Privacy Policy

The short version

TestD collects what it needs to get your test authorized, ship your kit, get your sample to the lab and show you your results. We share it only with the companies that run your test, the service providers that help us run TestD, and when the law requires it. We never sell your information and never share it with advertisers. Your results are released to you first, and you decide who else sees them.

What we collect

We collect:

• Who you are: your name, date of birth and sex. The lab uses sex to report some results against the right range.
• How to reach you: your shipping address with ZIP code, mobile number and email.
• Your order: the panel, your answers to the health questions at checkout, your collection date and time, and payment confirmation. Card numbers are handled by our payment processor; TestD does not store them.
• Your kit: shipping and tracking updates, and when you activate the kit.
• Your results: your results from CRL, with reference ranges and flags, and any notice that a result was urgent.
• What you connect: lab PDFs, Apple Health exports or raw DNA files you choose to upload to your results page. Raw upload files are parsed and not kept; the measurements are saved to your account.
• The guide: the questions you ask and the answers it gives.
• Technical details: the device and browser you use and the pages you visit, used only to run and fix the site.

How we use it

To check you can order, get your test authorized, ship your kit, get your sample to the lab, show you your results and the guide, help make sure an urgent result reaches you, answer your questions, send testing reminders on the cadence you choose, keep records the law requires, and prevent fraud and misuse.

We look at how the service runs for you, such as your kit, shipping and how you used your account, to improve TestD. We do not use your result values or your guide conversations with your name attached to improve TestD unless you tell us we may.

Who we share it with

We share your information with:

• Cynergy: the details it needs to authorize your test, including your name, date of birth, sex, address, mobile number, email and panel. Cynergy also receives your results from CRL.
• CRL: your order details, so it can send and label your kit, run your test and report your results.
• FedEx: your name and shipping address only.
• Our service providers: website and data hosting, email and text delivery, the AI provider behind the guide, payment processing and support tools. Each works under a contract that lets it use your information only to provide its service to TestD.
• When the law requires it, for example to answer a court order.

What we never do

• We do not sell your information.
• We do not share it with advertisers or use it to show you ads, and we do not put advertising or social media tracking tools on your order, consent or results pages.
• We do not share it with any other company for its marketing.
• We do not share your mobile number or your consent to receive texts with any third party or affiliate for its marketing.
• We do not publish your name, words, photo, video or results unless you agree to a specific use, item by item.
• We never put your result values in a text or an email.

Your results

CRL reports your results to Cynergy and, with your authorization at checkout, to TestD so you can see them in your account. A physician reads every report before it is released to you. Your results sit only in your private account, protected by your sign-in. You choose whether to share the report with your own doctor.

You can get your full report from CRL directly and from Cynergy, and you can ask us for a copy of everything TestD holds about you, at no charge.

The guide and AI

The guide on your dashboard and the analysis on your results page use artificial intelligence. To answer, we send the question and the context it needs, which may include your results and what you have connected, to our AI provider, which works for us under contract and does not use your information to train its models. We may review conversations to check the guide is working as it should.

The guide gives general information, not medical advice. It says so at the start of every conversation.

Security and retention

We protect your information with encryption in transit and at rest, a password-protected account and access limited to the people who need it to run the service. CRL follows HIPAA; TestD applies the same safeguards to the copy it holds. No system is perfect, and if your information is accessed without permission we tell you as the law requires. Your information is stored in the United States.

We keep your account and results for as long as you have an account, then delete them unless the law requires us to keep them longer. CRL and Cynergy keep laboratory and medical records for as long as the law requires.

HIPAA and your health information

CRL and Cynergy are covered by HIPAA, the federal health privacy law, and each has its own notice of privacy practices. When they send your results to TestD at your request, the copy TestD holds sits outside HIPAA. TestD applies the same safeguards to it and treats it as health information under state consumer health data laws: we use it only to run your account and show you your results, we never sell it, we never share it for marketing, and we delete it when you ask.

If your information is accessed or shared without your permission, we tell you as the law requires. Questions about how the lab or the physician practice handles your records go to them directly; their contact details are on your lab report.

Your choices and rights

You can ask to see the information we hold about you, get a copy, correct it, have it deleted, and get a list of the companies we have shared it with. Email privacy@testdhealth.com and we reply within 45 days. When you ask us to delete, we delete what TestD holds, including in backups, and tell our service providers to do the same, unless the law requires it to be kept.

You can pause testing reminders or change your contact details in account settings. Reply STOP to any text to stop texts from that sender. News and offers are optional and separate from the messages needed to run your order.

TestD is for adults 18 and over. We do not knowingly collect information from anyone younger.

Changes and contact

TestD is operated by PepTribe USA, Inc. If we change this policy, we tell you before the change applies, and we ask again before using or sharing your health information in a new way. Questions and requests: privacy@testdhealth.com. Support: support@testdhealth.com. You can also contact the Federal Trade Commission at reportfraud.ftc.gov, or your state attorney general.