Gig Harbor, WA 98332 United States