Legal

Privacy Policy

Last updated: 08/07/2026

This Privacy Policy explains how Aethermind AI LLC (a Delaware limited liability company, "BioMastering", "we", "us", "our") collects, uses, discloses, and protects your personal information when you visit biomastering.com and our related sites (livelongtoliveforever.com, biomastering.institute, liveforever.community) (together, the "Sites"), take our Human Coherence Assessment™, purchase our digital products (First Awakening™, the APEIRON Protocol™, BioMaster Circle™ and related programs), or otherwise interact with us.

BioMastering is an education and coaching business. Our content and self-assessments are for informational and wellness purposes only. They are not medical advice, not a diagnosis, and not a treatment. Some of the information you choose to share with us — for example, your answers to our self-assessment about energy, sleep, digestion, inflammation, joint pain, oral health, libido/sexual vitality, anxiety, mood, and related topics — is health-related and therefore treated as special category / sensitive personal information and receives the heightened protections described below.

1. Summary — at a glance

The table below is a high-level summary only. The rest of this Policy contains the full detail, including the legal bases we rely on and your rights.

Data category	Examples	Primary purpose(s)	Lawful basis (GDPR/UK GDPR)
Identifiers & contact data	First name, email address, phone number (if you provide it), account login details	Create/manage your account, deliver products, respond to you, send service messages	Performance of a contract (Art. 6(1)(b)); consent for optional fields (Art. 6(1)(a)); legitimate interests in running our business (Art. 6(1)(f))
Health-related self-assessment answers (special category)	Self-reported answers on energy, sleep, digestion, inflammation, joint pain, oral health, libido/sexual vitality, anxiety, mood, metabolic and autoimmune signals	Generate your self-reflection results; personalize educational follow-up and segmentation	Your explicit consent (Art. 9(2)(a)), together with Art. 6(1)(a) for the underlying processing
Marketing data	Email and SMS marketing preferences, engagement (opens, clicks), segmentation tags	Send you marketing about our programs and content that you have asked to receive	Your consent (Art. 6(1)(a); Art. 9(2)(a) where based on health answers); withdrawable at any time
Transaction & payment data	Products purchased, price, currency, billing details, subscription status; payment is processed by our providers — we do not store full card numbers	Process and confirm purchases, manage subscriptions, prevent fraud, meet tax/accounting duties	Performance of a contract (Art. 6(1)(b)); legal obligation (Art. 6(1)(c)); legitimate interests in fraud prevention (Art. 6(1)(f))
Usage & device data	IP address, device/browser type, pages viewed, referring URLs, approximate location	Operate and secure the Sites, measure and improve performance	Legitimate interests (Art. 6(1)(f)); consent for non-essential analytics cookies (Art. 6(1)(a))
Cookie & tracking data	Analytics (e.g. Google Analytics) and advertising pixels (e.g. Meta Pixel)	Analytics, measurement, and cross-context advertising — only after you consent	Your consent (Art. 6(1)(a); ePrivacy) — see our Cookie Policy

2. Who we are and how to contact us

The controller responsible for your personal information is:

Controller: Aethermind AI LLC (a Delaware limited liability company), established in United States
Registered address: 8 The Green 24610, Dover, DE 19901
General contact: contact@aethermindai.net
Privacy / data protection enquiries and requests: contact@aethermindai.net
Support: contact@aethermindai.net
Data Protection Officer: [DPO NAME/EMAIL or "not appointed"]

EU and UK representatives

Where we do not have an establishment in the EU/EEA or the UK but our processing is subject to the EU GDPR or the UK GDPR, we have appointed representatives you may contact:

EU representative (GDPR Art. 27): [EU REPRESENTATIVE per GDPR Art.27]
UK representative: [UK REPRESENTATIVE]

3. The personal information we collect

We collect the following categories of personal information:

Identifiers and contact data — such as your first name, email address, and, if you provide it, your phone number and account credentials.
Health-related self-assessment answers (special category / sensitive data) — the answers you voluntarily provide in the Human Coherence Assessment™ and similar tools about energy, sleep, digestion, inflammation, joint pain, oral health, libido/sexual vitality, anxiety, mood, metabolic issues, autoimmune signals, and related topics. You are never required to complete the assessment, and you may skip questions.
Marketing data — your email and SMS marketing preferences, the segments/tags we apply, and how you engage with our messages.
Transaction and payment data — the products or memberships you buy, amounts, currency (USD), subscription and renewal status, and billing information. Card payments are collected and processed by our payment providers (Stripe) within our provider platform; we do not receive or store your full card number.
Usage, device and analytics data — your IP address, device and browser information, pages viewed, referring pages, approximate location, and similar technical data collected via cookies and similar technologies.

4. How we collect your information

Directly from you — when you take the assessment, create an account, buy a product, subscribe to a membership, opt in to email or SMS, or contact us.
Automatically — through cookies and similar technologies when you use the Sites (only non-essential trackers fire after you consent). See our Cookie Policy.
From our service providers — for example, our course/CRM platform and our payment processors provide us with transaction confirmations, delivery status, and engagement data.

5. Why we use your information (purposes)

To provide the assessment and generate your self-reflection results.
To create and manage your account and deliver the digital products and memberships you purchase (First Awakening™, the APEIRON Protocol™, BioMaster Circle™, and others).
To process payments, manage subscriptions and renewals, issue receipts, and prevent fraud.
To personalize and segment our educational follow-up and, where you have consented, to send you marketing by email and/or SMS.
To operate, secure, measure, and improve the Sites.
To respond to your enquiries and provide support.
To comply with our legal, tax, and accounting obligations and to establish, exercise, or defend legal claims.

Profiling and segmentation

We use your assessment answers and engagement data to group ("segment") contacts so that our educational follow-up and marketing are more relevant to you. This segmentation may draw on your health-related answers and is carried out only on the basis of your explicit consent. We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing. You may object to this profiling for direct marketing at any time (see Section 10).

6. Lawful bases (GDPR / UK GDPR)

Where the EU GDPR or UK GDPR applies, we rely on the following lawful bases:

Explicit consent (Art. 9(2)(a)) — for processing your health-related self-assessment answers. We ask for this through a separate, unbundled, opt-in tick box that is not pre-checked.
Consent (Art. 6(1)(a)) — for email and SMS marketing (each a separate opt-in) and for non-essential cookies.
Performance of a contract (Art. 6(1)(b)) — to deliver the products, memberships, and account services you request.
Legal obligation (Art. 6(1)(c)) — to meet tax, accounting, and other legal duties.
Legitimate interests (Art. 6(1)(f)) — to run, secure, and improve our business, prevent fraud, and understand how the Sites are used, where these interests are not overridden by your rights.

You can withdraw your consent at any time, and withdrawal is as easy as giving it. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal. Providing the assessment answers and marketing consents is entirely optional; you do not have to consent to unnecessary processing in order to access our content.

7. Who we share your information with

We do not sell your personal information for money. We share it with the following categories of recipients, who act as our processors / service providers and are bound by contracts requiring them to protect it and use it only on our instructions:

Course Creator 360 (CC360) / HighLevel (GoHighLevel) — our US-based course, CRM, and email/SMS automation platform, which also facilitates checkout. Your name, email, and assessment answers are transmitted to this platform (via secure webhook) and used for account management, delivery, segmentation, and follow-up.
Stripe — payment processing (they handle your card/payment details directly).
Google Analytics — website analytics (only after you consent to analytics cookies).
Meta (Facebook) Pixel — advertising measurement and cross-context behavioral advertising (only after you consent to marketing cookies).
Other professional advisers and authorities — such as legal, accounting, and IT providers, or regulators and law enforcement where required by law.

These providers act as sub-processors in our processing chain. We maintain an up-to-date list of our sub-processors and the safeguards that apply to them; you may request the current list by emailing contact@aethermindai.net. If our business is involved in a merger, acquisition, or asset sale, personal information may be transferred as part of that transaction, subject to this Policy.

8. International data transfers

We are established in United States, and several of our providers — including CC360/HighLevel and Stripe — are located in the United States. When we transfer personal information from the EU/EEA or the UK to the United States or another country that has not been recognized as providing an adequate level of protection, we rely on an appropriate transfer mechanism, such as:

the EU-US Data Privacy Framework (and the UK Extension) where the recipient is certified; and/or
the European Commission's Standard Contractual Clauses (SCCs), together with the UK International Data Transfer Agreement / Addendum for UK data, supported by a transfer impact assessment and, where appropriate, additional safeguards.

You may request a copy of the relevant safeguards by contacting contact@aethermindai.net.

9. How long we keep your information (retention)

We keep personal information only for as long as necessary for the purposes described in this Policy, and then delete or anonymize it. Our general approach is:

Health-related assessment answers — retained for as long as needed to provide your results and follow-up, and deleted or anonymized when you withdraw consent, ask us to erase them, or after [RETENTION PERIOD — e.g. 24 months] of inactivity, whichever comes first.
Account and CRM contact data — for the life of your account/relationship and for a reasonable period afterward.
Marketing data — until you unsubscribe or withdraw consent, plus a short record to honor your opt-out.
Transaction and payment records — for the period required by applicable tax and accounting law (typically [TAX RETENTION PERIOD — e.g. 6–10 years]).

Where a fixed period cannot be stated, we determine retention by reference to the criteria above (the ongoing need, your consent, and our legal obligations).

10. Your data protection rights (EU / UK GDPR)

If the EU or UK GDPR applies to you, you have the right to:

Access the personal information we hold about you and receive a copy.
Rectify inaccurate or incomplete information.
Erase your information ("right to be forgotten") in certain circumstances.
Restrict our processing in certain circumstances.
Data portability — receive certain data in a structured, commonly used, machine-readable format and have it transmitted to another controller.
Object to processing based on legitimate interests and, at any time, to direct marketing — which we will always honor.
Withdraw consent at any time where we rely on it (including for health data and marketing), without affecting prior lawful processing.
Not be subject to a decision based solely on automated processing that produces legal or similarly significant effects; we do not carry out such decision-making.

To exercise any right, email contact@aethermindai.net. We will respond within one month, which we may extend by up to two further months for complex or numerous requests (we will tell you if so). We may need to verify your identity first. These rights are free to exercise, subject to limited exceptions.

You also have the right to lodge a complaint with a supervisory authority — in the EU/EEA, your local data protection authority; in the UK, the Information Commissioner's Office (ICO). We would appreciate the chance to address your concerns first.

11. California privacy rights (CCPA / CPRA)

This section applies to California residents and supplements the rest of this Policy. In the 12 months before the "last updated" date, we have collected the following categories of personal information (as defined by the CPRA): identifiers (name, email, phone, IP address); commercial information (products purchased); internet/network activity (usage and analytics data); geolocation (approximate); and sensitive personal information — specifically health information contained in your self-assessment answers.

We collect this information for the business and commercial purposes described in Section 5, and we disclose each of the categories above to the service providers listed in Section 7 for those purposes.

"Sales" and "sharing"

We do not sell your personal information for money. However, our use of advertising pixels (such as the Meta Pixel) to support cross-context behavioral advertising may be considered a "sale" or "share" under the CPRA. You can opt out using the "Do Not Sell or Share My Personal Information" link on our Site, and we honor opt-out preference signals such as the Global Privacy Control (GPC).

Sensitive personal information

Because your assessment answers are health information, we treat them as sensitive personal information. We use them only to provide our services and the follow-up you have asked for — not to infer characteristics about you. You may exercise your right to "Limit the Use of My Sensitive Personal Information" via the corresponding link on our Site or by emailing us.

Your California rights

Right to know / access the categories and specific pieces of personal information we have collected.
Right to delete personal information we have collected from you.
Right to correct inaccurate personal information.
Right to opt out of any "sale" or "sharing" of personal information.
Right to limit the use and disclosure of sensitive personal information.
Right to non-discrimination for exercising your rights.

You may submit a request through two designated methods: by email to contact@aethermindai.net or via the request link/web form on our Site. You may use an authorized agent to submit a request on your behalf, with proof of authorization; we may verify your identity before acting.

Other US state privacy laws

Residents of other US states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and others) have similar rights to access, correct, delete, and obtain a copy of their data, and to opt out of targeted advertising and certain profiling. Because your health answers are treated as sensitive data, we rely on your opt-in consent to process them. Certain consumer-health-data laws, such as Washington's My Health My Data Act, may provide additional rights; we honor applicable consumer-health-data protections. To exercise any of these rights, contact contact@aethermindai.net.

12. How we protect your information (security)

We use appropriate technical and organizational measures to protect your personal information, including HTTPS/TLS encryption in transit across the Sites and our provider platform, authenticated and encrypted webhook transfer of your name, email, and assessment answers to CC360/HighLevel, access controls on a least-privilege basis, and multi-factor authentication on administrative and CRM accounts. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a personal data breach that is likely to result in a high risk to you, we will notify you and the relevant authorities as required by law.

13. Children

Our Sites and products are not directed to children, and we do not knowingly collect personal information from anyone under the age of 16 (or the lower age permitted in your jurisdiction, where applicable). We ask users to confirm they meet the minimum age before submitting the assessment. If you believe a child has provided us with personal information, please contact contact@aethermindai.net and we will delete it.

14. Cookies and similar technologies

We use cookies and similar technologies for essential site functions, and — only after you consent — for analytics (e.g. Google Analytics) and advertising (e.g. Meta Pixel). You can accept or reject non-essential cookies through our consent banner, and rejecting is as easy as accepting. For full details of each cookie, its purpose, provider, and duration, and how to change your choices, please see our Cookie Policy.

15. Third-party links

Our Sites may link to third-party websites and services that we do not control. This Policy does not apply to those third parties, and we encourage you to review their privacy notices.

16. Changes to this Policy

We may update this Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you. Please review this Policy periodically.

17. Contact us

If you have any questions about this Policy or how we handle your personal information, contact us at contact@aethermindai.net or write to Aethermind AI LLC, 8 The Green 24610, Dover, DE 19901. EU and UK residents may also contact our representatives listed in Section 2.