OLYRONLabs

Legal

Privacy Policy

Effective July 7, 2026

Your health data is some of the most personal information there is. This Policy explains, in plain language, what we collect, how we use it, who we share it with, and the control you have. In short: we use your data only to run the Services for you, we protect it, and we never sell it.

1. Who we are & what this covers

Olyron, Inc.(“OLYRON,” “we,” “us,” or “our”) operates OLYRON Labs, a consumer health-and-wellness platform that helps you understand the health data you already have — bloodwork, symptoms, gut-health signals, and food habits — and turn it into a clear, educational plan.

This Privacy Policy explains what information we collect through our websites and applications (the “Services”), how we use and protect it, and the choices you have. It applies to your use of the Services as a consumer. By using the Services, you agree to this Policy. If you use OLYRON through a clinician or coach, additional terms with that provider may also apply.

2. Information we collect

We collect the following categories of information:

  • Account information — your email address and the credentials used to authenticate you.
  • Health profile you provide — information you enter such as sex at birth, age, goals, symptoms, health conditions, and the medications and supplements you take.
  • Lab results you upload — bloodwork reports (PDFs or images) you add, and the marker values we extract from them.
  • Connected health records— when you authorize it, lab results and related clinical data imported from your healthcare providers’ patient portals (see Connected health records).
  • Content you create — food and diet logs, messages you send to the AI coach, reports you generate, and support requests.
  • Payment information — if you subscribe to a paid plan, billing is processed by our payment processor (Stripe). We do not store your full card number.
  • Usage & device information — limited log, device, and approximate-location (from IP) data, and essential cookies used to keep you signed in and secure the Services.

3. How we use your information

We use your information to:

  • Provide and operate the Services — interpreting your labs, building your Body Repair Map, gut assessments, meal plans, reports, the AI coach, and interaction screening;
  • Personalize your experience and generate the explanations, plans, and insights you request;
  • Send transactional messages and the notifications you enable (e.g. when imported results are ready);
  • Process payments and manage your subscription;
  • Keep the Services secure, prevent fraud and abuse, and debug problems;
  • Improve the Services, using aggregated or de-identified data where possible; and
  • Comply with legal obligations and enforce our terms.

4. What we do not do

We do not sell your personal information. We do not share it for cross-context behavioral advertising, and we never use your health information to target ads. We do not use the content of your connected health records to train third-party AI models.

5. AI features and your data

Some features — such as lab explanations, meal plans, and the AI coach — use artificial intelligence to generate responses. To produce those responses, the relevant inputs are processed by our AI provider (Anthropic). We limit what is sent to what is needed to generate the result, and we pursue enhanced data-protection terms (including reduced or zero data retention) with our AI provider.

Importantly, importing your connected health records is done by deterministic software, not AI. The records you import are matched to markers by fixed medical codes (LOINC) and are not sent to any AI model as part of the import. AI is only involved if and when you separately use an AI feature that draws on that data.

6. Connected health records (patient-portal connections)

OLYRON lets you connect your accounts at healthcare providers (labs, hospitals, clinics) so your results flow in automatically instead of being uploaded by hand. This connection is powered by our health-data connectivity partner, Fasten Connect.

How it works and what you control:

  • You authorize each connection directly with your provider through a secure consent flow. Your portal login credentials are handled in that flow and are not stored by OLYRON.
  • You choose which providers to connect, and you can disconnect any of them at any time.
  • We import only the records you authorize (primarily laboratory results and related clinical data), and we use them to populate your lab history, Body Repair Map, and educational insights.
  • Imported records are stored securely alongside the rest of your health data and are protected by the same access controls.
  • You can delete imported records or your entire account; on deletion we remove your records from active systems, subject to routine backups and any retention the law requires.

7. How we share information

We share information only in these limited ways:

  • Service providers (sub-processors) that operate the Services on our behalf under contract — see Sub-processors.
  • People you direct — for example, a caregiver you invite, or a clinician or coach you choose to work with through OLYRON, with your consent.
  • Legal & safety — when required by law, subpoena, or to protect the rights, safety, and security of our users or the public.
  • Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

8. Sub-processors

We rely on a small set of vetted providers to run the Services. Each processes data only as needed to provide its function:

  • Vercel — application hosting and content delivery.
  • Supabase — database, authentication, and encrypted file storage.
  • Stripe — payment processing for paid plans.
  • Resend — transactional and notification email.
  • Anthropic — the AI model behind AI-powered features.
  • Fasten Connect— secure connectivity to your healthcare providers’ patient portals.

9. Data retention

We keep your information for as long as your account is active or as needed to provide the Services. When you close your account or ask us to delete your data, we delete or de-identify it within a reasonable period, except where we must retain certain records to comply with the law, resolve disputes, or enforce our agreements. Residual copies may persist briefly in routine backups.

10. How we protect your information

We use technical and organizational safeguards designed to protect your information, including encryption in transit (TLS) and at rest, row-level access controls that isolate each user’s data, least-privilege access for our systems, and audit logging. No method of transmission or storage is 100% secure, so while we work hard to protect your data we cannot guarantee absolute security.

11. Your choices and rights

You can:

  • Access, correct, or update your profile and health data in the app;
  • Download or request a copy of your data, and request deletion of your account and data;
  • Disconnect any connected provider at any time;
  • Manage which notifications and emails you receive; and
  • Exercise privacy rights available where you live (for example, U.S. state rights to know, access, correct, delete, and opt out of sale — which we do not do). To make a request, email privacy@olyron.com. We will not discriminate against you for exercising these rights.

12. Children

The Services are intended for adults 18 and older and are not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

13. Where your data is processed

We operate in the United States and process and store information there. If you access the Services from outside the United States, you understand your information will be processed in the United States, where data-protection laws may differ from those in your location.

14. Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the “Effective” date above and, for material changes, provide a more prominent notice. Your continued use of the Services after an update means you accept the revised Policy.

15. Contact us

Questions about this Policy or your data? Email us at privacy@olyron.comand we’ll be glad to help.

This Privacy Policy works together with our Terms of Use and Medical Disclaimer.