Privacy Policy

The short version

BioMaxx does not require an account; an optional account enables cross-device sync. Your saved plan and BioSync files stay on your device unless you choose account sync or explicitly request an AI analysis, as described below. Wearable readings and raw lab/skin photos are processed on-device and are never uploaded.

What stays on your device only

• If you don't create an account: your quiz answers and generated plan are saved only in your browser. When you explicitly request AI analysis, the relevant answers, goals, concerns, age group, selected products and personalization context are sent for that request.
• BioSync data (heart rate/HRV from connected devices, lab report photos, skin photos) — read and analyzed entirely in your browser, account or not. Photos and lab images are processed on-device using on-device OCR/image analysis; the images themselves are never uploaded.
• Language and currency preference — stored locally so you don't have to reselect it each visit.

What is sent to our server

• AI Analysis / chat features — only when you request one, BioMaxx sends the relevant text, selected goals/concerns, age group, product identifiers and allowed personalization/profile context to our server, which forwards that request to Groq or, if needed, Cerebras. Raw photos/files are never sent. BioMaxx does not store message content; short-lived abuse/quota counters may be tied to an account, device or IP address.
• Push notification reminders — if you enable reminders, your browser's push subscription endpoint (not any personal data) is stored on our server for up to 30 days so we can deliver the notification. You can disable this at any time, which removes the subscription.
• Account data (only if you choose to sign in) — creating an account is optional. If you do, we store your email, first/last name, birthdate, biological sex, and any medications/health conditions you type in, plus your supplement/skincare plan, check-ins, reminder settings, and Premium subscription status, in our database, so they sync across your devices. This never includes BioSync's wearable readings, lab photos, or skin photos — those stay on-device even with an account.

What we don't do

• An account is never required to use BioMaxx's free features. We never sell your data and never share it for advertising or marketing purposes.
• We don't run ad-tracking scripts.
• We never upload BioSync's wearable readings, lab photos, or skin photos to a server, account or not — those are always processed on-device only.

Who processes your data

BioMaxx itself does not sell or share your data for advertising. To operate the app, a minimum amount of data does pass through a small number of named service processors, each handling only what it needs to do its job, governed by that processor's own terms:

• Groq, and Cerebras as an automatic backup — receive the limited AI request context described above. We do not send raw photos or files.
• Upstash (Redis) — stores account/profile data, your plan, and short-lived abuse-prevention counters.
• Google — authenticates you if you choose Google sign-in, serves web fonts, and hosts optional on-device BioSync model assets. These requests can expose normal network metadata such as IP address and user agent.
• jsDelivr — serves optional BioSync browser libraries when that feature is used; the request can expose normal network metadata.
• A push notification service — only your browser's push subscription endpoint, only if you enable reminders.

None of these processors are permitted to use your data for their own advertising, and we do not pay any of them to advertise to you. Retention and logging inside each processor's own systems are governed by that processor's terms, which we cannot alter or independently verify beyond what they publish.

Your controls

You can clear locally stored data by clearing biomaxx.app site data or using "Delete all my data" in BioSync. Disabling reminders removes that browser's push subscription. Account Settings can export or permanently delete server data linked to your account, including your profile, synced plan/check-ins, Premium interest and billing record. Push subscriptions are browser-endpoint records rather than account records and are removed by disabling reminders or clearing site permissions.

Questions

Reach out any time at contact@biomaxx.app, or see the Contact page.