Kihealth
Privacy Policy
Effective Date: June 9, 2026 | Last Updated: June 9, 2026
Kihealth ("Kihealth," "we," "us," or "our") is committed to protecting your personal and health information. This Privacy Policy explains how Ki Health Inc. collects, uses, discloses, and safeguards information when you visit www.Kihealth.com (the "Site"), create an account, purchase or use our diagnostic tests, or otherwise interact with us. This Policy also describes your rights with respect to your information and how to exercise them.
By using our Site or Services, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use our Site or Services.
1. Information We Collect
1.1 Information You Provide Directly
When you interact with Kihealth, you may provide:
- Contact information (name, email address, phone number, mailing address)
- Account credentials (username, password, security questions)
- Order and billing information (shipping address, payment confirmation)
- Health and sample information submitted as part of diagnostic test use
- Communications with our support team
- Reviews, referrals, or feedback you submit voluntarily
1.2 Health and Biological Information
Because Kihealth offers diagnostic health tests, we collect sensitive health-related information including:
- Biological samples you submit for laboratory analysis (e.g., saliva, stool, blood spot)
- Test results and biomarker data generated from your sample
- Self-reported health history you provide during the ordering or results process
- Health goals and wellness preferences you optionally share
This information may constitute Protected Health Information (PHI) under HIPAA and is handled accordingly. We do not sell your PHI or use it for advertising purposes.
1.3 Information Collected Automatically
When you visit the Site, we automatically collect:
- Device and browser information (type, operating system, browser version)
- IP address and approximate geolocation
- Pages visited, time on page, and clickstream data
- Referral source and search terms
- Cookie and tracking technology data (see Section 5)
1.4 Information from Third Parties
We may receive information about you from:
- Shopify (our e-commerce platform), for order processing and account management
- Payment processors (e.g., Stripe, Shop Pay) for transaction verification
- Laboratory partners who return results to us for delivery to you
- Marketing and analytics providers (e.g., Google Analytics, Meta Pixel) when you interact with our ads
2. How We Use Your Information
We use the information we collect for the following purposes:
| Purpose | Details |
|---|---|
| Providing Products & Services | Processing orders, shipping kits, returning test results, managing your account |
| HIPAA-Covered Operations | Laboratory processing of samples, communicating results to you and your authorized providers |
| Customer Support | Responding to inquiries, resolving complaints, and improving service quality |
| Marketing & Promotions | Sending emails about our products, personalized offers, and health insights (opt-out available) |
| Analytics & Improvement | Understanding how users interact with the Site to improve functionality and content |
| Security & Fraud Prevention | Detecting and preventing unauthorized access, fraud, or misuse of the Services |
| Legal Compliance | Complying with applicable laws, regulations, court orders, and legal obligations |
3. HIPAA and Health Data
Kihealth operates as a HIPAA-covered entity with respect to the diagnostic testing services it provides. Your biological samples and test results constitute Protected Health Information (PHI) under HIPAA.
We protect your PHI by:
- Processing samples only through CLIA-certified, COLA-accredited laboratories
- Restricting access to PHI to personnel with a legitimate need to know
- Maintaining HIPAA-compliant security controls including encryption, access logging, and breach response protocols
- Entering into Business Associate Agreements (BAAs) with all laboratory and technology partners who handle PHI
You have the right to request access to, amendment of, or an accounting of disclosures of your PHI. To exercise these rights, contact us at info@Kihealth.com.
4. How We Share Your Information
We do not sell your personal health information. We may share your information in the following circumstances:
4.1 Laboratory and Service Partners
We share your sample and order information with our CLIA-certified laboratory partners for test processing and result generation. These partners are bound by BAAs and confidentiality obligations.
4.2 Technology and Operational Vendors
We share data with vendors who assist us in operating the Site and Services, including Shopify (e-commerce), payment processors, cloud storage providers, email service providers, and analytics platforms. These vendors are contractually restricted from using your data for any purpose other than providing services to Kihealth.
4.3 Marketing Partners
We may share non-PHI information (such as email address, purchase history, and browsing behavior) with business and marketing partners to serve you relevant advertising on our Site and on third-party platforms. You may opt out of targeted advertising as described in Section 5.
4.4 Legal Requirements
We may disclose your information when required by applicable law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Kihealth, its users, or others.
4.5 Business Transfers
In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.
4.6 With Your Consent
We may share your information for any other purpose with your explicit consent, including sharing results with a healthcare provider you designate.
The following table summarizes our data sharing practices over the preceding 12 months:
| Category of Personal Information | Categories of Recipients |
|---|---|
| Identifiers (name, email, phone, address) | Laboratory partners, payment processors, marketing partners, Shopify |
| Order and commercial information | Laboratory partners, fulfillment vendors, marketing partners |
| Health information and PHI (test results, samples) | CLIA-certified laboratory partners only (under BAA) |
| Usage data (IP address, browsing behavior) | Analytics providers, advertising partners |
| Account credentials | Shopify (account management) |
5. Cookies and Tracking Technologies
Kihealth uses cookies, pixels, and similar tracking technologies to operate and improve the Site and to serve relevant advertising. Types of cookies we use include:
- Essential cookies: Required for Site functionality (e.g., shopping cart, login sessions)
- Analytics cookies: Help us understand how users navigate the Site (e.g., Google Analytics)
- Advertising cookies: Enable targeted ads on our Site and third-party platforms (e.g., Meta Pixel, Google Ads)
- Preference cookies: Remember your settings and preferences across visits
For information about cookies used by Shopify, visit https://www.shopify.com/legal/cookies.
You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect Site functionality. Kihealth recognizes the Global Privacy Control (GPC) signal — if you broadcast a GPC preference, we will treat it as an opt-out of targeted advertising for your browser or device.
6. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Health information and test results are retained in accordance with HIPAA requirements (minimum 6 years from creation or last effective date). Account data is retained while your account is active and for a reasonable period after closure.
7. Data Security
Kihealth implements administrative, technical, and physical safeguards designed to protect your information from unauthorized access, disclosure, alteration, and destruction. These measures include:
- Encryption of data in transit (TLS) and at rest
- Role-based access controls limiting PHI access to authorized personnel
- Regular security assessments and vulnerability testing
- HIPAA-compliant breach notification protocols
No method of data transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. We encourage you to use strong, unique passwords and to contact us immediately if you suspect unauthorized activity on your account.
8. Your Privacy Rights
Depending on your location, you may have the following rights with respect to your personal information:
| Right | Description |
|---|---|
| Right to Access / Know | Request a copy of the personal information we hold about you and how we use it |
| Right to Delete | Request deletion of your personal information, subject to legal exceptions |
| Right to Correct | Request correction of inaccurate personal information |
| Right to Portability | Receive your data in a structured, machine-readable format |
| Right to Opt Out of Sale/Sharing | Opt out of the sale or sharing of your personal information for advertising |
| Right to Restrict Processing | Request that we limit how we use your information in certain circumstances |
| Right to Withdraw Consent | Withdraw consent where our processing is based on consent |
| Right to Appeal | Appeal our decision if we decline your privacy request |
To exercise any of these rights, contact us at info@Kihealth.com or by mail at 559 W Twincourt Trail, Unit 604, Saint Augustine, FL 32095. We will verify your identity before processing your request and respond within the timeframe required by applicable law. We will not discriminate against you for exercising your privacy rights.
You may also designate an authorized agent to submit requests on your behalf. The agent must provide written proof of authorization, and we may require you to verify your identity directly with us.
9. California Residents (CCPA/CPRA)
If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), including the right to know, delete, correct, and opt out of the sale or sharing of your personal information. Kihealth has not sold personal information for monetary consideration. We have shared certain identifiers and usage data with advertising partners as described in Section 4.3; California residents may opt out of this sharing by submitting a request to info@Kihealth.com or by using the Global Privacy Control.
Sensitive personal information (such as health data) is collected only as necessary to provide our Services and is not used to infer characteristics about you. We do not knowingly sell or share the personal information of consumers under 16 years of age.
10. Children's Privacy
The Site and Services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have inadvertently collected such information, we will delete it promptly. If you believe your child has provided us with personal information, please contact us at info@Kihealth.com.
11. International Users
Kihealth is based in the United States and your information is processed and stored in the U.S. If you access our Services from outside the U.S., your information may be transferred to, stored, and processed in the U.S. or other countries that may have different privacy laws than your country of residence. Where required by applicable law (such as GDPR), we rely on appropriate transfer mechanisms — such as the European Commission's Standard Contractual Clauses — to protect your information when transferred internationally.
12. Third-Party Websites
The Site may contain links to third-party websites. This Privacy Policy does not apply to those sites. We encourage you to review the privacy policies of any third-party site you visit. Kihealth is not responsible for the privacy practices or content of third-party websites.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. We will post the revised Policy on this page and update the "Last Updated" date. For material changes, we will provide notice via email or a prominent notice on the Site. Your continued use of the Services after any update constitutes acceptance of the revised Policy.
14. Contact Us
For questions, concerns, or to exercise your privacy rights, please contact us:
Kihealth Inc. — Privacy Team559 W Twincourt Trail, Unit 604
Saint Augustine, Florida 32095
Email: info@Kihealth.com
Website: www.Kihealth.com