Get a kit

Legal

Privacy Policy

Last updated · September 30, 2026

This policy explains what BioDwell, LLC ("BioDwell," "we," "us") collects when you use biodwell.com, why we collect it, who helps us handle it, and the choices you have. The short version: we collect what we need to answer you, ship your kit and write your report. We don't sell your information and we don't run advertising trackers in your browser; the analytics tools we use are described in sections 2 and 3.

Our online shop opens soon. Until then you can order by phone or with a kit request and pay through a QuickBooks invoice; the parts about checkout describe how the online shop will work.

1. What we collect and why

When you write to us

The contact form asks for your name, your email, an optional phone number, a topic and your message. We email it to our team at info@biodwell.com so we can reply. If you email or call us directly, we get whatever you choose to share.

When you join our email list

If you leave your email under "Stay in the loop," we email it to our team and add it to our list, which is stored with Cloudflare. We use it to tell you when the shop opens and when something new ships. To leave the list, use the unsubscribe link in any of those emails or on biodwell.com/unsubscribe, reply to any email from us, or write to info@biodwell.com, and we'll take you off. When you leave, we delete your address from the list.

When you use the chat assistant

The chat in the corner of the site is an automated assistant. An AI model writes its replies, and it can get things wrong. Each time you send a message, your messages in that conversation go to an AI model that Cloudflare runs for us (Workers AI) so it can write the reply. The conversation is kept in your browser tab and clears when you close the tab. We don't keep chat conversations.

If you tap "Talk to a person," we email your name, your email, your note and the conversation to our team so a person can write back. We automatically remove some health details before it's sent. Please don't put health details, payment details or other sensitive information in the chat.

When you request a kit

The kit request form on our shop page asks for your name, your email, an optional phone number, what you'd like to test, the state a kit would ship to, and anything you choose to tell us. We use it to get back to you, help you pick the right kit, apply the state rules for your state once the kit is chosen, and send you an invoice when you're ready to order. We store the request with Cloudflare, email it to our team, and email you a confirmation. When you pay the invoice, Intuit (QuickBooks) processes the payment as described below, and we keep your request with your order.

When you order

To fill an order we collect your email, an optional phone number, your shipping name and address, and what you bought. We keep an order record and a record of what you agreed to at checkout (our Terms, any state acknowledgment for your address, and whether you asked for emails from us), both stored with Cloudflare. We use them to ship your kit, match your sample to your order, send your report, answer your questions and meet our tax and legal duties.

Payments go through Stripe (cards and wallets such as Apple Pay, Google Pay and Link) or PayPal (PayPal and Venmo). You enter your card or PayPal details in their secure forms, not ours, so your card number and your PayPal or Venmo login never reach our servers. Stripe or PayPal may email you a payment receipt, and we email you an order confirmation. Phone orders and kit requests through our website form follow the same rules: we collect the same details, the same state restrictions and acknowledgments apply, you pay through a secure invoice from QuickBooks that we email you (we never take card numbers over the phone): you enter your card or bank details on Intuit's secure payment page, not ours, and paying the invoice means you accept our Terms.

If you tick the box at checkout to get emails from us, we'll send retest reminders and notes from our team. Unsubscribe any time by replying to one of those emails or writing to info@biodwell.com.

When you send a sample

Your sample goes to one of our independent testing partners for analysis. They receive the sample and the details on its chain-of-custody form, and they use them to analyze the sample for us. Their results come back to us, and we use them to write your report and answer your questions about it. Your results describe your home, not your health. We share your results and report only with you, the people at BioDwell who work on your report, anyone you ask us to send them to, and anyone the law requires.

Information collected automatically

Like every website, ours receives technical details with each visit: your IP address, your browser and device type, the page you asked for and the time. Cloudflare, which hosts the site, uses them to deliver pages and block attacks, and keeps short-lived request logs. When you use a form, the chat or checkout, Cloudflare Turnstile checks that you're a person using signals from your browser. To stop abuse, our rate limits and security records keep scrambled fingerprints (keyed hashes) of your IP address and email instead of the raw values.

2. Cookies and browser storage

Apart from the analytics cookies described below, BioDwell sets no cookies of its own. We keep a few things in your browser's storage so the site works, and none of it is used for advertising:

Some of our partners set their own cookies or storage on the pages where they load:

You can clear or block cookies and storage in your browser settings. If you do, the site won't remember your cart or theme, and checkout may not work.

3. Analytics

We use Cloudflare Web Analytics to count visits and see which pages people read. A small script from Cloudflare runs in your browser and reports the page you're on, the page you came from, your browser and device type, your country and how fast the page loaded. It sets no cookies, doesn't fingerprint your browser and doesn't follow you to other sites, and Cloudflare shows us only aggregated counts, never a record of you.

We also use PostHog for web analytics: which pages people visit, where they came from, what they click and how the pages perform, along with your approximate location and time zone, tied to the random ID in section 2. PostHog's script masks the text on the page and anything you type, so it never records what you wrote in a form or said in the chat.

We use Google Analytics for the same kind of visit and page statistics. Google's script runs in your browser and sends Google the pages you view, how you got here, your browser and device type and your approximate location, tied to the random ID in its cookie. We've turned off Google's advertising features, so this data isn't used for ad personalization and we don't build audiences from it. Google's own use of the data is described in its privacy policy at policies.google.com/technologies/partner-sites, and you can block it with Google's opt-out browser add-on. If your browser sends a Do Not Track or Global Privacy Control signal, PostHog and Google Analytics are switched off for you. We don't run ad pixels or session recording.

When a payment goes through or is refunded, our server sends PostHog a record with the order number, the amounts (subtotal, discount, shipping and total), the number of items and the site language. It never includes your name, email or address, and it isn't linked to your browsing. We use it to count sales.

4. Who we share it with

We share personal information only with the companies that help us run BioDwell, only for the purposes in this policy, and only what each one needs:

5. Selling and sharing

We don't sell your personal information. We don't share it for cross-context behavioral advertising, and we don't use it to build advertising profiles. There is nothing to opt out of, so you won't find a "do not sell" button here. If your browser sends a Global Privacy Control signal, we treat it as a request not to sell or share your information, which is already how we work.

6. How long we keep it

When we no longer need information, we delete it or keep it only in a form that doesn't identify you.

7. How we protect it

No website or email system is perfectly secure, so we can't promise absolute security. If a breach affects your information, we'll tell you as the law requires.

8. Your choices and rights

You can ask us to:

Some states, including California, give their residents these rights by law, along with the right to limit how sensitive personal information is used. We use your results and any other sensitive information only to provide our service, never to infer things about you. We honor these requests wherever you live, and we won't charge you more or treat you differently for making one.

How to ask. Email info@biodwell.com with the subject "Privacy request," or call 1-208-545-1776 (Monday to Friday, 8am to 5pm Mountain Time). Tell us what you'd like and the email you used with us. We'll confirm it's you by matching that email or your order number, and we'll answer within 45 days. If we need more time, we'll tell you why and take up to 45 more days. Someone else can make a request for you if you give them written permission. If we turn down a request, we'll explain why, and you can ask us to look at it again by replying.

9. Children

BioDwell is for adults, and you must be 18 to order. We don't knowingly collect information from children under 13. If you think a child has sent us information, email info@biodwell.com and we'll delete it.

Our pages link to other sites, such as Stripe, PayPal, Intuit (QuickBooks) and government agencies. Their privacy practices are their own, so check their policies before you share anything with them.

11. Where we operate

BioDwell is based in Idaho and serves customers in the United States. Our service providers may process information in other places.

12. Changes to this policy

When we change this policy, we post the new version here and update the date at the top. If we make a significant change to how we use information we already have, we'll tell you before it applies to that information.

13. Contact us

Questions about this policy or your information? Get in touch: