How we handle your information.

1. Who this applies to

This Privacy Policy describes how Eve Health LLC (“Eve,” “we,” or “us”) collects, uses, and shares information when you visit our websites (including eve.health and get-eve.com), use our mobile applications, purchase or use one of our at-home test kits, or otherwise interact with us (collectively, the “Service”).

Eve provides educational information, decision-support tools, and at-home biomarker testing kits processed by independent CLIA-certified laboratories. Eve is not a healthcare provider and does not provide medical care or diagnosis.

2. Information we collect

Information you give us

• Account information. When you create an Eve account, we collect your name, email address, password (stored as a one-way hash), and date of birth. You may optionally provide a phone number.
• Profile and goals. Information you choose to share about your fertility journey: your goals (trying to conceive, considering egg freezing, exploring pathways), cycle history, known conditions (e.g., PCOS, endometriosis), and other context that powers your personalized Eve Score and plan.
• Biomarker results. Lab values you enter manually after receiving your at-home test results (for example, AMH, FSH, LH, TSH).
• Order information. The kits you purchase, shipping address, and order history. Payment card details are entered directly into our payment processor (Stripe) and are never received or stored by Eve.
• Communications. If you contact us by email, in-app message, or social media, we keep a record of the interaction so we can respond and improve our service.
• Survey, research, or testimonial responses. Information you provide if you choose to participate in optional surveys, research, or share your story with us.

Information collected automatically

• Device and usage data. When you use the Eve app or website, we collect device type, operating system, app version, browser type, IP address, time zone, language, and how you interact with the Service (pages viewed, screens used, time spent, errors encountered).
• Approximate location. Derived from your IP address, used to provide region-appropriate content and to protect the Service from abuse. We do not collect precise GPS location.
• Cookies and similar technologies. See Cookies and tracking below.

Information from third parties

• Lab partners. When you order a kit, our CLIA-certified lab partner processes your sample and returns lab results. Your lab partner may also send you a copy of those results by email or postal mail. Eve receives a copy only after you choose to enter the values into the app, unless you explicitly authorize the lab to transmit results to Eve directly.
• Payment processor. Stripe shares limited transaction information with us (the last four digits of your card, the amount, the result of the charge) so we can fulfill your order and provide customer support. Stripe’s privacy practices are governed by Stripe’s Privacy Policy.
• Analytics and advertising partners. See Third-party services below.

3. How we use information

We use the information we collect to:

• Provide, maintain, and improve the Eve Service, including delivering your kit, calculating your personalized Eve Score, generating your weekly plan, and ranking treatment pathways.
• Communicate with you about your account, orders, results, and updates to the Service.
• Send you marketing communications (only with your consent, which you can withdraw at any time).
• Provide customer support.
• Detect, prevent, and respond to fraud, abuse, security incidents, and harmful activity.
• Conduct internal research and analytics to improve the Service. Where this involves health data, we use de-identified or aggregated data wherever possible.
• Comply with our legal obligations and enforce our Terms of Service.

We do not use your health information for advertising, and we do not sell your personal information.

4. When we share information

We share information only in the limited circumstances described below.

Service providers

We work with companies that help us operate the Service. These include:

• Stripe — payment processing
• Our CLIA-certified lab partner — sample processing and lab results
• Cloud hosting and storage providers — running the app and website (e.g., Netlify, AWS)
• Email providers — transactional emails and (with your consent) marketing
• Customer support tooling — helping us respond to your messages
• Shipping and fulfillment — delivering your kit
• Analytics — understanding aggregate usage of the Service

Each of these vendors is bound by contracts that limit how they can use your information — only for the purposes we direct, and never to sell or share for their own marketing.

With your consent or at your direction

We will share your information when you tell us to — for example, if you ask us to share your results with a clinician, partner, or another app you use.

Legal and safety reasons

We may share information when we believe in good faith it is necessary to: comply with applicable law, court orders, or legal process; protect the rights, property, or safety of Eve, our users, or others; investigate and prevent fraud or security issues; or defend legal claims.

Business transfers

If Eve is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you (by email and/or a prominent notice in the Service) of any such change in ownership or control of your personal information.

What we don’t do

• We do not sell your personal information.
• We do not share your health information with advertisers.
• We do not allow third parties to use your information for their own marketing.

5. Your health data, specifically

Eve collects information that is sensitive by nature: your fertility goals, your conditions, your biomarker results, and inferences we make from those values. We treat this information with the care it deserves.

• You control what you share. You decide whether to enter your biomarker results into Eve. You can skip any field and edit or delete entries at any time.
• Encrypted in transit and at rest. Health data is encrypted using industry-standard methods (TLS 1.2+ in transit, AES-256 at rest).
• Access is restricted. Only employees who need access to operate the Service or provide support can see health data, and only the minimum necessary.
• Not used for advertising. Your health data is never shared with advertising partners and is never used to target ads to you.
• HIPAA-aligned practices. Eve is not a HIPAA covered entity. However, where applicable to our operations, we apply HIPAA-aligned practices for data minimization, access control, encryption, and breach response.
• Eve is not a medical service. Information you receive from Eve, including your Eve Score, plan, and treatment-pathway suggestions, is for educational and informational purposes only. It does not constitute medical advice, diagnosis, or treatment, and should not replace the judgment of a licensed clinician.

6. How long we keep your data

We keep your information only as long as necessary to provide the Service and for the purposes described in this Privacy Policy. Specifically:

• Account information: while your account is active, plus a limited period after closure for legal, tax, and fraud-prevention purposes (typically up to 7 years for transaction records).
• Biomarker results and health data: retained as part of your account so you can track changes over time. Deleted within 30 days of you deleting your account, except where we are required to retain it by law.
• Order and payment records: retained as required for tax, accounting, and consumer-protection laws (typically 7 years in the US).
• De-identified or aggregated data: may be retained indefinitely for research and Service improvement, but cannot reasonably be linked back to you.

7. Security

We use a combination of technical, administrative, and physical safeguards designed to protect your information, including encryption in transit and at rest, role-based access controls, vendor security review, regular security testing, and employee training. No system is perfectly secure, however, and we cannot guarantee that unauthorized access will never occur. If we ever experience a security incident affecting your data, we will notify you and the appropriate authorities as required by law.

8. Your rights and choices

You have control over your information. From the Eve app or by emailing privacy@get-eve.com, you can:

• Access the personal information we hold about you.
• Correct information that’s inaccurate.
• Export a portable copy of your data.
• Delete your account and the personal information associated with it. We will confirm deletion in writing.
• Withdraw consent for processing that requires it (e.g., marketing emails). You can also unsubscribe from marketing emails using the link in any of our marketing messages.
• Object to or restrict certain processing activities.

We will respond to verifiable requests within the timeframes required by applicable law (typically 30–45 days). We will not discriminate against you for exercising any of these rights.

9. California residents

If you live in California, the California Consumer Privacy Act (as amended by the California Privacy Rights Act) gives you specific rights regarding your personal information.

Categories of personal information we collect

Over the past 12 months, we have collected the following categories of personal information from California residents:

• Identifiers: name, email, phone number, IP address, account identifiers
• Customer records: address, payment information (held by Stripe), order history
• Protected classification characteristics: age (date of birth), sex, gender
• Commercial information: products purchased, transaction history
• Internet or network activity: browsing and usage data on the Service
• Geolocation: approximate (city/region) location derived from IP
• Sensitive personal information: health information, including biomarker results, fertility goals, and conditions you share
• Inferences: Eve Score, recommended pathways, and other inferences drawn from your profile and results

We collect these categories from the sources, for the purposes, and share them with the recipients described elsewhere in this policy.

Your CCPA/CPRA rights

• The right to know what personal information we collect, use, share, and disclose.
• The right to delete personal information.
• The right to correct inaccurate personal information.
• The right to opt out of the sale or sharing of personal information. Eve does not sell or share personal information for cross-context behavioral advertising.
• The right to limit the use of sensitive personal information. We use sensitive personal information only for the purposes permitted under California law and described in this Policy.
• The right to non-discrimination for exercising your rights.

To exercise these rights, email privacy@get-eve.com. We may need to verify your identity before fulfilling your request. You may also use an authorized agent.

10. Washington residents

If you live in Washington, the My Health My Data Act provides additional rights for consumer health data:

• Right to know. You can request a list of all third parties with whom we have shared your consumer health data.
• Right to delete. You can request that we delete your consumer health data.
• Right to withdraw consent. You can withdraw any consent you previously gave for our collection or sharing of your consumer health data.

We obtain your affirmative, written consent before collecting consumer health data and before sharing it with anyone other than service providers acting on our behalf. To exercise these rights, email privacy@get-eve.com.

11. Other US state rights

Residents of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and other US states with comprehensive privacy laws may have similar rights, including the rights to access, correct, delete, and obtain a copy of personal information, and the right to opt out of certain processing. To exercise these rights, email privacy@get-eve.com. Your rights and the timeframes for our response will be governed by the privacy law of your state of residence.

12. Users outside the US

The Eve Service is provided from the United States and is intended for users in the United States. If you access the Service from outside the US, your information will be transferred to, stored, and processed in the US. By using the Service, you consent to this transfer. If you are in the European Economic Area, the United Kingdom, or another jurisdiction with data-protection laws, please contact us at privacy@get-eve.com to discuss whether the Service is available to you and the rights you have.

13. Children

The Eve Service is intended for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a child under 18 has provided us with personal information, please contact us at privacy@get-eve.com and we will delete it promptly.

14. Cookies and tracking

We use cookies and similar technologies to operate the Service, remember your preferences, understand how the Service is used, and (with your consent where required) measure marketing effectiveness. The categories of cookies we use:

• Strictly necessary cookies — required for the Service to function (e.g., keeping you logged in).
• Functional cookies — remembering your preferences.
• Analytics cookies — helping us understand aggregate usage.
• Advertising cookies — only with your consent, used to measure the performance of our advertising. We do not use health data to target ads.

You can control cookies through your browser settings and through any cookie-preferences interface we provide. Disabling cookies may affect the functionality of the Service.

We honor Global Privacy Control (GPC) signals as a request to opt out of the sale or sharing of personal information.

15. Third-party services

The Service uses or links to services provided by third parties. These third parties’ privacy practices are governed by their own policies, not by this one.

• Stripe (payment processing) — stripe.com/privacy
• Apple App Store (iOS app distribution) — apple.com/legal/privacy
• Our CLIA-certified lab partner — their privacy practices are described in materials provided with your kit.

If you click a link to a third-party site or service, you leave the Eve Service and any information you provide to that third party is governed by their privacy policy.

16. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email (if you have an account) and by a prominent notice in the Service or on our website at least 30 days before the changes take effect. The “Effective” and “Last updated” dates at the top of this policy will always reflect the current version.

17. How to reach us

For privacy-related questions, requests, or complaints, please contact us:

• Email: privacy@get-eve.com
• Mail: Eve Health LLC, [INSERT MAILING ADDRESS], Attn: Privacy

We aim to respond to every privacy inquiry within 5 business days.