Genoplot privacy policy

Last updated 25 March 2026 · Also at genoplot.com/privacy

Data We Collect

• Account Information: When you create an account, we may collect your email address and other information necessary to provide login credentials and personalize your experience.
• Optional Profile Details: You may choose to provide additional personal information (e.g., a profile picture, username, or phone number) to enhance your experience, though this is entirely voluntary.
• Uploaded Files and shared data (e.g., DNA Data): If you upload specific files like raw DNA data, these files remain your property. We store them securely so you can use the features we offer, such as analysis tools or personalized recommendations.
• Usage Data: We may automatically collect non-identifying information about how you interact with the Service. This can include your IP address, browser type, device information, pages viewed, and the time spent on certain pages. We use this data to improve the Service’s functionality, security, and usability. This data is anonymized and does not directly identify you.
• Health Data and Wearable Integrations If you choose to connect Apple Health, HealthKit, Health Connect, or supported wearable providers, we may collect wellness and activity data such as sleep metrics, activity levels, heart rate, HRV, workouts, or related fitness information in order to provide synchronization, trend analysis, and wellness features within the Service. This data is only collected with your explicit permission and can be disconnected at any time through your device settings or within the Service. We do not sell health or wellness data and do not use HealthKit or Health Connect data for advertising, marketing, or data-broker purposes.

How We Use Your Data

• Service Operation: We use your personal data to provide login access, enable features you request, and display content relevant to you.
• Improving the Service: We analyze aggregated, non-identifiable usage data to understand how users interact with the Service, which helps us fix bugs, improve performance, and develop new features.
• User Support: If you contact us with questions or issues, we may use your information (such as your email) to respond, troubleshoot, and provide customer support.
• Derived Data: Derived or aggregated data (e.g., analysis results from DNA data) may be used internally to improve the functionality, accuracy, and performance of the Service. Such data is anonymized or de-identified before use.

Data Ownership

You retain full ownership of all personal data you provide, including any uploaded files. We do not claim ownership of this data. We will never sell, rent, or share it with third parties for their own purposes.

Data Security and Authentication

User authentication is handled using secure authentication providers and encrypted communication channels. Access tokens and session credentials are securely stored using operating-system-provided secure storage mechanisms where supported.

No Third-Party Sharing

• No Sale or Rental: We do not sell or rent your personal information, including email addresses or uploaded files, to anyone.
• No Unapproved Disclosure: We do not share your personal data with advertisers, marketers, data brokers, or third parties for cross-context behavioral advertising.. The only exceptions are:
• Legal Requirements: If required by law, subpoena, or court order, or if we believe in good faith that disclosure is legally necessary to protect our rights, comply with legal processes, or ensure the safety of our users.
• Service Providers Working on Our Behalf: We may use trusted service providers (such as Cloud/SaaS Vendors) who operate under strict confidentiality and security obligations. They can only use your data to perform tasks we have instructed them to do and cannot use it for their own purposes.

Security Measures

We take security seriously and employ a variety of safeguards to protect your data

• Encryption: Personal data and uploaded files are stored in encrypted formats, both in transit (using SSL/TLS) and at rest, where possible.
• Access Controls: Only authorized personnel with a legitimate need have access to user data. We enforce strict internal policies to prevent unauthorized viewing or misuse.
• Regular Audits: We periodically review our security measures and update our practices to stay current with industry standards and technologies.

Despite our efforts, no security measure is perfect, and we cannot guarantee absolute security. We encourage you to use strong passwords, enable MFA (Multi-Factor Authentication), and to keep your login credentials confidential.

Your Rights and Choices

• Access and Correction: You can request a copy of the personal data we store about you and ask us to correct any inaccuracies.
• Deletion: You can request that we delete your personal data at any time. Unless legally required to keep it, we will remove your data from our systems. Note that certain derived data or anonymized data, which cannot be traced back to you, may remain in our system to help us improve the Service. When you request account deletion, your account may first enter a temporary deactivated state for a limited recovery period before permanent deletion occurs.
• Portability: Under certain conditions, you may request that we provide your personal data in a commonly used format so that you can transfer it to another service.
• Withdrawal of Consent: If you previously consented to certain data uses, you may withdraw that consent. This might affect your ability to use certain features of the Service.

Data Retention

We keep your personal data only as long as necessary to provide the Service or as required by law. Once it is no longer needed, we securely delete it.

International Users

Our Service is operated in the United States. If you access it from outside the U.S., note that your data may be transferred to and stored in the U.S., where privacy protections may differ from those in your home country. By using the Service, you consent to such transfers and understand that U.S. authorities may access your personal data under U.S. laws.

If you are a resident of a region with specific data protection laws (e.g., the EU/EEA), you may have additional rights. If you object to having your data stored in the U.S., please do not create an account or upload any personal data.

Cookies and Local Storage

We use cookies, local storage, and similar technologies to:

• Keep you logged in.
• Remember your preferences and settings.
• Enhance the functionality and user experience of the Service.

We do not use cookies or similar tools for advertising or cross-site tracking. You can adjust your browser settings to control cookies, but disabling them may affect the Service’s functionality.

Children’s Privacy

Our Service is not intended for use by individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe that a child under 18 has provided personal data, contact us and we will take steps to delete the information as soon as possible.

Changes to This Policy

We may update this Privacy Policy to reflect changes in our data practices, legal requirements, or Service functionality. If we make significant changes, we will post a notice on our website or notify you by email. Continuing to use the Service after updates are posted or communicated means you accept the revised Privacy Policy.