Privacy Policy

Last updated: July 2026

Plainly: your health answers are used only to build and maintain your screening plan. We never sell your data. Marketing pages (like this one) use standard analytics; the app you use after signing up does not.

What we collect

  • Account info: name, email, password (hashed, never stored in plain text).
  • Health questionnaire answers: things like date of birth, family history, lifestyle, and symptoms — used to compute your screening timeline.
  • Optional uploads: DNA test or blood work files, if you choose to add them, analyzed to surface anything worth tracking.
  • Payment metadata: what you paid and when, handled by Stripe. We never see or store your card details.
  • Basic usage analytics on our marketing pages (this site before you sign up) to understand what's working — not on the dashboard or anywhere your health data lives.

What we don't do

  • We don't sell health data — ever, to anyone.
  • We don't share your answers with advertisers.
  • We don't put personal or health data in URLs, logs, or analytics events.
  • We don't use your data to train third-party AI models.

Where your data lives

Your account and health data are stored with Supabase in Switzerland (Zurich) — not the EU. Switzerland isn't an EU member state, but it has its own Federal Act on Data Protection (FADP) and is covered by an EU adequacy decision, so data can move between Switzerland and the EU/EEA under equivalent protections. We do not claim HIPAA compliance. Your records are protected by row-level security so only your account can read or write them. Uploaded documents live in a private storage bucket scoped to your account. Emails are sent via Resend; payments are processed by Stripe. These are the only third parties involved in running the service.

Document analysis

If you upload a DNA test or blood work, the file is sent securely to an AI provider (Anthropic) to extract a short summary of anything worth tracking, phrased as "worth discussing with a doctor" — never a diagnosis. The original file and the summary are stored only in your account.

Your rights (GDPR / Swiss FADP)

If you're in the EU/UK, Switzerland, or anywhere with similar data protection law, you can request a copy of your data, ask us to correct it, or ask us to delete your account and all associated data. Email [email protected] and we'll handle it directly — no ticket system, a real reply.

Opting out of email

You can turn off all non-transactional email (reminders, digests, life-check-ins) any time from your settings page. We'll still send account-critical emails like password resets.

Contact

Questions about this policy: [email protected].