Privacy Policy
Last updated: July 11, 2026
1. Who We Are
Bio Alquemie ("we," "us," "our") operates bioalquemie.com and vault.bioalquemie.com.
bioalquemie.com is our main website and e-commerce store, hosted through Wix, where visitors can browse, purchase products, subscribe to offers, join marketing lists, and view public product or affiliate information.
vault.bioalquemie.com is our private web application and public shop experience, including the Sacred Sound Vault, Apothecary shop, Cosmic Identity, Spirit Messages, Alquemist Guide, subscriptions, account tools, and related wellness, reflection, entertainment, and commerce features.
This Privacy Policy covers both properties. Where practices differ between the website and the app, we describe that distinction. For privacy requests, account deletion, support, missing content, agreement records, order questions, or other requests, contact us at hello@bioalquemie.com.
2. Information We Collect
Public Website & Store Data
On bioalquemie.com and public Bio Alquemie pages, we may collect information you provide when placing an order, including name, email, shipping address, billing details, phone number where provided, order details, purchased items, discount or promotion code use, and payment-related information.
We may also collect information submitted through contact forms, affiliate pages, support forms, newsletter forms, marketing opt-ins, or similar forms, along with website usage data, cookies, device/browser information, checkout activity, e-commerce analytics, public product browsing, cart activity, checkout activity, and product landing page visits where collected by our platforms or providers.
Account Registration Data
On vault.bioalquemie.com and related app services, we may collect your name, email address, securely hashed password, verification status, role, account creation time, login state, and related account metadata. We do not store passwords in plaintext.
Verification and Password Reset Data
We may store verification codes, password reset codes, reset attempts, code timestamps, verification attempts, and related security events needed to verify accounts and restore access.
Order, Checkout, and Subscription Data
We may collect and store records of purchases, subscriptions, product IDs, SKUs, checkout source, order IDs, subscription IDs, renewal/cancellation/reactivation state, upgrade state, prorated upgrade data, pricing tier, entitlement grants, payment status, currency, discount or promotion code use, tax/accounting status, and customer email.
When we process direct server checkout through Stripe, we may store Stripe customer IDs, Stripe checkout session IDs, Stripe payment intent IDs, Stripe subscription IDs, Stripe invoice IDs, Stripe price/product references, and related Stripe metadata needed to fulfill orders, manage subscriptions, prevent duplicate purchases, process upgrades, issue receipts, and support customers. We do not store complete payment card numbers in the Vault app. Stripe may process and store payment method details under Stripe's own terms and privacy practices.
Shipping and Fulfillment Data
For physical products, we may collect and store shipping name, shipping address, phone number, customer email, product quantities, product weights, shipping service, carrier, tracking number, fulfillment status, and shipment timestamps. Physical order information may be made available to ShipStation or other fulfillment providers so products can be shipped and tracking can be updated.
Access and Entitlement Data
We may store records showing which albums, tracks, products, subscriptions, access codes, redemption codes, referral codes, manual grants, temporary grants, beta access, admin grants, or subscription tiers are linked to your account or email address.
Order Transfer Data
When you make a purchase on bioalquemie.com, Wix may transmit order details, including your email address and purchased items, through secure webhooks or integrations to our Vault application servers so your digital content or subscriptions can be unlocked. When you purchase through Stripe checkout, Stripe sends payment and checkout events to our servers so we can record the order, grant access, send receipts, and fulfill physical orders where applicable.
App Usage and Play Data
We may track listening habits, content IDs, album IDs, track starts, track completions, playback heartbeat events, approximate playback position, elapsed listening time, total listening time, session play counts, ascension or engagement progress, and overall app engagement. We use this information to identify active users, improve services, support purchased access, troubleshoot playback issues, and provide personalized app experiences.
Security and Device Data
We log IP addresses, request timestamps, request paths, request frequency, authentication attempts, password reset attempts, account verification attempts, user-agent/device information, browser information, error events, suspicious route probes, honeypot events, lockout events, IP ban events, allowlist or unban events where applicable, and other security telemetry. We use this information to monitor for suspicious activity, prevent unauthorized access, prevent spam, enforce rate limits, block abusive traffic, protect account security, and maintain platform integrity.
Email, SMS, Push, and Restock Data
If you opt in to browser push notifications, we may store a browser push subscription endpoint, public push keys, user ID, expiration/refresh timestamps, and device-related push metadata. Browser push services operated by browser or device providers may process push routing data.
If you provide a phone number and opt in to text messages, we may store your phone number, consent status, opt-out status, message purpose, and related timestamps so account and security text messages can be sent only where permitted. Text verification for account creation may not be available at all times.
If you ask to be notified when a sold-out product returns, we may store your user ID, email address, selected notification channels, product ID, and timestamp. Restock alerts may be sent by in-app message, email, push notification, or a combination you selected. Restock waitlists are generally cleared after the one-time restock alert is sent or when you unsubscribe.
Redemption, Promotion, Affiliate, and Referral Data
We may store promotional codes, manual access codes, referral codes, discount codes, once-per-account code redemptions, minimum subtotal checks, free-order redemptions, saved promo state, Signal Shards where applicable, and other code usage inside the application or Stripe checkout.
If you use or join the affiliate program, or sign up through an affiliate or referral link, we may collect and store referral codes, referring account IDs, attribution source, attribution timestamps, affiliate application messages, approval status, affiliate role/status, referral URLs, client relationships, tiered referral chains, sales attribution, commissions calculated, commissions marked paid, and related affiliate statistics. Affiliates and authorized admins may receive access to limited referral dashboards or statistics needed to operate the affiliate program. We do not give affiliates complete payment card numbers.
Marketing and Subscriber Data
We may collect marketing opt-in status, unsubscribe status, suppression status, subscriber source, subscriber-only contact records, bounce/complaint records, marketing batch IDs, email delivery counts, in-app message delivery counts, and marketing history needed to send compliant messages and honor opt-outs.
Support, Spirit Message, and Mailbox Data
Messages you send to Bio Alquemie support, replies, support threads, message subjects, message bodies, attachments or inline content you choose to include, affiliate application messages, admin responses, message delivery status, scheduled messages, Spirit Journey messages, and related timestamps may be stored in our message systems.
Agreement Records
We may retain records showing which version of the Privacy Policy, Terms of Service, End User License Agreement, or other required document you accepted, the time of acceptance, your account identity, document URL, document version, and a document fingerprint or hash.
Admin Support and Product Catalog Data
Authorized Bio Alquemie administrators may access dashboards showing account status, order history, subscription state, Stripe or Wix billing source, play statistics, access entitlements, lockout state, suppression status, agreement acceptance status, restock demand, affiliate attribution, support notes, and related operational records for account support, troubleshooting, compliance, abuse prevention, fulfillment, and missing-content resolution.
Authorized administrators may upload, import, mirror, or edit product information, product images, descriptions, info sections, tags, product type, digital/physical status, inventory, shipping weight, discounts, and product visibility. Product images or catalog media may be stored in AWS S3 and served publicly as part of the product catalog.
Cosmic Identity, Astrology, Interpretation, and Play/Progress Data
If you use Cosmic Identity, astrology-style, interpretation, Hyperpet, intention, progress, family, relationship, shared agreement, or similar interactive features, we may collect and store information that you voluntarily enter or generate through those features, including:
- Full name, display name, birth name, or signature name.
- Date of birth, time of birth, and place of birth.
- Latitude and longitude associated with the birth location or location you provide.
- Time zone, 13-sign, Lahiri, sidereal, tropical, house system, chart framework, or other calculation preferences.
- Interpretation preferences, focus themes, tone, detail depth, personal context, prompts, feedback signals, or notes you submit to shape readings or generated interpretations.
- Family profile data, household or relationship context, shared friend cards, friend links, relationship circle data, living agreement text, agreement proposals, agreement responses, and related profile metadata.
- Progress state, XP, shards, streaks, daily opening status, completed quests, discoveries, unlocked themes, active theme, Hyperpet or cosmic play status, game progress, and related timestamps.
Cosmic Identity information is used to provide the requested feature, save your settings, restore your profile across sessions, generate or display interpretations, personalize the app experience, and allow you to delete private details from your account area.
We do not use Cosmic Identity data to make credit, employment, housing, insurance, medical, legal, or other decisions with legal or similarly significant effects. We do not intentionally use Cosmic Identity data to infer legally protected characteristics. Depending on your jurisdiction and what you enter, some of this information may be considered sensitive personal information because it can include birth details, location details, spiritual or philosophical context, family or relationship context, personal reflections, or other private information. You should only enter information you are comfortable providing.
Information We Do Not Intentionally Collect
- We do not purchase or rent email lists.
- We do not knowingly collect Social Security numbers, government ID numbers, full payment card numbers inside the Vault app, or biometric identifiers used to identify a person.
- Our wellness, frequency, meditation, breathing, visualization, astrology-style, and interpretation content is not medical treatment and is not intended to collect protected health information. Do not submit medical diagnoses, emergency information, or information you are not comfortable sharing.
3. How We Use Your Data and Email Communications
We use personal information to create and maintain your account, verify your email address, secure your account, process Wix, Stripe, free-promo, subscription, upgrade, and physical-product orders, unlock purchased or redeemed content, manage subscription billing state, fulfill physical orders, send receipts and account notices, manage restock alerts, operate affiliate and referral programs, validate promo and access codes, track app progress, generate requested Cosmic Identity or interpretation features, provide support, send marketing where permitted, measure internal metrics, publish product-only catalog data to product listing tools, prevent fraud and abuse, maintain agreement and legal compliance records, and comply with law or provider requirements.
Transactional and Security Emails
Transactional and security emails include account verification, double opt-in, password reset codes, account access notices, purchase/access notices, receipts, subscription notices, important agreement updates, security warnings, restock alerts you requested, and support responses. Because these are essential for account access, purchases, security, fulfillment, or service operation, you cannot opt out of necessary transactional or security emails while maintaining an active account.
Marketing and Promotions
We may use your order history, app usage, play data, engagement level, product interest, subscription status, access status, affiliate/referral source, and product waitlist activity to identify active users and send targeted marketing, promotional offers, exclusive discounts, new track announcements, or related Bio Alquemie content where permitted.
You can opt out of promotional emails at any time using the unsubscribe link at the bottom of promotional messages, using account tools where available, or by contacting hello@bioalquemie.com. Opting out of marketing does not affect transactional emails required for account access, security, purchases, fulfillment, restock alerts you requested, or support.
4. Legal Bases for Processing
Depending on your location, we rely on one or more legal bases to process your information, including contract/performance of services, consent, legitimate interests, and legal obligation.
- Contract / Performance of Services: to create your account, provide the Vault, stream purchased content, restore entitlements, process orders, manage subscriptions, fulfill physical products, provide customer support, operate checkout, and deliver features you request.
- Consent: to send optional marketing where consent is required; to process optional Cosmic Identity, interpretation, personal context, relationship, family, restock notification, push notification, SMS, or similar private data you voluntarily enter; and to save optional preferences or profile details where consent is the most appropriate basis.
- Legitimate Interests: to secure our systems, prevent fraud and abuse, improve services, understand app engagement, troubleshoot playback, attribute referrals, operate affiliate programs, identify active users, protect our content, enforce limits, conduct internal analytics, and maintain business operations.
- Legal Obligation: to retain accounting, tax, transaction, chargeback, suppression, legal notice, agreement, shipping, and compliance records where required.
We generally do not rely on vital or public interests for ordinary app operation. If you are located in a jurisdiction that requires a specific legal basis, we will apply the basis that best matches the processing activity and your rights under local law.
5. Email, Push, SMS, and Security Measures
Our application may send transactional, security, support, receipt, restock, and marketing emails using Google Workspace SMTP or other approved Bio Alquemie sending infrastructure. Some website, checkout, or e-commerce emails may be sent through Wix, Stripe, or other service providers.
If you opt in to push notifications, your browser or device provider may receive push routing data so notifications can be delivered. You can disable push notifications through your browser or device settings. If a push endpoint becomes invalid, we may remove it.
If you opt in to text messages, message frequency varies and is typically 2-4 messages per month for account/security use such as password reset support when requested. Message and data rates may apply. Reply HELP for help and STOP to opt out where supported.
To protect your account and our systems, we monitor IP addresses and the frequency of login, signup, verification, password reset, checkout, webhook, and other API activity. Exceeding permitted limits or triggering suspicious security rules may result in temporary lockouts, request blocking, or IP bans.
We may use honeypots, security event logging, IP ban tables, request metadata, and admin review tools to detect suspicious probes, brute-force attempts, automated abuse, and unauthorized access attempts.
If an email to your address results in a hard bounce, unsubscribe request, spam complaint, or similar delivery issue, your address may be added to an internal suppression list to preserve sender reputation, comply with email rules, and prevent unwanted or undeliverable emails. Suppression records may be retained as long as necessary to honor opt-outs, prevent repeated delivery attempts, and comply with email and anti-spam requirements.
6. Data Sharing and Disclosure
We do not sell, rent, trade, or share your personal information with third-party marketing or advertising networks for cross-context behavioral advertising.
We share your information only with service providers, processors, platforms, and parties needed to operate our services, including:
- Amazon Web Services (AWS): cloud infrastructure, backend hosting, storage, logs, databases, product media, security systems, and related systems.
- Wix: website, e-commerce, checkout, product catalog, order management, member page, marketing subscription, storefront, cookies, analytics, contacts, and order webhooks.
- Stripe: direct server checkout, payment, subscription, saved customer, promotion code, receipt, webhook, payment method, subscription, and payment metadata processing.
- ShipStation: shipping and fulfillment for physical Stripe orders, including shipping name, address, phone number, items, weights, fulfillment status, tracking number, carrier, and shipping service.
- Google Workspace: business, support, transactional, security, receipt, and marketing email sending and receiving.
- Google Merchant Center or Product Listing Tools: public product-only catalog information such as product name, image, price, availability, and landing page.
- AI, Interpretation, or Automation Service Providers: information necessary to provide a requested interpretation, compliance draft, message, or personalization feature, under applicable service terms and safeguards.
- Browser and Device Push Services: routing information needed to deliver push notifications.
- Affiliates and Approved Referral Participants: limited referral tools and statistics needed to attribute signups and sales, operate affiliate links, and calculate commissions. We do not provide affiliates with complete payment card numbers.
- Automated Order Fulfillment: Wix or Stripe may automatically transmit order details to our Vault servers so content can be unlocked, receipts can be sent, subscriptions can be managed, and physical products can be fulfilled.
- Internal Support: authorized Bio Alquemie administrators may access operational records for customer support, missing content resolution, compliance, fraud prevention, fulfillment, and account issue troubleshooting.
- Law Enforcement, Regulators, or Legal Process: information may be disclosed if required by law, valid subpoena, court order, lawful request, legal claim, safety concern, or to protect rights, property, users, our business, or the public.
We require service providers to process information only for authorized business purposes and to apply reasonable security protections.
7. Data Security and Retention
Passwords are cryptographically hashed and never stored in plaintext. Data transmission between your browser and our servers uses TLS encryption where supported. We use access controls, rate limiting, logging, suppression controls, administrative permissions, security monitoring, and provider safeguards to protect accounts and systems.
No internet-based service can be guaranteed 100% secure. You are responsible for choosing a strong password, keeping your credentials confidential, and notifying us if you suspect unauthorized access.
Retention by Category
- Account Data: retained while your account remains active, and for a reasonable period afterward if needed for support, legal, security, or compliance purposes.
- Cosmic Identity Data: retained until you delete your Cosmic Identity details, delete your account, or request deletion, unless limited retention is required for legal, security, or compliance reasons.
- Cosmic Progress, Hyperpet, Intention, Family, Relationship, Agreement, and Play Progress Data: retained while your account remains active so progress and saved features can be restored, unless you delete your account or we provide a reset/delete option for that feature.
- Play and Listening Data: retained while your account is active for personalization, support, analytics, entitlement integrity, and service improvement. We may retain aggregated or de-identified listening statistics that no longer identify you.
- Order History and Transaction Records: retained as needed for tax, accounting, fraud prevention, chargeback handling, subscription management, shipping, support, legal compliance, and proof of purchase.
- Stripe and Subscription Records: retained as needed to process purchases, manage subscriptions, provide support, prevent duplicate billing, issue receipts, process upgrades, and meet accounting or compliance obligations.
- Shipping Records: retained as needed for shipping, returns, customer support, chargeback defense, fraud prevention, tax/accounting, and legal compliance.
- Restock Waitlists: retained until you unsubscribe, the product returns and the one-time alert is sent, or the waitlist is otherwise cleared. Related message or email logs may be retained for compliance and troubleshooting.
- Affiliate and Referral Records: retained as needed to operate the affiliate program, calculate commissions, resolve disputes, prevent fraud, and maintain accounting records.
- Promotion and Redemption Records: retained as needed to enforce code rules, prevent abuse, and support accounting or dispute resolution.
- Entitlement Preservation: if you delete your account, active login access and eligible personal app data may be removed, but order history, transaction receipts, and purchase/entitlement evidence linked to your email address may be retained so prior purchases can be verified or restored when appropriate.
- Agreement Audit Records: retained for compliance, dispute prevention, and audit purposes.
- Security Logs: retained for security, fraud prevention, legal claims, and system integrity. Some security event records may be retained for limited periods such as approximately 90 days, while active bans or high-risk events may be retained longer when needed.
- Push Subscriptions: retained while active and may be refreshed periodically. Invalid or expired endpoints may be removed.
- Suppression and Unsubscribe Records: retained as long as needed to honor unsubscribe requests, spam complaints, bounce records, and email compliance requirements.
8. Your Rights and Choices
Regardless of your location, you may contact us at hello@bioalquemie.com to request access to personal data we hold about you, correction of inaccurate personal data, deletion of your account, deletion of saved Cosmic Identity details, deletion or reset of eligible app progress data where technically available, withdrawal of marketing consent, unsubscribe from marketing emails, restock waitlist removal where available, disabling push notifications through your browser/device settings, or a copy of your order/access support information where reasonably available.
Account deletion removes login access and eligible personal app data, but some records may be retained where necessary for transaction history, tax/accounting, legal compliance, security, fraud prevention, agreement audit history, suppression lists, chargeback handling, shipping history, affiliate accounting, or entitlement restoration as described above.
You may opt out of promotional emails using the unsubscribe link in any promotional message, using account controls where available, or by contacting us. You will still receive necessary transactional and security emails for active account access, purchases, subscriptions, fulfillment, restock alerts you requested, and support.
You can disable browser push notifications through your browser or device settings. If you disable push notifications, we may still send in-app messages or necessary email notices.
We do not sell your personal information and do not share it with third parties for cross-context behavioral advertising. If our practices change, we will update this policy and provide legally required opt-out mechanisms.
Some U.S. state privacy laws provide rights to know/access, delete, correct, opt out of certain sharing or targeted advertising, limit certain uses of sensitive personal information, and not be discriminated against for exercising privacy rights. Even if a specific law does not apply to Bio Alquemie because of business size, revenue, nonprofit status, location, or other thresholds, we will make reasonable efforts to honor privacy requests from users.
If you are located outside the United States, you may have rights under local privacy laws, including access, correction, deletion, restriction, objection, portability, and withdrawal of consent. We will evaluate requests according to applicable law.
9. Cookies, Tracking, Local Storage, and Audio Caching
bioalquemie.com (Wix Website): uses cookies as managed by Wix for site functionality, security, analytics, checkout, e-commerce, embedded content, and user experience. Wix and related tools may set cookies according to their own platform settings and applicable law.
Stripe Checkout: Stripe may use cookies, local storage, fraud-prevention tools, and payment security technologies when you use Stripe checkout or Stripe Link. Stripe controls those tools under its own policies.
vault.bioalquemie.com (App): uses essential local storage, session storage, browser cache, and similar technologies for authentication sessions, entitlement caching, progress restoration, app settings, page/editor state, referral link capture, product source settings, intention configuration cache, audio playback support, and feature performance.
The app may store or cache authentication token or session state, entitlement expiration information, admin tier or access state, referral code or affiliate link state for signup attribution, intention configuration and orb cache, product source, UI editor and store configuration caches, Cosmic Identity legacy cache keys where applicable, Cosmic progress cache keys such as XP, shards, streaks, daily status, quests, discoveries, themes, and progress update time, UI state, and playback-related settings.
Server-Side Play Tracking: we monitor interactions with the audio player on the server side, including track starts, heartbeat events during playback, approximate playback position, elapsed play time, completion events, album/content IDs, and listening totals. This helps us improve the service, support purchased content, track engagement, troubleshoot playback issues, and identify active users.
Local Audio Caching: to provide a seamless, buffer-free listening experience, our application may temporarily download and store audio files or audio blobs in your device memory or browser-controlled storage while you are actively logged in. This data is used strictly for media playback performance and is cleared automatically when you log out, close the session, or when the browser clears temporary memory.
10. Children's Privacy
Our services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13.
You must be at least 18 years old or the age of majority in your jurisdiction to make a purchase, create an account, redeem paid access, join affiliate programs, or use the Vault. If we learn that a child under 13 provided personal information, we will take reasonable steps to delete it.
We do not knowingly sell or share personal information of minors.
11. Wellness, Frequency, Breathwork, and Interpretation Disclaimer
Bio Alquemie content, including audio frequencies, meditation tracks, guided breathing exercises, visualizers, intention cards, astrology-style features, Cosmic Identity, spiritual-style interpretation, Hyperpet play, affiliate or product education content, and related content, is provided for general wellness, reflection, relaxation, creativity, personal growth, and entertainment purposes only.
Our services are not intended to diagnose, treat, cure, or prevent any physical or mental disease or medical condition. They are not a substitute for professional medical advice, diagnosis, therapy, psychiatric treatment, legal advice, financial advice, or emergency care.
Do not listen to frequency sessions, meditation tracks, breathwork exercises, or immersive audio while driving, operating heavy machinery, supervising children in a way that requires full attention, or doing anything that requires alertness and safety.
12. International Transfers
Bio Alquemie is operated from the United States. If you access our services from outside the United States, your information may be processed in the United States or other locations where our service providers operate. Privacy laws in those locations may differ from the laws in your jurisdiction.
13. Changes to This Policy
We may update this Privacy Policy from time to time. When changes are material, we may update the "Last Updated" date, post the updated policy, require renewed in-app agreement acceptance, or notify users through the app or email where appropriate.
Continued use of our services after changes are posted may constitute acceptance of the updated policy, except where additional notice, consent, or renewed in-app agreement acceptance is required by law or by our agreement system.
Contact
Privacy requests and questions: hello@bioalquemie.com.