Legal

Privacy Policy

Last updated:

NumaLine ("NumaLine," "we," "us") provides wellness testing and physician-reviewed health insights. This policy explains what we collect, why, and the choices you have. It applies to our website and services. It does not describe the independent practices of the licensed clinicians, laboratories, or pharmacies we work with, who maintain their own privacy notices.

1. Information we collect

Information you give us

Information created through the service

2. How we use it

We use your information to provide the service — arranging testing, enabling physician review, generating your protocol, and tracking your results over time — as well as to process payments, verify identity, communicate with you, meet legal obligations, and improve the product. We do not sell your personal information.

3. Your health data

Your health questionnaire responses, lab results, and clinician notes are sensitive. We treat them with heightened protection and use them only to deliver the service to you and as described in this policy. We do not use your identifiable health data for advertising. Any use of de-identified or aggregated data for research or product improvement is done in a way that does not identify you.

Not a medical record of last resort. NumaLine provides wellness insights and does not replace your relationship with your own doctor or emergency care. Keep your own copies of results you wish to retain.

4. When we share information

We share information only as needed to run the service:

Each provider that handles protected health information does so under an appropriate data-protection agreement.

5. HIPAA notice

Depending on how the service is structured, some information you provide may be protected health information under the U.S. Health Insurance Portability and Accountability Act (HIPAA). Where HIPAA applies, we and our clinical partners maintain business associate agreements and handle protected health information in accordance with HIPAA's Privacy and Security Rules. A full Notice of Privacy Practices will be provided before you receive clinical services.

6. International & cross-border data

NumaLine operates across regions, including the United States and Ghana. If you access the service from outside the country where our systems are hosted, your information may be transferred across borders. Where required, we rely on appropriate safeguards and obtain your consent before transferring health data internationally. If you are in a region covered by the GDPR or a similar law, additional rights may apply to you as described below.

7. Your choices and rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise any of these, contact us using the details below. We will respond within the timeframes required by applicable law. You can also unsubscribe from marketing emails at any time using the link in each message.

8. How we protect data

We use encryption in transit and at rest, access controls, and vendor security reviews to protect your information. No system is perfectly secure, but we work to protect your data and to notify you and regulators of a breach where the law requires.

9. How long we keep data

We keep your information for as long as your account is active and as required to provide the service, meet legal and medical-record obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete or de-identify it.

10. Contact us

Questions about this policy or your data? Email numaline.info@gmail.com. If you are in the EU/UK and have a concern we cannot resolve, you may contact your local data protection authority.