← All policies

Privacy Policy

Last updated: June 27, 2026

This Privacy Policy explains how Digital Biology LLC (“DigitalGut, ” “we,” “us,” or “our”) collects, uses, and shares information when you use DigitalGut at digitalgut.io and related services. Because DigitalGut helps you interpret gut-microbiome test results, some of the information we handle is health-related; we treat it with care. Residents of certain states have additional rights described in our Consumer Health Data Privacy Policy.

1. Information we collect

Information you provide

  • Account information — your email address and, optionally, your name and a password.
  • Your test data — the gut-microbiome test results, files, and notes you upload or enter, and the questions you ask. This may include health-related information.
  • Payment information — when you purchase a subscription or report, our payment processor collects and processes your payment details. We do not store your full card number; we receive limited information such as a confirmation and the status of your subscription.
  • Communications — messages you send us, such as support requests.

Information collected automatically

  • Usage and device data — such as IP address, browser type, pages viewed, and actions taken, collected through cookies and similar technologies for security, operation, and analytics.

2. How we use your information

We use information to:

  • provide the service — generate your reports, stories, action plans, and answers;
  • create and administer your account and authenticate sign-in;
  • process payments and manage subscriptions;
  • send transactional messages (e.g., sign-in links, receipts, important notices);
  • provide customer support and respond to your requests;
  • secure, maintain, debug, and improve the service;
  • create de-identified or aggregated data; and
  • comply with law and enforce our terms.

3. How we share your information

We do not sell your personal information. We share it only as follows:

  • Service providers. We use trusted vendors to operate the service — including cloud hosting and storage, a payment processor, email delivery, and analytics. They may process your information only to provide services to us and under contractual confidentiality and security obligations.
  • AI and language-model providers. To generate your interpretations and answers, we send the relevant data to third-party AI providers. We use providers that are contractually restricted from using your data to train their models and from retaining it beyond what is needed to return a result. See Section 4.
  • At your direction. If you choose to share or export a report, we share it as you instruct.
  • Legal and safety. We may disclose information to comply with law, respond to lawful requests, enforce our terms, or protect the rights, safety, and property of DigitalGut, our users, or others.
  • Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction, subject to this Policy.

4. AI processing of your data

Your test data and questions are processed by automated systems, including third-party large language models, to produce your reports and answers. We send only the data needed to generate a result, we select providers that contractually agree not to train their models on your data, and we do not use your individual health information to advertise to you. Because these systems are probabilistic, their output may be inaccurate or incomplete — see our Terms of Service and the medical disclaimer there.

5. How long we keep your information

We retain your information for as long as your account is active and as needed to provide the service, and thereafter as required to comply with legal obligations, resolve disputes, and enforce our agreements. When you delete a report or your account, we delete or de-identify the associated data within a reasonable period, except where we are required or permitted to retain it.

6. Security

We use reasonable technical, administrative, and physical safeguards designed to protect your information, including encryption in transit and access controls. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

7. Cookies and tracking

We use cookies and similar technologies that are essential to operate the service (such as keeping you signed in) and to understand usage so we can improve it. You can control cookies through your browser settings; disabling some cookies may affect functionality. Some browsers offer a “Do Not Track” signal; because there is no common standard, we do not currently respond to it.

8. Your choices and rights

  • Access and update. You can view and update your account information in the app.
  • Delete. You can delete individual reports, and you can request deletion of your account and associated data by contacting us.
  • Email preferences. Transactional emails are part of the service; where we send any non-essential messages, you can opt out.

To exercise a request, email [email protected]. We may need to verify your identity before acting.

9. California privacy rights

If you are a California resident, the CCPA/CPRA gives you the right to know what personal information we collect and how we use and share it; to request access to and deletion of your personal information; to correct inaccurate information; and to opt out of the “sale” or “sharing” of personal information. We do not sell your personal information or share it for cross-context behavioral advertising. We will not discriminate against you for exercising these rights. To make a request, contact us at [email protected].

10. Other U.S. state rights

Residents of other states may have similar rights to access, correct, delete, and obtain a copy of their personal information, and to opt out of certain processing. We honor these requests as required by applicable law; contact us to exercise them.

11. Consumer health data

If you are a resident of Washington, Nevada, or Connecticut, additional protections apply to your consumer health data. Please see our Consumer Health Data Privacy Policy.

12. Children’s privacy

DigitalGut is intended for adults and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us information, contact us and we will delete it.

13. International users

DigitalGut is operated from the United States and intended for U.S. users. If you access it from outside the United States, your information will be processed and stored in the United States, which may have different data-protection laws than your jurisdiction.

14. Changes to this Policy

We may update this Policy from time to time. We will post the updated version with a new “Last updated” date and, for material changes, provide additional notice where appropriate.

15. Contact

Questions or requests? Contact Digital Biology LLC at [email protected].