Privacy policy

PRIVACY POLICY

Last revised: October 17, 2025

Your privacy is important to us. As part of our efforts to facilitate and make your experience with the Elix Website as user-friendly and enjoyable as possible, we may collect and use certain information you provide to us. This Privacy Policy addresses the collection, use, and disclosure of information that Elix may gather during your use of the Website.

UNLESS OTHERWISE DEFINED IN THIS PRIVACY POLICY, TERMS USED IN THIS PRIVACY POLICY HAVE THE SAME MEANINGS AS IN THE WEBSITE TERMS OF SERVICE [ABOVE].

Please review the entire policy to learn the types of User information Elix gathers, how Elix uses that User information, what User information is disclosed and to what third parties, and how Elix safeguards your User information.

Please also check back periodically as this Privacy Policy may change from time to time. We will notify you of any material changes by publishing the new Privacy Policy on the Website. The User information Elix gathers is and will be subject to the Privacy Policy in effect at the time the information is gathered. Should you have any questions or concerns at any time, please feel free to contact us.

This Privacy Policy applies only to the Elix Website. This Privacy Policy does not apply to any websites managed, maintained, and/or hosted by third parties not directly affiliated with Elix that you may visit, e.g., via a link provided through the Website or on a website maintained by any third party. Elix does not control the privacy policies of other websites to which we may provide hyperlinks. We encourage you to learn more about the online privacy and data security policies of third party websites directly from such third parties, as their policies may differ from ours.

By submitting your information to us and by using the Website, Elix will assume that you have read, understood, and consent to the Agreement, which includes this Privacy Policy, the Website Terms of Use, and all other applicable Elix rules and policies, including our disclosure regarding third-party software and data collection and our collection and use of health-related and biometric information. We also assume that you consent to Elix's use of your information as described in the Agreement. If you do not consent, you should not access or use the Website.

Information Elix Collects

Personal Information and Non-Identifying Information

We may ask you for personally identifiable information if, for example, you contact us requesting information. This refers to information about you that can be used to contact or identify you ("Personal Information"). Personal Information includes, but is not limited to, your full name, email address, phone number, physical address, and any other information that could be used to personally identify you.

We also collect other information that you provide as part of registration and the administration and personalization of your account with us that does not identify you ("Non-Identifying Information"). Non-Identifying Information includes, but is not limited to, your zip code (on its own), health data collected in the health assessment such as regularity of menstrual cycle, information about cycle-related symptoms, your general health, and individual preferences. Certain Non-Identifying Information would be considered a part of your Personal Information if it were combined with other identifiers (for example, combining your zip code with your street address) in a way that enables you to be identified. But the same pieces of information are considered Non-Identifying Information when they are taken alone or combined only with other non-identifying information (for example, your gender only or your viewing preferences).

Health-Related Information

We collect specific categories of health-related information through our services:

a) Health Assessment Data: When you complete our health assessment, we collect information about:

- Menstrual cycle patterns and symptoms
- General health and wellness indicators
- Lifestyle factors (sleep, stress, exercise patterns)
- Dietary preferences and restrictions
- Existing health conditions relevant to our products
- Traditional Chinese Medicine constitutional indicators

b) Biometric Data: When you use our image analysis features, we collect:

- Tongue photographs for traditional wellness assessment
- Other body part images only as specifically requested and consented to
- Metadata associated with uploaded images

c) Purpose Limitation: We use this health-related information exclusively for:
- Providing personalized product recommendations
- Generating wellness insights and lifestyle tips - Improving our products and algorithms
- Internal research and development
- We DO NOT sell, share for advertising purposes, or otherwise monetize your health data

d) Sensitive Data Notice: We recognize that health-related information is sensitive. While we are not a covered entity under HIPAA, we implement appropriate safeguards to protect this information and limit its use to the purposes disclosed in this policy.

Tracking Technologies and Health Assessment Data

Our website uses tracking pixels and similar technologies (including Meta/Facebook Pixel, Google Analytics, TikTok Pixel, and related tools) to help us understand engagement with our health assessment and other website content.

TRACKING TECHNOLOGIES NOTICE: These tools may collect limited technical data, such as IP address, browser type, and page interactions, immediately upon your visit—before you have an opportunity to provide consent.

This information is used solely to maintain, secure, and improve our website experience and services. It is not used to sell, advertise, or share any health or biometric data with third parties. Any third-party analytics or advertising providers we work with are contractually prohibited from using your data for their own purposes and may process information only as necessary to support our site functionality and analytics.

By continuing to browse our website after seeing this notice or after visiting pages containing tracking technologies, you consent to this data collection and processing as described in this Privacy Policy.

Artificial Intelligence and Automated Processing

When you use our tongue analysis or other image-based wellness tools:

a) AI Processing: Your images are processed using artificial intelligence to generate wellness insights based on traditional medicine principles. This processing may occur through third-party AI services that are contractually bound to protect your data.

b) No Automated Decision-Making: Our AI tools provide informational insights only. They do not make automated decisions about your health, eligibility for services, or other significant matters.

c) Human Review: You have the right to request human review of any AI-generated insights by contacting our customer service team.

d) Model Improvement: With your separate consent, anonymized data may be used to improve our AI models. You can opt out of this use at any time.

We use your Personal Information (in some cases, in conjunction with your Non-Identifying Information) mainly to provide the Website, make product recommendations, facilitate and complete transactions for you, and respond to correspondence from you. We may also use your Personal Information to contact you with newsletters, marketing or promotional materials and other information that may be of interest to you. If you decide at any time that you no longer wish to receive such communications from us, please follow the unsubscribe instructions provided in any of the communications or update your account information.

We may also combine your Personal Information with Non-Identifying Information and aggregate it with information collected from other users to attempt to provide you with a better experience, to improve the quality and value of the Website, and to analyze and understand how the Website is used.

Usage Data

When you visit the Website, whether you are logged in or just browsing without logging in, our servers automatically record information that your browser sends whenever you visit a website. The information sent automatically by your browser is referred to as "Usage Data." This Usage Data may include information such as the manufacturer and model of your device; your Internet Service Provider (ISP); your device's Internet Protocol ("IP") address (or other device identifier), browser type, and operating system; referring/exit pages; clickstream data; Website access times and dates, pages of the Website that you visit, the time spent on those pages, and information you search for on the Website; and other statistics.

Usage Data also includes geolocation data. The Website collects and uses geolocation data to create segmentation and directive marketing.

We use this information for technical administration of the Website, including to monitor and analyze use of the Website, to increase the functionality and user-friendliness of the Website, and to better tailor the Website to Users' needs.

Usage Data may be non-identifying or it may be associated with you. Whenever we associate Usage Data with Personal Information, we will treat it as Personal Information.

Collection of Information

Elix may use a number of different techniques and technologies to collect Personal Information, Non-Identifying Information, and Usage Data. For example, Elix may use cookies, log files, clear gifs, pixel tags, embedded scripts, and/or other technology used to monitor your use of the Website.

Forms

We request certain information from you through the use of forms when you send us correspondence through the Website. We use forms in order to collect information about your health and wellness, including but not limited to information about your menstrual cycle, general health, lifestyle, diet, medical conditions.When using our image upload features, we will present you with specific consent notices when collecting any photographic or biometric data.

Data Minimization

We follow the principle of data minimization, collecting only the information necessary to provide our services. You are not required to provide all requested information, though declining to provide certain information may limit the personalization of our recommendations

Cookies

As is regular practice on many websites, the Website uses cookies and other technologies to help us understand which parts of the Website are more popular and how much time users spend there. A cookie is a small amount of data that is sent to and stored on your device from our server. Cookies may, for example, allow a user to enter a password less frequently or remember a user's preferences during an online session.

The Website uses cookies to determine whether a User is active and for other business purposes which may be used to enhance your use of our services and website. The Website may include first-party cookies (i.e., cookies that send data directly to Elix and agents and contractors acting on behalf of Elix, including cookies used to monitor, analyze, and administer the Website) and third-party cookies (i.e., cookies that send data to our contractors for their commercial use). The cookies on our Website may also track Internet activity across different websites. Since cookies are now used as industry standard, most devices automatically accept cookies, but you can usually change your device's settings to decline them. If you prefer not to enable cookies, you may choose to disable them; however, please note that certain features on the Website will not be available to you once cookies are disabled.

The elixhealing.com website uses cookies to help keep track of items you put into your shopping cart including when you have abandoned your cart and this information is used to determine when to send cart reminder messages via SMS.

Usage Data

Usage Data are collected automatically by the Website's servers and software. For example, because the Website automatically collects Usage Data for all Users that visit the Website, your Website session will be tracked. You agree that we may collect and use technical data and related information, including technical information about your device, system and application software, and peripherals, to maintain and support the Website generally.

Additionally, in some of our email messages, Elix may use a "click-through URL" linked to content on the Website. When a User clicks onto one of these URLs, the User will pass through our server before arriving at the destination Web page. Elix tracks this click-through data to help us determine User interest in certain subject matter and measure the effectiveness of these User communications. You can avoid being tracked in this way by not clicking text or graphic links in emails from Elix.

Finally, we may use clear gifs or pixel tags, which are tiny graphic images, in order: (i) to advise us of what parts of the Website Users have visited, (ii) to measure the effectiveness of any searches Users perform, and (iii) to enable us to send emails in a format that Users can read and tell us whether such emails have been opened in order to ensure us that we are sending messages that are of interest to Users.

Tracking

Some Web browsers may be configured to send Do Not Track signals to websites, or users may use similar mechanisms, to indicate a user's preference that certain web technologies not be used to track the user's online activity. The Website does not accept or process such Do Not Track signals or similar mechanisms.

Public Communications

Please note that if you use any bulletin board, chat room, comment posting feature, or other public communication service, forum, or feature offered through the Website, or post any information available for viewing by other Users, any of the information that you share will be visible to other Users. The information that you make available can be read, used, and collected by other Users to send you unsolicited messages outside of the Website. Elix is not responsible for the manner in which the Personal Information that you decide to share will be used by other Users.

Use and Sharing of Information by Elix

The User information that Elix collects may be added to our databases and used for business purposes, including for marketing and promotional purposes, for a statistical analysis of Users' behavior, for product development, for content improvement, or to customize the content and layout of the Website. Health-related information and biometric data are subject to additional restrictions as described in this policy and will never be used for advertising targeting or sold to third parties.

EMAIL

Elix will, on occasion, send emails to you about the Website or third-party products. If you do not want to receive email from us, visit the "Opt Out" or "Unsubscribe" link at the bottom of any Elix email to remove yourself from continued receipt of such email messages.

SMS

Consent to Receive Messages. By opting-in to Elix Healing's messaging program called "Elix Healing SMS", you consent to receiving marketing text messages (e.g. cart reminders from information collected via cookies) at the telephone number, including Short Message Service (SMS) messages. Elix Healing has full control of its messaging program and reserves the right to alter the frequency of messages sent at any time, so as to increase or decrease the total number of sent messages.

No Condition for Purchase or Services. Your decision to opt in to Elix Healing's messaging program is not a condition of purchasing any good or service.

Elix Healing's Terms of Use and Privacy Policy. By opting in, you accept and agree to be bound by Elix Healing's privacy policy and terms of use, and you consent to the processing of your information as set forth in those policies.

Contact. If you have questions or comments, please reach out to Elix Healing at 134 Charles St, New York, NY 10014.

Opt-In. To opt in, you may:

Send a text message containing Elix Healing to +18559641983.
Enter your mobile phone number on a website form, and agree to join our recurring automated marketing messages program. Message frequency varies. You will then receive a text from +18559641983, for which you will need to confirm your opt-in by responding "Yes."

Rates. Carrier message and data rates may apply. Please consult your mobile service carrier's pricing plan to determine the charges for sending and receiving text messages.

Opt-Out. To opt out, text "STOP" to +18559641983. This is the only method for opt out. After opting out you will receive one additional message confirming that your request has been processed.

Help. For help, text "HELP" to +18559641983.

Other.

Carriers are not liable for delayed or undelivered messages.
For additional information on our SMS provider software, please go to Voyage SMS.

Elix's policy is not to share the User information it collects with third parties other than as specified below, or where a User expressly consents to our sharing of certain information with a third party. We may share User information with third parties under the following circumstances:

Business Partners and Vendors

We may employ third party companies and individuals for any of the following: to facilitate the Website; to provide the Website or portions of the Website on our behalf; to perform related services, including without limitation, maintenance services, database management, fulfillment, web analytics, and improvement of the features or functionality; or to assist us in analyzing how the Website is being used. This includes:

a) Assessment Platform Providers: Third-party platforms that host our health assessments. These providers: - Store assessment responses solely for our use - Are contractually prohibited from external sharing - May only use data to improve their platform functionality for our benefit - Do not have rights to monetize or analyze your health data independently

b) Artificial Intelligence Providers: Services that analyze uploaded images for wellness insights. These providers: - Process images solely to generate insights for our services - Are contractually restricted from using your data for their own model training without explicit consent - Must delete processed data according to our retention policies - Maintain appropriate security measures for health-related data

c) Cloud Storage Providers: Services that store uploaded images and health data. These providers: - Store data with encryption at rest and in transit - Are bound by data processing agreements limiting their use of your data - Must comply with our data retention and deletion requirements

Your California Privacy Rights. California residents who have an established business relationship with Elix may choose to opt out of Elix's disclosing personal information about them to third parties for marketing purposes. If you do not want us to share your personal information with such third parties, please send us your name, email address, street address and phone number to hello@elixhealing.com. Your opt out request will be processed within 30 days of the date it was received.

Additional State Privacy Rights. Colorado, Connecticut, Virginia, and Utah Residents: You may have additional rights including:

- Right to confirm whether we process your personal data
- Right to access your personal data
- Right to correct inaccuracies in your personal data
- Right to delete your personal data
- Right to data portability
- Right to opt out of targeted advertising (though we do not engage in such advertising with health data)

To exercise these rights, please contact us at hello@elixhealing.com.

Under certain circumstances, you may avoid having Elix share your information with its business partners and vendors by not granting Elix permission to share your information. Not granting Elix permission to share your information with its business partners or vendors may limit your access to their services through the Website.

Third-Party Software and Data Collection

Elix uses various third-party software, tools, and services to operate, maintain, analyze, and improve our Website and services. These third-party providers may collect, process, store, and analyze certain information about your use of our Website and services, including but not limited to:

  1. Website usage data, browsing activity, and analytics

  2. Information submitted through forms, assessments, and other interactions

  3. Customer service and support communications, including recordings of phone calls

  4. Transaction and payment processing information

  5. Website performance and operational data

  6. Communication content, including recordings of phone calls, chat logs, and email correspondence

  7. Health assessment responses and related wellness data 

  8. Photographic images uploaded for analysis, including tongue photographs

  9. Artificial intelligence and machine learning analysis results

  10. Artificial intelligence and machine learning analysis results

By accessing or using the Website, you explicitly acknowledge, understand, and consent that:

a) Your communications with Elix, including phone calls, may be recorded, monitored, or analyzed using third-party software for quality assurance, training, security, and service improvement purposes;

b) Third-party service providers collect and process information that may include your personal information in order to provide and optimize their services to us;

c) The collection and processing of this information is necessary for the proper functioning of our Website and services;

d) While we have agreements with these providers regarding data protection, their use of information is also governed by their respective privacy policies and terms of service.

e) Third-party assessment hosting platforms are used solely to facilitate our health assessments and store responses for product recommendation purposes. These platforms are contractually prohibited from sharing your health assessment data externally or using it for any purpose other than providing and improving our assessment tools;

f) Third-party artificial intelligence providers may process uploaded images (including tongue photographs) to generate health insights. These providers are contractually restricted to processing data solely for our service delivery and are prohibited from using your images for their own model training or other purposes without explicit consent;

g) Cloud storage providers may store your uploaded images and health data. These providers maintain industry-standard security measures and are contractually bound to protect your data.

While we carefully select our third-party providers and have agreements regarding data protection, their collection and use of information is also governed by their respective privacy policies and terms of service. You can request more information about our specific third-party providers by contacting us at hello@elixhealing.com.

IF YOU DO NOT CONSENT TO THE COLLECTION, STORAGE, PROCESSING, OR ANALYSIS OF YOUR INFORMATION BY ELIX OR ITS THIRD-PARTY SERVICE PROVIDERS AS DESCRIBED IN THIS AGREEMENT, OR IF YOU DO NOT CONSENT TO THE RECORDING OR MONITORING OF YOUR COMMUNICATIONS WITH ELIX, YOU MUST NOT USE OUR WEBSITE OR SERVICES.

Promotions

From time to time, we may offer promotions through the Website that require a separate registration. By participating in such a promotion, you agree to the official rules for the promotion, which may require that you provide certain information. Information collected in connection with a promotion will be used consistently with the promotion's official rules and this Privacy Policy.

Business Transfers

As we continue to develop our business, we may buy, sell, or share assets in connection with, for example, a merger, acquisition, reorganization, sale of assets, or bankruptcy. In such transactions, information about Users generally is often a transferred business asset. In the event that Elix itself or substantially all of Elix's assets are acquired, information about our Users may be one of the transferred assets. We will require any acquiring entity to agree to protect health-related and biometric information consistent with this Privacy Policy.

Compliance with Law and Protection of Elix and Others

We may release User information when we believe, in our sole discretion, that release is appropriate: to comply with the law, including but not limited to, in response to a subpoena served on Elix; to enforce or apply the Agreement, including the Website Terms of Use and other applicable agreements, rules, and policies; to protect the rights, property, or safety of Elix, our Users, or others; or to prevent activity that we believe, in our sole discretion, may be or may become illegal, unethical, or legally actionable (including exchanging User information with other companies and organizations for fraud protection). We will make reasonable efforts to limit any law enforcement disclosures of health-related or biometric information to the minimum necessary to comply with legal requirements.

Aggregate Site Use Information

We may release aggregate User information (without revealing any Personal Information about you) to advertisers and other third parties in order to promote or describe use of the Website. Aggregated health data will be de-identified in accordance with industry best practices to prevent re-identification.

International Transfer

By accessing and using the Website, you acknowledge and agree that Elix controls and operates all parts of the Website from its offices in the United States of America and that the Website is intended for use by Users located in the United States of America. Unless expressly stated to the contrary, Elix makes no representation that the Website is appropriate or will be available for use in other locations.

If you access the Website from outside the United States, you acknowledge and agree that your information may be transferred to and maintained on computers and servers located outside of your state, province, country, or other governmental jurisdiction where the privacy laws may not be as protective as those in your jurisdiction. Your consent to the Agreement followed by your submission of such information represents your agreement to the transfer of such information to the United States and the collection, use, and disclosure of your information in accordance with United States law and our Privacy Policy.

Changing or Deleting Your Information

All Users who have created an account on the Website may review, update, correct or delete the Personal Information in their registration profile by contacting us.You have specific rights regarding your health-related and biometric information:

a) Access: You may request a copy of all health-related and biometric information we maintain about you.

b) Correction: You may request correction of any inaccurate health information.

c) Deletion: You may request deletion of your health-related and biometric information at any time. We will delete such information within 30 days unless retention is required by law.

d) Portability: You may request your health data in a portable, machine-readable format.

To exercise any of these rights, contact us at hello@elixhealing.com.

If you completely delete all such information, then your account may become deactivated. We may retain an archived copy of your records as required by law or for legitimate business purposes. Biometric information will be deleted according to the retention schedule described in our Terms of Service, regardless of account status.

Data Retention

We retain different categories of data for different periods:

a) Health Assessment Data: Retained for the duration of your account plus three years, unless you request earlier deletion.

b) Biometric Information (including tongue photos): Retained for no longer than three years from your last interaction with our services, unless you request earlier deletion.

c) Transaction Data: Retained as required by law for tax and accounting purposes (typically seven years).

d) Usage Data: Retained for up to two years for analytics purposes.

You may request deletion of your data at any time, subject to legal retention requirements.

Security

We employ administrative, physical, and electronic measures designed to protect your information from unauthorized access. For example, we use commercially reasonable security measures such as encryption and firewalls to protect User information.Health-related and biometric information receives enhanced security protections including:

a) Encryption in transit using TLS 1.2 or higher

b) Encryption at rest using AES-256 or equivalent

c) Access controls limiting employee access to health data on a need-to-know basis

d) Regular security assessments and penetration testing

e) Incident response procedures specific to health data breaches

Please note that no security system is impenetrable. Accordingly, we do not guarantee the security of our databases, nor that information you supply won't be intercepted while being transmitted to us over the Internet or other network. Any information you transmit to Elix, you do at your own risk. We will make any legally required disclosures of any breach of the security, confidentiality, or integrity of your unencrypted electronically stored "personal data" (as defined in applicable state statutes on security breach notification) to you via email or conspicuous posting through the Website in the most expedient time possible and without unreasonable delay, as consistent with (i) the legitimate needs of law enforcement or (ii) any measures necessary to determine the scope of the breach and restore the reasonable integrity of the data system. In the event of a breach involving health-related or biometric information, we will provide additional notices as required by applicable state laws.

Children's Privacy

We are committed to protecting the privacy of children. Users must be at least thirteen (13) years of age to access and use the Website. Any access to or use of the Website by anyone under the age of thirteen (13) is unauthorized, unlicensed, and in violation of the Agreement. By using the Website, you represent and warrant that you are thirteen (13) years of age or older and that you agree to and agree to abide by all of the terms and conditions of the Agreement. If Elix believes that you are under the age of thirteen (13) or that you are not old enough to consent to and be legally bound by the Agreement, Elix may, at any time, in its sole discretion, and with or without notice: (i) terminate your access to or use of the Website (or any portion, aspect, or feature of them), or (ii) delete any content or information that you have posted through the Website.

Contacting Us

If you have any questions about this Privacy Policy, please contact us at:

Zenchi, Inc. d/b/a Elix Healing
hello@elixhealing.com
134 Charles Street, New York, NY 10014