Yupi Health Privacy Policy

Effective date: October 14, 2026

This page has four parts: our Privacy Policy, our Cookie and Tracker Notice, our Consumer Health Data Privacy Policy, and a summary of how long we keep records. Choose one below to go straight to it.

1. Privacy Policy
2. Cookie and Tracker Notice
3. Consumer Health Data Privacy Policy
4. How Long We Keep Records

---

Privacy Policy

Who we are

Yupi LLC, doing business as Yupi Health, provides health education, coaching and related services. In this policy, "Yupi," "we," "us" and "our" refer to Yupi LLC.

This policy explains how we handle personal information when an adult in the United States visits our website, asks for a guide, joins our newsletter, contacts us, checks whether a service is offered in their state, joins a waitlist, books an appointment, completes a purchase or uses one of our services.

Some information handled through our services may be consumer health data. Our separate Consumer Health Data Privacy Policy below provides additional detail about that information and the choices that may apply to it.

Information we may collect

The information we collect depends on what you choose to do.

Website and device information. Our website host may receive an Internet Protocol address, browser and device details, requested page, referring page, and date and time of a request.

Contact and account information. This may include your name, email address, phone number, mailing address, state, account details and communication preferences.

Requests and interactions. This may include a guide request, newsletter choice, contact message, state check response, waitlist signup, appointment details, quiz or survey answers, and records of our communications.

Purchase information. This may include the offer purchased, amount, billing contact, payment reference, refund and dispute information. Stripe takes the card payment for the First Read. Square or OnFire Health may handle payment-card information for other purchases.

Service and health-related information. If you choose a Yupi service, this may include intake information, health history, symptoms, routines, goals, medications, supplements, measurements, files, laboratory orders and results, coaching notes, recommendations, session history and portal activity.

Consent, request and security records. We may keep records of the choices you make, privacy requests, actions taken on those requests, account access and security events.

Please do not use a general contact form for an emergency. Call 911 or seek appropriate emergency care.

Where information comes from

We may receive information:

• directly from you;
• from your browser or device when it connects to the site;
• from systems used to deliver a service you request, such as a laboratory, payment provider or client portal; and
• from records or inferences created while responding to your request or delivering a service.

Why we use information

Depending on the interaction, we may use personal information to:

• operate, secure and troubleshoot the website;
• deliver a requested guide or respond to a message;
• check whether a service is offered in your state;
• let you know, if you join a waitlist, that a service has opened in your state;
• schedule and conduct appointments;
• process a purchase, refund or payment dispute;
• provide the service you requested, including intake, laboratory coordination, coaching and recommendations;
• send service-related communications;
• send newsletter email, including promotions;
• honor preferences, withdrawals and privacy requests;
• maintain business, tax, security and legal records; and
• improve a product or publish a testimonial or case study only through a separate approval process when one is required.

We do not currently send marketing text messages or make marketing calls.

When information may be disclosed

We may disclose information as needed to operate the site, respond to you, complete a transaction or provide a service you request. Depending on the service, recipients may include:

• GoHighLevel or LeadConnector for forms, contact management, email and scheduling;
• Biocanic for intake or client-service records;
• Trace Elements for the First Read laboratory service;
• Oxford Biomedical Technologies, which provides the Mediator Release Test;
• Evexia, which receives our orders for the GI-MAP and for blood panels;
• FluidsIQ for the Metabolic Wellness Panel and the Mucosal Barrier Assessment;
• Precision Analytical, which we order the DUTCH test from directly;
• OnFire Health, which may be involved in some laboratory or testing services;
• Fullscript when you request a supplement-related service;
• Stripe, which takes the card payment for the First Read, and Square or OnFire Health, which may process other payments;
• Google Workspace or Google Meet for email, documents, calendars and meetings;
• professional advisers, insurers, regulators or authorities when the disclosure is permitted or required; and
• a successor in a merger, financing, reorganization or transfer, subject to applicable law.

Not every recipient receives every category of information. The recipient and the information transferred depend on the service.

We do not run Google Analytics 4 or a Meta pixel on this site, and we do not use an advertising audience or retargeting. On the 5 Labs Guide page, our form provider loads a script from Meta when the form appears. The Cookie and Tracker Notice explains what that means.

Email and marketing choices

When you ask for a guide, you also join the Yupi newsletter. The newsletter may include educational content and promotions. Every marketing email will include a way to unsubscribe. Unsubscribing from marketing does not stop messages needed to complete a purchase, appointment or service you requested.

If you join the First Read waitlist, we use your first name and email to send you a confirmation email, to tell you if the First Read opens in your state, and to add you to the Yupi newsletter, which may include promotions. We keep your first name and email until you unsubscribe or ask to be removed. To be removed, email [email protected]. If you unsubscribe, we stop sending you the newsletter and the notice about your state.

Cookies and similar technologies

See the Cookie and Tracker Notice below.

How long information is kept

We keep information only as long as we need it for a service, security, tax, dispute or legal reason, and then we delete it or change it so it can no longer be linked to you. How Long We Keep Records below lists the period for each kind of record. If you ask us to delete your information sooner, we will do so unless a legal, tax, dispute or security reason requires us to keep it. A legal hold, open dispute, fraud review, security investigation or a record-keeping duty that a vendor has under its own rules may also affect deletion.

Your privacy choices

Depending on where you live and which law applies, you may have the right to ask whether Yupi has information about you, request access or correction, request deletion, withdraw a consent, ask about recipients, obtain a portable copy or appeal a decision.

Send a request to [email protected]. Describe the request and the email address or service account involved. Do not send unnecessary health information or identity documents in the first message. Yupi will use a proportionate verification method and respond as applicable law requires.

You may also unsubscribe from promotional email using the link in the message.

Security

Yupi uses administrative, technical and organizational measures intended to protect information. No method of storage or transmission is completely secure.

Other websites and services

The site may link to services operated by other organizations. Their privacy notices apply to information they collect under their own practices. A link does not mean Yupi controls that service's privacy or security.

Adults in the United States only

The site and current offers are for adults age 18 or older in the United States. Yupi does not intend to collect information from a minor. If you believe a minor has submitted information, contact [email protected].

Changes to this policy

Yupi may update this policy as services and practices change. The current version will show an effective date. If a change requires a new notice or consent, Yupi will provide it before starting the new use.

Contact

Yupi LLC, doing business as Yupi Health
4442 South 158th Street
Tukwila, Washington 98188
United States
Email: [email protected]

---

Cookie and Tracker Notice

We use technologies needed to deliver and protect this site. Our website platform, GoHighLevel, records page views and form activity so we can run the site and our forms. Cloudflare, which serves the site, collects basic page-load performance data. Some pages load fonts from Google, and the waitlist and order pages load a bot check from Cloudflare. Google and Cloudflare may receive your Internet Protocol address and browser details when those load. We do not run Google Analytics 4.

On the 5 Labs Guide page, the form comes from our form provider, which loads a script from Meta when the form appears. Meta's servers may receive your Internet Protocol address and browser details. We do not run a Meta pixel, and we do not use an advertising audience or retargeting.

We do not use the tools described on this page to build advertising audiences. If we later add a Meta pixel, Google Analytics 4 or another analytics or advertising tool, we will update this notice before it starts and, where the law requires, ask for your choice first.

---

Consumer Health Data Privacy Policy

About this policy

Yupi LLC, doing business as Yupi Health, may collect or create information linked to an adult's health interests, health services or health-related choices. This policy describes that consumer health data, where it comes from, why Yupi uses it, who may receive it and how to make a request.

In this policy, "Yupi," "we," "us" and "our" mean Yupi LLC.

This policy supplements the general Yupi Health Privacy Policy above. It applies to adults in the United States who interact with Yupi. Whether a particular right or requirement applies depends on the governing law and the facts of the interaction.

Consumer health data Yupi may collect

Depending on what you request or use, Yupi may collect or create:

• identifiers and contact information linked to a guide, page, service or health-related request;
• a health-interest inference based on a page viewed, link selected, form activity, purchase or service request;
• state and the outcome of a check of whether a service is offered in your state;
• a waitlist signup, with your first name and email, asking to be told if a service opens in your state;
• contact messages that include a symptom, condition, goal or other health information;
• quiz or survey answers, scores and segments;
• appointment details, including a reason if you choose to provide one;
• intake information, health history, symptoms, routines, goals, medications, supplements, measurements and uploaded files;
• laboratory orders, sample identifiers, status, results, interpretations and recommendations;
• coaching notes, plans, session history and messages;
• supplement recommendations, orders and related service information;
• a purchased product or service when the name or context reveals a health interest;
• portal account, access and security records; and
• consent, authorization, withdrawal and privacy-request records.

The presence of an item in this list does not mean Yupi collects it from every person.

Sources of consumer health data

Yupi may receive or create consumer health data:

• directly from you through a form, message, meeting, purchase, intake, quiz, survey or portal;
• from your browser or device when it connects to a health-related page, if a permitted technology is active;
• from a laboratory, payment provider, supplement platform or other service provider involved in a service you request; and
• from Yupi's notes, interpretations, scores, recommendations or other inferences made while responding to you or delivering a service.

Why Yupi may collect and use it

Yupi may collect and use consumer health data for the specific purpose shown when you provide it, including to:

• respond to a health-related question or deliver a requested guide;
• determine whether a service is offered in your state;
• let you know, if you join a waitlist, that a service has opened in your state;
• send newsletter email, including promotions, to a person who joined the newsletter through a guide request or a waitlist;
• book and conduct an appointment;
• process a purchase and deliver the selected service;
• coordinate laboratory testing;
• review results and provide coaching, education or recommendations;
• maintain a portal and service record;
• send service communications;
• honor a consent, withdrawal or privacy request;
• prevent fraud, protect accounts and investigate security events; and
• meet applicable recordkeeping, legal and dispute obligations.

Yupi will not use identifiable client or health data in an artificial-intelligence tool, for audience building, for product improvement, or in a testimonial or case study unless the exact use completes the required separate review and approval process. No such general permission is part of this policy.

Categories of recipients and known organizations

Depending on the service you request, consumer health data may be disclosed to:

• website, contact and scheduling providers, including GoHighLevel or LeadConnector;
• client-service platforms, including Biocanic;
• laboratory providers, including Trace Elements (First Read), Oxford Biomedical Technologies (Mediator Release Test), Evexia (GI-MAP and blood panel orders), FluidsIQ (Metabolic Wellness Panel and Mucosal Barrier Assessment) and Precision Analytical (DUTCH test, ordered directly), and possibly OnFire Health for some laboratory or testing services;
• supplement-service providers, including Fullscript when you request that service;
• payment providers, including Stripe (card payment for the First Read) and Square and OnFire Health (which may process other payments), where an offer name or transaction context may reveal a health interest;
• communication and meeting providers, including Google Workspace and Google Meet;
• professional advisers, insurers, regulators or authorities, when permitted or required; and
• a successor organization, if Yupi is involved in a merger, financing, reorganization or transfer, subject to applicable law.

Not every recipient receives every category. The recipient, the information and the legal role depend on the service.

Analytics and advertising recipients

Yupi does not run a Meta pixel and does not use an advertising audience or retargeting. On the 5 Labs Guide page, a script from Meta loads when the form appears, as the Cookie and Tracker Notice describes.

Yupi does not run Google Analytics 4. If Yupi later adds a Meta pixel, Google Analytics 4 or another analytics or advertising tool, it will update this notice and ask for your consent before the tag loads. Yupi does not place Google Analytics 4 on intake, state-check answer, booking-reason, checkout-detail, laboratory, results, portal or authenticated pages.

Sale of consumer health data

Yupi has not approved any sale of consumer health data. If an activity is later determined to be a sale, Yupi will not begin it without the notice and valid authorization required by applicable law.

Your choices and rights

Depending on the law that applies, you may be able to:

• confirm whether Yupi is collecting, sharing or selling consumer health data about you;
• access that data, including information about recipients when required;
• correct inaccurate data;
• request deletion;
• withdraw consent for future collection or sharing;
• receive a portable copy; and
• appeal a denied request.

Email [email protected] to make a request. State the request and the email address or account involved. Do not send unnecessary health details or identity documents in your first message.

Yupi will confirm that a request comes from you before acting on it, usually by replying to the email address you used with Yupi. If needed, Yupi may ask for a few non-health account details, such as your state or the date of a past order. Yupi does not ask for identity documents by default.

Yupi responds to a request within 45 days of receiving it. If more time is reasonably necessary, Yupi may extend that period once by 45 days and will tell you why.

To appeal a decision, email [email protected] with the word "Appeal" in the subject line and explain what you would like reviewed. Yupi will answer your appeal in writing within 45 days of receiving it. If Yupi denies the appeal, the answer will tell you how to contact the Washington State Attorney General.

Withdrawing consent will stop the applicable future activity after Yupi processes the request. It may not require deletion of every record if a legal, transaction, security or record-keeping exception applies.

How long Yupi keeps consumer health data

Yupi keeps consumer health data only for a defined service, security, tax, dispute or legal need and then deletes it or changes it so it can no longer be linked to you. How Long We Keep Records below lists the period for each kind of record.

Changes to this policy

The current version will show an effective date. If Yupi plans to collect a new category of consumer health data or use existing data for a materially different purpose that requires a new consent, Yupi will provide the required notice and choice before the new activity begins.

Contact

Yupi LLC, doing business as Yupi Health
4442 South 158th Street
Tukwila, Washington 98188
United States
Email: [email protected]

---

How Long We Keep Records

This table shows how long we keep each kind of record. If you ask us to delete your information sooner, we will, unless a legal, tax, dispute or security reason requires us to keep it. An open dispute, legal hold, fraud review, security investigation, insurer instruction or a record-keeping duty that someone else has under their own rules may pause or limit deletion. Vendors such as laboratories and payment providers may keep their own copies under their own rules.

When Yupi deletes a record, it stops active workflows, removes the source record and known exports (or changes them so they can no longer be linked to you), asks applicable vendors to delete their copies, addresses backups, and keeps only a minimal log of the action. Deleted symptoms, laboratory results and messages are not copied into that log.