Privacy Policy | Chreodex

1. Introduction

At Chreodex, we take your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website, mobile application, and services. We are committed to transparency and to protecting your data in compliance with applicable privacy laws.

2. Information We Collect

To provide our personalized eye health services, we collect the following types of information:

Contact Information: Your name, phone number, email address, and delivery address for order fulfillment and communication.
Demographic Information: Age, biological sex, and ethnicity to tailor recommendations based on research showing different risk factors across populations.
Health Information: Vision status, eye symptoms (dry eye, fatigue, floaters), diagnosed eye conditions, family eye health history, cardiovascular and autoimmune conditions, diabetes status, current medications, hormonal status, BMI, sleep apnea status, and kidney/liver conditions.
Lifestyle Information: Screen time, outdoor time, sleep quality, smoking and alcohol consumption, dietary habits (leafy greens, fatty fish, nuts, eggs), contact lens usage, and work environment.
Technical Information: Device type, browser information, IP address, and usage analytics to improve our services.

3. How We Use Your Information

We use your information for the following purposes:

Personalization: To analyze your health profile and create your customized eye health supplement formula based on 100+ factors.
Order Fulfillment: To process orders, arrange delivery, and manage your subscription.
Communication: To send order confirmations, shipping updates, product information, and respond to your inquiries.
Service Improvement: To analyze usage patterns, improve our algorithm, and enhance our products and services.
Legal Compliance: To comply with applicable laws and regulations, and to protect our legal rights.

4. Special Note on Health Data

We understand that health information is particularly sensitive. Your health data collected through our quiz is encrypted and stored securely. We use this data solely to generate your personalized supplement recommendations. We do NOT sell your health data to third parties. We do NOT share identifiable health information with advertisers. Our algorithm processes your data to create recommendations, but individual health profiles are not accessible to our staff except when necessary for customer support with your explicit consent.

5. Information Sharing

We share your information only as follows: with delivery partners to fulfill your orders (name and address only); with payment processors to process transactions securely; with service providers who help us operate our business under strict confidentiality agreements; when required by law or to protect our legal rights; and with your consent for any other purposes. We never sell your personal information to third parties for marketing purposes.

6. Data Security

We implement industry-standard security measures to protect your data, including SSL encryption for data transmission, encrypted storage for sensitive health information, secure payment processing through certified providers, regular security audits, and access controls limiting who can view your data. While we take extensive precautions, no internet transmission is completely secure. We encourage you to protect your account credentials and contact us immediately if you suspect unauthorized access.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. If you cancel your subscription, we retain your data for up to 3 years to enable easy reactivation and to comply with legal requirements. You may request deletion of your data at any time (see Your Rights section). After account deletion, we may retain anonymized, aggregated data for research and service improvement purposes.

8. Your Rights

You have the following rights regarding your personal data:

Right to Access: Request a copy of the personal data we hold about you.
Right to Correction: Request correction of inaccurate or incomplete data.
Right to Deletion: Request deletion of your personal data, subject to legal retention requirements.
Right to Withdraw Consent: Withdraw consent for data processing at any time by contacting us or through your account settings.

9. Cookies and Tracking

We use cookies and similar technologies to improve your experience, remember your preferences, and analyze site usage. Essential cookies are necessary for the website to function. Analytics cookies help us understand how visitors use our site. You can control cookie preferences through your browser settings. Note that disabling cookies may affect some website functionality.

10. Children's Privacy

Our services are not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected data from a child under 18 without parental consent, we will take steps to delete that information promptly. If you believe we may have information about a child under 18, please contact us.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. We will notify you of material changes by posting the updated policy on our website and, for significant changes, by email. The "Last updated" date at the top indicates when the policy was most recently revised. Your continued use of our services after changes become effective constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how we handle your information, please contact us at ceo@chreodex.com. We are committed to addressing your privacy concerns promptly and transparently.