Privacy Policy

This Privacy Policy applies to information collected through the NXT Labs website, checkout flow, patient portal, and the NX Track iPhone app (collectively, the "Services"). It does not apply to the practices of independent laboratories, collection partners, or Telehealth Providers acting under their own privacy notices, except as described below.

Your protected health information shared between Junction and NXT Medical is governed separately by our HIPAA Authorization, which you are asked to review and accept during checkout.

Identity and contact information: name, email address, phone number, date of birth, gender, and shipping or billing address provided during checkout or account creation.

Order and intake information: the panel selected, trainer or referral code used, and any health-related intake responses you provide to complete your order or a telehealth consultation.

Payment information: payments are processed by Stripe, Inc. NXT Labs does not collect or store your full card number; we retain only limited transaction metadata (such as order amount and status) needed to fulfill and reconcile your order.

Account information: login credentials and activity associated with your patient portal account.

Communications: messages you send to our support team, and records of transactional emails sent to you (such as order confirmations and result notifications).

Tracking and wellness information you enter in NX Track: habits, hydration, body weight, daily steps, supplements, nutrition diary entries, custom foods, saved meals, nutrition goals, and related notes. Workout information you enter in NX Track includes personal exercises, programs and workout plans, scheduled workouts, logged sessions and sets, loads, repetitions, effort ratings, substitutions, and workout notes.

Apple Health step data (optional): if you turn on "Sync steps from Apple Health," NX Track reads your daily step count totals from Apple Health. See Section 4A.

Device and app information: the app version, your device's general model (for example, "iPhone"), time zone, and local settings such as appearance and app-lock preferences. We do not collect your device's advertising identifier.

To process and fulfill orders, including coordinating specimen collection and lab processing with our third-party laboratory and collection partners.

To create and maintain your patient portal account and deliver your results.

To send transactional communications, such as order confirmations, collection instructions, and result-ready notifications.

To attribute orders to trainers or referral partners for commission purposes when a referral code or link is used.

To detect and prevent fraud, abuse, and unauthorized access, and to enforce our Terms of Service.

To comply with legal, regulatory, and recordkeeping obligations applicable to lab testing services.

To provide NX Track features, including your Today view, history, goals, streaks, and progress.

To let a coach or trainer you are connected with view your tracking information, when you have agreed to share it (see Section 4B).

Laboratory and collection partners: information needed to collect your specimen and process your order is shared with the independent laboratories and collection sites that fulfill it.

Telehealth Providers: where a panel includes a telehealth consultation, your relevant intake and order information is shared with Junction and its affiliated Openloop Healthcare Partners, Reliant.MD Medical Associates, and MECNB Physician Services entities, as described in the Telehealth Consent section of our Terms of Service.

NXT Medical: protected health information is disclosed from Junction to NXT Medical for care coordination, as described in and governed by our HIPAA Authorization.

Payment processor: payment details are shared with Stripe, Inc. to process your transaction.

Trainers and referral partners: a trainer or partner whose code or link you used to order will be notified that a qualifying order occurred so commissions can be paid, but will not receive your health information.

Service providers: vendors who support our email delivery, hosting, and customer support functions, acting on our behalf and under confidentiality obligations.

Nutrition data provider: food searches and barcode lookups you make in NX Track are sent to our nutrition database provider to return food and nutrition information. These requests do not include your name or contact details.

Legal and safety: when required to comply with law, respond to legal process, or protect the rights, property, or safety of NXT Labs, our users, or others.

We do not sell your personal information.

NX Track can read your daily step count from Apple Health, but only if you turn on step sync in the app and grant permission in iOS. You can turn it off at any time in NX Track, or in the Health app under Settings → Health → Data Access & Devices.

We read step counts only. We do not write data to Apple Health, and we do not access any other Health data, including clinical health records.

Synced step totals are sent to our servers and stored with your NX Track step history, in the same way as steps you enter yourself. They are used only to show your step history and progress to you and, if you have agreed to share tracking data with your coach, to that coach.

Information obtained from Apple Health is never used for advertising, marketing, or tracking; is never sold; is never shared with data brokers or other third parties except the service providers who host our Services on our behalf; and is never stored in iCloud.

Turning off sync stops new syncing. Previously synced totals stay in your history until you delete your account.

If you join NX Track through a coach, trainer, or clinic, they may see the tracking information you choose to share with them, under the sharing consent shown in the app. They do not receive your lab results unless you separately authorize it.

We retain order, account, and intake information for as long as needed to fulfill your order, support your patient portal access, and meet recordkeeping obligations applicable to lab testing and healthcare-adjacent services.

NX Track tracking information, including synced Apple Health step totals, is retained while your account is active and deleted when you delete your account, except where we must keep certain records to meet legal obligations.

Your personal workout information is deleted when you delete your NX Track account. Shared exercise-catalog information remains available to other users. When you delete an individual workout session or set, we retain a minimal deletion record without workout content while your account relationship exists to prevent removed data from being recreated by stale requests.

Information disclosed pursuant to your HIPAA Authorization is retained and may be re-disclosed as described in that Authorization until you revoke it in writing or it otherwise expires as specified there.

You may update certain account information directly in your patient portal, or by contacting support.

You may revoke your HIPAA Authorization at any time by following the revocation process described in that Authorization. Revocation does not affect disclosures already made.

You may request deletion of your account information, subject to our legal and recordkeeping obligations, by contacting support at the email below.

You can delete your NX Track account in the app under More → Account → Delete account. Deleting your account removes your tracking information, including synced step data.

You can turn off Apple Health step sync at any time, as described in Section 4A.

You may request a copy of your workout information by contacting support at info@nxtlabs.us.

Vercel Web Analytics helps us understand aggregate website usage without using cookies or tracking visitors across websites. Vercel Speed Insights measures page performance on public marketing pages. We do not use cross-site behavioral advertising cookies.

Google Analytics 4 (measurement ID G-KZ8GZQEKDF) measures visits and purchases on public marketing pages and public invite pages. It sets first-party analytics cookies, including cookies named _ga, on those pages. The admin, partner, patient, and affiliate portals do not load Google Analytics.

On public marketing pages and public invite pages, we set a first-party cookie named nxt_ads for up to 90 days. It stores ad and campaign attribution, such as UTM parameters (utm_source, utm_medium, utm_campaign, utm_term, and utm_content) and click identifiers such as gclid, gbraid, and wbraid. The same values are kept in first-party browser storage under nxtlabs_ads_attribution for the same 90 days. This cookie is set whether or not Google Analytics is loaded. When you check out, we store that attribution with the checkout and, when an order is completed, with the order.

The Services also use first-party browser storage to keep cart contents, preserve UTM fields for public forms for up to 30 days, and retain a validated referral code for up to 30 days so an eligible order can be attributed for commission purposes. An essential first-party HttpOnly cookie named __Host-nxtlabs_patient keeps a patient signed in. A first-party cookie named sidebar_state remembers whether the portal sidebar is open for 7 days. Stripe and other service providers may use cookies or similar technologies for payment processing and fraud prevention.

You can block or delete cookies, including nxt_ads and Google Analytics cookies, in your browser's cookie settings. You can opt out of Google Analytics with the Google Analytics Opt-out Browser Add-on at https://tools.google.com/dlpage/gaoptout. Clearing cookies or browser storage may remove cart contents, preferences, campaign attribution, or referral attribution and may affect how the site works.

We use commercially reasonable administrative, technical, and physical safeguards designed to protect your information, including encrypting payment processing through Stripe and restricting access to health-related intake data to personnel and partners who need it to fulfill your order.

The optional Face ID or passcode app lock in NX Track runs entirely on your device through Apple's system frameworks. We never receive your Face ID or fingerprint data.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security of your information.

The Services are not directed to individuals under 18. We do not knowingly collect personal information from minors except where a parent, legal guardian, or authorized representative submits information on a minor's behalf as permitted under our Terms of Service.

We may update this Privacy Policy from time to time. Material changes will be reflected by a new Last updated date at the top of this page. Continued use of the Services after changes take effect constitutes acceptance of the revised policy.

Questions about this Privacy Policy, or requests regarding your information, can be directed to info@nxtlabs.us.