Last updated: 14 October 2026
1. Who we are
aweGene (awegene.com) is operated by LLC Awegene, (“aweGene”, “we”, “us”). We are the controller of the personal data described here. Contact: [email protected].
aweGene is an information platform. It is not a medical provider, a pharmacy or a health insurer, and it does not provide medical advice.
2. What data we collect
- Account data: name or display name, email address, password (stored hashed), language, plan.
- Health and wellbeing data you give us: answers to the health assessment and calculators, saved calculator results, blood test values you type in, habit and experiment tracking, meal plans, files you upload (for example genetic raw data, which we strip of header lines and store under an anonymous reference code). This is health data and we treat it as sensitive.
- Wearable and phone data you connect: from Oura, Fitbit, Withings, Whoop, or health data you send from your phone (for example through Apple Health export). We use it only to show your trends and to pre-fill fields you can see.
- Clinic and concierge requests: the details you type into a clinic enquiry, the medical tourism quiz or the concierge form (for example name, email, country, city, interests, a message, and an optional summary of your results if you choose to share it). Please do not put medical details in free-text boxes unless asked.
- Order and payment data: order details and payment status. Card, PayPal or crypto payments are handled by NOWPayments (cryptocurrency), a self-hosted Monero wallet and our card payment provider; we do not store full card numbers.
- AI Coach conversations: the messages you send to the AI Coach and its replies.
- Technical data: IP address (we store it only in hashed form for rate limits and abuse checks), browser and device information, pages viewed, and cookies (section 8).
- Listing owner data: if you own a partner listing, your account details, the listing content and package information you submit, and the enquiries sent to you.
3. Why we use it and our legal bases
| Purpose | Legal basis (GDPR/UK GDPR) |
|---|---|
| Create and run your account, show your results, send service emails | Contract |
| Process health data you enter or connect (assessments, calculators, wearables, experiments) | Your explicit consent (Art. 6(1)(a) and 9(2)(a)), which you can withdraw at any time |
| Pass your clinic enquiry to the clinic you chose | Your consent, given when you tick the box on the form |
| Process payments and keep accounting records | Contract and legal obligation |
| Security, fraud and abuse prevention, rate limiting | Legitimate interests |
| Improve the service using aggregated, de-identified statistics | Legitimate interests |
| Marketing emails | Your consent; you can unsubscribe in every email |
We do not sell your personal data. We do not use health data for advertising.
4. AI features and third-party services
The AI Coach and some features send the text you enter to AI providers so they can generate a reply. Depending on availability these may include DeepSeek, OpenAI, Groq, Google AI Studio, OpenRouter, GitHub Models and Cloudflare Workers AI. They act as our service providers. Do not enter your name, address, ID numbers or other identifying details in AI chats.
Other service providers we use: web hosting InterServer, United States; payments NOWPayments (cryptocurrency), a self-hosted Monero wallet and our card payment provider; video visits Zoom; wearable data from the device makers you connect. We have agreements with providers that process personal data for us.
5. Sharing with clinics and other third parties
- Clinics: we send your enquiry to a clinic only when you submit it and agree to this. From then on the clinic is responsible for its own use of your data under its own privacy policy. aweGene may receive a referral fee from clinics. You pay aweGene nothing for the enquiry.
- Listing owners: enquiries sent from a partner listing are emailed to the owner of that listing.
- Legal and safety: we may disclose data where the law requires it or to protect rights and safety.
- Business transfer: if we merge or sell the business, data may transfer under the same protections.
6. International transfers
Our servers and some providers are outside your country, including in the United States. Where required, we use approved safeguards such as the EU Standard Contractual Clauses and the UK addendum.
7. How long we keep data
- Account and health data: until you delete your account, then deleted within 30 days, except what the law requires us to keep (for example order records for 1 year).
- Clinic enquiries and concierge requests: 12 months, then deleted or anonymized.
- Wearable connections: until you disconnect; tokens are deleted when you disconnect or delete your account.
- Security logs and hashed IP data: 90 days.
8. Cookies and similar technologies
We use essential cookies (login, security, shopping cart, language). If we add analytics or marketing cookies, we will ask for your consent first. You can block cookies in your browser; some features will not work without the essential ones.
9. Your rights
Depending on where you live you may have the right to access your data, correct it, delete it, restrict or object to its use, receive a portable copy, withdraw consent, and complain to your data protection authority. Email [email protected]; we reply within one month. In your account settings you can delete your account and the health data in it.
US residents: residents of states such as California, Colorado, Connecticut, Virginia, Washington and Nevada may have additional rights (access, deletion, correction, opt-out of sale or targeted advertising, and, for consumer health data, withdrawal of consent). We do not sell personal data or share it for cross-context advertising.
10. Security
We use encryption in transit (HTTPS), restricted access, hashed passwords and hashed identifiers. No system is completely secure. If a breach affects your data, we will notify you and the authorities where the law requires.
11. Children
aweGene is for adults aged 18 and over. We do not knowingly collect data from children.
12. HIPAA
aweGene is not a healthcare provider and is not a HIPAA covered entity for the information you enter on our site. Clinics you contact may be, and their handling of your data is governed by their own policies.
13. Changes
We will post changes on this page and, for material changes, notify you by email or on the site.