Helixa Health

Genetic Testing Informed Consent and Data Authorization

Effective Date: August 01, 2026

Version: 1.0

Summary - In Plain Language

This summary is displayed above the “I Agree” button for convenience. It is not a substitute for the full Consent below, which controls.

• Helixa sells your kit and creates your results. Dynamic DNA is the independent laboratory that analyzes your sample.
• You are accepting two consents: this one now, and the laboratory’s own form, which comes in your kit and must be signed before your sample is tested.
• Your genetic data is returned to Helixa so we can produce your results; by continuing, you authorize that.
• Your results are informational, not a diagnosis, and the test is not FDA-approved. Talk to a healthcare provider before acting on them.
• We do not sell your genetic data or use it for advertising. We share only what is needed to fulfill your order and as the law requires.
• You can access, correct, or delete your data, withdraw consent, and ask the laboratory to destroy your sample. Research use is optional and off unless you opt in, and Helixa does not use your genetic data to train machine-learning models.
• Disputes are resolved by individual arbitration with a class-action waiver; you may opt out within 30 days.
• You must be 18 or older (or a parent or legal guardian), and the sample must be your own. Clicking “I Agree” is your electronic signature.

Please read this Consent before you purchase a genetic testing kit from Helixa. Your decision to purchase a kit and be tested is entirely voluntary, and you are not required to proceed; declining or withdrawing before your sample is processed carries no penalty other than not receiving the product or service. You will be asked to accept it on our website by clicking “I Agree” before checkout, and your acceptance is required to place an order. A separate consent form from the testing laboratory will also be included in your kit and must be signed and returned before your sample is analyzed.

1. Who You Are Dealing With

Genpath.ai, LLC d/b/a HelixaHealth.ai (“Helixa,” “we,” or “us”) operates this website, sells the genetic testing kit, and delivers your results and any related insights you purchase. Dynamic DNA Laboratories (“Dynamic DNA”) is the independent laboratory that ships the kit, receives and analyzes your sample, and generates the underlying genetic data. Dynamic DNA is a laboratory certified under the Clinical Laboratory Improvement Amendments (CLIA) to perform the testing offered through the Helixa platform. Certification status does not mean the test is approved or cleared by the U.S. Food and Drug Administration; see Section 4 (Not Medical Advice) for more information about the test's regulatory status. Helixa and Dynamic DNA are separate companies.

2. How the Process Works

When you purchase a kit, Helixa sends your order to Dynamic DNA for fulfillment. Dynamic DNA ships the kit to you, together with its own laboratory consent form. You must sign and return that laboratory consent with your sample; Dynamic DNA will not analyze your sample unless its consent is signed. After analysis, Dynamic DNA transmits your genetic raw data and results to Helixa, and Helixa further processes that data to produce the reports and features you purchased and makes them available to you through the Helixa platform.

You are therefore agreeing to two consents: this Helixa Consent, which governs Helixa’s role and its handling of your information, and the Dynamic DNA laboratory consent, which governs the laboratory testing. This Helixa Consent does not replace the Dynamic DNA consent.

2A. Scope of Testing and Reports

The kit you purchase uses a laboratory-developed test performed by Dynamic DNA on a saliva/cheek-swab sample you provide. Depending on the product you purchase, testing may include ancestry composition, wellness and trait reports, carrier-status screening for select conditions, pharmacogenomic (drug-response) information, and/or disease-risk information, as described on the product page for your order. Testing is performed using a defined panel of genetic markers; it is not whole-genome sequencing and does not examine your entire genome or exome unless expressly stated for your product.

Reports are generated by combining your genetic data with reference population data and, where applicable, information you provide (such as age, sex, or self-reported ancestry); the accuracy of ancestry and risk estimates depends in part on how well people similar to you are represented in the reference data. Genetic testing, including this test, has inherent analytic and clinical limitations: no test is 100% accurate, results can include false positives and false negatives, and a negative result does not eliminate risk. This Section 2A supplements, and does not replace, the more detailed test description in the Dynamic DNA laboratory consent.

3. Authorization to Receive and Process Your Genetic Data

You authorize Dynamic DNA to release your genetic raw data and test results to Helixa, and you authorize Helixa to receive, store, and further process that data in order to generate, interpret, and deliver your results and any related insights you have purchased. “Further processing” means the analysis of your genetic data by Helixa’s systems and personnel to produce the results and features offered through the Helixa platform. Helixa will process your genetic data only to provide the services you request and as otherwise described in this Consent, unless you separately and expressly opt in to another use.

4. Not Medical Advice

Your results are informational and do not constitute a diagnosis. As the Dynamic DNA consent explains, the underlying test is a laboratory-developed test that is not approved by the U.S. Food and Drug Administration, and results should not be used as the sole basis for any medical decision. Helixa does not provide medical care and does not establish a physician-patient relationship through the sale of this kit or the delivery of your results. Consult a qualified healthcare provider before acting on any result.

4A. Incidental and Secondary Findings

Genetic testing can reveal information you did not seek and may not expect, including unexpected biological relationships (for example, that a person you believed to be a biological relative is not, or that you have close biological relatives you were not aware of), ancestry results that differ from your self-identified background, and, where your test includes health- or risk-related reports, findings unrelated to the primary purpose for which you tested (“secondary findings”). Helixa's reports are limited to the conditions and traits described in the report you purchased and do not include an active search for medically actionable secondary findings beyond that scope. These kinds of findings can be surprising or distressing. By proceeding, you acknowledge this possibility and confirm you wish to proceed with testing.

4B. Uncertain and Inconclusive Results

Some genetic variants cannot currently be classified as either associated with, or unrelated to, a particular trait or condition (“variants of uncertain significance”), and some samples produce results that are indeterminate and cannot be reported with confidence. Where this occurs, we will indicate this in your report rather than report a definitive result. Because scientific understanding of genetic variants improves over time, a variant reported as uncertain today may be reclassified in the future; see Section 12 (How Long Helixa Keeps Your Information) regarding updated reports.

4C. Emergency and Urgent Findings

Helixa's testing is designed for informational, wellness, ancestry, and similar consumer purposes and is not designed or validated to detect medically urgent or emergency conditions. If you have a health concern, including one prompted by your results, contact a qualified healthcare provider or, in an emergency, call 911 or your local emergency number; do not rely on Helixa's reports or wait for a response from Helixa.

4D. Genetic Counseling

We recommend that you consider consulting a certified genetic counselor before testing if you have concerns about what you might learn, and after testing if your results indicate an elevated risk, a positive carrier or disease-risk finding, or any result you find difficult to understand or emotionally significant. A genetic counselor can help you understand your results, their limitations, and their implications for you and your biological relatives. Helixa does not currently provide genetic counseling services directly, but can direct you to independent resources, including the National Society of Genetic Counselors' “Find a Genetic Counselor” directory. Genetic counseling is optional and is not a condition of receiving your results.

5. Information Helixa Collects

To sell and support your kit and to deliver your results, Helixa collects the information you provide at account setup and checkout, which may include your name, contact details, shipping address, payment information, and the intake details required for testing (for example age, sex, and the fields required by the laboratory). As described in Section 3, Helixa also receives your genetic raw data and results from Dynamic DNA.

6. How Helixa Uses Your Information

Helixa uses your information to process and fulfill your order, to generate and deliver your results, to provide customer support, to maintain the security and integrity of the platform, and to satisfy legal and accounting obligations. Helixa does not sell your genetic information, and does not use it for advertising or share it with data brokers.

7. When Information Is Shared

Helixa discloses your information only as necessary to operate the service and as required by law: to Dynamic DNA, to fulfill and process your order; to service providers who operate parts of the platform under contract (for example payment processing, hosting, and shipping), limited to what each requires; and where legally compelled by valid legal process or to protect safety. Any provider that handles your data is bound by confidentiality and data-protection obligations. With your prior direction, Helixa will also share your report with a healthcare provider or genetic counselor of your choosing. Helixa does not share your genetic data or results with any corporate affiliate; if this changes, we will update this Consent and, where required by law, obtain your consent first. Helixa processes and stores your personal information, including your genetic data, on servers located in the United States, and does not transfer your genetic data outside the United States except as may be required to process payments or provide customer support through service providers bound by confidentiality and data-protection obligations at least as protective as those described in this Consent.

8. Research and Other Secondary Uses Are Optional

Helixa will not use your genetic data or results for research, product development, or any purpose beyond delivering the services you purchased unless you separately and expressly opt in. Any research choice is presented separately, is voluntary, may be declined without affecting your test, and may be withdrawn later. “Product development” means improving the reports, features, and interfaces offered on the Helixa platform; it does not include training or improving machine-learning models on your genetic data, which we do not do. We may publish aggregate or statistical findings derived from de-identified data contributed under this opt-in, and any such publication will not include information reasonably capable of identifying you.

9. Your Choices and Rights

Subject to applicable law and legitimate recordkeeping obligations, you may:

• Access the personal information and results Helixa holds about you;
• Correct inaccurate account information;
• Withdraw your consent and request that Helixa delete the personal information and results it holds. Withdrawing consent before your sample is processed may stop your test; it cannot reverse testing already performed; and
• Request destruction of your sample by Dynamic DNA, subject to the laboratory’s policies and any legal retention requirement.

To exercise these rights, contact privacy@helixahealth.ai. Residents of certain states may have additional rights under state privacy and genetic-privacy laws, which Helixa will honor where they apply, as described in the State-Specific Privacy Rights Section below.

When Helixa receives a request to delete your information that it is able to verify, Helixa will delete or de-identify the personal information and results it holds, and will act on any related request to instruct Dynamic DNA to destroy your sample, within forty-five (45) days. Where a request is complex, Helixa may extend this period once, by up to an additional forty-five (45) days, to the extent permitted by law, and will tell you if it does so. Helixa will confirm to you when your request has been completed. These periods do not apply to information Helixa must retain to comply with legal, tax, or audit obligations.

10. Genetic Nondiscrimination

The federal Genetic Information Nondiscrimination Act (GINA) restricts the use of genetic information by health insurers and employers. Its protections are limited and do not extend to every situation; for example, GINA does not cover life, disability, or long-term-care insurance. State law may provide additional protection. Consider these limits before sharing your results with third parties.

11. How Helixa Protects Your Data

Helixa maintains administrative, technical, and physical safeguards designed to protect your information, including encryption in transit and access controls that limit who may view genetic data. No system is perfectly secure. If a breach affecting your information occurs, Helixa will notify you and the authorities as required by applicable law.

12. How Long Helixa Keeps Your Information

Helixa retains your information for as long as necessary to provide the service and to meet legal, tax, and audit obligations, and thereafter deletes or de-identifies it. Your genetic results are retained for as long as your Helixa account remains active, unless you request earlier deletion. As Helixa’s report catalogue expands, or as scientific understanding advances, we may generate new or updated reports from your existing genetic data under the authorization in Section 3, without collecting a new sample. You may opt out of new or updated reports at any time by contacting privacy@helixahealth.ai, without affecting reports already delivered. Dynamic DNA’s retention of your sample is governed by the Dynamic DNA consent.

13. HIPAA Status

Helixa offers this test directly to consumers. Because Helixa is not acting as a healthcare provider or health plan in this transaction, the federal HIPAA privacy rule generally does not apply to the information you provide to Helixa, based on Helixa’s current business model. If Helixa’s role changes in a way that would make HIPAA applicable, Helixa will update this Consent and the Privacy Policy accordingly. Unless and until then, the protections in this Consent and applicable consumer-privacy law apply.

14. Minors

Kits are intended for adults. A person under eighteen (18) years of age may be tested only with the consent of a parent or legal guardian, consistent with the Dynamic DNA consent. By accepting on behalf of a minor, you confirm that you are the child’s parent or legal guardian and are authorized to make this decision.

15. Communications

Helixa will send you service messages about your order and results; these are necessary to provide the service. Marketing emails or text messages, if any, are sent only if you opt in, and you may unsubscribe at any time. Message and data rates may apply to text messages.

16. Where Kits Are Available

Because some jurisdictions regulate direct-to-consumer genetic testing, kits are available only where Helixa and Dynamic DNA are permitted to offer them. Kits are not available to residents of New York. Helixa may decline or cancel an order that cannot be lawfully fulfilled to your location, and may update the list of excluded states as laws or laboratory licensure change.

17. Helixa’s Role and Limitation of Liability

Helixa provides the platform, the sale, and the processing of your results; it does not perform the laboratory analysis and is not responsible for the accuracy of the underlying test, which is Dynamic DNA’s. The Dynamic DNA consent sets out limits on the laboratory’s liability. To the fullest extent permitted by law, Helixa’s liability arising from your purchase is limited as set out in the Helixa Terms of Service, which are incorporated by reference. Nothing in this Consent limits any right that cannot be waived under applicable law.

18. Governing Law; Dispute Resolution and Arbitration

(a) Governing Law

This Consent and any dispute arising out of or relating to it or to your purchase are governed by the laws of the State of Indiana, without regard to its conflict-of-laws principles, except to the extent that federal law or your non-waivable state-law rights apply.

(b) Informal Resolution First

Before commencing arbitration, you agree to first contact Helixa at disputes@helixahealth.ai with a written description of the dispute, so the parties may attempt to resolve it informally within thirty (30) days.

(c) Binding Arbitration

Any dispute not resolved informally, and not eligible for small-claims court under subsection (e), shall be resolved by final and binding individual arbitration administered by the American Arbitration Association (AAA) under its Consumer Arbitration Rules then in effect, conducted in the county of your primary residence, or by videoconference or on the documents where the rules permit. The award may be entered in any court of competent jurisdiction.

(d) Class-Action and Jury Waiver

To the fullest extent permitted by law, disputes will be arbitrated only on an individual basis; you and Helixa each waive any right to bring or participate in a class, collective, or representative action, and each waives the right to a trial by jury. If this class-action waiver is found unenforceable as to a particular claim, that claim-and only that claim-shall be severed and brought in court, while all other claims proceed in arbitration.

(e) Small-Claims and Injunctive Carve-Outs

Either party may bring an individual claim in small-claims court if it qualifies. Nothing in this Section prevents either party from seeking injunctive or equitable relief in court to protect intellectual property, confidential information, or data security.

(f) Right to Opt Out

You may opt out of this arbitration agreement by sending written notice to optout@helixahealth.ai within thirty (30) days of first accepting this Consent, stating your name and order information. Opting out affects only the arbitration agreement in this Section; the remainder of the Consent continues to apply.

(g) Severability and Survival

If any portion of this Section is held invalid or unenforceable, the remainder shall remain in effect. This Section survives termination of your relationship with Helixa.

19. Amendments and Contact

Helixa may amend this Consent; the version in effect when you accepted it governs your order, and material changes will be communicated. Questions or requests may be directed to privacy@helixahealth.ai, or by mail to Genpath.ai, LLC, 9238 Diamond Pointe Drive, Indianapolis, IN.

20. Business Transfers and Insolvency

If Helixa is involved in a merger, acquisition, financing, reorganization, sale of assets, or bankruptcy, your personal information and genetic data may be transferred as part of that transaction only to a successor that agrees in writing to be bound by this Consent and to protect your data on terms no less protective than those stated here. Helixa will notify you before your genetic data would become subject to a materially different privacy practice, and you will have the opportunity to delete your data and direct destruction of your sample before any such transfer takes effect. Helixa will not sell or transfer your genetic data as a standalone asset stripped of the commitments in this Consent.

21. Automated Processing; No Model Training

Helixa uses automated systems, which may include machine-learning models, to generate and interpret the results you purchase. Helixa does not use your genetic data to train or improve machine-learning models. Your genetic data is used only to produce the results and insights you purchased and for the limited purposes described in this Consent.

22. State-Specific Privacy Rights

Residents of states with consumer-privacy or genetic-privacy laws may have rights in addition to those described above. Where such a law applies to you, it controls to the extent it grants you greater rights than this Consent.

(a) Access and Portability

You may request confirmation of whether Helixa processes your personal information and genetic data, and a copy of that information in a portable format where required by law.

(b) Deletion and Sample Destruction

You may request that Helixa delete your personal information and genetic data, and that Helixa instruct Dynamic DNA to destroy your biological sample. Helixa honors verified deletion requests within the time described in the “Your Choices and Rights” Section above, subject to legal retention obligations.

(c) Consent and Withdrawal

Some genetic-privacy laws require your separate, express consent before genetic data is transferred to certain third parties, retained beyond the initial testing, or used for research or marketing. Helixa obtains such consent where required and lets you withdraw it at any time, without affecting testing already performed.

(d) No Sale; Opt-Out of Sharing

Helixa does not sell your genetic information and does not share it for cross-context behavioral advertising. Where a state law gives you the right to opt out of the “sale” or “sharing” of personal information, you may exercise it; this right does not restrict the disclosures necessary to provide the service you purchased.

(e) Non-Discrimination

Helixa will not discriminate against you for exercising any of these rights.

(f) How to Exercise; Authorized Agents; Appeals

Submit requests to privacy@helixahealth.ai. Helixa will take reasonable steps to verify your identity, may allow an authorized agent to submit a request on your behalf, and, where a state law provides a right to appeal a denied request, will provide an appeal mechanism and describe it in its response.

California Residents

Under the California Genetic Information Privacy Act (GIPA) and the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), California residents have the rights described in this Section, including the right to delete genetic data, the right to have the biological sample destroyed, and the right to be free from discrimination for exercising these rights. Helixa relies on the consents you provide in this document to collect, use, and disclose your genetic data as described.

End of Consent.