Privacy policy
Privacy Policy
Last Updated: January 2026
Overview
HelloTummy (“HelloTummy,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you interact with our website, purchase our at-home gut microbiome test kits, or use our secure results portal.
We provide consumer wellness insights using clinical-grade sequencing performed in a CLIA-certified laboratory. Our service is not a medical test and does not diagnose, treat, cure, or prevent disease.
If you have any questions, email us at hello@hellotummy.bio.
1. The Two Types of Data We Handle
A. Website, Shopping, and Marketing Data (Non-Identifiable to Your Sample)
Information collected through our public website, checkout, marketing tools, or general browsing is not medical information and is governed by standard e-commerce privacy rules.
This includes:
- Name, email, address, phone
- Order history
- Device information (IP address, browser, cookies)
- Analytics and advertising pixels
- Customer support messages
This data is stored and processed through Shopify and other service providers.
B. Microbiome Test Data (Stored Under a Unique Internal ID)
Your biological sample and microbiome results are processed under a unique internal identifier. Your personal details (name, email, address) are stored separately and are never combined with your sample data, creating privacy by design.
This includes:
- Your biological sample
- Sequencing data
- Microbiome analysis
- Wellness-oriented insights
- Optional questionnaire responses
This data is not shared with advertising platforms and is never used for targeted marketing.
2. What We Collect
Depending on how you interact with HelloTummy, we may collect:
A. Information You Provide
- Account information
- Payment and shipping information
- Sample registration and optional questionnaire responses
- Customer support communications
B. Automatically Collected Information
- IP address, device type, browser
- Cookie and tracking technologies
- Website activity
- Shopify transaction metadata
C. Sample & Laboratory Information
- DNA sequencing data
- Quality control metrics
- Aggregated, non-identifiable lab data
3. How We Use Your Information
A. For Website & Orders
We use this information to:
- Process and fulfill orders
- Improve website functionality
- Prevent fraud
- Provide customer support
- Run analytics to understand performance
- Conduct advertising through Shopify, Meta, Google, TikTok, etc.
We never use your biological or microbiome data for advertising.
B. For Microbiome Testing
We use your sample ID and sample-related data to:
- Process your sample
- Generate microbiome insights
- Deliver results to you
- Maintain quality and accuracy
- Troubleshoot lab issues
Your personal identity is stored separately from your biological data.
C. Research & Product Improvement Using De-Identified Data (Optional)
With your opt-in consent, we may use de-identified and aggregated information to:
- Improve our algorithms
- Identify population-level trends
- Enhance user experience
- Conduct internal R&D
De-identified means information that cannot reasonably be linked back to you.
We do not sell identifiable personal information or identifiable microbiome data.
4. How We Share Information
We may share information with:
- Shopify (e-commerce platform)
- Payment processors
- Shipping carriers
- Customer support tools
- Laboratory partners
- Analytics providers (non-sample data only)
We never:
- Sell identifiable personal data
- Sell identifiable microbiome or biological data
- Share sample-related data with advertisers
- Permit third parties to access raw sequencing data
5. Your Choices and Rights
You can request:
- Access to your information
- Corrections
- Deletion (where legally allowed)
- Opt-out of marketing communications
To exercise rights, email hello@hellotummy.bio.
6. Data Retention
- Order and account data: 2–7 years (accounting & legal requirements)
- Email and support messages: 1–3 years
- Biological samples: generally up to 60 days, unless retained longer for quality control
- Sequencing data: retained as long as necessary to provide your service or until deletion is requested
7. Security
We use multiple safeguards including:
- Encryption at rest and in transit
- Access controls
- Segregation of identity and sample data (“privacy by design”)
- Regular security reviews and audits
No system can be 100% secure, but we take strong measures to protect your information.
8. Children’s Data
We do not knowingly collect information from children under 18 without parental consent.
9. Updates
We may update this Privacy Policy at any time. Continued use of our services means acceptance of changes.