Your Data, Your Ownership

Overview

Reset Biology ("Reset Biology," "we," "us," or "our") operates a licensed medical provider-led, IRB-approved peptide therapy and metabolic health coaching platform at resetbiology.com (the "Service"). This Privacy Policy explains what information we collect, how we use it, how we store it, and the choices you have — including a dedicated section on our optional Google Drive integration, since that integration is reviewed directly by Google as part of our OAuth verification.

Information We Collect

• Account information. We use Auth0 to handle sign-in. When you create an account we receive your name, email address, and authentication identifiers from Auth0. We do not store your password — Auth0 handles that.
• Health and program data you enter. Journal entries, nutrition logs, workout summaries, breath and vision-training session results, peptide and medication dosing records, quiz and assessment answers, and any other information you enter into the app.
• Payment information. Payments are processed by our third-party payment processor; Reset Biology does not store full credit card numbers.
• Usage data. Standard technical data such as pages visited within the app, session timestamps, and device/browser information needed to operate the Service.

The Google Drive Vault

Reset Biology offers an optional "Vault" feature that lets you sync your own program data — journal entries, nutrition logs, workout summaries, breath and vision-training sessions, and peptide/medication dosing records — to a folder named "Reset Biology Data" in your own Google Drive, so you retain a personal, exportable copy of your data outside our servers.

What we access. We use the Google Drive API with the drive.file scope, which limits our application to files and folders our application itself creates in your Drive. We cannot see, read, modify, or delete any other file already in your Google Drive. We additionally request your Google account email address (via the userinfo.email scope) solely to label the folder we create and confirm which account is connected.

How we use it. Data is written to the folder we create only when you take an action in the Reset Biology app (logging a workout, a meal, a peptide dose, a journal entry, etc.). Connecting the Vault is entirely optional — the Service works without it.

How We Use Your Information

• To provide, operate, and maintain the Service, including your coaching plan and portal.
• To personalize your program based on the data you provide.
• To communicate with you about your account, program updates, and support requests.
• To maintain the security and integrity of the Service.
• To comply with legal and regulatory obligations related to our IRB-approved research protocol.

We do not use your health or program data for advertising, and we do not sell your personal information.

AI Coaching & Your Vault Data

Reset Biology's AI coaching features are designed to give you personalized guidance based on your own program history. When you use an AI coaching feature and you have connected your Google Drive Vault, our coaching agents may read data from files our application created in your Drive — the same journal, nutrition, workout, and dosing records described above — in order to personalize the guidance you receive. This access is limited to files our app created (the same drive.file scope described above); our AI coaching features never access files elsewhere in your Drive that our app did not create. If you have not connected the Vault, AI coaching draws only on the data stored in your Reset Biology account.

Cookies & Analytics

We use essential cookies to keep you signed in and to maintain your session through our authentication provider (Auth0). As of the effective date of this policy, Reset Biology does not use third-party advertising cookies or third-party tracking pixels on the Service. If that changes, we will update this policy.

Data Storage & Security

Your program data is stored in our database (MongoDB) so the app can function. When you connect the Google Drive Vault, a copy of the same data is also written to the Drive folder our app creates for you. OAuth refresh tokens used to write to your Drive are stored encrypted using AES-256-GCM.

We use reasonable administrative, technical, and physical safeguards designed to protect your information. No method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

Data Sharing

We do not sell your personal information, and we do not share it with third parties, except:

• With service providers who help us operate the Service (e.g., hosting, payment processing, authentication) under confidentiality obligations.
• With licensed medical providers involved in your care under our IRB-approved protocol.
• When required by law, regulation, legal process, or governmental request.
• To protect the rights, property, or safety of Reset Biology, our users, or the public.

Google Limited Use Disclosure

Reset Biology's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We only request the minimum Google Drive scope (drive.file) needed to create and update files our app creates for you, and we do not use Google user data for advertising.

Your Rights & Choices

• Disconnect the Vault anytime from Profile → Privacy → Google Drive Sync, or by revoking access directly at myaccount.google.com/permissions. Disconnecting stops future syncs; files already written to your Drive remain yours and are not deleted by us.
• Request a copy of the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data, subject to any records we are required to retain for regulatory or medical-recordkeeping reasons.

To exercise any of these choices, contact us at support@resetbiology.com.

Data Retention

We retain your information for as long as your account is active. If you request deletion of your account (contact support@resetbiology.com), we delete the copies of your data held on our servers. Files already written to your own Google Drive Vault are yours — we never delete them, whether or not you request account deletion or disconnect the Vault.

Children's Privacy

The Service is intended for adults and is not directed to individuals under 18. We do not knowingly collect personal information from children under 18.

Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised "Last updated" date. Material changes will be communicated via email or in-app notice where appropriate.

Contact Us