Privacy Policy

Last Updated: July 29, 2026

Resonant Consulting, LLC ("Company," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, share, and protect information when you use Bio-Logic (the "Service").

By using the Service, you acknowledge the practices described in this Policy. If you do not agree, do not use the Service.

1. Information We Collect

1.1 Information You Provide

  • Account Information. Name, email address, password, and any optional profile information you provide.
  • Conversation Content. The messages, prompts, descriptions of experiences and symptoms, and other content you submit to the Service. This content may include sensitive information about your physical health, mental health, life experiences, and other personal matters.
  • Wellbeing Ratings. If you choose to provide them, we collect the ratings you give about how you are feeling in connection with a journey — for example, a starting rating when you begin a journey, an occasional check-in, and a rating when you close a journey — on a simple numeric scale, along with any optional private note you add. These ratings are voluntary and reflect your own self-assessment; they are not a medical or clinical evaluation. Because they concern how you are feeling, they may include sensitive information (see Section 2).
  • Communications. Information you provide when contacting support, providing feedback, or completing surveys.
  • Payment and Subscription Information (if applicable). Payments for paid subscriptions are processed by our third-party payment processor, Stripe, Inc.; we do not store full payment card details. We retain subscription and billing records such as your plan, subscription status, and transaction history.

1.2 Information Collected Automatically

  • Account Usage Metrics. We record activity associated with your account — such as the number of messages you send, your subscription tier and status, and how your usage changes over time — so we can operate the Service, understand engagement, manage capacity, and estimate our operating costs.
  • First-Party Website Analytics. When you visit our public website, we collect privacy-preserving, aggregate traffic data — the page visited, the site that referred you, and any campaign tags in the link you followed. This analytics is cookieless and processed on our own systems. We do not store your IP address or browser user-agent for analytics; instead we derive a one-way token that rotates daily and cannot be used to identify you or to track you across days or across other websites. We do not use third-party advertising or tracking networks.
  • Server Logs. Like virtually all online services, our servers briefly process technical data such as your IP address to route, deliver, and secure requests. We do not use this information for advertising or profiling.

1.3 Information from Third Parties

We do not buy personal information from data brokers, and we do not use third-party login or social-authentication providers. The only third party that supplies us information is our payment processor, Stripe, Inc., which shares limited transaction details (such as your plan, subscription status, billing country, and the card type and last four digits of your payment method) so we can service your subscription. We never receive or store your full payment card number.

2. Sensitive Information

Because the Service involves discussion of physical symptoms, emotional states, and personal experiences, the information you submit may constitute sensitive personal information or special category data under laws including the EU/UK GDPR, California Consumer Privacy Act (as amended), and similar laws.

Where required, we rely on your explicit consent to process such information for the purposes described in this Policy. You may withdraw consent at any time by emailing biologicvera@gmail.com or deleting your account; withdrawal does not affect prior lawful processing.

3. How We Use Information

We use information to:

  • Provide, maintain, and operate the Service;
  • Personalize your experience and generate AI responses to your inputs;
  • Communicate with you about the Service, including updates and support;
  • Improve the Service, including developing new features and, with your opt-in consent, reviewing de-identified conversations to improve how the Service understands the framework and responds (see Section 4);
  • Monitor and analyze usage and trends, and estimate and manage our operating costs and capacity;
  • Understand, in aggregate, whether and how the Service is helping the people who use it, including through the wellbeing ratings you choose to provide;
  • Detect, prevent, and address fraud, abuse, security issues, and violations of our Terms;
  • Comply with legal obligations and enforce our agreements.

4. Using Conversations to Improve the Service

With your explicit opt-in consent, we may review de-identified conversation content — stripped of details that could identify you — to improve how the Service understands the Germanic Healing Knowledge framework and how it responds. This is used to refine our own knowledge base and instructions. It is not used to train, fine-tune, or otherwise build the underlying third-party AI models described in Section 5. This setting is off by default, and you can review and change it at any time in your account. If you do not opt in, your conversation content is not used for these improvements.

Separately, if you rate an individual response — for example, a thumbs-up or thumbs-down, with an optional reason on a thumbs-down — we store that rating together with the response so we can see what is and isn't working and identify responses to improve. Anonymized, aggregated usage metrics may be used to improve the Service regardless of your preference.

5. How We Share Information

We do NOT sell your personal information. We share information only as described below:

  • Service Providers. Hosting and cloud infrastructure (Render), the AI model provider (Anthropic), and our payment processor (Stripe) perform services on our behalf under contractual confidentiality and data-protection obligations. We do not use third-party analytics or advertising providers.
  • Payment Processor. Subscription payments are handled by Stripe, Inc., which processes your payment and billing information to complete transactions, under its own privacy policy and terms.
  • AI Model Providers. Your conversation inputs are processed by Anthropic to generate responses, under Anthropic's Commercial Terms of Service. Under those terms, Anthropic does not use your inputs or the resulting outputs to train its models.
  • Legal and Safety. When required by law, legal process, or to protect the rights, property, or safety of the Company, users, or others.
  • Business Transfers. In connection with a merger, acquisition, financing, reorganization, or sale of assets, with appropriate confidentiality protections.
  • With Your Consent. Any other sharing with your direction or consent.

6. Data Retention

We keep personal information only for as long as we have a legitimate need to, based on the type of information:

  • Account information and conversation content. Retained for as long as your account remains active, so your journeys and history are available to you. When you delete a journey, delete your account, or ask us to erase your data, we remove it from our active systems promptly and purge it from encrypted backups within our backup rotation cycle (currently up to 30 days).
  • Inactive accounts. If your account is inactive for 24 consecutive months, we will notify you by email at the address on file and then delete the account and its associated conversation content unless you sign in or ask us to keep it. This lets us avoid holding sensitive information longer than there is a need to.
  • Wellbeing ratings. Retained with the journey they belong to, and deleted together with that journey or your account.
  • Billing and subscription records. Retained for as long as required to meet tax, accounting, and legal obligations (generally up to seven years), even after account closure.
  • Server logs. Technical request logs are short-lived and are routinely overwritten.
  • Website analytics. As described in Section 1.2, this data is aggregate and cannot be tied to you; it is not subject to individual deletion.
  • Deletion records. When we act on a deletion request, we may keep a minimal record that the deletion occurred (a "tombstone") so we can honor and evidence your request, and we may retain limited information where a legal hold or legal obligation requires it.

We may retain information longer where necessary to comply with law, resolve disputes, prevent abuse, or enforce our agreements. When information is no longer needed, we delete or de-identify it.

7. Cookies and Tracking Technologies

We use a single first-party cookie to keep you securely signed in. We do not use advertising cookies, cross-site trackers, or third-party analytics cookies, and our website analytics (Section 1.2) is cookieless. You can control cookies through your browser settings, but disabling the sign-in cookie will prevent you from logging in. Because we do not track you across other websites, there is nothing for a Do Not Track signal to change — we avoid cross-site tracking in the first place.

8. Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit (TLS); encryption of stored data at rest at the disk and backup level, provided by our hosting infrastructure; access controls that limit who can access data; and monitoring. Data is not individually encrypted within our database, which means authorized personnel and our service providers can access it as needed to operate and support the Service. No system is perfectly secure, and we cannot guarantee absolute security.

9. Your Rights and Choices

Depending on your jurisdiction, you may have the right to:

  • Access the personal information we hold about you;
  • Correct inaccurate information;
  • Delete your personal information;
  • Restrict or object to certain processing;
  • Receive your information in a portable format;
  • Withdraw consent;
  • Opt out of certain sharing or sale (we do not sell);
  • Lodge a complaint with a data protection authority.

To exercise these rights, contact us at biologicvera@gmail.com. We will respond within the time required by applicable law. We may need to verify your identity before fulfilling certain requests.

California Residents. Under the CCPA/CPRA, you have additional rights including the right to know specific pieces of information collected, the right to limit use of sensitive personal information, and the right to non-discrimination for exercising your rights.

EU/UK/EEA Residents. Our lawful bases include consent, contract performance, legitimate interests, and legal obligations. Where we transfer data outside your region, we use Standard Contractual Clauses or other appropriate safeguards.

10. Children's Privacy

The Service is intended for adults and is not directed to children. Children may not create their own accounts or use the Service directly.

Journeys created by a parent for a child. An adult account holder may choose to create a journey on behalf of their own minor child and to enter information about that child, including sensitive health information. If you do this, you confirm that you are the child's parent or legal guardian, that you have the authority to provide consent on the child's behalf, and that you consent to our collecting and processing that information for the purposes described in this Policy. We rely on your consent as a parent or guardian as our basis for processing a child's information, and you remain responsible for the information you submit about your child. You may review, export, or delete a child's journey at any time using the same rights and contact methods described in Section 9.

Aside from information a parent or guardian knowingly provides in this way, we do not knowingly collect personal information from children. If you believe a child has provided us information without parental involvement, contact us at biologicvera@gmail.com and we will delete it.

11. International Transfers

The Service is operated from the United States. If you are located outside the U.S., your information will be transferred to and processed in the U.S. and other countries, which may have different data protection laws. By using the Service, you consent to such transfers.

12. Third-Party Services

The Service may contain links to third-party sites or integrate with third-party services. We are not responsible for their privacy practices. Review their privacy policies before providing information.

13. Changes to This Policy

We may update this Policy from time to time. Material changes will be communicated by posting the updated Policy with a new "Last Updated" date or by other reasonable means. Your continued use after changes constitutes acceptance.

14. Contact Us

For privacy questions or to exercise your rights:

Resonant Consulting, LLC
Attn: Privacy
6545 Market Ave. North, STE 100, Canton, OH 44721, USA
biologicvera@gmail.com