Privacy Policy

Last updated: June 18, 2026

This Privacy Policy explains how Peak Labs LLC ("CRUX," "we," "us") collects, uses, and shares information when you visit CruxBody.com and use our non-clinical services (the "Platform").

Important — two different sets of rules apply:

Information you give us as a website visitor or prospective customer (for example, your email, your stated goals, and your state of residence) is handled by Peak Labs LLC under this Privacy Policy.
Protected Health Information ("PHI") that you share in the course of receiving care from the independent licensed providers of [AFFILIATED MEDICAL GROUP, P.C.] (the "Medical Group") is governed by HIPAA and the Medical Group's Notice of Privacy Practices, not solely by this Policy. See the Notice of Privacy Practices for how PHI is handled.

1. Information We Collect

You provide: name, email address, state of residence, stated health/wellness goals, account credentials, and payment information (processed by our payment processor).

Collected automatically: device and usage data, IP address, cookies and similar technologies, and analytics data.

Pre-launch / early access: if you join an early-access or waitlist, we collect your email, your selected goal, and your state. We ask you not to submit detailed medical history or other sensitive health information through pre-launch forms.

2. How We Use Information

To operate, secure, and improve the Platform.
To communicate with you, including about early access, launch, and your account.
To process payments and memberships.
To facilitate a connection to the Medical Group and pharmacy partners if and when you choose to proceed with care.
For analytics, marketing (consistent with your choices), and legal compliance.

3. How We Share Information

Service providers (hosting, analytics, email, payment processing) under contract.
The Medical Group and pharmacy partners, as needed to facilitate care you request.
Legal and safety purposes, where required by law or to protect rights and safety.
Business transfers, in connection with a merger, financing, or acquisition.

We do not sell your personal information for money. [Confirm "sale"/"share" definitions under CCPA/CPRA with counsel and update accordingly.]

4. Cookies and Tracking

We use cookies and similar technologies for functionality, security, analytics, and marketing. You can manage preferences via your browser and any cookie banner we provide. [Attorney: align with CCPA/CPRA opt-out and any consent-banner requirements.]

5. Your Choices and Rights

Depending on your state of residence, you may have rights to access, correct, delete, or port your personal information, and to opt out of certain processing. To exercise these rights, contact support@cruxbody.com. You can unsubscribe from marketing emails at any time.

6. Data Security and Retention

We use reasonable administrative, technical, and physical safeguards to protect personal information. No system is perfectly secure. We retain information as long as needed for the purposes described here and as required by law.

7. Children's Privacy

The Platform is intended for adults 18 and older. We do not knowingly collect information from children under 18.

8. Sensitive Health Data Notice

Some state privacy laws (e.g., Washington's My Health My Data Act and similar) treat consumer health data with heightened protection. Where applicable, we obtain any required consent before collecting or sharing consumer health data and honor applicable rights. [Attorney to confirm scope and add any required separate consumer-health-data privacy notice.]

9. Changes

We may update this Policy and will post the revised effective date. Material changes will be communicated as required by law.

10. Contact

Peak Labs LLC, 7901 4th St N, STE 300, St Petersburg, FL 33702, support@cruxbody.com.