Privacy Policy

Decoding Inflammation / GENEFLAMMATION ("we," "us," "our," or the "Company"), operated by or on behalf of Dr. Alberto Rivera, MD, FAAPMR, is committed to protecting the privacy and security of your personal information, including sensitive genetic data. This Privacy Policy explains how we collect, use, store, process, share, and protect your information when you access or use the DecodingInflammation.com platform and all related services (collectively, the "Platform").

By accessing or using the Platform, creating an account, purchasing the Inflammation DNA Blueprint, or uploading any data, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree to this Privacy Policy, please do not use the Platform.

PERSONAL IDENTIFICATION INFORMATION: When you create an account or make a purchase, we collect information such as your name, email address, billing information (processed by Stripe — we do not store full credit card data on our servers), and optionally your phone number.

GENETIC DATA: The Inflammation DNA Blueprint requires you to upload your raw DNA data file from a consumer genetic testing service (such as 23andMe or AncestryDNA). This is highly sensitive data, and its handling is described in detail in Section 4 below.

USAGE AND TECHNICAL DATA: We automatically collect certain technical information when you visit the Platform, including IP address, browser type and version, pages visited, time and date of access, referral URLs, and general geographic location. This data is collected using standard web analytics tools and is used to improve Platform functionality and user experience.

COMMUNICATIONS: If you contact us via email or contact forms, we retain the content of those communications and your contact information to respond and maintain records.

We use the information we collect for the following purposes:

· To create and manage your account and authenticate your identity. · To process payments and provide the Inflammation DNA Blueprint service. · To generate, store, and display your personalized educational report. · To communicate with you regarding your purchase, account, or support inquiries. · To send transactional emails (e.g., purchase confirmation, report-ready notifications). · To maintain the security and integrity of the Platform. · To comply with applicable laws and legal obligations. · To improve and optimize the Platform's functionality and content.

We do not use your information for targeted advertising. We do not sell your personal information or genetic data to third parties for commercial, research, or marketing purposes.

Your genetic data is the most sensitive category of information we handle, and we treat it accordingly with strict protections.

COLLECTION: Your raw DNA file is collected solely through a secure, encrypted upload mechanism for the exclusive purpose of generating your educational Inflammation DNA Blueprint.

PROCESSING: We analyze your uploaded raw DNA file only to extract the specific single nucleotide polymorphisms (SNPs) included in our methylation educational panel. This processing is automated and limited to the markers necessary to generate your report.

DELETION OF RAW FILE: After your SNP data has been extracted, your raw DNA file is permanently and irrevocably deleted from our systems. We do not retain your full raw genetic file after report generation.

RETENTION OF VARIANT DATA: Only the processed variant call results (i.e., the specific genotype calls for the SNPs in our panel) are retained in association with your account to generate and display your educational report.

NO SALE OR SHARING: We do not sell, license, transfer, or share your genetic data with any third party for any purpose, including research, insurance, advertising, or commercial purposes, without your explicit written consent.

DATA DELETION REQUESTS: You may request complete deletion of all retained variant data and report records at any time through the deletion function within your report portal or by contacting us at reports@geneflammation.com. We will confirm deletion within a commercially reasonable timeframe.

We do not sell your personal information. We share your information only in the following limited circumstances:

PAYMENT PROCESSING: Stripe, Inc. processes all payments on our behalf. When you complete a purchase, Stripe collects and processes your payment card information pursuant to their own Privacy Policy and Terms of Service. We receive only a transaction confirmation and masked payment reference.

CLOUD INFRASTRUCTURE: We use trusted cloud infrastructure providers (including cloud storage and database services) to host the Platform and store data securely. These providers act as data processors under our instructions and are bound by confidentiality and security obligations.

LEGAL REQUIREMENTS: We may disclose your information if required to do so by law, court order, regulatory authority, or governmental request, or if we believe disclosure is necessary to protect the rights, property, or safety of the Company, our users, or the public.

BUSINESS TRANSFERS: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to the acquirer honoring this Privacy Policy.

We do not share your genetic data with any of the above categories of third parties beyond what is strictly necessary to provide and maintain the Service.

We implement industry-standard technical and organizational security measures designed to protect your personal information and genetic data against unauthorized access, alteration, disclosure, or destruction. These include:

· Encrypted data transmission (TLS/SSL) for all data uploads and Platform communications. · Encrypted storage for personal information and genetic variant data at rest. · Access controls limiting who within our organization can access sensitive data. · Regular security reviews of our platform infrastructure. · Permanent deletion of raw DNA files immediately after processing.

While we take data security seriously and implement reasonable safeguards, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security. In the event of a data breach that materially affects your personal information, we will notify you as required by applicable law.

IMPORTANT: This Platform is not operated as a HIPAA-covered entity, and the Services are not HIPAA-regulated healthcare services. However, we voluntarily implement security practices consistent with industry standards for sensitive health data.

We retain your personal information and variant-level genetic data for as long as your account is active or as needed to provide the Services. Specifically:

· Raw DNA files are permanently deleted immediately after SNP extraction upon report generation. · Variant call data (processed SNP results) is retained indefinitely while your account is active, to allow ongoing access to your educational report. · Payment records are retained as required by applicable financial and tax regulations. · Account information is retained until you request deletion of your account.

You may request deletion of your data at any time. See Section 9 for details.

We use cookies and similar technologies to operate and improve the Platform. These include:

ESSENTIAL COOKIES: Required for basic Platform functionality, session management, and security. These cannot be disabled without affecting core Platform features.

ANALYTICS COOKIES: We may use privacy-respecting analytics tools to understand how users interact with the Platform, which pages are visited most frequently, and how we can improve user experience. These analytics tools may collect IP addresses and usage patterns in anonymized or aggregated form.

PREFERENCE COOKIES: We may store your language and display preferences.

You can control most cookies through your browser settings. Disabling certain cookies may affect the functionality of the Platform.

We do not use cookies to serve targeted advertising or track you across unrelated third-party websites.

Depending on your jurisdiction, you may have the following rights regarding your personal information and genetic data:

RIGHT TO ACCESS: You may request a copy of the personal information and variant data we hold about you.

RIGHT TO CORRECTION: You may request correction of inaccurate or incomplete personal information.

RIGHT TO DELETION: You may request deletion of your personal information and genetic variant data. You can initiate deletion through the deletion function within your report portal or by contacting us at reports@geneflammation.com. Upon confirmed deletion, we will remove all identifiable data from our active systems within a commercially reasonable timeframe.

RIGHT TO DATA PORTABILITY: Where technically feasible and legally required, you may request a machine-readable copy of your data.

RIGHT TO OBJECT OR RESTRICT PROCESSING: You may object to or request restriction of certain processing activities.

RIGHT TO WITHDRAW CONSENT: Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

OPT-OUT OF COMMUNICATIONS: You may unsubscribe from marketing or newsletter emails at any time using the unsubscribe link in those communications or by contacting us directly. Note that transactional emails (e.g., purchase confirmation) cannot be opted out of while your account is active.

To exercise any of these rights, contact us at reports@geneflammation.com.

The Platform and Services are intended exclusively for adults 18 years of age or older. We do not knowingly collect personal information or genetic data from individuals under the age of 18. If we become aware that we have inadvertently collected information from a minor, we will take prompt steps to delete such information. If you believe we have collected information from a minor, please contact us immediately at reports@geneflammation.com.

The Platform is operated in the United States, and your information may be stored and processed in the United States or other countries where our service providers maintain facilities. If you are accessing the Platform from outside the United States, please be aware that your information may be transferred to, stored in, and processed in a country with different data protection laws than your country of residence.

By using the Platform, you consent to the transfer of your information to the United States as described in this Privacy Policy. We take steps to ensure that your data is treated securely and in accordance with this Privacy Policy regardless of where it is processed.

We may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or Platform features. When we make material changes, we will notify you by posting a prominent notice on the Platform or by sending an email to the address associated with your account. The "Effective Date" at the top of this Policy indicates when it was last revised.

Your continued use of the Platform after any such changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this Policy periodically.

CONTACT US: If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

reports@geneflammation.com Decoding Inflammation / GENEFLAMMATION Dr. Alberto Rivera, MD, FAAPMR