TimeWarp Privacy Policy

Last updated: October 7, 2026

This Privacy Policy explains how Genexis Bio Inc. ("TimeWarp," "we," "us") collects, uses, and protects your information across the TimeWarp Companion mobile app for iOS and Android, our website at timewarp.com, and related services (together, the "Services"). TimeWarp is intended only for adults 18 years of age or older.

In short: the health information in the app stays on your phone. We receive health information only when you upload a lab report, or when you choose to share your check-ins, survey answers or a review, as described below. We never sell your health information or use it for advertising. On our website, we use standard analytics and advertising technologies like most online stores, which you can opt out of (see Section 7).

If you live in Washington, Nevada, or Connecticut, our Consumer Health Data Privacy Policy also applies to you: https://www.timewarp.com/pages/consumer-health-data

1. Who We Are
TimeWarp is a product of Genexis Bio Inc., a Nevada corporation with its principal place of business in Park City, Utah. Questions about this policy or your data: hello@timewarp.com.

2. Age Requirement
TimeWarp is for adults 18 and older. We do not knowingly collect information from anyone under 18. During onboarding we ask for your date of birth; if it indicates you are under 18, you cannot create an account or continue, and the information you entered is not kept. If you believe someone under 18 has provided us information, contact hello@timewarp.com and we will delete it.

3. Information in the App
Stored only on your device.
The following information is stored in the app on your phone. It is not sent to or stored on our servers:
- Health and wellness information you enter: bloodwork and biomarker values, biological age estimates (PhenoAge), date of birth, biological sex, cycle information, journal entries, and wellness inputs such as sleep, movement, nutrition, habits, and goals.
- Data from Apple Health or Health Connect, if you connect them (see Section 4).
- Your protocol log, streaks, and progress summaries, including your Longevity Report, which is calculated on your device.

Sent to us.
We receive the following:
- Account information: your email address, used to sign you in and to verify your access.
- Lab report uploads: if you upload or photograph a lab report, the file is sent securely to our server and passed to our lab-reading provider, Anthropic, which extracts your biomarker values and draw date. The values are returned to the app and stored on your device. We do not keep the file. Lab reports can include details such as your name and your provider's name, so you may cover or crop anything you do not want to send. We show you this notice on the upload screen.
- Check-ins and surveys (optional): if you turn on check-in sharing when you set up the app, or later in Profile > Privacy, your check-in ratings and in-app survey answers, including anything you write in, are sent to our server with your account email and emailed to our team inbox, so we can understand how the protocol is working for our members. If sharing is off, they stay on your phone.
- Reviews: if you write a review in the app, it is sent with your account email and the name you choose to be credited with (first name, initials, or none) when check-in sharing is on, or when you tick "Yes, TimeWarp may share this." We use a review publicly only if you tick that box.
- App usage analytics: usage events (screens viewed, protocol logged, streak milestones, feature taps), device model, operating system, and app version. These events are not linked to your name or email, do not include any health information, and we do not keep your IP address.

4. Apple Health and Health Connect Data
If you connect Apple Health (iOS) or Health Connect (Android), the following applies to all data the app receives from them ("Health Platform Data"):
- What we read: only the types you approve. On iOS this may include steps, heart rate, resting heart rate, heart rate variability, VO2 max, height, body mass, sleep, workouts, menstrual flow, date of birth, and biological sex. On Android this may include steps, heart rate, resting heart rate, heart rate variability, VO2 max, sleep, exercise, menstruation, height, and weight. On Android, the app reads up to the most recent 30 days of data, and only while you are using the app.
- Read only: the app never writes data to Apple Health or Health Connect.
- Stays on your device: Health Platform Data is used only on your device to provide features you can see in the app, such as activity, sleep, and cycle tracking and your progress summaries. It is never sent to our servers or to any third party.
- No advertising or sale: we do not use Health Platform Data for advertising or marketing, do not sell it, and do not use it to determine credit-worthiness or for lending, insurance, or employment purposes.
- No human access: because Health Platform Data never leaves your device, TimeWarp personnel cannot see it.
Our use of information received from Health Connect complies with the Health Connect Permissions policy, including its Limited Use requirements. Our use of Apple Health data complies with Apple's HealthKit requirements.
- Your control: you can revoke access at any time on iPhone through the Health app or your device's privacy settings, and on Android through your device's Health Connect settings.

5. Information from Our Website and Store
When you visit or buy from timewarp.com, we collect:
- Order information: your name, shipping and billing address, contact details, and order details, plus your answers to any optional post-purchase survey.
- Website usage and device data: IP address, browser and device type, pages visited, and similar data collected through cookies and similar technologies (see Sections 6 and 7).
- Access information: our subscription provider (Seal Subscriptions) and our store (Shopify) confirm your access status so we can give you app access.

6. How We Use Your Information
We use your information to: provide the app and its features; read the lab reports you upload; fulfill orders and verify your access; communicate with you about your account, your orders, and (if you opt in) marketing; understand how the app and the protocol are working and improve them; maintain security and prevent fraud; and comply with legal obligations.

7. Cookies, Advertising, and Your Choices (Website)
On timewarp.com we use cookies and similar technologies. Some are strictly necessary to run the store and process orders. Others help us understand site traffic and measure our marketing, including advertising pixels from partners such as Meta, TikTok, and Pinterest. Sharing information this way may be considered a "sale," "sharing," or "targeted advertising" under certain U.S. state privacy laws.
You can opt out using the "Your Privacy Choices" link in our website footer, through the cookie banner, or by browsing with a Global Privacy Control (GPC) signal, which we honor for the device and browser you use.
The app does not use advertising cookies, advertising identifiers, or tracking, and app health information is never used for advertising.

8. Who We Share Information With
We share information only with service providers that process it on our behalf under agreements that limit their use of it:
- Anthropic: reads uploaded lab reports to extract biomarker values.
- Resend: sends sign-in codes and delivers the check-ins, survey answers and reviews you share to our team.
- Google Workspace: hosts our team email, where those emails are stored.
- Seal Subscriptions: receives your email address to verify your subscription.
- PostHog: receives app usage events with no health information and no name or email.
- Render: hosts our server. Data passes through it and is not stored.
- Shopify: runs our store, orders, and payments, and confirms app access.
- Klaviyo: sends store and marketing emails, where permitted. Klaviyo does not receive app health information.
- Fairing: collects optional post-purchase survey responses.
- Advertising partners (website only, such as Meta, TikTok, and Pinterest): as described in Section 7, subject to your opt-out choices.
We do not sell health information. We may also disclose information if required by law, to protect our rights or users' safety, or in a business transfer such as a merger or acquisition, in which case we will notify you.

9. How We Protect Your Information
All data sent between the app and our servers uses encrypted connections (HTTPS). Your sign-in credentials are stored in your device's encrypted keychain or keystore. Other app data is stored on your device and protected by your device's built-in encryption, so we recommend using a device passcode. Our server does not store your app data, and our server logs do not record your check-in ratings, survey answers, reviews, email address, or lab values. No system is perfectly secure, but we limit what leaves your device and who can access it.

10. How Long We Keep Your Information
- App data on your device: kept until you delete it in the app or uninstall the app.
- Lab report files: not kept by us. They are discarded after your values are extracted. Our lab-reading provider may keep them for a limited time under its own data retention terms.
- Check-in, survey and review emails: kept in our team inbox for up to 2 years, or until you ask us to delete them, whichever comes first. We may keep de-identified results, with your name and email removed, for longer to understand how the protocol works over time. We keep this data de-identified and do not try to re-identify anyone.
- Usage analytics: kept by PostHog for up to 1 year and not linked to your name or email.
- Order records: kept as needed for tax, accounting, and legal purposes.

11. Your Rights and Choices
- Export: export your app data to a file from within the app.
- Delete: Delete My Data erases all app data on your device, resets your analytics ID, and signs you out by removing your sign-in tokens from this phone. To delete check-in, survey or review emails or other information we hold, email hello@timewarp.com.
- Check-in sharing: turn sharing on or off at any time in Profile > Privacy.
- Revoke health access: turn off Apple Health or Health Connect access at any time (see Section 4).
- Marketing: unsubscribe from marketing emails at any time.
- U.S. state privacy rights (including California): you have the right to know what personal and sensitive personal information we collect, to access, delete, and correct it, to opt out of sale, sharing, and targeted advertising (see Section 7), and to not be discriminated against for exercising these rights. Email hello@timewarp.com to make a request. We may need to verify your identity, and we will respond within 45 days. If we deny your request, you may appeal by replying to our response with the subject line "Appeal."

12. Sensitive and Health Information
We treat all health information as sensitive. Most of it never leaves your device. The health information we do receive (lab report files, and the check-ins and survey answers you choose to share) is used only for the purposes described in this policy, is never used for advertising, and is never sold.

13. International Users
We are based in the United States and sell only within the United States. If you use the Services from outside the U.S., your information will be processed in the U.S.

14. Changes to This Policy
We may update this policy. If we make material changes, we will notify you in the app or by email and update the "Last updated" date.

15. Contact
hello@timewarp.com · Genexis Bio Inc., Park City, Utah