Privacy Policy

Effective Date: September 3, 2026

At BioNexus+, your privacy matters. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website, purchase our products, or use the BioNexus+ mobile app.

BioNexus+ handles sensitive health information. The app is designed so that your data is private by default: it is encrypted, scoped to your account, never sold, and never used for advertising.

1. Information We Collect

Website and orders

  • Personal Identifiers: Name, email address, phone number, shipping/billing address.
  • Payment Information: Processed securely through third-party payment providers. We do not store your full card details.
  • Usage Data: Pages visited, time on site, device type, IP address, browser type.

Mobile app

  • Account: Your email address and a password. Passwords are handled by our authentication provider — we never see or store your plain-text password.
  • Health and wellness data you provide: Profile details (name, age, weight, height, gender, activity level and goals), food and drink logs with estimated nutrition, wellness logs (sleep, mood, exercise, fasting, supplements, body measurements), and DEXA scan results you enter.
  • Health assessment: To make the app safe and accurate for you, and to prepare for a consultation with a registered dietitian, we ask for your food allergies and intolerances, dietary pattern and food preferences, sex assigned at birth, whether you are pregnant or breastfeeding, any diagnosed medical conditions, and any medications and supplements you take. If you complete the optional extended assessment, this also includes laboratory results you choose to enter (such as HbA1c, blood lipids, liver enzymes and thyroid values), family and surgical history, weight history, and information about your eating patterns and circumstances.
  • How assessment information is used: This is a special category of personal data. We use it only to (a) prevent the app suggesting foods you have told us to avoid, (b) set nutrient targets appropriate to your sex and life stage, and (c) include it in the report you choose to generate and share with a practitioner. BioNexus+ does not interpret, diagnose from, or act clinically on any of it — that is the role of the registered dietitian or physician you share it with. You can review or change your answers at any time in the app under Account, and you may leave any optional field blank.
  • Voice input: When you use voice logging, your speech is transcribed by your device's speech-recognition service (Apple or Google, per your device settings). The resulting text transcript is processed by a third-party AI provider under contract with us, solely to convert it into structured log entries. Transcripts are processed for this purpose only; we do not use them for advertising or profiling, and our agreements do not permit that provider to train models on them.
  • Photos: If you attach a meal photo, it is stored with your entry. The app uses the camera only, and only when you initiate a capture — it does not read your photo library.

The app does not collect advertising identifiers and contains no third-party analytics or advertising SDKs.

2. How We Use Your Information

  • To process and fulfill your orders.
  • To personalize your experience on our website and app.
  • To send transactional emails and, with your consent, marketing communications.
  • To provide the app's features: storing and syncing your logs across your devices, producing the totals, grades, insights, and recommendations you see, interpreting what you log, and keeping your account secure.
  • To keep the app safe and accurate for you: excluding foods you have told us you cannot eat, and setting nutrient targets appropriate to your sex assigned at birth and life stage.
  • To improve our products, services, and platform.
  • To comply with legal obligations.

We do not sell your data, share it with data brokers or advertisers, or use it to build marketing profiles.

3. Sharing Your Information

We do not sell your personal data. We share it only with the service providers needed to operate our business and run the app — each under contract, and each only for the purpose described.

Store and website: Shopify, which hosts this store and processes your orders on our behalf; payment processors; shipping carriers; and customer support tools. Shopify's own handling of your information is governed by its consumer privacy policy.

Mobile app. We describe these providers by the function they perform rather than by name. A current list of the providers we use is available on request at support@bionexusplus.com.

  • Cloud hosting, authentication and database services — where your account and the entries you log are stored.
  • AI language processing — receives the text of what you log, solely to turn it into structured entries.
  • Abuse prevention — receives an anonymous account identifier and a request count only, never health data.
  • Password-breach checking — when you choose a password, a short irreversible fragment of it is checked against known breach data. Your password itself is never sent.

Your health assessment and report are not shared with any third party by us. If you choose to generate a report and send it to a dietitian or physician, that transfer is yours to make and is covered by their privacy practices, not ours.

Your device's speech-recognition service (Apple or Google) processes voice audio according to its own privacy terms.

4. Data Security

Traffic between your device and our servers is encrypted in transit. On our servers, your data is encrypted at rest and access is controlled so that your records are readable only by your authenticated account. On your device, health data is additionally encrypted at rest (AES-256), and your session credentials are held in the operating system's secure storage.

We use industry-standard encryption and security practices to protect your data. However, no method of transmission over the internet is 100% secure.

5. Data Retention and Deletion

Your data is retained until you delete it. In the app you can delete individual entries at any time, and you can permanently delete your entire account — including all health data on our servers and on your device — from Settings → Account → Delete Account & Data. Deletion is immediate and irreversible. Consent records (a timestamped note that you accepted these terms) are deleted together with the account.

6. Your Rights

Depending on your location (e.g. GDPR, CCPA), you may have the right to access, correct, export, delete, or restrict processing of your personal data, and to withdraw consent. You can exercise deletion directly in the app. For anything else, contact us at support@bionexusplus.com and we will respond within 30 days.

Sale and sharing for advertising. We do not sell your personal information, and we do not share it for targeted or cross-context behavioural advertising. Some U.S. state privacy laws give you a right to opt out of those activities in any case: you can record an opt-out on our Your Privacy Choices page, and where it applies we treat a Global Privacy Control signal as such a request.

7. Cookies

Our website uses cookies and similar tracking technologies to enhance your browsing experience. You can control cookie preferences through your browser settings. The mobile app does not use cookies or tracking technologies.

8. International Transfers

We are based in the United States, and the providers described above may store or process your information in a country other than the one you live in. Where we transfer personal data out of the European Economic Area or the United Kingdom, we rely on recognised transfer mechanisms, such as the European Commission's Standard Contractual Clauses.

9. Children's Privacy

Our services are not directed to individuals under the age of 18, and we do not knowingly collect personal data from minors. If you believe a minor has created an account, contact us and we will delete it.

10. Changes to This Policy

We may update this policy periodically. We will notify you of significant changes by posting the new policy on this page with an updated effective date. If we make material changes to how app data is handled, the app will present the updated policy and ask for your consent again before you continue.

11. Language

The BioNexus+ app interface is available in multiple languages. This Privacy Policy, our Terms of Service, and the in-app consent disclosure are provided in English only, and the English version is the binding version.

12. Contact Us

BioNexus+
Email: support@bionexusplus.com

If you have a complaint about how we have handled your personal information, please contact us first. Depending on where you live, you may also have the right to lodge a complaint with your local data protection authority.