Privacy Policy

Last updated: November 9, 2026

You Ongoing LLC ("You, Ongoing", "we", "us") makes a personal health app. Everything you keep in it, from your test results to your notes, is part of your personal health record, and it's yours. This policy explains what we collect, why, who we share it with, how long we keep it, and the choices you have. It covers our website at youongoing.com, our iPhone and Android apps, and the services we offer through them (the "Service").

1. The short version

• We collect what we need to run the Service, including the health information you choose to give us and your lab results.
• We don't sell your personal or health information, we don't use your health information for advertising, and our AI providers don't train their models on it.
• We share your health information only with the labs and clinicians involved in your tests, the service providers who help us run the Service, and anyone you choose to share it with.
• You can see, download and delete your information, and close your account, at any time.
• If your health information is ever exposed in a breach, we'll tell you.

2. What we collect

If you join our list on the website

Your email address and the date you joined. We use it only to tell you about the launch of You, Ongoing. It isn't health information, and you can ask us to remove it at any time.

When you use the app

• Account details: your name, legal name, email, date of birth, sex, phone number and address. Labs and clinicians need these to provide your tests.
• Your health record: what you tell us about your health and goals, the tests you request, your lab results, and the notes, photos, documents and voice memos you add.
• Genetic and microbiome data: if you order a gene or gut test, the results of that test. See section 6.
• Conversations with the assistant: what you type to our chat assistant, and its replies, are kept in your record so you can come back to them.
• Live voice: when you talk with the assistant by voice, your speech is streamed to our AI provider to understand and answer you. We don't record or store the audio of live voice conversations. We keep the text of answers you give, such as your reason for joining, in your record. Voice memos you choose to add to your record are stored, with a written transcript, like any other record.
• Payment information: handled by our payment provider, Stripe. We receive details such as the last four digits of your card and your billing history, but never your full card number.
• Device and usage information: your device type, operating system, app version, IP address, and logs of how the Service is used. We use these to keep the Service secure and working.

3. How we use it

• To provide the Service: create your account, arrange your lab tests, show and explain your results, and keep your record.
• To answer your questions through the assistant.
• To take payments and prevent fraud.
• To keep the Service secure, fix problems and improve it.
• To contact you about your account, your tests and changes to the Service.
• To meet our legal obligations.

We collect and use your health information only with your consent and only for these purposes. We ask for your consent in the app before we collect it, and separately before we share it with anyone outside the providers that run the Service. Our AI providers process your information only to answer you, and they don't use it to train their models.

4. Who we share it with

• Labs and clinicians. Independent laboratories, and licensed clinicians where a test needs one, receive the information they need to provide your test and send your results back. When they act as healthcare providers, their own privacy obligations, such as HIPAA, also apply to the information they hold.
• People you choose. If you share your record with a doctor, a practice or anyone else, we send them only what you choose to share. You can stop sharing at any time. We can't recall information they've already received.
• Service providers. Companies that run parts of the Service for us, under written contracts that let them use your information only to provide their service to us. These include:
  • Bioscope AI and Bioscope Foundry, which provide health data processing and technology for the Service
  • Amazon Web Services and Cloudflare (hosting and security)
  • Auth0 (sign-in)
  • Stripe (payments and tax)
  • OpenAI (the chat and voice assistant)
• Legal reasons. When the law requires it, such as a valid court order, or to protect someone's life or safety.
• Business changes. If our company is merged or sold, your information may move to the new owner. They must keep honouring this policy, and we'll tell you before it happens.

We don't sell your personal or health information, and we don't share it for targeted advertising. If we ever wanted to, we'd first need your separate, signed authorization.

5. How long we keep it

Labs and clinicians who provide your tests keep their own copies of test orders and results for as long as their professional and legal rules require. Deleting your account with us doesn't delete their copies. You can ask them directly, and we'll help you reach them.

6. Genetic and microbiome data

Gene and gut test results can reveal things about you and your family. We ask for your express consent before you order one of these tests, and again before your results are shared with anyone you haven't already chosen. We don't use them for research, and we don't share them with employers, insurers or data brokers. You can ask us to delete them at any time. The lab destroys your sample after testing it.

7. Your choices and rights

• See and download your record from the app at any time.
• Correct your details in the app.
• Delete your record by closing your account in the app, or ask us to delete specific information.
• Withdraw consent to how we collect, use or share your health information, and stop sharing with anyone you've shared with.
• Ask who we've shared it with: the list of the third parties and service providers that received your health information.
• Opt out of non-essential emails with the link in each email.

Depending on where you live, state laws give you these rights and more, including Washington's My Health My Data Act, Nevada's consumer health data law, and the privacy laws of California, Connecticut, Indiana and other states. To use any of these rights, email hello@youongoing.com. We'll confirm who you are, respond within 45 days, and won't treat you differently for using your rights. If we decline a request, you can appeal by replying to our response, and we'll answer within 45 days. If you're still unhappy, you can contact your state's attorney general.

8. Security and breaches

We protect your information with encryption in transit and at rest, access limited to the people and systems that need it, and monitoring. No system is perfectly secure, so please keep your sign-in details safe and tell us if you think your account has been misused.

If your health information is acquired without your permission, we'll tell you without unreasonable delay and within 60 days of finding out, as the FTC's Health Breach Notification Rule and state laws require. We'll also tell the regulators the law requires us to.

9. Children

The Service is for adults aged 18 and over. We don't knowingly collect information from children. If you think a child has given us information, contact us and we'll delete it.

10. Where your information is stored

We store and process your information in the United States.

11. Changes to this policy

We'll update this policy as the Service changes. If a change is significant, we'll tell you in the app or by email before it takes effect. If it changes how we collect or share your health information, we'll ask for your consent again.

12. Contact

Questions about your privacy, or a request? Email hello@youongoing.com or write to us at:

You Ongoing LLC
11939 N Meridian St, Suite 125
Carmel, IN 46032
United States