RAEL’S PRIVACY POLICY

Last Modified: [2/5/2026]

________________________________________________________________________

This Privacy Policy (“Privacy Policy” or “Policy”) describes the practices of Rael, Inc. and its subsidiaries and affiliates (“Rael,” or “we,” or “us,” or “our”) with respect to the collection, use, disclosure, and processing of your personal information collected online via our website (the “Website”) and the related services (collectively, the “Services”), and the rights you may have with respect to your personal information. By using our Services and otherwise interacting with us, you agree to the terms of our Terms of Service, including this Privacy Policy.

Rael, Inc. is headquartered in California. While our products are sold in many countries around the world, our Website is offered solely to users in the United States. We do not currently ship our products directly to consumers in countries outside the United States.

This Privacy Policy does not cover the personal information we collect about employees and independent contractors, or job applicants.

For information related to our collection of consumer health data from Washington, Nevada, and Connecticut residents, please see our Consumer Health Data Privacy Notice here.

Notice at Collection: Personal Information We Collect

In the 12 months prior to the date of this Privacy Policy, we have collected and will continue to collect the following categories of personal information:

Personal identifiers: your name, email address, mailing or billing address, telephone numbers, date of birth, account name and password, IP address, personal information provided to our chatbot agent or contained in customer reviews, surveys, feedback, inquiries or complaints, your profile information and preferences provided to us when you use Third Party Accounts (defined below), and other content uploaded to our Services, including our Website, that identifies you
Protected class information: your age when you sign up for our Synced Up Club rewards program using your date of birth and your gender
Commercial and other financial information: records of products ordered or considered; other purchasing or consuming histories; and payment information, including credit card information and other payment details, collected and stored via our third party payment processor(s)
Geolocation information: information about the imprecise or approximate location of your device, such as information derived from your device (e.g., based on a browser or device’s IP address)
Internet or other electronic network activity information: your IP address, your device, network and browser type, device identifiers, cookie IDs, your browsing and search history on our Services, and information regarding your interaction with our Services, our advertisements and our Website’s live chat feature, including pages and products viewed, add-to-cart activity, time on our Services, clicks, searches, and purchase/conversion events
Sensitive personal information: information relating to your menstrual cycle, reproductive health, or related wellness information via our optional Cycle Care Quiz
Inferences drawn from personal information we collect

Notice at Collection: Sources from which We Collect Personal Information

We collect personal information about you, including information that directly or indirectly identifies you, directly from you either as a Rael customer or automatically from your use of our Website, and from third parties, including our subsidiaries and affiliates, service providers, or business partners. We also collect your personal information about you if you choose to sign up and/or log into our Services using accounts you created with third parties, including Meta (Facebook), Google, and Amazon (collectively, “Third Party Accounts”).

Notice at Collection: Purposes for Collection of Personal Information

We collect your personal information for the following business or commercial purposes:

To provide, support, and personalize our products and services;
To provide, operate, maintain, analyze and improve our Website, its contents to you, and other related services;
To process your orders, payments, and other transactions;
To fulfill your purchases and orders, including shipping and delivering products to you;
To create, maintain, and service customer accounts;
To verify and manage customer identities and other related information;
To provide customer service and customer support;
To contact you from time to time;
To provide information about your accounts, including any administrative notices or alerts such as subscription notices (e.g., expiration and renewal information) and Synced Up Club rewards program information;
To provide information about our Services or other information requested by you, including information about our products and business and nearby stores near you;
To personalize your user experience and to deliver content and product and service offerings relevant to your interests, including targeted offers and ads through our Services and via mail or email (with your consent, where required by law);
To provide other advertising and marketing services;
To provide analytic services and other internal business analysis regarding the use of our Services;
To prevent, detect and respond to fraud, security incidents, abusive behavior, or other activities that violate our Terms of Service or other contracts or that are illegal;
For testing, research, analysis, and product development;
For auditing related to a current interaction with the user and concurrent transactions, including but not limited to, counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with laws and other standards;
To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations;
To establish, exercise, or defend legal claims, comply with applicable laws and regulations, or ensure our terms, policies, and agreements with you and third parties are enforced;
To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Rael’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by Rael about our users is among the asset transfers.

Notice at Collection: Retention Periods

We retain the categories of personal information as required or permitted by applicable laws and regulations. We collect and retain your personal information for the length of time necessary to provide our products and services, to comply with our legal obligations or to protect our legal rights.

Notice at Collection: Categories of Personal Information We Sell or Share or Use for Targeted Advertising

While we do not sell your personal information in exchange for monetary consideration, we may sell (according to the broad definition of “sell” under select U.S. state data privacy laws), share for purposes of cross-context behavioral advertising, or use for targeted advertising the following categories of personal information: personal identifiers, Internet or other electronic activity information, commercial information (e.g., records of products ordered or considered; other purchasing or consuming histories), protected class information (e.g., your age and gender), geolocation information, and Rewards/Referral Information.

These categories of personal information are sold to or shared for cross-context behavioral advertising or targeted advertising with analytics companies, advertising and social media networks, and other companies that facilitate or engage in digital advertising, including our website hosting platforms. We engage in such sales and sharing to facilitate personalized advertising and other advertising efforts, and to understand how customers and other individual use and interact with our Website. We do so by allowing third parties to place cookies or other tracking technologies on our Website that may collect information about your online activities over time and across different websites or applications. For more information about the use of cookies and other tracking technologies, please see the “Our Use of Cookies and Other Tracking Technologies” section below.

Shopify Services. Our Website and Shopify Store are hosted by Shopify, and Shopify processes your personal information when you visit and make purchases from us, to operate the Website and Shopify Store, complete your purchases, and for security and fraud detection purposes. Shopify may also use personal information it collects through our Website and Shopify Store to facilitate personalized advertising and share it with third parties (including those that may be located in other countries) in a way that may constitute a sale of personal information or the sharing of your personal information for targeted or behavioral advertising, as defined under U.S. state data privacy laws. The categories of personal information Shopify collects and uses in this regard are: The categories of personal information Shopify collects and uses in this regard include:

Personal identifiers, such as name, email address, mailing or billing address, telephone number, IP address, device identifiers, and account information
Commercial information, such as records of products ordered or considered, purchasing histories, and transaction details
Internet or other electronic network activity information, such as browsing history, search history, cookie identifiers, and information regarding interactions with our Website and Shopify Store
Geolocation information, such as the approximate location derived from IP address
Protected class information, such as age and gender, when voluntarily provided
Inferences drawn from the above information to create consumer profiles, support analytics, and personalized advertising

For more information about Shopify’s data privacy practices, please see its privacy policy here: https://www.shopify.com/legal/privacy/consumers.

You may choose to exercise any rights concerning your personal information with Shopify by clicking on the following link: https://privacy.shopify.com/en.

To opt out of any sales and sharing of personal information that Rael engages in, please click here.

You may also exercise your opt-out preferences at any time by clicking the “Your Privacy Choices” link located in the footer of our Website. If your browser supports Global Privacy Control (GPC) and you have it enabled, we will automatically process your request as an opt-out where required by law.

We do not sell or share for cross-context behavioral advertising or targeted advertising any of the other categories of personal information we collect.

Use or Disclosure of Sensitive Personal Information

We use sensitive personal information only as necessary to perform the services reasonably expected and requested by you, including providing personalized product recommendations based on your responses to our optional Cycle Care quiz. We do not sell or share such sensitive personal information. We retain sensitive personal information only for as long as reasonably necessary to provide the requested product recommendations and for related internal business purposes, unless a longer retention period is required or permitted by law.

No Profiling to Facilitate Decisions with Legal or Other Significant Effects

We do not engage in the automated processing of personal information to create profiles about individuals that are used in furtherance of decisions with legal or other similarly significant effects, such as the provision or denial of financial or lending services, housing, insurance, or access to essential goods or services.

Notice at Collection: Disclosure of Personal Information For Business Purposes in the Past 12 Months

We disclose your personal information to our subsidiaries and affiliates, business partners, service providers, and other third parties for the following business purposes: to manage customer accounts and relationships; verify customer information; fulfill orders and transactions, including shipping and delivery; process payments and transactions; engage in advertising and marketing; provide customer support; manage our email and SMS programs; contact you from time to time; operate our IT systems, secure our systems, and perform other IT-related tasks, such as providing cloud based storage or responding to security incidents; prevent fraud and other illegal activities; for internal business analysis; and obtain professional advice about legal and accounting matters.

We also disclose your personal information as required or permitted by law to comply with a subpoena or similar legal process or government request, or when we believe in good faith that disclosure is legally required or otherwise necessary to protect our rights and property or the rights, property or safety of others, including to law enforcement agencies, and judicial and regulatory authorities. We may also disclose your personal information to other persons or entities to help detect and protect against fraud or data security vulnerabilities. And we may disclose or transfer your personal information in the event of an actual or potential sale, merger, reorganization of our entity or other restructuring.

Our Use of Cookies and Other Tracking Technologies

We use cookies, pixel tags, web beacons and other similar tracking technologies (“tracking technologies”) to automatically collect information through our Services, including our Website. Tracking technologies are small data files placed on your computer, tablet, mobile phone, or other devices that record certain pieces of information when you visit our Services, including our Website. We use these tracking technologies for the following purposes: to make our Services function properly; to help us improve and optimize our Services; to identify irregular behavior; to prevent fraudulent activity and improve security on our Services; to save and remember your preferences; and to help us understand how you interact with us.

We also allow third parties (including Google, Meta, TikTok, Pinterest, Rakuten, Shopify, and Snap) to use third party cookies, web beacons, and other storage technologies to collect or receive information about how you interact with our Services and elsewhere on the Internet and use that information to provide analytics and other measurements services, and to deliver and target advertisements tailored to you and other potential audiences. Third parties (including Hotjar) may also use tracking technologies to assist us in determining if you require assistance or are having troubleshooting issues while navigating on our Services, and this may include technologies that record your interactions with our Services, including without limitation, your keystrokes, mouse clicks, screen touches, and information about when, how and from where you accessed our Services.

You may set your browser to notify you when you receive a cookie. Many web browsers also allow you to block cookies. You can disable cookies from your computer system by following the instructions on your browser or at www.youradchoices.com.

We use Google Analytics to evaluate the use of our Services, including our Website. Google Analytics uses cookies and other identifiers to collect information, such as how often users visit our Website, what pages they visit when they do so, and what other websites they visited prior to visiting our Website. We also use Google Ads, including YouTube ads, for our marketing and advertising purposes, including conversion tracking and attribution to measure the effectiveness of our advertisements and understand our customers; to display relevant ads to customers; and to build user segments. For information about Google’s privacy practices, please refer to the Google Privacy Policy: https://policies.google.com/privacy?hl=en-US#infocollect. Google Analytics Opt-out Browser Add-on provides visitors with the ability to prevent their data from being collected and used by Google Analytics, available at: tools.google.com/dlpage/gaoptout.

We use certain Rakuten Advertising features, including Affiliate Tracking, which may collect information when you interact with our Services such as IP addresses, digital identifiers, information about your web browsing and app usage and how you interact with Rakuten's properties and ads for a variety of purposes, such as personalization of offers or advertisements, analytics about how you engage with websites or ads, and other commercial purposes. For more information about the collection, use, and sale of your personal data and your rights, please use the following links: https://rakutenadvertising.com/legal-notices/services-privacy-policy/ & https://rakutenadvertising.com/legal-notices/services-privacy-rights-request-form/.

Notice of Financial Incentive – Our Synced Up Club Loyalty Program

We offer customers the opportunity to participate in our Synced Up Club rewards program and refer-a-friend program, each of which may provide the opportunity to earn points that can be redeemed for exclusive product discounts and free products in exchange for the collection of the following categories of personal information: first and last name, email address, phone number, date of birth, and social media handles (“Rewards/Referral Information”). We use this information to operate the program, communicate with participants, and provide you with the associated incentives.

Participation in our reward or refer-a-friend program is automatic upon creating a Rael account with us. If you no longer wish to participate in our program, please review the “Your Rights” section below.

How the Value of the Incentive is Calculated

In our good faith calculation, we consider the value of our customers’ personal information through our program as the equivalent of relevant expenses related to the collection and retention of the personal information as part of our rewards program. The financial incentive we offer to our customers through the Synced Up Club rewards program is reasonably related to the value of our customers’ personal information.

Your Rights

You may withdraw from the rewards program at any time. You can do so by clicking the “unsubscribe” link in our emails or by contacting us using the information provided in the “Contact Us” section below.

Personal Information of Minors

Our Services are not intended for or directed to children under the age of 13 and we do not knowingly collect personal information from children under 13, and we do not sell or share for cross-context behavioral advertising the personal information of California residents under age 16 without their consent.

If we learn we have collected or received personal information from a child under 13 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 13, please contact us at support@getrael.com.

SMS Consent and Terms and Conditions

By providing your phone number, you agree to receive recurring automated marketing text messages (e.g., AI content, cart reminders, etc.) at the telephone number you provide. Message and data rates may apply and messaging frequency may vary. You acknowledge that your consent is not a condition for any purchase. You can reply with HELP for assistance and/or STOP to cancel. Links to our Terms of Service and this Privacy Policy will be provided.

Any information obtained as part of your SMS or text messaging consent will not be shared with third parties or affiliates; it will only be shared with service providers that operate and manage our SMS/text messaging service for the purpose of providing that service.

Third Party Websites and Social Media Links

Our Services, including our Website, may contain links to third-party websites, including social media buttons that link to social media platforms. This Privacy Policy does not govern how those third parties or social media platforms collect or use personal information and we do not endorse or have control over their practices. The privacy policies and terms of use for those third parties’ websites/apps or social media platforms govern those companies’ privacy practices. We are not responsible for the content or privacy practices of any third-party websites or platforms.

Securing Your Personal Information

We implement and maintain reasonable security measures designed to secure and safeguard the collection, transmission and storage of, and that are appropriate to the nature of the personal information we collect, use, train, transfer or otherwise process. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our Services. Any transmission of personal information is at your own risk. Accordingly, it cannot be assumed that the occurrence of any given incident or breach results from our failure to implement and maintain reasonable security, and we are not responsible for circumvention of any privacy settings or security measures contained on our Services.

Do Not Track Signal

The Do Not Track (“DNT”) signal is a privacy preference signal from 2009 that users can set in certain web browsers. We do not respond to or honor DNT signals.

Changes to This Policy

We reserve the right to amend this Privacy Policy at our discretion and at any time. Please review it occasionally. If we make changes to this Privacy Policy, the updated Privacy Policy will be posted on the Services in a timely manner and will reflect the date of such modification in the Last Updated date above. If we make material changes, you will be notified via a prominent notice on our Website. If you object to any of the changes to this Privacy Policy, you should stop using the Services.

U.S. State Data Privacy Rights

We provide residents of certain states with rights with respect to the personal information that we collect about them under their states’ data privacy laws. The rights provided under these laws are similar in many respects, with some differences from state to state, and are subject to all applicable exceptions.

These rights are in addition to any rights provided under consumer health data privacy laws in Washington, Nevada, and Connecticut as set forth in our Consumer Health Data Privacy Notice.

Right to Know: The right to know whether we are processing your personal information.

California’s privacy law gives California residents the right to request the following additional information: Categories of personal information we have collected about them; categories of sources from which such personal information was collected; categories of personal information that the business sold or disclosed for a business purpose about the consumer; categories of third parties to whom the personal information was sold or disclosed for a business purpose; and the business or commercial purpose for collecting or selling your personal information.

Right to Access / Copy: The right to access or request a copy of your personal information.

Right to Delete: The right to request deletion of your personal information that we have collected about you, subject to certain exceptions.

Right to Correct: The right to request that we correct inaccuracies in your personal information that we maintain about you.

Right to Stop Processing of Sensitive Personal Information: The right to direct us not to collect, use or retain your sensitive personal information only if you choose to take our Cycle Care quiz.

Rights to Opt Out: Various rights to request that we stop using your personal information for one or more of the following purposes:

Sale of Personal Information: The right to request that we stop selling your personal information, consistent with the definition of “sale” in each state law.
Targeted Advertising: The right to request that we stop processing your personal information for targeted advertising, subject to exceptions in some state laws. This is not a right provided for under privacy laws in California; however, the right to opt out of sharing personal information under California law is similar.
Sharing for Cross-Context Behavioral Advertising: California’s law provides the right to request that we stop sharing a California resident’s personal information for cross-context behavioral advertising.

Exercising Your Rights

We will respond to requests from residents of states with data privacy laws that apply to us and will do so with respect to the rights that are provided as of the effective date of each law.

To exercise applicable rights other than your opt-out rights, you can submit a request by contacting us at support@getrael.com.

To exercise opt-out rights, you can submit your request [here].

Opt-out Preference Signals and Universal Opt-Out Mechanisms

An opt-out preference signal or universal opt-out mechanism is sent by a platform, technology, or mechanism on behalf of consumers and communicates a consumer’s choice to opt out of the sale and sharing of personal information for cross-context behavioral advertising with all businesses that recognize the signal, without having to make individualized requests. The signal can be set on certain browsers or through opt-out plug-in tools.

We recognize the Global Privacy Control signal when sent from IP addresses from certain states and do so at the browser level unless you are logged into your account with us in a manner that allows us to recognize you across devices. When we are only able to recognize the signal at a browser level, it means we will recognize it for the browser through which the signal is sent; the opt-out request will not be recognized for personal information we may collect offline or that we may associate only with your name and email address. If you would like more information about opt-out preference signals, including how to use them, the Global Privacy Control website has such information (https://globalprivacycontrol.org/).

Exercising Your Rights Using Authorized Agents

Agents may submit opt-out requests on behalf of individuals under several state data privacy laws; this is not an option that is available under all state data privacy laws, though. California residents can designate an agent to submit all other types of requests.

If the agent submits an opt-out request on your behalf, the agent will need to provide us with your signed permission indicating the agent has been authorized to submit the opt-out request on your behalf. Agents can submit opt-out requests here.

If you are a California resident and you use an agent to submit other types of requests, the agent will need to provide us with your signed permission indicating the agent has been authorized to submit the request on your behalf. You will also be required to verify your identity directly with us or confirm with us that you provided the agent with permission to submit the request. Agents can submit requests on behalf of California residents other than opt-out requests by contacting us at support@getrael.com.

Please note that this subsection does not apply when an agent is authorized to act on your behalf pursuant to a valid power of attorney. Any such requests will be processed in accordance with state law pertaining to powers of attorney.

Verification of Requests

When you exercise rights other than opt-out rights, we will take steps to verify your identity. We will ask you for at least two pieces of personal information, depending on the nature of the request, and attempt to match those to information that we maintain or collect about you.

If we are unable to verify your identity with the degree of certainty required, we will not be able to respond to the request. We will notify you to explain the basis of the denial.

When We Respond or When We Do Not Act on a Request

We will acknowledge your request with ten (10) business day of its receipt. We endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option.

In some cases, we may not act on your requests (e.g., if we cannot do so under other laws that apply). When this is the case, we will explain our reasons for not providing you with the information or taking the action (e.g., correcting data) you requested.

Additionally, residents of some U.S. states have the right to appeal our decision by contacting us at support@getrael.com within 30 days after your receipt of our decision. If you disagree with our decision to deny your appeal, we will provide you with additional information to contact your state Attorney General.

Consumer Rights Under U.S. State Consumer Health Data Privacy Laws

We have a separate Consumer Health Data Privacy Notice that relates to rights provided under consumer health data privacy laws in to residents of those states acting in an individual or household context with respect to their consumer health data. Washington’s law may also apply to individuals whose consumer health data is processed in that state. You can access our Consumer Health Data Privacy Notice here.

California Shine the Light

California Civil Code Section 1798.83, also known as the “Shine the Light” law, permits California residents who have an established business relationship with us to annually request information about the personal information disclosed to third parties for their direct marketing purposes in the preceding calendar year. We do not and did not make such disclosures.

Non-Discrimination

If you exercise any of the rights explained in this Privacy Policy, we will continue to treat you fairly.

Contact Us

If there are any questions regarding this Privacy Policy or to request a copy of this Privacy Policy in another format you may contact us at support@getrael.com