Poultry DNA privacy notice

Effective September 21, 2026.

Andi’s One Stop Poultry Shop, LLC operates Andi’s Poultry DNA. Contact andi@andisonestoppoultryshop.com or write to 22597 Hoffman Rd, Mandeville, LA 70471.

Scope and eligibility

This policy covers the Andi’s Poultry DNA mobile app, customer website and related laboratory services operated by Andi’s One Stop Poultry Shop, LLC. Account registration and services are intended for adults 18 or older in the United States. We do not knowingly accept accounts from children. If you believe a child provided personal information, contact us so we can investigate and remove it as appropriate.

Information we handle

We handle your email address, account identifier, name, optional farm name, bird profiles, optional bird photos, customer-created family trees, relationship links, selected result attachments and saved tree layouts, sample labels, test selections, orders, laboratory statuses, results, payment records, and support or account-deletion requests. Please do not enter unrelated personal information in notes. This service tests poultry samples, not human genetic material.

Our providers also process technical information needed to run, diagnose and protect the service, including sign-in events, IP addresses, approximate country or region derived from network requests, request paths, response status and service logs. This network information does not require access to your phone's GPS location. We record changes to laboratory records and account requests for accountability.

Information comes from you when you register, create bird profiles, upload photos, organize Family Trees, purchase services or contact us; from laboratory staff when they process samples and release results; and from payment providers when they report transaction or subscription status. Bird DNA results are animal laboratory records, not human genetic or medical records.

How we use information

We use information to manage accounts, identify samples, perform requested tests, collect payment, provide results and history, respond to support and deletion requests, and protect the service. We do not use customer information or laboratory results for marketing, and we do not share samples or results with outside laboratories.

Payments and service providers

Supabase provides authentication, database hosting and protected file infrastructure. It processes account credentials and verification requests for registration, sign-in and password recovery. Google Workspace delivers verification emails and handles business correspondence. Verification messages contain a temporary code, not your test results. Never send your password or verification code to support staff.

Google Play processes Android membership purchases. The app sends Google Play the selected membership and an account identifier used to associate the purchase with your app account. Our server verifies purchase tokens with Google and stores the subscription status and relevant purchase, renewal and expiry references to grant access, restore purchases and respond to billing changes. Google handles the payment details you enter in its purchase screen under its privacy policy. We do not receive your full card number or card security code from Google Play.

The Google Play billing library also sends Google technical diagnostics for billing functionality and reliability analysis. These can include app and library versions, device model and software build, network type, locale, timing or error information, and generated billing-client identifiers. These are separate from your chicken results and photos. The software build identifier is not a fingerprint scan. We do not use this information for targeted advertising.

Stripe processes payments and applicable tax calculations through its checkout. Stripe receives the order reference, test descriptions, quantities and prices, and information you enter into checkout, including payment and billing details. We keep payment references, status, amounts, tax and refund information. Full card numbers and security codes do not pass through our app or database. Stripe handles information under its own privacy policy.

These providers process information needed for their services. Provider processing is separate from sending samples to another laboratory. We may disclose information when required by applicable legal process.

Family-tree relationships are entered by customers; the app does not infer parentage or inherited genetics. Removing a node does not delete the original lab results. Bird photos are selected through the device photo picker, stored privately, and displayed with temporary links.

Your photos and choices

Adding a bird photo or Family Tree is optional. Only images you choose through the device picker are uploaded; the app does not upload your entire photo library. Avoid photos, labels or notes containing another person’s private information. You can edit your profile and manage your trees. Deleting a tree removes its layout and connections, not the original bird or laboratory records.

Access and device security

Customers can access their own records. Authorized lab administrators access records needed for their work using multi-factor authentication. Sessions are stored in device-protected storage. Supported devices can require device authentication to unlock an existing session. We do not receive or store fingerprints or face scans.

We use encrypted network connections, account-based access restrictions and private file storage. No storage or transmission system is completely secure. Keep your sign-in codes private and secure access to your email and device. The website uses authentication/session mechanisms needed for account access. We do not use customer information for targeted advertising or sell customer personal information.

Retention

Our normal schedule is five years after completion for orders and released results, bird profiles while the account is active, and physical samples are disposed of after testing. Disputes, retests or specific preservation requirements can delay disposal of relevant digital records. Historical orders contain a snapshot of the associated bird information.

Account-deletion requests are reviewed separately. This schedule does not automatically override a deletion right. Where some information must be retained, we explain the records, reason and applicable period and minimize unrelated personal information. Copies of deleted-account data may remain in our encrypted disaster-recovery backups for up to 30 days after account deletion. A separate deletion record prevents those copies from being restored to active use. Specific records retained for a legal obligation or dispute are handled separately and explained to you.

Account deletion and other requests

Account deletion is scheduled seven days after your verified request is recorded. The request screen shows the scheduled date and a Cancel deletion request button available before that date. For a request made by email, we confirm the scheduled date after verifying your identity; contact us before that date to cancel. Once deletion is complete, your account, chicken profiles, family trees, photos, tests and results cannot be recovered through the service. Deletion is permanent. Specific legal obligations or unresolved disputes may require a limited hold, which we explain.

Use Account → Delete my account in the app, or visit our account-deletion request page without signing in. You can also contact us to request access or correction. We may verify your identity before acting, but will not ask for your password or verification code. A request is not complete until we have carried out the applicable deletion and explained any justified exceptions.

Privacy requests and complaints

Contact the address above to request access, correction or deletion of your personal information, or to raise a privacy concern. Depending on applicable law, additional rights may apply. We verify requests proportionately and respond within applicable legal deadlines. We do not require you to disclose a password or one-time sign-in code to support staff. Where we cannot fulfill a request in full, we explain the relevant reason and any available next steps.

Service providers and processing locations

Cloudflare hosts our public website and processes network requests needed to deliver and protect it. Infrastructure and payment providers may process information where they and their service providers operate, including outside your state. We limit disclosures to information needed to provide the service, secure our systems, resolve disputes or comply with law. Our no-outside-laboratory policy does not mean that hosting and payment providers receive no data.

Membership and account closure

Membership status and payment references are used to determine access. Subscription cancellation, deleting a Family Tree and account deletion are different actions. Cancel a paid subscription through the billing provider where it was purchased; contact us if you need help closing an account with an active subscription. Completed account deletion stops future membership renewals; it does not issue a refund. You may cancel your subscription through its billing provider while your deletion request is pending. The seven-day no-card trial does not automatically charge you when it ends.

Changes

The published notice will show its effective date. We will communicate material changes as appropriate.