Privacy Policy

1. Introduction

This Privacy Policy describes how Brevlix ("we," "our," or "us") collects, uses, and discloses personal information when you use our website and services ("Services"). By accessing or using our Services, you agree to the terms of this Privacy Policy. If you do not agree with our policies and practices, please do not use our Services.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting a notice on our website or by other means. The date at the top of this page indicates when this policy was last revised. Your continued use of the Services after changes are posted constitutes your acceptance of the revised policy.

2. Information We Collect

We collect several types of information from and about users of our Services:

• Account information — such as your email address and authentication credentials, which we collect via Supabase when you create an account or submit a quiz.
• Health assessment answers — the responses you provide during the quiz, used to generate your personalized AI report.
• Usage and analytics data — aggregated metrics such as quiz completion rates, button clicks, page views, and feature interactions to help us improve the product.

3. How We Collect Your Information

We collect information:

• Directly from you when you provide it to us, such as when you fill out forms, take a quiz, or contact us.
• Automatically as you navigate through the site. Information collected automatically may include usage details, IP addresses, device identifiers, browser type, operating system, and referring URLs.

The technologies we use for automatic data collection may include:

• Cookies — small files stored on your device to help us recognize your browser and maintain your session. We use only necessary cookies for authentication and core functionality.
• Server logs — which automatically record information about your interactions with our Services, including your IP address and timestamps.
• Google Analytics — we use Google Analytics to collect information about how users engage with our website. For more information, see Third-Party Services below.

4. How We Use Your Information

We use the information we collect about you to:

• Provide, operate, and maintain our Services.
• Generate and deliver your personalized AI health assessment report.
• Send you the report via email and facilitate practitioner follow-up sequences.
• Track clicks on appointment booking links so practitioners can measure conversion.
• Understand and analyze how you use our Services to improve user experience.
• Communicate with you about updates, security alerts, and support messages.
• Comply with legal obligations and protect our rights.

5. AI Model Training

We do not use your personal data to train third-party or our own AI models. The information you provide is used solely to generate your individual report and is not retained or utilized for model training purposes.

6. Disclosure of Your Information

We may disclose personal information that we collect or that you provide as described in this policy:

• To service providers — we engage third-party vendors to perform functions on our behalf, such as hosting, payment processing, email delivery, analytics, and AI report generation.
• For legal purposes — to comply with any court order, law, or legal process, including responding to government or regulatory requests; to enforce our terms of service; or to protect the rights, property, or safety of our users or others.
• Business transfers — in connection with any merger, acquisition, reorganization, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction.
• Aggregated or de-identified data — we may share aggregated or anonymized information that does not identify any individual for research, analytics, or marketing purposes.

7. Third-Party Services

We rely on trusted third-party providers to operate our Services. These providers have access to your information only to perform specific tasks on our behalf and are obligated not to disclose or use it for other purposes:

• Supabase — for database storage and authentication.
• Resend — for sending emails and report delivery.
• Anthropic / OpenAI / Google AI — for generating personalized health assessment reports.
• Google Analytics — for website traffic analysis. Google Analytics uses cookies and other tracking technologies to collect information about your use of our website. You can learn more about Google's practices at Google Privacy & Terms, and opt out by installing the Google Analytics Opt-out Browser Add-on.

This Privacy Policy does not apply to third-party websites or services that may be linked from our platform. We encourage you to review the privacy policies of any third-party sites you visit.

8. Cookies and Tracking Technologies

We use cookies and similar technologies for the following purposes:

• Necessary cookies — required for authentication, session management, and core site functionality. These cannot be disabled without affecting your ability to use the Services.
• Analytics cookies — used by Google Analytics to help us understand how visitors interact with our website.

You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being set. If you disable or refuse cookies, please note that some parts of this site may become inaccessible or not function properly. Our website currently does not respond to "Do Not Track" signals.

9. Data Security

We employ physical, technical, and administrative safeguards designed to protect your personal information. However, no website, application, or data transmission over the Internet can be guaranteed to be 100% secure. We cannot ensure or warrant the security of any information you transmit to us, and you do so at your own risk.

10. Data Retention

Raw quiz answers are removed from our AI processing pipeline within 72 hours after report generation. Your email address and a summary of your report are retained so the practitioner can follow up with you. We retain personal information only for as long as necessary to fulfill the purposes for which it was collected or as required by law. When we delete your personal information, we do so in a way that prevents it from being restored or reconstructed.

11. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

General Rights

• The right to access the personal information we hold about you.
• The right to request correction of inaccurate information.
• The right to request deletion of your personal data.
• The right to object to or restrict certain processing activities.
• The right to data portability.

If You Are in the EU, UK, or Similar Jurisdictions (GDPR)

• The right to be informed about our data collection practices.
• The right to access and rectify your data.
• The right to erase or delete your data ("right to be forgotten").
• The right to data portability.
• The right to restrict and object to the processing of your data, including for direct marketing.
• The right to lodge a complaint with your local data protection authority.
• The right to withdraw consent, where processing is based on consent.

If You Are a U.S. State Resident (CCPA/CPRA and Similar State Laws)

Residents of California, Colorado, Connecticut, and other states with applicable privacy laws may have the following rights:

• The right to confirm whether we process your personal information.
• The right to access and delete certain personal information.
• The right to correct inaccuracies in your personal information.
• The right to data portability.
• The right to opt out of the processing of personal data for targeted advertising, sales, or profiling.
• The right to limit the processing of sensitive personal data.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request as soon as reasonably possible and within the time period required by applicable law.

12. Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If you are under 18, please do not use our Services or provide any information about yourself. If we learn that we have collected personal information from a child under 18 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 18, please contact us at [email protected].

13. International Data Transfers

The information we collect is transferred to and processed in the United States. By using our Services or providing any personal information to us, you expressly consent to such transfer and processing. Data protection laws in the United States may differ from those in your country of residence.

14. External Links

Our Services may contain links to third-party websites, such as practitioner booking pages. If you follow these links, you will leave our Services. We do not control, review, or endorse these third-party sites or their privacy practices. We encourage you to review the privacy policy of any website you visit.

15. Changes to This Policy

It is our policy to post any changes we make to our privacy policy on this page. The date the privacy policy was last revised is identified at the top of the page. You are responsible for periodically visiting our website and this privacy policy to check for any changes. Your continued use of the Services after we make changes is deemed to be acceptance of those changes.

16. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

[email protected]