Humankind Privacy Policy

1. Introduction

This Privacy Policy explains how Humankind Bio, Inc., a Delaware Public Benefit Corporation ("Humankind," "we," "us," or "our"), collects, uses, shares, and protects your information when you use our website, platform, and services (collectively, the "Service").

Humankind exists to advance human understanding through the collective analysis of genomic and phenotypic data. Our corporate charter includes a binding legal commitment: identifiable individual data remains under individual control and is not sold or licensed for commercial use.

This is not a policy we chose. It is a constraint we built into our legal structure.

By using the Service, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, do not use the Service.

2. Information We Collect

2.1 Information You Provide

Account Information

When you create an account, we collect:

• Name
• Email address
• Password (stored in encrypted form)
• Payment information (processed by third-party payment providers; we do not store full payment card details)

Genetic Data

When you use the Service, you may provide genetic data by:

• Uploading a DNA data file from another provider (such as AncestryDNA, 23andMe, or similar services)
• Ordering a sample kit and providing a biological sample for analysis

Your genetic data includes raw genotype data (SNPs and other genetic variants) and any analysis or insights derived from that data.

Phenotypic Data

You may optionally provide information about your traits, health, lifestyle, and outcomes ("phenotypic data") to enhance your insights and contribute to cluster intelligence. This may include:

• Self-reported traits and characteristics
• Health and wellness information
• Responses to surveys or questionnaires
• Outcomes you choose to share

Communications

When you contact us, we collect the content of your messages and any information you choose to provide.

2.2 Information Collected Automatically

Usage Data

When you access the Service, we automatically collect:

• IP address
• Browser type and version
• Device type and operating system
• Pages visited and features used
• Date and time of access
• Referring website or source

Cookies and Similar Technologies

We use cookies and similar technologies to:

• Keep you logged in
• Remember your preferences
• Understand how you use the Service
• Improve the Service

You can control cookies through your browser settings. Disabling cookies may limit your ability to use certain features of the Service.

3. How We Use Your Information

3.1 Genetic Data

We use your genetic data solely to:

• Generate your Human Operating Guide — Analyze your genetic architecture and provide personalized insights about how your body responds, metabolizes, recovers, and adapts.
• Power cluster insights — Contribute to aggregated, anonymized analyses that reveal what works for people with similar genetic architecture. Your individual data is never identifiable in these aggregations.
• Improve the Service — Develop better analytical methods and enhance the accuracy of insights.

We do not use your genetic data for:

• Advertising or marketing purposes
• Sale or licensing to third parties
• Sharing with insurers, employers, or law enforcement (except as required by law)

3.2 Account and Usage Information

We use your account and usage information to:

• Provide, maintain, and improve the Service
• Process transactions and send related information
• Send administrative messages (account verification, security alerts, policy updates)
• Respond to your inquiries and provide support
• Analyze usage patterns to improve the Service
• Protect against fraud and unauthorized access

3.3 Communications

With your consent, we may send you:

• Updates about new features or services
• Research findings and insights relevant to your genetic architecture
• Community updates and cluster news

You can opt out of marketing communications at any time by clicking "unsubscribe" in any email or contacting us at privacy@humans.inc.

4. How We Share Your Information

4.1 What We Never Do

We do not sell your data. This prohibition is embedded in our corporate charter as a Public Benefit Corporation. It is legally binding and survives any change in ownership or leadership.

Specifically, we will never:

• Sell your identifiable genetic data to any third party
• License your identifiable genetic data for commercial use
• Share your genetic data with insurers or employers
• Provide your genetic data to data brokers or advertisers

4.2 Aggregated and Anonymized Data

We may share aggregated, anonymized data—where no individual can be identified—for:

• Research purposes
• Scientific publication
• Improving understanding of genetic architecture across populations

This data cannot be traced back to you. It represents patterns across groups, not individuals.

4.3 Service Providers

We share information with third-party service providers who help us operate the Service, including:

• Cloud hosting providers
• Payment processors
• Email service providers
• Analytics providers

These providers are contractually obligated to use your information only to provide services to us and to protect your information consistent with this Privacy Policy.

4.4 Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal process, such as:

• A court order or subpoena
• A request from law enforcement with appropriate legal authority
• To protect the rights, property, or safety of Humankind, our users, or others

If we receive a legal demand for genetic data, we will:

• Notify you before disclosure unless legally prohibited from doing so
• Challenge overly broad or inappropriate requests where feasible
• Disclose only the minimum information required

4.5 Business Transfers

If Humankind is involved in a merger, acquisition, or sale of assets:

• Any acquiring entity must assume the data protection obligations in our corporate charter
• You will be notified before your information is transferred
• You will have the opportunity to request deletion of your data before any transfer

5. Your Rights and Choices

5.1 Access Your Data

You can access your genetic data and Human Operating Guide through your account at any time.

5.2 Correct Your Data

You can update your account information and phenotypic data through your account settings. If you believe your genetic data contains errors, contact us at support@humans.inc.

5.3 Delete Your Data

You can request permanent deletion of your genetic data at any time by contacting us at privacy@humans.inc. We will honor deletion requests within 60 days.

Upon deletion:

• Your genetic data will be permanently removed from our active systems
• Your Human Operating Guide will no longer be accessible
• Your contributions to aggregated analyses cannot be individually removed (as they are anonymized), but no new analyses will include your data
• Backup copies will be purged according to our retention schedule (no longer than 90 days after deletion from active systems)

5.4 Download Your Data

You can request a copy of your genetic data in a standard format by contacting us at privacy@humans.inc.

5.5 Restrict Processing

You can request that we stop processing your genetic data for cluster insights while retaining your Human Operating Guide. Contact us at privacy@humans.inc.

5.6 Withdraw Consent

Where we rely on your consent to process information, you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

6. Data Security

We implement technical and organizational measures to protect your information, including:

• Encryption of genetic data at rest and in transit
• Access controls limiting who can access genetic data
• Regular security assessments and monitoring
• Employee training on data protection

No system is perfectly secure. While we take reasonable measures to protect your information, we cannot guarantee absolute security. If we become aware of a security breach affecting your genetic data, we will notify you as required by law.

7. Data Retention

We retain your information as follows:

After you request deletion of your genetic data, backup copies are purged within 90 days.

8. International Data Transfers

Humankind is based in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States.

We take steps to ensure that international transfers comply with applicable law and that your information receives adequate protection.

9. Children's Privacy

The Service is not intended for anyone under 18 years of age. We do not knowingly collect genetic data or personal information from children under 18.

If you believe we have collected information from a child under 18, contact us immediately at privacy@humans.inc and we will delete that information.

10. Third-Party Links and Services

The Service may contain links to third-party websites or integrate with third-party services (such as DNA testing providers). This Privacy Policy does not apply to those third parties. We encourage you to review their privacy policies before providing them with your information.

11. Updates to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by:

• Email to the address associated with your account
• Prominent notice on the Service

The "Last Updated" date at the top of this policy indicates when it was most recently revised. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request information about the categories and specific pieces of personal information we have collected, the sources of that information, our purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You can request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out of Sale: We do not sell personal information. Our corporate charter prohibits it.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise these rights, contact us at privacy@humans.inc.

13. European Privacy Rights

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under applicable data protection laws:

• Legal Basis: We process your genetic data based on your explicit consent. We process account and usage data based on contractual necessity and legitimate interests.
• Additional Rights: You have the right to lodge a complaint with your local data protection authority.
• Data Protection Officer: For privacy inquiries, contact us at privacy@humans.inc.

14. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us at:

Humankind Bio, Inc.
Email: privacy@humans.inc

For general support: support@humans.inc
For legal inquiries: legal@humans.inc