Privacy Policy

MyoGuard Protocol ("we", "us", "our") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights as a user of this tool. By using the MyoGuard Protocol Clinical Decision Support (CDS) platform, you agree to the practices described in this policy.

1. Data We Collect

We collect information you provide to us, and limited usage information collected automatically, as described in section 3. Through the SRI assessment, this may include:

• Email address: collected if you choose to have your protocol emailed to you
• Body weight: used to generate personalised nutritional targets and, if you have an account, kept as part of your assessment record
• Medication type: the GLP-1 medication you select (e.g. Semaglutide, Tirzepatide)
• Weekly dose: your current GLP-1 dose in mg
• Activity level: sedentary, moderate, or active
• Symptoms: any self-reported symptoms selected from the checklist
• Protein intake and sleep: your self-reported daily protein intake and typical hours of sleep

If you create a patient account, we also store your name and email address, and the information you enter through your account: your profile (such as age, sex, height, weight, goal weight, GLP-1 medication, dose and treatment stage), your SRI assessments and their outputs, and your weekly check-ins. If your account is linked to a physician, that physician can view these records.

If you register as a physician, we store your name, email address, country, specialty and any professional identifiers you provide, such as an NPI or licence number. A physician using MyoGuard may also enter a patient's name, email address and clinical details, such as age, weight and GLP-1 medication, to prepare a protocol or an invitation before that patient has an account.

You may also give us your email address when you ask us to send you an educational resource, such as the MyoGuard Protein Guide. If you do, your email address is the only information we collect. You do not need to complete the SRI assessment, create an account, register as a physician, or be a patient of ours in order to request it.

No account is required to use the preliminary SRI on our homepage or to request an educational resource. An account is required to use the patient dashboard, and physicians must register to use the physician platform. We do not store phone numbers. Physician subscriptions are paid through our payment processor; we do not receive full card details, and we store only the processor's customer and subscription references.

2. How We Use Your Data

We use the information you provide solely for the following purposes:

• To generate your personalised protein, fibre, and hydration protocol outputs
• To send your protocol results to the email address you provide, if requested
• To improve the accuracy and relevance of our SRI and protocol methodologies over time
• To send you an educational resource, such as the MyoGuard Protein Guide, when you ask us for it
• If you have an account, to keep your assessment history so that changes can be followed over time
• If your account is linked to a physician, to make your records available to that physician
• To let you share your report through a link you create, which stops working after 30 days or when you revoke it
• For physicians, to review registration, manage subscriptions and provide the physician platform
• To understand how our website is used, through the usage information described in section 3

Asking us for an educational resource is a one-time request. By itself it does not subscribe you to ongoing educational or marketing email, and it does not add you to a mailing list.

The SRI is generated automatically from the information you provide. Its outputs, including a risk category and protocol targets, are Clinical Decision Support (CDS) intended to be reviewed with a physician. They are not medical advice.

3. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data to third parties. We will never share your health-related inputs (weight, dose, symptoms) with advertisers, data brokers, or any external commercial entities.

We use third-party service providers — for authentication, hosting and database services, email delivery, payment processing and analytics — to fulfil the functions described in this policy.

We use a third-party product analytics service to understand how our website is used. It records the pages you visit and specific actions, such as starting an assessment or requesting a resource, together with a random identifier stored in your browser's local storage and in a cookie. We do not send it your name, your email address or your individual assessment inputs. When you generate a preliminary SRI on our homepage, it records the preliminary risk category (low, moderate or high). It does not record your screen, and patient, assessment and report-link identifiers in page addresses are removed before anything is sent. We also keep simple usage records in our own database, such as a record that an account completed an assessment.

4. Affiliate Links Disclosure

MyoGuard Protocol does not currently contain affiliate links to supplement retailers.

Supplement information is based on published clinical protocols and is not influenced by affiliate relationships.

5. Your Rights Under GDPR (EU/EEA Users)

If you are located in the European Union or European Economic Area, you may have the following rights under the General Data Protection Regulation (GDPR):

• Right of access: you may request a copy of the personal data we hold about you
• Right to rectification: you may request correction of inaccurate data
• Right to erasure: you may request deletion of your personal data
• Right to restrict processing: you may request that we limit how we use your data
• Right to object: you may object to processing based on legitimate interests

To make a request, contact us at privacy@myoguard.health. Requests are handled subject to applicable law, verification of your identity, and any records we are required or permitted to retain.

6. Your Rights Under CCPA (California Users)

If you are a California resident, the California Consumer Privacy Act (CCPA) may give you the following rights:

• Right to know: you may request disclosure of the categories and specific pieces of personal information we have collected about you
• Right to delete: you may request deletion of your personal information
• Right to opt-out of sale: we do not sell personal information
• Right to non-discrimination: we will not discriminate against you for exercising your CCPA rights

To submit a CCPA request, contact privacy@myoguard.health. Requests are handled subject to applicable law, verification of your identity, and any records we are required or permitted to retain.

7. Data Retention

When you ask us to email your preliminary SRI results or an educational resource, such as the MyoGuard Protein Guide, your email address is sent to our email delivery provider so that the message can be delivered. MyoGuard does not currently store that address in its application database solely because of that request.

We do keep a pseudonymous record of the send — a one-way code derived from the address rather than the address itself — so that we can show a message was requested and sent, and so that safeguards such as sending limits work. We also keep pseudonymous suppression information, so that if a message bounces or is reported as spam, we continue to honour that and stop sending to it. We have not set a fixed retention period for these pseudonymous records.

If you use the preliminary SRI on our homepage without an account, your assessment inputs (weight, dose, symptoms, etc.) are processed in your browser and are not sent to our servers. If you ask us to email your results, your email address and your preliminary results — not your individual inputs — are sent to our servers so that the email can be delivered. If you have an account, your profile, SRI assessments, their outputs and your weekly check-ins are stored on our servers as part of your account record.

We have not set a fixed retention period for account records, clinical records or information entered by physicians. These records may be retained as reasonably necessary to provide longitudinal Clinical Decision Support (CDS), maintain appropriate records, meet applicable legal or regulatory obligations, resolve disputes, and protect the security and integrity of the platform.

You may ask us to delete your personal information by contacting privacy@myoguard.health. Deletion is not automatic or immediate. Requests are handled subject to applicable law, verification of your identity, and any records we are required or permitted to retain.

8. Privacy Contact

For all privacy-related requests, questions, or concerns, please contact us at:

9. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the State of Wyoming, United States. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts of Wyoming, USA.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, the "Last updated" date at the top of this page will be revised. Continued use of the MyoGuard Protocol tool after any changes constitutes your acceptance of the updated policy.