Privacy Policy

1. Introduction

Sensa Wellness is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share information when you use the Sensa Wellness mobile application and website (sensawellness.org). By using our services, you agree to the practices described in this policy.

We believe transparency is essential. This document is designed to be readable and straightforward so you can make informed decisions about your data.

2. Information We Collect

We collect personal data when you use the Sensa app and website. Here is exactly what we collect and why.

Account Information

When you create a Sensa account with an email address and password, we collect your email address and display name. These are required to set up your account, authenticate your identity, and personalize your experience within the app.

If you sign in with Apple or Google, we receive your name and email address from that provider. Apple lets you hide your email, in which case we receive a private relay address instead. We never receive your Apple or Google password.

Wellness Scan Data

Each time you perform a wellness scan using the Sensa app, we collect and store the following data points:

• Wellness score (a value from 0 to 100)
• Score range (In range, Worth watching, or Time to reset)
• Timestamp of the scan
• Optical color index derived from the vial image and used to calculate the score
• Average blue channel value from the vial image analysis

Health Profile (Optional)

If you choose to fill out the Health Profile section in the app, we may collect the following optional information:

• Age range
• Biological sex
• Activity level
• Diet type
• Average sleep hours
• Stress level
• Smoking status
• Primary wellness goal
• Race and ethnicity
• Alcohol use
• Body weight range
• Self-reported health conditions
• Supplement use
• Peptide use
• Oral health
• Gut health

This information is collected only if you voluntarily provide it. You are never required to complete your Health Profile to use the core scanning features of the app.

Scan Images

When you scan a Sensa vial, the photo is processed entirely on your device. Scan images are stored locally on your device only and are never uploaded to our servers. Only the numerical results derived from image analysis are transmitted and stored.

Support Chat Messages

The app and website include Melissa, an automated support assistant. Messages you type to Melissa, along with your first name, are sent to our servers and to our AI provider, Anthropic, to generate a reply (see Section 6). Your email address is not sent to Anthropic. We do not keep chat transcripts in a database. If the assistant flags a conversation for human follow-up, for example because you asked for a person, reported a problem, or expressed distress, the transcript together with your name and email address is emailed to our support team so someone can reach out.

Website Orders

When you buy a test kit on sensawellness.org, we collect your name, email address, shipping address, and the items ordered. Payment is handled by Stripe. Your card details are entered on Stripe's secure checkout page and never reach our servers. We use your email to send an order confirmation and a check-in message after delivery.

Newsletter and Waitlist

If you join our newsletter or waitlist, we store the email address you provide in a Google Sheet through Google Apps Script so we can send you the updates you asked for. You can unsubscribe at any time by emailing info@sensawellness.org.

Customer Reviews

If you submit a review on our website, we collect the name, rating, and review text you provide. Reviews are stored in our database and, after moderation, published publicly on sensawellness.org under the name you gave.

Technical Data

The Sensa app does not include third-party analytics or crash reporting tools. Inside the app we do not collect usage analytics, advertising identifiers, or behavioral data. Basic technical logs (such as sign-in events) may be generated by Google Firebase as part of operating our authentication and database services. Our website host, Vercel, keeps standard server logs (IP address, browser type, and pages requested) for security and reliability.

Our marketing website uses Google Analytics. The pages on sensawellness.org use Google Analytics 4 so we can see how many people visit, which articles are read, and how visitors found us. This is website measurement only. Google Analytics is not included in the Sensa app, and it never receives your wellness scores, scan data, health profile answers, or support chat contents. What it does collect is standard web data: the pages you view, the link or search that referred you, your browser and device type, an approximate location, and a randomly generated identifier stored in a cookie so repeat visits can be counted once. We use Google's IP address truncation so full IP addresses are not retained for analytics, and we do not turn on ad personalization, Google Signals, or advertising reporting features. Analytics data is not used to build advertising audiences and is not linked to your Sensa account.

How to opt out of website analytics. You can stop Google Analytics from measuring your visit by installing the Google Analytics opt-out browser add-on, by turning on your browser's tracking protection or blocking cookies for our site, or by using a content blocker that blocks analytics scripts. Opting out does not limit your access to the website, the app, or your account.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Display your scores and history: Your scan data powers the dashboard, score gauge, and history timeline within the app.
• Personalize action plans: If you provide Health Profile information, we use it to tailor wellness recommendations and action plans specific to your lifestyle.
• Send optional reminders: With your permission, we send push notifications to remind you to perform regular wellness scans.
• Generate exportable reports: You can export your scan history as a PDF report to share with your healthcare provider or keep for your own records.
• Improve app reliability: Basic technical logs help us identify and fix technical issues to deliver a better experience.
• Answer support questions: Your messages to Melissa are used to generate a reply and, when needed, to let a member of our team follow up with you.
• Fulfil and support orders: Order details are used to ship your kit, send confirmations and delivery check-ins, and handle returns or replacements.
• Send newsletters you signed up for: Newsletter and waitlist emails are used only to send the updates you requested.
• Publish reviews: Reviews you submit are shown on our website after moderation.

We do not use your data for targeted advertising, and we do not run advertising pixels or remarketing tags on our website or in our app. We never sell your data to third parties. The only measurement tool on our website is Google Analytics, described under Technical Data above, and it is configured without advertising features.

4. Health Data

The health profile fields you provide (age range, biological sex, activity level, diet type, sleep hours, stress level, smoking status, primary wellness goal, race and ethnicity, alcohol use, body weight range, self-reported health conditions, supplement use, peptide use, oral health, and gut health) are used solely to personalize wellness recommendations within the Sensa app. Every field is optional, and you can choose "prefer not to say" for the sensitive ones.

This data is not a clinical assessment. It is not shared with healthcare providers, insurance companies, employers, or any third party. Your health profile information remains within your Sensa account and is used exclusively to improve the relevance of the wellness content and action plans presented to you.

5. Consumer Health Data

Some state laws, including the Washington My Health My Data Act and Nevada Senate Bill 370, cover "consumer health data" even when a company is not a HIPAA covered entity. Sensa Wellness is not a HIPAA covered entity, so those laws are the ones that apply to the wellness information you give us. This section explains, in one place, how we handle that data. A fuller, standalone version is published as our Consumer Health Data Privacy Policy.

What we treat as consumer health data

• Your wellness score (0 to 100) and its range (In range, Worth watching, or Time to reset), along with the date and time of each scan
• The optical color index and average blue channel value calculated from your vial image, which are the raw numbers behind the score
• Your optional health profile answers, such as age range, biological sex, activity level, diet type, sleep hours, stress level, smoking status, wellness goal, race and ethnicity, alcohol use, body weight range, self-reported health conditions, supplement use, peptide use, oral health, and gut health
• Support messages you send to us or to Melissa that happen to describe how you are feeling or a health concern

Where it comes from

All of it comes from you. The scan numbers are produced by the vial scan your own phone performs, which analyzes the photo on your device and sends only the resulting numbers. The health profile comes from answers you type into the app. Support content comes from messages you choose to write. We do not buy health data, and we do not infer health data about you from other sources.

Why we collect it

• To show you your score, your range, and your history in the app
• To personalize the wellness content and action plans you see
• To generate the PDF report you can export for your own records
• To answer your support questions and follow up when you ask for a person
• To keep the service working and secure, and to meet legal obligations

We do not use consumer health data for advertising, for profiling you outside the app, or for training AI models.

Who can receive it

We have no corporate affiliates. The only third parties that can receive consumer health data are the service providers that run our infrastructure, and each receives only what its job requires:

• Google Firebase hosts the database and authentication where your scan records and health profile are stored.
• Vercel hosts our website and the server functions that pass messages between the app and our providers.
• Anthropic receives only your support chat text and your first name, in order to generate Melissa's replies. It does not receive your scan results, your health profile, or your email address.
• Resend delivers the escalation email when a support conversation is handed to a human. That email contains the chat transcript along with your name and email address.

Sensa does not sell consumer health data, and we do not share it with advertisers, data brokers, insurers, or employers. Google Analytics, described under Technical Data above, runs on our marketing website only and never receives any of the data listed in this section.

Your consent

Collecting your scan results is part of providing the app you asked us to provide. The health profile is different: we collect it only if you affirmatively opt in inside the app, and every field is optional. You can withdraw that consent at any time by deleting your health profile in the app or by deleting your account, and you can email us at info@sensawellness.org if you would rather we do it for you. Withdrawing consent stops future use of that data and does not affect anything we lawfully did before you withdrew it.

No geofencing

Sensa does not use geofences. We do not set up virtual boundaries around health care facilities, pharmacies, or any other location, and we do not use location to identify, track, or message you.

Your rights over consumer health data

• Access: Request a copy of the consumer health data we hold about you, and a list of the third parties above that have received it.
• Withdraw consent: Withdraw your consent to our collection or sharing of that data.
• Delete: Request deletion of your consumer health data. When you do, we delete it from our own systems and instruct our processors listed above to delete their copies as well.

Email info@sensawellness.org to make a request. We will respond within 30 days, and we may extend that once where the law allows, in which case we will tell you why. If we deny your request, you can appeal by emailing the same address with "Privacy Appeal" in the subject line. We will review the appeal and write back with our decision and the reasons for it.

If you are unhappy with the outcome, Washington residents can file a complaint with the Washington State Attorney General, and Nevada residents can file a complaint with the Nevada Attorney General.

6. Artificial Intelligence

Melissa, the support assistant in the Sensa app and on our website, is powered by artificial intelligence. Replies are generated automatically by a large language model (Anthropic's Claude) based on the messages you send and a set of instructions we provide about Sensa products. No human reads your conversation in real time.

• AI replies can be wrong. Melissa may make mistakes or give incomplete answers. Nothing Melissa says is medical advice, a diagnosis, or a substitute for a healthcare professional.
• Crisis support. If you express thoughts of self-harm or a crisis, Melissa is designed to stop product support, share crisis helpline information (in the US, call or text 988), and flag the conversation so a member of our team can follow up.
• No AI training on your data. We do not use your conversations, scans, or health profile to train AI models, and Anthropic does not train its models on data sent through its API.
• A human is always available. You can reach our team directly at info@sensawellness.org at any time.

Your wellness scores are calculated by fixed image-analysis rules on your device, not by AI, and your scan results and health profile are not sent to any AI provider.

7. Data Storage & Security

Your data is stored in Google Firebase (Cloud Firestore), a secure, cloud-hosted database. All data is:

• Encrypted in transit using TLS (Transport Layer Security), ensuring your data is protected as it moves between your device and our servers.
• Encrypted at rest on Google's servers, meaning your stored data is protected even in the unlikely event of a physical breach.

We use Firebase Security Rules to enforce strict access controls. These rules ensure that only the authenticated user can read, write, or modify their own data. No other user, and no Sensa team member outside of authorized administrators, can access your personal records.

Security Incidents

No system is perfectly secure. If we discover a breach of security that affects your unencrypted personal information or health-related data, we will notify the affected users without unreasonable delay, and no later than 60 days after we discover the breach. That notice will describe what happened, what categories of data were involved, what we are doing about it, and what steps you can take. Where the law requires it, we will also notify the Federal Trade Commission, state attorneys general, or other regulators within the timelines they set, and we will make any public notice that applicable law requires.

8. Third-Party Services

Sensa Wellness relies on a limited number of trusted third-party services to operate:

• Google Firebase: Provides authentication (secure sign-in) and Cloud Firestore (database). Google's privacy practices are governed by the Google Privacy Policy.
• Sign in with Apple: Optional sign-in method in the app. Apple shares your name and email (or a private relay address) with us. See the Apple Privacy Policy.
• Google Sign-In: Optional sign-in method in the app. Google shares your name and email with us. Governed by the Google Privacy Policy.
• Anthropic: Provides the AI model behind Melissa. Your support chat messages are sent to Anthropic to generate replies and are not used to train its models. See the Anthropic Privacy Policy.
• Stripe: Processes payments for kit orders on our website and receives your name, email, shipping address, and payment details. See the Stripe Privacy Policy.
• Vercel: Hosts our website and the server functions behind checkout, reviews, and Melissa, and keeps standard server logs. See the Vercel Privacy Policy.
• Resend: Delivers our transactional emails (order alerts, delivery check-ins, and support escalations). See the Resend Privacy Policy.
• Google Apps Script and Google Sheets: Store newsletter and waitlist email addresses. Governed by the Google Privacy Policy.
• Google Analytics 4: Measures traffic on our marketing website, sensawellness.org. It is not included in the Sensa app and never receives scan results, health profile answers, or support chat contents. IP addresses are truncated by Google, and ad personalization, Google Signals, and advertising reporting features are not used. You can opt out with the Google Analytics opt-out browser add-on. Governed by the Google Privacy Policy.
• Google Fonts: Used to load the typefaces displayed on the Sensa website. Google Fonts may log basic access data (such as CSS requests) as described in the Google Fonts Privacy FAQ.

These providers process data only to deliver their service to us. Apart from the website analytics described above, we do not integrate any advertising networks, social media trackers, or data brokers into our app or website, and we do not sell or rent your data to anyone.

9. Data Retention

Your data is retained for as long as your Sensa account remains active. You have full control over your data at all times:

• Delete individual scans: You can remove any individual scan record directly within the app's history view.
• Delete your entire account: Navigate to Profile → Delete Account & Data within the app to permanently delete your account and all associated data, including scan history and health profile information.
• Request deletion by email: You may also request account and data deletion by contacting us at info@sensawellness.org. We will process your request within 30 days.
• Scan photos: Photos of your vial stay on your device only. They are removed when you delete your account from the app or uninstall the app.
• Support chats: We do not keep chat transcripts unless a conversation is escalated to our team by email. You can ask us to delete an escalated transcript at any time.
• Escalated support transcripts: When a conversation is escalated, the transcript sits in our support mailbox and is deleted after 90 days, unless you have an open request that still depends on it.
• Inactive accounts: If you do not sign in for 24 months, we may delete your account and the data in it. We will email you a warning before we do, so you have time to sign in or export your history.
• Orders, reviews, and newsletter sign-ups: Order records are kept as long as needed for accounting and tax purposes. Reviews stay published until you ask us to remove them. Newsletter addresses are kept until you unsubscribe.

Once your data is deleted, it cannot be recovered.

10. Children's Privacy

Sensa Wellness is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal data, we will take steps to delete that information promptly. If you believe a child under 13 has created an account or provided data through our services, please contact us at info@sensawellness.org.

11. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: You have the right to request a copy of the personal data we hold about you.
• Correction: You have the right to request that we correct any inaccurate or incomplete data.
• Deletion: You have the right to request the deletion of your personal data (as described in the Data Retention section above).
• Objection and restriction: You have the right to object to or request restriction of certain data processing activities.

To exercise any of these rights, please contact us at info@sensawellness.org. We will respond to your request within 30 days.

12. HIPAA Notice

Sensa Wellness is a general wellness application and is not a covered entity under the Health Insurance Portability and Accountability Act (HIPAA). The wellness scores generated by the Sensa app are lifestyle metrics intended to support general wellness awareness, not clinical measurements or medical diagnoses.

However, we take the security and privacy of your data seriously. We apply security best practices that are consistent with healthcare data standards, including encryption in transit and at rest, strict access controls, and minimal data collection. While we are not legally bound by HIPAA, we aim to meet or exceed the spirit of its data protection principles.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make changes, we will update the "Last updated" date at the top of this page.

We encourage you to review this policy periodically. Your continued use of the Sensa app or website after any changes are posted constitutes your acceptance of the updated policy.

14. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

• Email: info@sensawellness.org
• Website: sensawellness.org